Want to stay up to date? Join the Telegram channel here By Ecular Xu and Joseph C. Chen While tracking Earth Empura, also known as POISON CARP/Evil Eye, we identified an undocumented Android spyware we have named ActionSpy (detected by Trend Micro as AndroidOS_ActionSpy.HRX). During the first quarter of 2020, […]
Daily archives: June 12, 2020
9 posts
Want to stay up to date? Join the Telegram channel here The Gamaredon threat group has built a post-compromise tool arsenal that includes remote template injectors for Word and Excel documents as well as a unique Outlook mass-mailing macro, researchers recently discovered. The tools, previously undocumented, boast a VBA macro […]
Want to stay up to date? Join the Telegram channel here Scammers often craft social engineering schemes around major crises and news events, as demonstrated by the wealth of coronavirus-themed phishing campaigns seen this year. Now, as massive U.S. and global protests continue following the May 25 killing of George […]
Want to stay up to date? Join the Telegram channel here The latest type of installer in the saga of search hijacking changes a Chrome policy which tells users it can’t be removed because the browser is managed from the outside. As you can imagine, that has freaked out quite […]
Want to stay up to date? Join the Telegram channel here As 62% of respondents answered, when companies transferred employees to remote work at the beginning of the pandemic, the most concern was ensuring secure remote access and VPN. 47% of respondents reported that they were concerned about preventing attacks […]
Want to stay up to date? Join the Telegram channel here A vulnerability that existed in every single current Window versions allowing an attacker to misuse the Windows Group Policy feature to assume full control over a computer was recently dealt with by Microsoft. The administrators of the multinational technology […]
Want to stay up to date? Join the Telegram channel here Chrome extension for Instant access to your bug bounty submission dashboard of various platforms + publicly disclosed reports + #bugbountytip Needle is the only chrome extension you may need to have one click access to your bug submissions across […]
Want to stay up to date? Join the Telegram channel here RMIScout performs wordlist and bruteforce attacks against exposed Java RMI interfaces to safely guess method signatures without invocation.On misconfigured servers, any known RMI signature using non-primitive types (e.g., java.lang.String), can be exploited by replacing the object with a serialized […]
Want to stay up to date? Join the Telegram channel here The security industry has always evolved rapidly, but we have never dealt with changes as drastic and unprecedented as we are right now. Whether you’re working from home alongside the rest of your organization or in one of the […]