Summary: The January 2025 Android security updates address 48 vulnerabilities, including a high-severity zero-day vulnerability actively exploited in the wild. This update features critical patches for privilege escalation in the Android kernel and a firmware memory corruption flaw in Qualcomm’s WLA…
Tag: SPYWARE
![THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 February]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgA8HuSGC2Bi7PiuXHsj4JvmjwxIgTeHQTgl-ASOMLbCMt4S4kyr-0Vuuzb-YaJeoTIhleDmVGZr0H1b4OfH_o21T4kZnMVi7o4ulwngKAxahuadmkyRr4i7N8z3KOJbI5x_stxthWafp_lpWuuyieh2yuIqA1V8vdeCss9jAFDO0M1uf0bNvBkGMkwPlqk/s728-rw-e365/recap-article.png "THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 February]")
Summary: This week’s cybersecurity update highlights emerging threats from popular AI platforms, significant law enforcement actions against cybercrime, and software vulnerabilities requiring urgent patches. With the rapid evolution of technology comes increased scrutiny, highlighting the importance…
Summary: Meta-owned WhatsApp has disrupted a spyware campaign that targeted around 90 journalists and civil society members, utilizing technology from Paragon Solutions. The zero-click attack involved sending a specially-crafted PDF file to users in group chats. WhatsApp has reached out to affected…
Summary: Polish authorities have arrested former justice minister Zbigniew Ziobro, accused of approving the misuse of government funds for invasive spyware targeting opposition leaders. This arrest follows that of a former Internal Security Agency chief and is part of a broader investigation into th…
Summary: WhatsApp has accused the commercial surveillance company Paragon of targeting approximately 90 users with spyware, including journalists and civil society members. The Meta-owned platform disrupted the spyware attack and has sent a cease-and-desist letter to Paragon, which is linked to form…
Summary: In 2024, Google blocked 2.3 million Android app submissions for policy violations, aided significantly by AI-assisted human reviews. The company also banned 158,000 developer accounts for attempting to publish harmful apps while enhancing its Play Protect security measures. Despite these ef…
Cybereason Security Services has released a Threat Analysis report focusing on the Phorpiex botnet’s role in delivering LockBit Black Ransomware (LockBit 3.0). The report highlights unique automated execution methods used by threat actors and the minimal chang…
The article emphasizes the dangers of visiting compromised websites integrated with malicious adtech, illustrating how such practices can ensnare users into a cycle of deceitful notifications and scams. The impact of these interactions extends beyond the momen…
[AI generated] Achievers Science Journal is an educational organization dedicated to producing and distributing science-related content. They are focused on assisting in the development and learning of students in the science field. Their offerings include published scientific articles, resources for science learning, and a platform for users to submit their own articles and scientific findings. They aim to nurture curiosity, promote scientific literacy and foster the growth of future scientists.
This article explores various types of malware, detailing their characteristics, examples, and consequences in the cybersecurity landscape. It covers viruses, worms, trojans, spyware, rootkits, ransomware, and cryptojacking, highlighting both historical exampl…
A recent report by CYFIRMA reveals a sophisticated Android malware campaign linked to the Donot Advanced Persistent Threat (APT) group, utilizing malicious apps and domains to distribute spyware for stealing sensitive user information. Zimperium’s Mobile Threa…
Summary: A supply chain attack on South Korean VPN provider IPany by the PlushDaemon hacking group resulted in the deployment of the SlowStepper malware through a compromised VPN installer. The attack affected multiple companies, including a semiconductor firm, with signs of infection dating back to…
This article discusses how the misuse of a sandbox analysis led a Twitter user to falsely conclude that a USB-C network adapter contained malware. While sandboxes can aid in malware analysis, caution is advised as results can be misleading without proper conte…
Summary: Ukrainian cyber agencies report a rise in sophisticated cyberattacks primarily attributed to three Russia-linked hacker groups targeting government and critical services. The attacks have focused on espionage, financial theft, and psychological warfare, with the most active group being UAC-…
Summary: The U.N. Security Council convened to address the growing threat of commercial spyware, highlighting the need for stronger protections for diplomats and justice for victims. A U.S. diplomat emphasized the importance of export controls and cybersecurity measures, while various nations pledge…