March 2022 – Page 6

Android password-stealing malware infects 100,000 Google Play users

A malicious Android app that steals Facebook credentials has been installed over 100,000 times via the Google Play Store, with the app still available to download. […]

21 Mar

Windows zero-day flaw giving admin rights gets unofficial patch, again

A Windows local privilege escalation zero-day vulnerability that Microsoft has failed to fully address for several months now, allows users to gain administrative privileges in Windows 10, Windows 11, and Windows Server. […]

21 Mar

Serpent malware campaign abuses Chocolatey Windows package manager

Threat actors are abusing the popular Chocolatey Windows package manager in a new phishing campaign to install new ‘Serpent’ backdoor malware on systems of French government agencies and large construction firms. […]

21 Mar

Microsoft investigating claims of hacked source code repositories

Microsoft says they are investigating claims that the Lapsus$ data extortion hacking group breached their internal Azure DevOps source code repositories and stolen data. […]

20 Mar

More Conti ransomware source code leaked on Twitter out of revenge

A Ukrainian security researcher has leaked newer malware source code from the Conti ransomware operation in revenge for the cybercriminals siding with Russia on the invasion of Ukraine. […]

20 Mar

Western Digital app bug gives elevated privileges in Windows, macOS

Western Digital’s EdgeRover desktop app for both Windows and Mac are vulnerable to local privilege escalation and sandboxing escape bugs that could allow the disclosure of sensitive information or denial of service (DoS) attacks. […]

19 Mar

New Phishing toolkit lets anyone create fake Chrome browser windows

A phishing kit has been released that allows red teamers and wannabe cybercriminals to create effective single sign-on phishing login forms using fake Chrome browser windows. […]

19 Mar

FBI: Avoslocker ransomware targets US critical infrastructure

The Federal Bureau of Investigation (FBI) warns of AvosLocker ransomware being used in attacks targeting multiple US critical infrastructure sectors. […]

18 Mar

Telegram banned by Brazilian Supreme Court over missed emails

Brazilian Supreme Federal Court Justice Alexandre de Moraes banned Telegram on Friday from operating in the country and asked the National Telecommunications Agency to notify internet providers to block the messaging app within five days. […]

18 Mar

Windows 11 adds a BitLocker exclusion policy for USB drives

Microsoft has released a new Windows 11 build with a long list of changes, improvements, fixes for known issues, available for all Windows Insiders that will install the Windows 11 Insider Preview Build 22579 pushed to the Dev Channel. […]

Month: March 2022

Android password-stealing malware infects 100,000 Google Play users

Windows zero-day flaw giving admin rights gets unofficial patch, again

Serpent malware campaign abuses Chocolatey Windows package manager

Microsoft investigating claims of hacked source code repositories

More Conti ransomware source code leaked on Twitter out of revenge

Western Digital app bug gives elevated privileges in Windows, macOS

New Phishing toolkit lets anyone create fake Chrome browser windows

FBI: Avoslocker ransomware targets US critical infrastructure

Telegram banned by Brazilian Supreme Court over missed emails

Windows 11 adds a BitLocker exclusion policy for USB drives