MalwareBytes – Page 226 – PossibleThreat Articles

MalwareBytes Security

Magecart criminals caught stealing with their poker face on

August 20, 2019 0 Comments drupal, JavaScript, Magecart, magento, poker, skimmer, Threat analysis

Credit to Author: Jérôme Segura| Date: Tue, 20 Aug 2019 15:00:38 +0000

This blog post details the curious case of a web skimmer encountered in a poker application.

Categories:

Threat analysis

Tags: drupal JavaScript Magecart magento poker skimmer

MalwareBytes Security

A week in security (August 12 – 18)

August 19, 2019 0 Comments A week in security, Android, facebook, Google, password, phish, phishing, roundup, week in security

Credit to Author: Malwarebytes Labs| Date: Mon, 19 Aug 2019 17:55:50 +0000

A roundup of the most interesting cybersecurity news stories from August 12 to 18, including a deep dive into facial recognition technology, swatting dangers, social engineering attacks on cities, and more.

Categories:

A week in security

Tags: Android facebook Google password phish phishing roundup week in security

(Read more…)

The post A week in security (August 12 – 18) appeared first on Malwarebytes Labs.

MalwareBytes Security

How much personalization is too much?

August 19, 2019 0 Comments browser extensions, browser plugins, browser security, browsing tracking, data collection, personal information, personally identifiable information, Privacy, the parallax

Credit to Author: Seth Rosenblatt| Date: Mon, 19 Aug 2019 15:00:00 +0000

Personalization is the new mantra of marketers—and most people are perfectly okay with that. But when does personalization cross the line into invasive? And what can uncomfortable consumers do about blocking it?

Categories:

Privacy

Tags: browser extensions browser plugins browser security browsing tracking data collection personal information personally identifiable information privacy the parallax

(Read more…)

The post How much personalization is too much? appeared first on Malwarebytes Labs.

MalwareBytes Security

QxSearch hijacker fakes failed installs

August 16, 2019 0 Comments bigsrch.xyz, Chrome Extension, PUPs, Qxsearch, search hijackers

Credit to Author: Pieter Arntz| Date: Fri, 16 Aug 2019 21:06:16 +0000

QxSearch is a group of search hijackers that try to make the user think the install failed or was incomplete. Is it that they don’t want to be found and removed? Or just bad programming?

Categories:

PUPs

Tags: bigsrch.xyz Chrome Extension Qxsearch search hijackers

(Read more…)

The post QxSearch hijacker fakes failed installs appeared first on Malwarebytes Labs.

MalwareBytes Security

The Hidden Bee infection chain, part 1: the stegano pack

August 15, 2019 0 Comments cryptominers, custom code, exploit kits, exploits, hidden bee, infection chain, infection vector, malware modules, miner, miners, obfuscation, payloads, Threat analysis, Underminer, Underminer EK

Credit to Author: hasherezade| Date: Thu, 15 Aug 2019 15:26:55 +0000

The Hidden Bee cryptominer has a complex and multi-layered internal structure that is unusual among cybercrime toolkits. That’s why we’re dedicating a series of posts to exploring its elements and updates made during one year of its evolution.

Categories:

Threat analysis

Tags: cryptominers custom code exploit kits exploits hidden bee infection chain infection vector malware modules miner miners obfuscation payloads Underminer Underminer EK

MalwareBytes Security

Trojans, ransomware dominate 2018–2019 education threat landscape

August 14, 2019 0 Comments cyberthreats, education cybersecurity, emotet, Ransomware, ryuk, Ryuk ransomware, trickbot, Trojans

Credit to Author: Wendy Zamora| Date: Wed, 14 Aug 2019 13:00:00 +0000

Trojans such as Emotet and TrickBot were the top threat for the education sector in the 2018–2019 school year. What threats will the new school year bring?

