-
Nov 10, 2023 | 
securelist.com | Dmitry Kalinin |Seongsu Park |Leonid Bezvershenko |Georgy Kucherin
Ducktail is a malware family that has been active since the second half of 2021 and aims to steal Facebook business accounts. Kaspersky Daily Iran, WithSecure, and GridinSoft have all covered Ducktail attacks: the infostealer spread under the guise of documents relating to well-known companies’ and brands’ projects and products. The group behind the Ducktail attacks presumably hails from Vietnam.
-
Nov 2, 2023 | 
securelist.com | Dmitry Kalinin |Leonid Bezvershenko |Georgy Kucherin |Igor Kuznetsov
It is not rare that users of popular instant messaging services find the official client apps to be lacking in functionality. To address that problem, third-party developers come up with mods that offer sought-after features besides aesthetic upgrades. Unfortunately, some of these mods contain malware alongside legitimate enhancements. A case in point occurred last year when we discovered the Triada Trojan inside a WhatsApp mod.
-
Oct 26, 2023 | 
packetstormsecurity.com | Georgy Kucherin |Leonid Bezvershenko |Boris Larin |iPod Touch
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256APPLE-SA-10-25-2023-3 iOS 15.8 and iPadOS 15.8iOS 15.8 and iPadOS 15.8 addresses the following issues. Information about the security content is also available athttps://support.apple.com/kb/HT213990. Apple maintains a Security Updates page athttps://support.apple.com/HT201222 which lists recentsoftware updates with security advisories.
-
Oct 26, 2023 | 
securelist.com | Leonid Bezvershenko |Georgy Kucherin |Igor Kuznetsov |Boris Larin
In the beginning of 2023, thanks to our Kaspersky Unified Monitoring and Analysis Platform (KUMA) SIEM system, we noticed suspicious network activity that turned out to be an ongoing attack targeting the iPhones and iPads of our colleagues.
-
Oct 25, 2023 | 
seclists.org | Georgy Kucherin |Leonid Bezvershenko |Boris Larin |iPod Touch
Full Disclosuremailing list archivesFrom: Apple Product Security via Fulldisclosure <fulldisclosure () seclists org>Date: Wed, 25 Oct 2023 12:03:35 -0700-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256APPLE-SA-10-25-2023-3 iOS 15.8 and iPadOS 15.8iOS 15.8 and iPadOS 15.8 addresses the following issues. Information about the security content is also available athttps://support.apple.com/kb/HT213990.
-
Sep 27, 2023 | 
securelist.com | Roman Dedenok |Kaspersky ICS CERT |Georgy Kucherin |Leonid Bezvershenko
QR codes are everywhere: you can see them on posters and leaflets, ATM screens, price tags and merchandise, historical buildings and monuments. People use them to share information, promote various online resources, pay for their goodies, and pass verification. And yet you don’t see lots of QR codes in email: users often read messages on their phones without any other device handy for scanning. As such, most letters come with ordinary hyperlinks instead.
-
Sep 12, 2023 | 
securelist.com | Georgy Kucherin |Leonid Bezvershenko |Anton Kivva |David Emm
Over the last few years, Linux machines have become a more and more prominent target for all sorts of threat actors. According to our telemetry, 260,000 unique Linux samples appeared in the first half of 2023. As we will demonstrate in this article, campaigns targeting Linux can operate for years without being noticed by the cybersecurity community.
-
Jul 19, 2023 | 
securelist.com | Georgy Kucherin |Leonid Bezvershenko |Francesco Figurelli |Eduardo Ovalle
On March 14, 2023, Microsoft published a blogpost describing an Outlook Client Elevation of Privilege Vulnerability (CVSS: 9.8 CRITICAL). The publication generated a lot of activity among white, grey and black hat researchers, as well as lots of publications and tweets about the vulnerability and its exploitation. Below, we will highlight the key points and then focus on the initial use of this vulnerability by attackers before it became public.
-
Jul 7, 2023 | 
seclists.org | Leonid Bezvershenko
Full Disclosuremailing list archivesFrom: Apple Product Security via Fulldisclosure <fulldisclosure () seclists org>Date: Wed, 21 Jun 2023 16:47:13 -0700-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256APPLE-SA-2023-06-21-7 watchOS 9.5.2watchOS 9.5.2 addresses the following issues. Information about the security content is also available athttps://support.apple.com/kb/HT213812.
-
Jul 7, 2023 | 
seclists.org | Leonid Bezvershenko
Full Disclosuremailing list archivesFrom: Apple Product Security via Fulldisclosure <fulldisclosure () seclists org>Date: Wed, 21 Jun 2023 16:47:26 -0700-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256APPLE-SA-2023-06-21-8 watchOS 8.8.1watchOS 8.8.1 addresses the following issues. Information about the security content is also available athttps://support.apple.com/kb/HT213808.
