Real Time OSINT on NSO Group and Bulgaria’s Circles Commercial Spyware Developers – An Analysis If an image is worth a thousand words so is real time OSINT methodology. More on Bulgaria’s Circles here and here. Stay tuned. [ad_2] https://ddanchev.blogspot.com/2024/12/real-time-osint-on-nso-group-and.html
U.S. Judge Rules Against NSO Group in WhatsApp Pegasus Spyware Case Meta Platforms-owned WhatsApp scored a major legal victory in its fight against Israeli commercial spyware vendor NSO Group after a federal judge in the U.S. state of California ruled in favor of the messaging giant for exploiting a security Read more…
NoviSpy Spyware Installed on Journalist's Phone After Unlocking It With Cellebrite Tool A Serbian journalist had his phone first unlocked by a Cellebrite tool and subsequently compromised by a previously undocumented spyware codenamed NoviSpy, according to a new report published by Amnesty International. “NoviSpy allows for capturing sensitive personal data Read more…
Gamaredon Deploys Android Spyware "BoneSpy" and "PlainGnome" in Former Soviet States The Russia-linked state-sponsored threat actor tracked as Gamaredon has been attributed to two new Android spyware tools called BoneSpy and PlainGnome, marking the first time the adversary has been discovered using mobile-only malware families in its attack campaigns. “BoneSpy Read more…
Chinese EagleMsgSpy Spyware Found Exploiting Mobile Devices Since 2017 Cybersecurity researchers have discovered a novel surveillance program that’s suspected to be used by Chinese police departments as a lawful intercept tool to gather a wide range of information from mobile devices. The Android tool, codenamed EagleMsgSpy by Lookout, has been Read more…
New LightSpy Spyware Version Targets iPhones with Increased Surveillance Tactics Oct 31, 2024Ravie LakshmananSpyware / Mobile Security Cybersecurity researchers have discovered an improved version of an Apple iOS spyware called LightSpy that not only expands on its functionality, but also incorporates destructive capabilities to prevent the compromised device from booting Read more…
Dancho Danchev’s Blog – Mind Streams of Information Security Knowledge: Domains Portfolio Operated by Cytrox Spyware The following is a list of C&C domains belonging to the Cytrox commercial spyware. Sample domains involved in the campaign include: hxxp://5m5.io hxxp://actumali.org hxxp://addons.ne hxxp://adibjan.net hxxp://adservices.gr.com hxxp://advertsservices.com hxxp://almasryelyuom.com hxxp://alpineai.uk hxxp://alraeeenews.com hxxp://alraeesnews.net hxxp://altsantiri.ne hxxp://amazing.la hxxp://api-apple-buy.com Read more…
Dancho Danchev’s Blog – Mind Streams of Information Security Knowledge: The Intellexa Commercial Spyware Consortium, The Predator Spyware, NSO Group and Bulgaria’s Circles Commercial Spyware Vendor Dear blog readers, I’ve decided to continue my post on Bulgaria’s Circles commercial spyware vendor which I profiled here in depth which appears to Read more…
Dancho Danchev’s Blog – Mind Streams of Information Security Knowledge: Exposing an Indian Police Spyware Cyber Operation This analysis is based on this Wired.com story. Sample Gmail accounts known to have been involved in the campaign include:jagdish.meshraam@gmail.comdrsnehapatil64@gmail.comsinhamuskaan04@gmail.comjennifergonzales789@gmail.compayalshastri79@gmail.com Sample malicious domains known to have been involved in the campaign:researchplanet.zapto.orgsocialstatistics.zapto.orgduniaenewsportal.ddns.net Sample domain Read more…
ChatGPT macOS Flaw Could’ve Enabled Long-Term Spyware via Memory Function Sep 25, 2024Ravie LakshmananArtificial Intelligence / Vulnerability A now-patched security vulnerability in OpenAI’s ChatGPT app for macOS could have made it possible for attackers to plant long-term persistent spyware into the artificial intelligence (AI) tool’s memory. The technique, dubbed SpAIware, Read more…