itnewsbot, to SmartHome
@itnewsbot@schleuss.online avatar

Wyze camera outage allowed some users to spy inside others’ homes - A Wyze executive has confirmed that at least a dozen users were able to see thumbn... - https://readwrite.com/wyze-camera-outage-allowed-some-users-to-spy-inside-others-homes/ #digitalidentity #smarthome #security #spyware

S1lencioz, to android French
@S1lencioz@shelter.moe avatar

Ben non attends j'utilise la version fork gallerie simple; dont tout le monde s'est rabattu après le rachat de simple mobile. Là il s'agit d'un fork, y a pas de liaisons avec l'entreprise vérolé qui l'a racheté. Ce message de simple mobile tools n'a donc rien à foutre ici.

Attends... QUOI ????!!!

po3mah, to random
@po3mah@mastodon.social avatar

Večer ni cajtng, ampak vohunski sistem.
Tast prinese računalnik, ker mu osmrtnice ne delajo.
Malo klikam sem in tja in ugotovim, da njihova spletna stran dela samo, če izklopim ščit za trackerje v Brave browserju.
Kljub naročnini.
Slabo, #vecer.

mrakmm,
@mrakmm@mastodon.social avatar

@po3mah
Saj piškotki (kolk lep nedolžen opis) so izključno "vohunski programi", jaz jih vedno reject, če ne gre, potem stran zame ni aktualna, jo preskočim. So pa to lahko resnično velike količine povezav s katerimi bi ob prebiranju članka moral deliti mojo zasebnost. #nehvala #spyware

YourAnonRiots, to Cybersecurity Japanese
@YourAnonRiots@mstdn.social avatar

🚨 Android users and crypto owners beware! Android spyware has returned and now poses as authentic crypto wallets to steal funds!

https://hackread.com/spynote-android-spyware-legit-crypto-wallets/
via @Hackread

kubikpixel, to Israel German
@kubikpixel@chaos.social avatar

Spannend & fürchterlich aber die Wahrheit in in dieser Doku:

«Im Juli 2021 sorgte die 'ische Pegasus weltweit für Schlagzeilen. Der Enthüllung waren monatelange Nachforschungen des Recherchenetzwerks "Project Pegasus" vorausgegangen. Der 'mentarfilm befragt die Akteure und prangert autoritäre Entwicklungen in vielen sowie Eingriffe in die der gehackten Personen an.»

📺 Pegasus - Der Feind liest mit
https://www.arte.tv/de/videos/106169-001-A/pegasus-der-feind-liest-mit/

kitoconnell, to security
@kitoconnell@kolektiva.social avatar

Y'all know not to use #Temu right? Right???

Temu app contains ‘most dangerous’ #spyware in circulation: class action lawsuit | Fashion Dive
https://www.fashiondive.com/news/temu-class-action-lawsuit-data-collection/699328/

#security

remixtures, to Cybersecurity Portuguese
@remixtures@tldr.nettime.org avatar

#CyberSecurity #Spyware #Malware #Variston: "Google kept digging into Variston’s malware. In March 2023, the tech giant’s researchers found that spyware made by Variston was used in Kazakhstan, Malaysia and the United Arab Emirates. Last week, Google reported that it found Variston hacking tools used against iPhone owners in Indonesia.

In the past year, more than half a dozen Variston employees have left the company, they told TechCrunch on the condition of anonymity, as they were not authorized to speak to the press because of nondisclosure agreements.

Now, according to four former employees and two people with knowledge of the spyware market, Variston is shutting down."

https://techcrunch.com/2024/02/15/variston-spyware-losing-staff-some-say-closing/

jsrailton, (edited ) to poland
@jsrailton@mastodon.social avatar

BREAKING: spyware abused in 🇵🇱 under previous PiS-party government, confirms the new PM Donald Tusk

"Very, very long" victim list.

Vindication.

When we @citizenlab first confirmed the hacking in 2021 both we & victims were targeted w/extensive harassment & disinformation.

REPORT: https://apnews.com/article/poland-government-pegasus-spyware-tusk-duda-78420fc7099401926d28b5be98669192

jikodesu, to Philippines
@jikodesu@mastodon.social avatar
scott, to infosec
@scott@denizens.social avatar

"Commercial spyware vendors (CSV) were behind 80% of the zero-day vulnerabilities Google's Threat Analysis Group (TAG) discovered in 2023 and used to spy on devices worldwide..."

https://www.bleepingcomputer.com/news/security/google-says-spyware-vendors-behind-most-zero-days-it-discovers/

Good grief - what a shitshow.

