Security Alerts & News
by Tymoteusz A. Góral

History
#2103 New Instagram credential stealers discovered on Google Play
Instagram users have been the target of several new credential stealers, appearing on Google Play as tools for either managing or boosting the number of Instagram followers.

Under the detection name Android/Spy.Inazigram, 13 malicious applications were discovered in the official Google Play store. The apps were phishing for Instagram credentials and sending them to a remote server.

While they appear to have originated in Turkey, some used English localization to target Instagram users worldwide. Altogether, the malicious apps have been installed by up to 1.5 million users. Upon ESET’s notification, all 13 apps were removed from the store.
Read more
#2103 New Instagram credential stealers discovered on Google Play
#2102 New macOS Proton RAT available for sale on Russian hacking forum
#2101 Spam campaign targets financial institutions with fake security software
#2100 Detecting and eliminating Chamois, a fraud botnet on Android
#2099 Google launches invisible reCAPTCHA with no user interaction required
#2098 0day exploits rarely discovered by more than one group, study finds
#2097 Dahua, Hikvision IoT devices under siege
#2096 New Linux malware exploits CGI vulnerability
#2095 How online gamers use malware to cheat
#2094 Preinstalled malware targeting mobile users
History
2017: 01 02 03 04 05
2016: 01 02 03 04 05 06 07 08 09 10 11 12