An adware-laden phony WhatsApp download has been removed from Google Play and the developer’s account suspended, but not before it was downloaded one million times.
Threatpost | The first stop for security news
A Russian hacking group used spearphishing to steal the Gmail login credentials of Hillary Clinton campaign staff, and that may be how campaign emails now being released were stolen, according to Secure Works.
The attack targeted 108 hillaryclinton.com email addresses, and was carried out by a Russian group called Threat Group-4127 (TG-4127), according to Secure Works’ Counter Threat Unit (CTU) blog.
CTU can’t directly link the spearphishing operation against the Clinton campaign with the hack of Democratic National Committee emails revealed June 14, but “CTU researchers suspect that TG-4127 used the spearphishing emails or similar techniques to gain an initial foothold in the DNC network. “
To read this article in full or to leave a comment, please click here
|
Phony Antivirus Software Pushers Have New Trick Up Their Sleeve
CRN ThreatTrack Security researchers found that the Winwebsec malware family, which pushes rogue antivirus sofware, has been using stolen digital certificates, said Dodi Glenn, director of security intelligence at Clearwater, Fla.-based ThreatTrack … |
 Slate Magazine (blog) |
Phony WikiLeaks Tricks Activist Into Downloading Government-Grade Spyware
Slate Magazine (blog) This may have led in turn to the British government's subsequent decision to restrict sales of Gamma's “FinSpy” software, which is in line with an ongoing effort in the European Parliament to bring in stricter rules for spy gear sales. The nearest … |