⚠ Android click fraud apps mimic Apple iPhones to boost revenue ⚠

SophosLabs has uncovered a click fraud campaign in which malicious Android apps masquerade as being hosted on Apple devices to earn rewards.

📖 Read

via "Naked Security".

⚠ Massive botnet chews through 20,000 WordPress sites ⚠

Attackers have infected 20,000 WordPress sites by brute-forcing administrator usernames and passwords.

📖 Read

via "Naked Security".

🕴 6 CISO Resolutions for 2019 🕴

The ultimate to-do list for ambitious security leaders.

📖 Read

via "Dark Reading: ".

🔐 IT leaders spend 10% more money improving customer experience than security 🔐

Prioritizing user experience at the expense of security can increase sales, though pivoting from passwords is still problematic.

📖 Read

via "Security on TechRepublic".

❌ Volkswagen Giveaway Scam Peddles Ad Networks ❌

The scam is spread via Facebook and WhatsApp messages.

📖 Read

via "Threatpost | The first stop for security news".

🕴 6 Cloud Security Predictions for 2019 🕴

How the fast pace of cloud computing adoption in 2018 will dramatically change the security landscape next year.

📖 Read

via "Dark Reading: ".

ATENTION‼ New - CVE-2016-10502

While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identity in Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835 and SDA660.

📖 Read

via "National Vulnerability Database".

❌ Old-School Bagle Worm Spotted in Modern Spam Campaigns ❌

Bagle.A and Bagle.B date back to 2004.

📖 Read

via "Threatpost | The first stop for security news".

❌ Sextortion Emails Force Payment via GandCrab Ransomware ❌

Emails say they contain a link with screenshots of victims' compromising activity. In reality, the link executes ransomware.

📖 Read

via "Threatpost | The first stop for security news".

❌ Google Accelerates Google+ Shutdown After New Bug Discovered ❌

The consumer version of Google+ will now be shut down in April instead of August after a bug was found that impacts at least 50 million users.

📖 Read

via "Threatpost | The first stop for security news".

🕴 'Dr. Shifro' Prescribes Fake Ransomware Cure 🕴

A Russian firm aims to capitalize on ransomware victims' desperation by offering to unlock files then passing money to attackers.

📖 Read

via "Dark Reading: ".

<b>&#9000; How Internet Savvy are Your Leaders? &#9000;</b>

<code>Back in April 2015, I tweeted about receiving a letter via snail mail suggesting the search engine rankings for a domain registered in my name would suffer if I didn’t pay a bill for some kind of dubious-looking service I’d never heard of. But it wasn’t until the past week that it become clear how many organizations — including towns, cities and political campaigns — actually have fallen for this brazen scam.</code><code>Media</code><code>Image: Better Business Bureau.</code><code>The letter I tweeted about was from a company called Web Listings Inc., and it said I should pay a $85 charge for an “annual web site search engine” service.</code><code>The first clue that this was probably a scam was the letter said halfway down in capital letters “THIS IS NOT A BILL,” although it sure was made to look like one. Also, the domain it referenced was “fuckbriankrebs.com,” which was indeed registered using my street address but certainly not by me.</code><code>The sad truth is plenty of organizations *are* paying the people behind this charade, which is probably why Web Listings has been running it continuously for more than a decade. Most likely that’s because some percentage of recipients confuse this notice with a warning about a domain name they own that is about to expire and needs to be renewed.</code><code>We know plenty of people are getting snookered thanks to searchable online records filed by a range of political campaigns, towns, cities and municipalities — all of which are required to publicly report how they spend their money (or at least that of their constituents).</code><code>According to a statement filed with the Federal Election Commission, one of the earliest public records involving a payment to Web Listings dates back to 2008 and comes from none other than the the 2008 Hillary Clinton for President fund.</code><code>The documents unearthed in this story all came compliments of Ron Guilmette, a most dogged and intrepid researcher who usually spends his time tracking down and suing spammers. Guilmette said most of the public references he found regarding payments to Web Services Inc. are from political campaigns and small towns.</code><code>“Which naturally raises the question: Should we really be trusting these people with our money?” Guilmette said. “What kind of people or organizations are most likely to pay a bill that is utterly phony baloney, and that actually isn’t due and payable? The answer is people and organizations that are not spending their own money.”</code><code>Also paying $85 (PDF) to Web Listings was the 2015 campaign for Democrat Jim Kenney, the current mayor of Philadelphia.</code><code>A fund for the New York City Council campaign of Zead Ramadan (D) forked over $85 to Web Listings in 2013.</code><code>Also in 2013, the Committee to Elect Judge Victor Heutsche (D) paid $85 to keep his Web site in good standing with Web Listings. Paul T. Davis, a former Democratic state representative from Kansas handed $85 (PDF) to Web Listings in 2012.
</code><code>Media</code><code>Image: Better Business Bureau.</code><code>Lest anyone think that somehow Democratic candidates for office are more susceptible to these types of schemes, a review of the publicly-searchable campaign payments to Web Listings Inc. uncovered by Guilmette shows a majority of them were for Web sites supporting Republican candidates.</code><code>The Friends of Mike Turzai committee spent $65 in 2010 on the GOP Representative from Pennsylvania.</code><code>The fundraising committee for Republican Dick Black‘s 2012 campaign for the Virginia Senate also paid Web Listings Inc. $85. The campaign to elect Ben Chafin as a Republican delegate in Virginia in 2013 also paid out. </code><code>Robert Montgomery, a former GOP state representative in Kansas, paid $85 (PDF) to Web Listings in 2012.</code><code>Those in charge of the purse strings for the “Friends of GOP New York State…

🕴 Satan Ransomware Variant Exploits 10 Server-Side Flaws 🕴

Windows, Linux systems vulnerable to self-propagating 'Lucky' malware, security researchers say.

📖 Read

via "Dark Reading: ".

🕴 New Google+ Breach Will Lead to Early Service Shutdown 🕴

A breach affecting more than 52 million users was patched, but not before leading to the company rethinking the future of the service.

📖 Read

via "Dark Reading: ".

❌ Women in Cyber Take the Spotlight ❌

Women are key to solving the workforce shortage, which is expected to reach 3.5 million open jobs by 2022.

📖 Read

via "Threatpost | The first stop for security news".

🔐 How to use Cloudflare encrypted DNS on Android 🔐

If you're looking for an easy means of enabling encrypted DNS on Android, the Cloudflare 1.1.1.1 app is the way to go.

📖 Read

via "Security on TechRepublic".

🕴 'Highly Active' Seedworm Group Hits IT Services, Governments 🕴

Since September, the cyber espionage actors have targeted more than 130 victims in 30 organizations including NGOs, oil and gas, and telecom businesses.

📖 Read

via "Dark Reading: ".

🕴 DanaBot Malware Adds Spam to its Menu 🕴

A new generation of modular malware increases its value to criminals.

📖 Read

via "Dark Reading: ".

⚠ Facebook fined $11m for misleading users about how data will be used ⚠

They said Facebook emphasizes the service being free, not that it's making big bucks off users' data. They ordered the company to apologize.

📖 Read

via "Naked Security".

⚠ Teen SWATter who had 400 schools evacuated lands 3 years in jail ⚠

George Duke-Cohan is the British teen who posed as a worried father whose daughter had called him mid-flight during a hijacking.

📖 Read

via "Naked Security".

⚠ Dark web goldmine busted by Europol ⚠

What’s the safest way to buy counterfeit banknotes? Not on the dark web market, as 235 people have just discovered to their cost.

📖 Read

via "Naked Security".