Google Rolls out E2EE For Android Messages App
Google announced end-to-end encryption is now available in Android, but only for one-on-one conversations between users of the Messages app. “No matter who you’re messaging with, the information you share is personal. End-to-end encryption in Messages helps keep your conversations more secure while sending. It ensures that no one can read the content of your…
Russian Hackers Use New ‘SkinnyBoy’ Malware in Attacks on Military, Government Orgs
Active since at least 2007 and also tracked as Fancy Bear, Pawn Storm, Sednit, Strontium, and Tsar Team, APT28 is well known for its cyber-espionage operations targeting the 2016 Presidential elections in the United States, but is also associated with attacks on NATO countries and with activities against organizations in the energy and transportation sectors….
Chinese Hackers Using Previously Unknown Backdoor
Researchers have discovered a new cyber espionage weapon they believe was developed and is used by a China-based APT group they have named SharpPanda. A previously unknown Windows backdoor enables remote access and the collection of considerable live data – but only during Chinese working hours. An ongoing campaign is targeting the Ministry of Foreign…
Microsoft Build Engine Abused for Fileless Malware Delivery
Described as the build platform for Microsoft and Visual Studio, MSBuild has a feature that allows developers to specify for code to be executed in memory, and adversaries have abused this in a new campaign for the fileless delivery of their malicious payloads. The attacks, which were ongoing last week, likely started in April. As…
Microsoft Warns of Attacks on Aerospace, Travel Sectors
The attacks start with spear-phishing messages that employ lures relevant to the targeted organizations, such as aviation, travel, and cargo, and deliver an image that pretends to be a PDF file and which contains an embedded link. The attackers abuse legitimate web services and they leverage a newly identified loader dubbed Snip3 for the delivery…
XcodeGhost Malware Discovered in 2015 Impacted 128 Million iOS Users
The information was uncovered in emails provided recently as part of the antitrust trial between Epic Games and Apple. The game maker filed a lawsuit against the tech giant last year in a California court over its App Store practices, specifically related to Apple removing Epic’s hit game, Fortnite, from the App Store for allegedly…
Diplomatic Entities Targeted with New ‘Moriya’ Windows Rootkit
Dubbed Moriya, the rootkit provides the threat actor with the ability to intercept network traffic and hide commands sent to the infected machines, thus allowing the attackers to stay hidden within the compromised networks for months. The rootkit is part of the toolkit used by TunnelSnake, an unknown actor that deploys backdoors onto public servers…
Cybersecurity Community Unhappy With GitHub’s Proposed Policy Updates
The community has been asked to provide feedback until June 1 on proposed clarifications regarding exploits and malware hosted on GitHub. “Our policy updates focus on the difference between actively harmful content, which is not allowed on the platform, and at-rest code in support of security research, which is welcome and encouraged. These updates also…
FluBot Android Malware Expected to Start Targeting U.S.
Initially observed in Spain, FluBot has since expanded operations to reach Germany, Hungary, Italy, Poland, and the UK as well, with tens of thousands of malicious SMS messages that leverage FedEx, DHL, and Correos lures being sent hourly. The malware is believed to have made over 7,000 victims in the UK alone, where the campaign…
Outages Blamed on Malware Still Plaguing Budget Airlines
The company, Radixx, said it noticed “unusual activity” around its reservations program on Tuesday. It did not describe the malware or say how it got into the program. A spokeswoman for Radixx’s parent, Southlake, Texas-based Sabre Corp., said Friday that the company was beginning to restore service to airline customers. Kristin Hays said the company…
