Cyber Bites

YouTube survey scams have gained popularity, but the criminals behind it seem to be more versed in social engineering than in operational security. The pattern of the scam is similar to campaigns observed on Facebook, where victims are lured into clicking on a link - usually with the promise of a substantial prize - that takes them in a merry-go-round of short links to surveys aimed at collecting their personal information.The scammers appear to often...

Forefox 65, the last update to Mozzilla’s browser, features easier controls for users to control who is tracking them online. The new version of the privacy conscious browser allows users to use the Content Blocking service to remove trackers both in standard and private mode.“In the future, this setting will also block third party tracking cookies.” said Nick Nguyen, vice president of product at Mozilla, who also stated that this is the current default “For...

The United States Department of Justice (DoJ) announced its effort to "map and further disrupt" a botnet tied to North Korea that has infected numerous Microsoft Windows computers across the globe over the last decade.Dubbed Joanap, the botnet is believed to be part of "Hidden Cobra"—an Advanced Persistent Threat (APT) actors' group often known as Lazarus Group and Guardians of Peace and backed by the North Korean government. Source: HackerNews

The Korean Android Apps Zcall Delivery Agent and Zcall Delivery Account Manager, which are used to schedule and report package pickups and deliveries, have accidentally leaked personal information about their users. The leaked data includes not only names, addresses, phone numbers, and delivery times, but also plaintext passwords for shop and staff logins, as well as what appears to be plaintext banking information.A statement on the company’s website acknowledges the leak and assured customers that the...

Dozens of Android camera applications, some of them with over 1 million installs on the Google Play Store, were serving malicious ads and fake update prompts.After installation, the apps would automatically hide from the application list to make sure the victim would not be able to remove them and start displaying adult content and fraudulent content ads using the default web browser after every device unlock event.The other batch of malicious Android applications targeted users...

A group of five individuals, aged between 29 and 53, has been arrested by the Met Police’s Cyber Crime Unit (MPCCU) in relation to a range of offences, including conspiracy to defraud and money laundering.Their criminal network involved in the deployment of malware and associated fraudulent methods targeting businesses and organisations across the UK. Officers seized a number of digital devices that are now under forensic examination. Detective Chief Inspector Louise Shea from the Met’s...

The "Love Letter" malspam campaign has reappeared – this time in Japan – where tens of thousands of malicious emails were delivered. The content of the emails seemed specifically tailored to entice Japanese victims.According to ESET's Juraj Jánošík, the emails bundled attachments containing zipped JavaScript (.js) files. This led to the JavaScript-fueled campaign becoming the number threat in Japan and the "fourth most detected threat worldwide." Source: BleepingComputer

In June 2018, a British privacy campaign group called Big Brother Watch accused the country’s tax authority of amassing the voiceprints of millions of people without asking for their explicit consent. Source: We Live Security by ESET

Health records in Singapore have been finding their way out of their “secure” storage and into the public domain of late. First, it was 1.5 million records from the Ministry of Health in July 2018, and now we learn that the city-country’s database of HIV-positive individuals (5,400 Singaporeans, 8,800 foreigners and 2,400 individuals identified through contact) now resides in the hands of U.S. citizen Mikhy K. Farrera-Brochez, who resided in Singapore between 2008 and 2018...

The campaign has been targeting Netflix users across Australia, with users reporting having been sent an email from an address posing as the legitimate support team for the streaming service, with styling and a logo that matches a typical Netflix communication.  Source: Tech Radar