A couple of years ago we started a project called Hardentools. Hardentools is a simple utility designed to disable a number of "features" exposed by Microsoft Windows, and primary consumer applications. These features, commonly thought for enterprise customers, are generally useless to regular users and rather pose as dangers as they are very commonly abused by attackers to execute malicious code on a victim's computer. The intent of this tool is to simply reduce the attack surface by disabling...

Clicca qui per la versione in Italiano

Disclaimer: this research was conducted by members and associates of Security Without Borders, independently of any other affiliation or employer.

Summary

• We identified a new Android spyware platform we named Exodus, which is composed of two stages we call Exodus One and Exodus Two. We have collected numerous samples spanning from 2016 to early 2019.
• Instances of this spyware were found on the Google Play Store, disguised as service applications from...

Click here for the English version

Disclaimer: questa ricerca è stata condotta da membri e associati di Security Without Borders, indipendentemente da qualsiasi altra affiliazione o datore di lavoro.

Sommario

• Abbiamo identificato una nuova famiglia di spyware per Android che abbiamo nominato Exodus e che si compone di due stage che identifichiamo in questo rapporto come Exodus One e Exodus Two. Abbiamo raccolto numerose copie di questo spyware, generate ed utilizzate tra il 2016 all'inizio...

On October 1st, the Catalonian government will hold a referendum on regional independence from Spain. The Spanish government maintains that the referendum is unconstitutional and has been taking aggresive measures to attempt to prevent the vote from happening. This resulted in the seizure of paper ballots, arrests of elected Catalonian politicians on charges of sedition, and the deployment of 16,000 police and military forces in Catalonia.

The crackdown also manifested online through an escalation...

On July 5^th, ten human rights defenders, including two IT security consultants, were detained in Turkey while attending a workshop on holistic security. Those arrested are held under the accusation of 'committing crime in the name of a terrorist organization without being a member.' The allegation is baseless. Those falsely accused are representatives of non-violent and well-respected organizations that focus on human rights, women's rights, and democratic participation in Turkey. The training...