News

There is a new tool offensive security teams can use for their password cracking needs. CrackQ is open-source and can provide metrics on the current jobs, queuing and re-queuing tasks. Source: Bleeping Computer

Cybercriminals are reportedly attempting to trick users of the Steam video game digital distribution service into visiting a phishing site that pretends to give away new game skins, but actually steals login credentials. Source: SC Magazine

Researchers estimate the gun manufacturer's website was compromised sometime before Black Friday. A Magecart group has compromised the website of American gun manufacturer Smith & Wesson by injecting malicious code designed to lift customers' payment data at checkout. The incident was found by Sanguine Security's Willem de Groot, who was investigating payment skimmers impersonating Sanguine Security's anti-skimming service. He found attackers were registering malicious domains named after Sanguine and using his name as the registrant....

Google has announced that as of October 2019, 80% of all Android apps are now using Transport Layer Security (TLS) to encrypt their network traffic. Since 2017, Google has been pushing Android developers to integrate encrypted traffic into their apps in order to provide better security and privacy as apps communicate over the Internet or on a network. Source: Bleeping Computer

While doing some open-source intelligence (OSINT), a security researcher discovered that a provider of end-to-end solutions for emergency care facilities in the U.S. fell victim to Ryuk ransomware. The company hit by the malware is T-System based in Dallas, Texas, and it is currently working to recover from the attack. At the moment of writing, company systems are offline. The attack occurred at the end of November, a month that has seen multiple incidents related...

A new remote access trojan whose name reminds one of a fairytale and not the potential nightmare it could bring to its victim has been disclosed by Cylance. PyXie Python RAT has been flitting about since 2018 helping deliver ransomware and other malware to the healthcare and education industries. The RAT has been tracked being delivered through malicious TETRIS apps to load and execute the pen testing tool Cobalt Strike and a custom shellcode loader....

TikTok secretly transferred user data to China without obtaining consent, according to a lawsuit filed by a college student in the Northern District of California. Misty Hong claimed the viral video service culled off her personal videos and information, then funneled it to servers in China. Source: SC Magazine

The music streaming service received reports indicating attackers gained unauthorized access to its systems. Music streaming service Mixcloud has disclosed a security incident in which unauthorized users gained access to some of its systems, resulting in the sale of customer data on the Dark Web. Mixcloud published a notice regarding the incident late last week, confirming it received reports that intruders breached its systems. At the time, it reported the attack involved email addresses, IP...

American gun manufacturer Smith & Wesson's online store has been compromised by attackers who have injected a malicious script that attempts to steal customer's payment information. This type of attack is called MageCart and is when hackers compromise a web site so that they can inject malicious JavaScript scripts into ecommerce or checkout pages. These scripts then steal payment information that is submitted by a customer by sending it to a remote site under the attacker's...

A new cyberespionage tool called CallerSpy was revealed by Trend Micro, but exactly what the developer’s intentions are for the malware is still unknown. CallerSpy was first spotted in May on the typosquatted website http://goooglepress/ where it was advertised as a chat app called Chatrious. Using the misspelled Google name in the URL appears to be the main method of attracting victims and the website goes an extra step by placing fake Google corporate copyright...