News

An open database at text messaging solution company TrueDialog left user SMS messages exposed for months, putting nearly a billion records and “millions of Americans at risk,” according to the researchers who discovered the database, hosted by Microsoft Azure and running on the Oracle Marketing Cloud in the U.S. In addition to private text messages, the vpnMentor research team, led by Noam Rotem and Ran Locar, found millions of account usernames and passwords, as well...

Attackers have been actively exploiting an Android vulnerability that allows malicious apps to display dangerous permission requests and phishing overlays under the guise of a legitimate app. Dubbed StrandHogg (an old Norse Viking term), the flaw resides in Android’s taskAffinity control setting, and can be successfully abused without having to first gain root access, according to Norway-based app security firm Promon. Researchers with the company say the flaw affects all versions of Android, and can...

Restaurant diners in the US Midwest and East might want to closely monitor their bank accounts, after four popular restaurant chains operating in those regions had their customers’ payment card information stolen. Discovering that Joker’s Stash – a major underground online portal infamous for buying and selling stolen payment card data – had announced the availability of about four million cards, KrebsOnSecurity investigated the matter further and found that the information was stolen from the restaurant chains...

You may get an email that has the official Netflix logo on it which would say that your payment for the month was not able to go through because of some problem with your bank. The email would then go on to say that if you don’t log in and check your payment details you could potentially end up losing access to your account. Needless to say, when you click the link and log in...

The UK's National Crime Agency (NCA) said 14,500 people had bought spying tools from the Imminent Methods site. Police searched more than 80 properties across the world to find those selling the tools. They were also able to trace people who had bought the software and charge them with computer misuse offenses. It gave the attacker full access to an infected device, letting them steal data, monitor what the victim was doing and even access...

A fake Steam skin giveaway site has been created that states it gives away news skins every day, but in reality it just steals your login credentials. This phishing site was first discovered by researcher nullcookies where he posted a warning about it on Twitter. After nullcookies told us that Steam phishing sites are commonly promoted directly on Steam, we performed a search and found that this scam is being promoted through comments made to Steam profiles. These...

A new Windows trojan has been discovered that attempts to steal passwords stored in the Google Chrome browser. While this is nothing unique, what stands out is that the malware uses a remote MongoDB database to store the stolen passwords. This trojan is called CStealer, and like many other info-stealing trojans, was created to target and steal login credentials that were saved in Google Chrome's password manager. Source: Bleeping Computer

With Thanksgiving being celebrated in the United States, malware distributors are sending out holiday themed emails to distribute the Emotet Trojan and other malware. New email campaigns are underway that pretend to be Thanksgiving Day greeting cards and office closing notices with last minute invoices. Users who fall for the emails and open the attached word documents will be left with a Windows computer infected with a password-stealing Trojan and possibly other malware. Source: Bleeping Computer

Twitter warned its users that a software development kit (SDK) developed by oneAudience could have allowed that company to obtain account information. Facebook also posted a notice concerning not only the oneAudience SDK, but also for fellow SDK maker Mobiburn. OneAudience confirmed the problem and then shut down the SDK along with its associated websites but said the data was never intended to be collected, never added to its database and never used. Source: SC Magazine

The cybersecurity firm Palo Alto Networks has admitted that it suffered a data breach which resulted in the personal data of both past and current employees being leaked online. Business Insider, who broke the story, was first made aware of the breach by a former employee of the company that wished to remain anonymous. Source: Tech Radar