Tag Archive for: backdoor

T9000 Skype backdoor malware steals audio, video, chats, screenshots, documents

/in

Researchers found a complex backdoor malware which targets Skype, capturing video, audio and chat messages, as well as grabs screenshots and steals files, before sending the data back to the attacker.

Researchers at Palto Alto Networks analyzed a new variant of backdoor malware that goes to “great lengths to avoid being detected and to evade the scrutiny of the malware analysis community.” T9000, is a newer variant of T5000, or the Plat1 malware family that APT actors used in spear phishing attacks after the disappearance of Malaysian Flight MH370. T9000 is being used in targeted attacks against multiple U.S. organizations, dropped by a RTF file, but its functionality indicates the malware is “intended for use against a broad range of users.”

To read this article in full or to leave a comment, please click here

Network World Security

Cyberspy group repurposes 12-year-old Bifrose backdoor

/in

A group of hackers that primarily targets companies from key industries in Asia is using heavily modified versions of a backdoor program called Bifrose that dates back to 2004.

The group, which researchers from antivirus vendor Trend Micro call Shrouded Crossbow, has been targeting privatized government organizations, government contractors and companies from the consumer electronics, computer, healthcare, and financial industries since 2010.

The group’s activities are evidence that engaging in cyberespionage doesn’t always require huge budgets, stockpiles of zero-day vulnerabilities and never-before-seen malware programs. Old cybercrime tools can be repurposed and improved for efficient attacks.

To read this article in full or to leave a comment, please click here

Network World Security

BlackBerry says no to Pakistani backdoor gambit

/in

In response to a demand for backdoor access to its enterprise messaging products, BlackBerry is completely pulling out of the Pakistan market. The announcement comes as a ban on providing BlackBerry Enterprise Services over mobile networks in Pakistan was due to take effect today.

The Pakistan Telecommunications Authority’s ban on BlackBerry Enterprise Services (BES) was issued this summer, and it was planned to become effective on November 30, as Ars reported in July. “Security reasons” were cited as the cause of the ban. But just before the restriction was announced, Privacy International issued a report that warned of the Pakistani Inter-Services Intelligence (ISI) agency’s efforts to gain network surveillance capabilities within the country that rival those of the National Security Agency.

While the government has pushed back the effective date of that order to December 30, BlackBerry CEO Marty Beard announced today that the company would exit the Pakistani market completely rather than meet government demands for unfettered access to the service’s message traffic.

Read 2 remaining paragraphs | Comments

Ars Technica » Technology Lab

Mobile Threat Monday: Backdoor Pilots – PC Magazine

/in

Mobile Threat Monday: Backdoor Pilots
PC Magazine
What could start as an already harmful ransomware could later morph into an increasingly sophisticated botnet for hire, earning money for the hacker right under the victim's nose. No one deserves … Malwarebytes didn't specify how exactly Android …

android botnet – read more