Latest Spyware news

U.S. sanctions Predator spyware operators for spying on Americans

The U.S. has imposed sanctions on two individuals and five entities linked to the development and distribution of the Predator commercial spyware used to target Americans, including government officials and journalists.
- Bill Toulas
- March 05, 2024
- 01:09 PM
- 0
Google says spyware vendors behind most zero-days it discovers

Commercial spyware vendors (CSV) were behind 80% of the zero-day vulnerabilities Google's Threat Analysis Group (TAG) discovered in 2023 and used to spy on devices worldwide.
- Bill Toulas
- February 06, 2024
- 12:27 PM
- 4
US announces visa ban on those linked to commercial spyware

Secretary of State Antony J. Blinken announced today a new visa restriction policy that will enable the Department of State to ban those linked to commercial spyware from entering the United States.
- Sergiu Gatlan
- February 05, 2024
- 03:26 PM
- 6
More Android apps riddled with malware spotted on Google Play

An Android remote access trojan (RAT) known as VajraSpy was found in 12 malicious applications, six of which were available on Google Play from April 1, 2021, through September 10, 2023.
- Bill Toulas
- February 01, 2024
- 01:19 PM
- 1
iShutdown scripts can help detect iOS spyware on your iPhone

Security researchers found that infections with high-profile spyware Pegasus, Reign, and Predator could be discovered on compromised Apple mobile devices by checking Shutdown.log, a system log file that stores reboot events.
- Bill Toulas
- January 17, 2024
- 01:03 PM
- 1
GrapheneOS: Frequent Android auto-reboots block firmware exploits

GrapheneOS, a privacy and security-focused Android-based operating system, has posted a series of tweets on X suggesting that Android should introduce frequent auto-reboots to make it harder for forensic software vendors to exploit firmware flaws and spy on the users.
- Bill Toulas
- January 14, 2024
- 10:32 AM
- 3
iPhone Triangulation attack abused undocumented hardware feature

The Operation Triangulation spyware attacks targeting iPhone devices since 2019 leveraged undocumented features in Apple chips to bypass hardware-based security protections.
- Bill Toulas
- December 27, 2023
- 09:14 AM
- 1
SpyLoan Android malware on Google Play downloaded 12 million times

More than a dozen malicious loan apps, which are generically named SpyLoan, have been downloaded more than 12 million times this year from Google Play but the count is much larger since they are also available on third-party stores and suspicious websites.
- Bill Toulas
- December 05, 2023
- 09:27 AM
- 0
Fake 'RedAlert' rocket alert app for Israel installs Android spyware

Israeli Android users are targeted by a malicious version of the 'RedAlert - Rocket Alerts' app that, while it offers the promised functionality, acts as spyware in the background.
- Bill Toulas
- October 16, 2023
- 11:18 AM
- 0
Recently patched Apple, Chrome zero-days exploited in spyware attacks

Security researchers with the Citizen Lab and Google's Threat Analysis Group (TAG) revealed today that three zero-days patched by Apple on Thursday were abused as part of an exploit chain to install Cytrox's Predator spyware.
- Sergiu Gatlan
- September 22, 2023
- 02:16 PM
- 0
APT36 state hackers infect Android devices using YouTube app clones

The APT36 hacking group, aka 'Transparent Tribe,' has been observed using at least three Android apps that mimic YouTube to infect devices with their signature remote access trojan (RAT), 'CapraRAT.'
- Bill Toulas
- September 18, 2023
- 06:06 PM
- 0
CISA warns govt agencies to secure iPhones against spyware attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered federal agencies today to patch security vulnerabilities abused as part of a zero-click iMessage exploit chain to infect iPhones with NSO Group's Pegasus spyware.
- Sergiu Gatlan
- September 11, 2023
- 12:21 PM
- 0
'Evil Telegram' Android apps on Google Play infected 60K with spyware

Several malicious Telegram clones for Android on Google Play were installed over 60,000 times, infecting people with spyware that steals user messages, contacts lists, and other data.
- Bill Toulas
- September 10, 2023
- 10:39 AM
- 2
Apple zero-click iMessage exploit used to infect iPhones with spyware

Citizen Lab says two zero-days fixed by Apple today in emergency security updates were actively abused as part of a zero-click exploit chain (dubbed BLASTPASS) to deploy NSO Group's Pegasus commercial spyware onto fully patched iPhones.
- Sergiu Gatlan
- September 07, 2023
- 04:18 PM
- 0
Trojanized Signal and Telegram apps on Google Play delivered spyware

Trojanized Signal and Telegram apps containing the BadBazaar spyware were uploaded onto Google Play and Samsung Galaxy Store by a Chinese APT hacking group known as GREF.
- Bill Toulas
- August 30, 2023
- 11:16 AM
- 0
Hackers steal Signal, WhatsApp user data with fake Android chat app

Hackers are using a fake Android app named 'SafeChat' to infect devices with spyware malware that steals call logs, texts, and GPS locations from phones.
- Bill Toulas
- July 31, 2023
- 03:26 PM
- 2
APT41 hackers target Android users with WyrmSpy, DragonEgg spyware

The Chinese state-backed APT41 hacking group is targeting Android devices with two newly discovered spyware strains dubbed WyrmSpy and DragonEgg by Lookout security researchers.
- Sergiu Gatlan
- July 20, 2023
- 07:01 AM
- 0
US govt bans European spyware vendors Intellexa and Cytrox

The U.S. government has banned European commercial spyware manufacturers Intellexa and Cytrox, citing risks to U.S. national security and foreign policy interests.
- Sergiu Gatlan
- July 19, 2023
- 06:18 AM
- 0
Apps with 1.5M installs on Google Play send your data to China

Security researchers discovered two malicious file management applications on Google Play with a collective installation count of over 1.5 million that collected excessive user data that goes well beyond what's needed to offer the promised functionality.
- Bill Toulas
- July 06, 2023
- 02:43 PM
- 12
CISA orders agencies to patch iPhone bugs abused in spyware attacks

Today, CISA ordered federal agencies to patch recently patched security vulnerabilities exploited as zero-days to deploy Triangulation spyware on iPhones via iMessage zero-click exploits.
- Sergiu Gatlan
- June 23, 2023
- 02:06 PM
- 0