0x58, to Cybersecurity

📨 Latest issue of my curated and list of resources for week /2024 is out! It includes the following and much more:

➝ 🔓 Support Portal Exposed Customer Device Info
➝ 🔓 🇹🇭 Major in Exposes Personal Data of 20 Million Elderly Citizens
➝ 🔓 🇫🇷 Millions at risk of fraud after massive health data hack in
➝ 🔓 🇺🇸 employee inadvertently leaks data of 63 thousand colleagues
➝ 🔓 🖥️ Hacked: Revokes Passwords, Certificates in Response
➝ 🔓 🇺🇸 says caused $49 million in expenses
➝ 💸 📈 Payments Exceed $1 Billion in 2023, Hitting Record High After 2022 Decline
➝ 🇺🇸 💰 US offers $10 million for tips on ransomware leadership
➝ 🇨🇳 🇺🇸 -backed Volt Typhoon hackers have lurked inside US for ‘at least five years’
➝ 🇨🇳 🇳🇱 Chinese Hackers Exploited Flaw to Breach Dutch Network
➝ 🇮🇷 🇮🇱 accelerates cyber ops against from chaotic start
➝ 🇧🇾 🇺🇸 Belarusian National Linked to BTC-e Faces 25 Years for $4 Billion Money Laundering
➝ 🇭🇰 💸 worker pays out $25 million after video call with ‘chief financial officer’
➝ 🇺🇦 is Creating a ‘Cyber Diplomat’ Post
➝ 🇩🇰 orders schools to stop sending student data to
➝ 🇪🇺 ⚖️ proposes criminalizing AI-generated child sexual abuse and deepfakes
➝ 🇳🇱 💰 Fined 10 Million Euros by Dutch Data Regulator
➝ 🇺🇸 🛂 US to Roll Out Visa Restrictions on People Who Misuse to Target Journalists, Activists
➝ 🦠 💬 Raspberry Robin Upgrades with Spread and New Exploits
➝ 🦠 🍎 New Backdoor Linked to Prominent Ransomware Groups
🦠 🪥 Surprising 3 Million Hacked Story Goes Viral—Is It True?
➝ 🇨🇦 🐬 declares public enemy No. 1 in car-theft crackdown
➝ 🩹 : Patch new Connect Secure auth bypass bug immediately
➝ 🐛 📍 Security flaw in a popular smart helmet allowed silent location tracking
➝ 🩹 Critical Patches Released for New Flaws in , , Products
➝ 🐛 🐧 Critical Boot Loader in Shim Impacts Nearly All Distros
➝ 🐛 ✈️ App Vulnerability Introduced Aircraft Safety Risk
➝ 🩹 Patches High-Severity Bugs in QTS, Qsync Central

--

📚 This week's recommended reading is: "x86 Software Reverse-Engineering, Cracking, and Counter-Measure" by Stephanie Domas & Christopher Domas

--

Subscribe to the newsletter to have it piping hot in your inbox every week-end ⬇️

https://infosec-mashup.santolaria.net/p/infosec-mashup-week-062024

VTDARKSIM, to AdGuard
@VTDARKSIM@toot.community avatar

Can I block the operation of an browser extension by using a custom filter on on my router? Or perhaps using a @protonmail VPN config on my router?

I really don’t like my big bad business daddy digging into my personal health , communications, etc., & I don’t have admin rights on my PC to disable/remove it.

VTDARKSIM, to privacy
@VTDARKSIM@toot.community avatar

IT snuck #Aternity in as a browser extension & I don’t have admin rights to remove it. It has rights to see/handle/change all site data. I contacted IT & told them it’s problematic from a #privacy standpoint bc it has access to literally all websites I visit, including Gmail, protonmail, anthem, & MyChart. It even has access to the “anonymous” #Menti survey form sent out by corporate.

#IT told me not to do personal stuff on a work PC if I’m concerned w/ privacy 😒

#spyware #surveillance

itnewsbot, to news
@itnewsbot@schleuss.online avatar

Spyware on the rise despite U.S. and Google efforts - Spyware is a flourishing business and runs under the government’s radar despite ef... - https://readwrite.com/us-government-and-goolge-have-commercial-spyware-in-their-sights/ #dataandsecurity #digitalidentity #spyware #news

br00t4c, to random
@br00t4c@mastodon.social avatar
jikodesu, to tech
@jikodesu@mastodon.social avatar

"Google said it discovered the unknown Variston customer using these zero-days in March 2023 to target iPhones in Indonesia. The hackers delivered an SMS text message containing a malicious link that infected the target’s phone with spyware, and then redirected the victim to a news article by the Indonesian newspaper Pikiran Rakyat."

https://techcrunch.com/2024/02/06/government-hackers-targeted-iphones-owners-with-zero-days-google-says/?guccounter=1

br00t4c, to random
@br00t4c@mastodon.social avatar
YourAnonRiots, to Cybersecurity Japanese
@YourAnonRiots@mstdn.social avatar

