Feds Charge Russian for Leading ‘Evil Corp’ Cybercrime Empire

Federal investigators have charged a 32-year-old Russian national for running “Evil Corp,” a massive cybercrime ring that used phishing emails and malware to break into bank accounts across the globe. On Thursday, the Justice Department unsealed an indictment against Moscow resident Maksim Yakubets for a “decade-long cybercrime spree” that involved distributing two infamous malware strains: Dridex and Zeus. Both are capable of secretly infecting computers to steal login credentials for…

December 5, 2019
Read More >>

Mozilla Removes Avast and AVG Firefox Extensions

If you currently use the Avast Online Security, AVG Online Security, Avast SafePrice, or AVG SafePrice extensions in your browser of choice, stop. Avast has been found to be harvesting user data, which led Mozilla to remove all four extensions from its add-on site. Opera has also removed them. As ZDNet reports, the data harvesting Avast is carrying out was first discovered by Wladimir Palant, creator of the Adblock Plus…

December 4, 2019
Read More >>

Mozilla Removes Avast and AVG Extensions From Firefox

If you currently use the Avast Online Security, AVG Online Security, Avast SafePrice, or AVG SafePrice extensions in your browser of choice, stop. Avast has been found to be harvesting user data, which led Mozilla to remove all four extensions from Firefox. Opera has also removed them. As ZDNet reports, the data harvesting Avast is carrying out was first discovered by Wladimir Palant, creator of the Adblock Plus extension. In…

December 4, 2019
Read More >>

Smith & Wesson’s Website Hacked to Steal Credit Card Details

If you recently bought something from Smith & Wesson on Black Friday, watch out. The gun manufacturer’s website has been spotted hosting computer code that can steal your credit card details and forward it to hackers. The code was injected into the Smith & Wesson’s website on Nov. 27 and remained there until Tuesday morning, according to fraud detection company Sanguine Security, which first noticed the “payment card skimming” attack….

December 4, 2019
Read More >>

Android Malware Abuses App Permissions to Hijack Phones

Android users beware: Hackers are taking advantage of a flaw in the OS that can trick you into giving up access to your phone. On Monday, security researchers in Norway disclosed “Strandhogg,” a vulnerability that can exploit the permission pop-up windows on Android. Ironically, the permission pop-ups are meant to be a safety feature; if an app wants access to your phone’s SMS messages, camera or contacts, it first needs…

December 3, 2019
Read More >>

Feds Arrest Programmer for Giving Cryptocurrency Talk in North Korea

Federal agents have arrested a US computer programmer for giving a talk at a cryptocurrency conference in North Korea on blockchain technology. 36-year-old Virgil Griffith is set to appear in court today on the suspected crime of trying to help North Korea circumvent US sanctions. Griffith is known for working on a foundation that supports the Ethereum cryptocurrency. But according to the Justice Department, he also taught attendees at an…

December 3, 2019
Read More >>

This Ring Uses a Fake Fingerprint to Protect Your Biometric Data

Consumers increasingly rely on fingerprint and facial scans to unlock their electronic devices, but what happens if their biometric data ends up in the wrong hands? Antivirus firm Kaspersky Lab has come up with a potential safeguard: a ring that generates a synthetic fingerprint to unlock devices. The ring is designed to address a key vulnerability with biometric authentication—your face and fingerprints can’t be reset like a password if copies…

December 2, 2019
Read More >>

Feds Arrest Man for Stealing, Then Leaking 100 Unreleased Songs

Federal investigators have charged a man in Austin, Texas, for hacking a music producer’s social networking account in an effort to steal unreleased songs from more than 20 recording artists. On Monday, federal agents arrested 27-year-old Christian Erazo for his role in stealing 50GB of content and then leaking more than 100 unreleased songs online. Starting in late 2016, Erazo and his unnamed co-conspirators broke into the online account of…

November 27, 2019
Read More >>

Google Detects Steady Stream of Phishing Attacks From Cyberspies

It’s no secret that state-sponsored hackers want to break into email accounts to steal people’s sensitive files. But on Tuesday, Google shared some intel on the scale of the hacking activities. From July to September, the company sent out more than 12,000 warnings to users across the globe that government-backed attackers were trying to break into their Google accounts through phishing scams. The 12,000-plus figure is consistent with the number…

November 27, 2019
Read More >>

Apps Found Collecting User Details From Facebook, Twitter

Facebook and Twitter are both warning users about a number of mobile apps that were secretly collecting people’s personal information from their social media profiles. The apps were loaded with malicious software development kits (SDK) that pulled details such as email address, names, and people’s genders from their Facebook and Twitter accounts. The same SDKs were also theoretically capable of taking over a user’s Twitter account. Allegedly, the suppliers of…

November 26, 2019
Read More >>