Category: hacking

Auto Added by WPeMatico

Details on Uzbekistan Government Malware: SandCat

Posted on By infossl
hacking, kaspersky, malware, operationalsecurity, Security technology, uzbekistan

Kaspersky has uncovered an Uzbeki hacking operation, mostly due to incompetence on the part of the government hackers. The group’s lax operational security includes using the name of a military group with ties to the SSS to register a domain used in its attack infrastructure; installing Kaspersky’s antivirus software on machines it uses to write … Read More “Details on Uzbekistan Government Malware: SandCat” »

Russians Hack FBI Comms System

Posted on By infossl
fbi, hacking, russia, Security technology, tracking, trafficanalysis

Yahoo News reported that the Russians have successfully targeted an FBI communications system: American officials discovered that the Russians had dramatically improved their ability to decrypt certain types of secure communications and had successfully tracked devices used by elite FBI surveillance teams. Officials also feared that the Russians may have devised other ways to monitor … Read More “Russians Hack FBI Comms System” »

Massive iPhone Hack Targets Uyghurs

Posted on By infossl
android, apple, hacking, iphone, malware, Security technology, smartphones, windows, zeroday

China is being blamed for a massive surveillance operation that targeted Uyghur Muslims. This story broke in waves, the first wave being about the iPhone. Earlier this year, Google’s Project Zero found a series of websites that have been using zero-day vulnerabilities to indiscriminately install malware on iPhones that would visit the site. (The vulnerabilities … Read More “Massive iPhone Hack Targets Uyghurs” »

Software Vulnerabilities in the Boeing 787

Posted on By infossl
airtravel, hacking, Security technology, vulnerabilities

Boeing left its software unprotected, and researchers have analyzed it for vulnerabilities: At the Black Hat security conference today in Las Vegas, Santamarta, a researcher for security firm IOActive, plans to present his findings, including the details of multiple serious security flaws in the code for a component of the 787 known as a Crew … Read More “Software Vulnerabilities in the Boeing 787” »

Bypassing Apple FaceID’s Liveness Detection Feature

Posted on By infossl
apple, biometrics, hacking, identification, Security technology

Apple’s FaceID has a liveness detection feature, which prevents someone from unlocking a victim’s phone by putting it in front of his face while he’s sleeping. That feature has been hacked: Researchers on Wednesday during Black Hat USA 2019 demonstrated an attack that allowed them to bypass a victim’s FaceID and log into their phone … Read More “Bypassing Apple FaceID’s Liveness Detection Feature” »

AT&T Employees Took Bribes to Unlock Smartphones

Posted on By infossl
att, bribes, cellphones, courts, hacking, malware, Security technology, smartphones

This wasn’t a small operation: A Pakistani man bribed AT&T call-center employees to install malware and unauthorized hardware as part of a scheme to fraudulently unlock cell phones, according to the US Department of Justice. Muhammad Fahd, 34, was extradited from Hong Kong to the US on Friday and is being detained pending trial. An … Read More “AT&T Employees Took Bribes to Unlock Smartphones” »

Brazilian Cell Phone Hack

Posted on By infossl
brazil, cellphones, cybersecurity, hacking, Security technology

I know there’s a lot of politics associated with this story, but concentrate on the cybersecurity aspect for a moment. The cell phones of a thousand Brazilians, including senior government officials, were hacked — seemingly by actors much less sophisticated than rival governments. Brazil’s federal police arrested four people for allegedly hacking 1,000 cellphones belonging … Read More “Brazilian Cell Phone Hack” »

Insider Logic Bombs

Posted on By infossl
databases, hacking, insiders, Security technology, securityengineering

Add to the “not very smart criminals” file: According to court documents, Tinley provided software services for Siemens’ Monroeville, PA offices for nearly ten years. Among the work he was asked to perform was the creation of spreadsheets that the company was using to manage equipment orders. The spreadsheets included custom scripts that would update … Read More “Insider Logic Bombs” »

Hackers Expose Russian FSB Cyberattack Projects

Posted on By infossl
cyberattack, deanonymization, hacking, russia, Security technology

More nation-state activity in cyberspace, this time from Russia: Per the different reports in Russian media, the files indicate that SyTech had worked since 2009 on a multitude of projects since 2009 for FSB unit 71330 and for fellow contractor Quantum. Projects include: Nautilus — a project for collecting data about social media users (such … Read More “Hackers Expose Russian FSB Cyberattack Projects” »