Categories:

Trojans

Tags: cyberthreats education cybersecurity emotet ransomware ryuk Ryuk ransomware trickbot Trojans

MalwareBytes Security

Data and device security for domestic abuse survivors

August 13, 2019 0 Comments 2fa, Android, App Store, cloud storage, data security, device security, domestic abuse, domestic abuse survivor, domestic violence, encryption, end-to-end encryption, Google Play, Google Play Store, imessage, iOS, national domestic violence hotline, National Network to End Domestic Violence, passcode, Privacy, secure messaging, Security, signal, spyware, Stalkerware, two-factor authentication, whatsapp, wire

Credit to Author: David Ruiz| Date: Tue, 13 Aug 2019 16:33:22 +0000

Many domestic abuse survivors need help before stalkerware strikes. Here, we give basic advice on device security and protecting sensitive data.

Categories:

Privacy

Tags: 2fa Android App Store cloud storage data security device security domestic abuse domestic abuse survivor domestic violence encryption end-to-end encryption Google Play Google Play Store iMessage iOS national domestic violence hotline National Network to End Domestic Violence passcode secure messaging security signal spyware stalkerware two-factor authentication whatsapp wire

MalwareBytes Security

Facial recognition technology: force for good or privacy threat?

August 12, 2019 0 Comments amazon, brooklyn, cctv, china, facial recognition, hong kong, Internet of Things, IoT, LFR, Microsoft, orlando, Privacy, san francisco, surveillanceware, uk, united states, US

Credit to Author: Christopher Boyd| Date: Mon, 12 Aug 2019 15:00:00 +0000

It seems facial recognition technology, as technology so often does, has raced far ahead of our ability to define its ethical use. We take a hard look at major concerns brewing in cities around the world.

Categories:

Privacy

Tags: amazon brooklyn cctv china facial recognition hong kong Internet of Things IoT LFR microsoft orlando san francisco surveillanceware uk united states us

MalwareBytes Security

A week in security (August 5 – 11)

August 12, 2019 0 Comments A week in security, APT28, awis, backdoors, bitcoin, bmi, brain-machine interface, chrome incognito, CTNT report, dslr flaw, facebook, Fancy Bear, IBM X-Force Incident Response and Intelligence Services, IRIS, Mark Zuckerberg, messenger kids, phishing, protonmail, Ransomware, robocall, robocall scam, sextortion, smart homes, steam, Strontium, weekly blog roundup

Credit to Author: Malwarebytes Labs| Date: Mon, 12 Aug 2019 15:38:31 +0000

The latest cybersecurity news for the week of August 5–11. We touch on problematic backdoors, the grim possibility of the Internet of Thoughts, and smart home improvement. We also released a retrospective report on ransomware.

Categories:

A week in security

Tags: a week in security APT28 awis backdoors bitcoin bmi brain-machine interface chrome incognito CTNT report dslr flaw facebook Fancy Bear IBM X-Force Incident Response and Intelligence Services IRIS Mark Zuckerberg messenger kids phishing protonmail ransomware robocall robocall scam sextortion smart homes steam Strontium weekly blog roundup

(Read more…)

The post A week in security (August 5 – 11) appeared first on Malwarebytes Labs.

MalwareBytes Security

Backdoors are a security vulnerability

August 9, 2019 0 Comments Apple, Attorney General, backdoor, Clipper Chip, Department of Justice, encryption, FBI, golden key, Google, imessage, iOS 8, iPhone, lawful intercept, luggage, National Security Agency, NSA, Privacy, signal, Transportation Security Administration, TSA, whatsapp, William Barr

Credit to Author: David Ruiz| Date: Fri, 09 Aug 2019 16:10:27 +0000

Upset by their inability to access potentially vital evidence for criminal investigations, the federal government has, for years, pushed to convince tech companies to build backdoors that will, allegedly, only be used by law enforcement agencies. The problem, cybersecurity researchers say, is that those backdoors can easily be exploited by criminals.

Categories:

Privacy

Tags: Apple Attorney General backdoor Clipper Chip Department of Justice encryption fbi golden key Google iMessage iOS 8 iPhone lawful intercept luggage National Security Agency NSA signal Transportation Security Administration TSA whatsapp William Barr

(Read more…)

The post Backdoors are a security vulnerability appeared first on Malwarebytes Labs.