🌍 U.S. imposes visa restrictions on those (developers, sellers, beneficiaries, and companies) involved in illegal surveillance through commercial #spyware like #Pegasus.

https://thehackernews.com/2024/02/us-imposes-visa-restrictions-on-those.html

#cybersecurity #privacy #technews

happygeek, to infosec

New by me @Forbes: Google TAG and Jigsaw Unit publish global spyware analysis (turns irony detector off) including case studies and info on 40 vendors.

https://www.forbes.com/sites/daveywinder/2024/02/06/new-google-warning-reveals-global-2024-privacy-threat-are-you-at-risk/

remixtures, to Cybersecurity Portuguese
@remixtures@tldr.nettime.org avatar

#Cybersecurity #Surveillance #Spyware #Stalkerware: "The makers of two phone surveillance services appear to have shuttered after the owner agreed to settle state accusations of illegally promoting spyware that his companies developed.

PhoneSpector and Highster were consumer-grade phone monitoring apps that facilitated the covert surveillance of a person’s smartphone. Commonly dubbed stalkerware (or spouseware), these apps are typically planted on a person’s phone, often by a spouse or domestic partner and usually with knowledge of the device passcode. These apps are designed to stay hidden from home screens, making them difficult to find and remove, all the while continuously uploading the phone’s messages, photos and real-time location data to a dashboard viewable by the abuser.

In February 2023, Patrick Hinchy, whose consortium of New York and Florida-based tech companies developed PhoneSpector and Highster, agreed to pay $410,000 in penalties to settle accusations that Hinchy’s companies advertised and “aggressively promoted” spyware that allowed the secret phone surveillance of individuals living in New York state."

https://techcrunch.com/2024/02/02/phonespector-highster-stalkerware-shut-down/

YourAnonRiots, to Cybersecurity Japanese
@YourAnonRiots@mstdn.social avatar

Israel Group's targeted nearly 3 dozen journalists, activists, and lawyers in Jordan, raising concerns about privacy violations and government abuse.

https://thehackernews.com/2024/02/pegasus-spyware-targeted-iphones-of.html

simontsui, to news

Citizen Lab along with Human Rights Watch, Access Now, Human Rights Watch and the Organized Crime and the Corruption Reporting Project confirmed Pegasus surveillance of individuals in Jordan working in media, activists, lawyers, and other fields.
🔗 https://citizenlab.ca/2024/02/confirming-large-scale-pegasus-surveillance-of-jordan-based-civil-society/

#Citizenlab #Pegasus #NSOGroup #news #privacy #surveillance #spyware #Jordan

simontsui,

See related Human Rights Watch reporting:

"Two Human Rights Watch staff members based in Jordan have been repeatedly targeted with advanced surveillance spyware, Human Rights Watch said today. The targeting, which violates their right to privacy, began in October 2022 and succeeded briefly in infecting one of their mobile phones.

The same spyware was also used to target the devices of at least 33 Jordanian and Jordan-based journalists, activists, and politicians between 2019 and September 2023, according to an Access Now report, released on February 1, 2024, that relied on a forensic investigation conducted jointly with the Canadian academic research center, Citizen Lab. The investigation found traces of Pegasus spyware in their mobile devices, with some devices infected multiple times. The analysis could not determine which government initiated the attacks."

🔗 https://www.hrw.org/news/2024/02/01/spyware-targets-human-rights-watch-staff-jordan

nikita, to random German
@nikita@social.tchncs.de avatar

Ein Mann überwacht das Handy seiner Freundin mit einer iranischen #Spyware

Dann knackt eine Schweizer Hackerin das System. 👉 Einblicke in einen lukrativen Markt

https://www.nzz.ch/wochenende/schwerpunkt/wenn-der-schatz-auf-dem-handy-mitliest-wie-eine-schweizerin-von-ihrem-partner-mit-iranischer-spyware-ausspioniert-wurde-ld.1775351

remixtures, to random Portuguese
@remixtures@tldr.nettime.org avatar

RT @citizenlab
🆕NEW: Along with @accessnow, @hrw, @OCCRP and @amnesty, @citizenlab
uncovers how #Pegasus #spyware targets members of civil society in #Jordan 🇯🇴. These include journalists, activists, and lawyers. https://citizenlab.ca/2024/02/confirming-large-scale-pegasus-surveillance-of-jordan-based-civil-society/

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • InstantRegret
  • rosin
  • modclub
  • Youngstown
  • khanakhh
  • Durango
  • slotface
  • mdbf
  • cubers
  • GTA5RPClips
  • kavyap
  • DreamBathrooms
  • ngwrru68w68
  • megavids
  • magazineikmin
  • osvaldo12
  • tester
  • tacticalgear
  • ethstaker
  • Leos
  • thenastyranch
  • everett
  • normalnudes
  • anitta
  • provamag3
  • cisconetworking
  • lostlight
  • All magazines