The security lapse allowed anyone to access the database and steal other customers’ Wi-Fi network passwords. It is believed that tens of thousands of exposed Wi-Fi passwords are for networks in the US. ‘Wi-Fi Finder’, a popular hotspot finder app, has exposed nearly 2 million network passwords due to an unprotected database. The security lapse allowed anyone to sneak into ...
Read More »Yearly Archives: 2019
Trojanized TeamViewer Used in Targeted Attacks Against Multiple Embassies
Motive remains unclear though financial theft appears to be one possibility, Check Point Research says. A recent cyberattack campaign employed a weaponized version of TeamViewer and malware disguised as a top secret US government document to target officials in several embassies in Europe. The malware, phishing documents, and other artifacts used in the attacks appear to all be the work ...
Read More »Thousands of sensitive documents related to the Mexican embassy posted online
The incident occurred after the hacker managed to compromise a vulnerable server belonging to the embassy. More than 4,800 sensitive documents were compromised from the Mexican Embassy. A hacker who goes by the online handle ‘@0x55Taylor’, stole and posted online thousands of sensitive documents from Mexico’s embassy in Guatemala. The incident occurred after the hacker managed to compromise a vulnerable ...
Read More »A hotspot finder app exposed 2 million Wi-Fi network passwords
A popular hotspot finder app for Android exposed the Wi-Fi network passwords for more than two million networks. The app, downloaded by thousands of users, allowed anyone to search for Wi-Fi networks in their nearby area. The app allows the user to upload Wi-Fi network passwords from their devices to its database for others to use. That database of more than ...
Read More »Chafer threat actor group: A deep understanding of the Iran-linked threat group’s high-prolific targets
Chafer has compromised several airlines and telecommunications companies in the Middle East countries such as Saudi Arabia and Afghanistan. Chafer has used leaked NSA hacking tools including EternalBlue that are freely available on the public internet. Chafer hacking group, also known as APT39 is an advanced persistent threat group that has been active since July 2014. Chafer has been observed ...
Read More »Security researcher MalwareTech pleads guilty, faces 10 years in prison
Marcus Hutchins, who goes by the pseudonym MalwareTech, is a popular name in the security community. Hutchins was first arrested on August 2, 2017, while returning to the UK after attending the Black Hat and DEFCON conferences. Security researcher Marcus Hutchins aka “MalwareTech” filed a plea deal on Friday, pleading guilty to creating and distributing malware before his career as ...
Read More »Microsoft Issues Security Alert Over Cyber Attack: Reports
In an email notification to some affected users on Saturday, Microsoft said it became aware of an issue involving unauthorised access to some customers’ web-based email accounts by cybercriminals. Microsoft has alerted some of its webmail users of possible hacker attacks that could access their email accounts illegally, media reports said. In an email notification to some affected users on ...
Read More »Facebook Developers Exposed Data Of Millions On Amazon Cloud: Report
The third-party Facebook app developers exposed data in the public domain in two large datasets that contained 540 million users’ records. SAN FRANCISCO: In yet another shocking revelation, US-based cyber security firm UpGuard has found that Facebook app developers left millions of user records, including comments, likes and reactions, exposed on the Amazon Cloud servers. The third-party Facebook app developers ...
Read More »Unprotected MongoDB database exposes 6.7 million records belonging to Iranian ride-hailing firm
The leaky database that exposed records on the internet, contained two sets of invoice collections. The information leaked in the incident included drivers’ first and last names, Iranian ID numbers, phone numbers, and invoice dates. An Iran-based ride-hailing firm has exposed over 6.7 million records due to an unprotected MongoDB database. The leaky database named ‘doroshke-invoice-production’ was discovered using BinaryEdge ...
Read More »Drupal releases correct four moderately critical third-party vulnerabilities
Drupal this week issued a series of security releases to fix four “moderately critical” vulnerabilities, three related to the content management system’s Symfony PHP web application framework and a fourth involving the jQuery project JavaScript library. The three Symfony issues consist of: A cross-site scripting bug caused by the failure of validation messages in the PHP templating engine to escape (CVE-2019-10909) A ...
Read More »