In addition to the traditional ransomware that everyone knows about, the AdultFriendFinder breach I wrote about earlier has the hackers blackmailing users of the site. Now, mSpy clients are being extorted too. Brian Krebs is reporting that hackers are using the mSpy breach to extort iPhone users. Apparently, users who have mSpy installed are asked […]
Continue reading →
[DISPLAY_ACURAX_ICONS]
Researchers at the RSA conference this week disclosed an interesting iOS hack that would allow an attacker to put an iPhone into an endless reboot loop with no way for a user to get out of it. The attacker would need to set up a bogus WiFi hotspot near the target iPhone. This hotspot can […]
Continue reading →
[DISPLAY_ACURAX_ICONS]
For those of you who read the security news, you know that this last 12 months has brought an amazing number of SSL bugs to the surface (see a few of my blog posts here and here and here). Now iPhone and iPad users have their turn to deal with an SSL bug. The bug, […]
Continue reading →
[DISPLAY_ACURAX_ICONS]
It is being reported by several sources (see here) that iPhone and iPad users are being targeted as part of a massive cyber espionage campaign that is being linked, at least by one firm, to Russia. Operation Pawn Storm is using a specially crafted iOS app to quietly steal text messages, contact lists, location information, […]
Continue reading →
[DISPLAY_ACURAX_ICONS]
Google is a smart organization. It has watched the stranglehold that Apple has over its users and has decided that it likes it. Just like art imitates life, Google imitates Apple (and then says “who me?”). The issue at point is a bug found in the WebView rendering engine, used in all Android releases prior […]
Continue reading →
[DISPLAY_ACURAX_ICONS]
FireEye , a security research firm, recently disclosed an interesting attack against iOS devices. Apparently, iOS allows a rogue iPhone app to replace a genuine iPhone app. Once that rogue app is now installed, it can do anything the real app could do – PLUS send a copy of your banking credentials Moscow or Kiev […]
Continue reading →
[DISPLAY_ACURAX_ICONS]