article thumbnail

New Android malicious library Goldoson found in 60 apps +100M downloads

Security Affairs

The Goldoson library was discovered by researchers from McAfee’s Mobile Research Team, it collects lists of applications installed on a device, and a history of Wi-Fi and Bluetooth devices information, including nearby GPS locations. It is important to highlight that the library was not developed by the authors of the apps.

Libraries 246
article thumbnail

Threat actors scrape 600 million LinkedIn profiles and are selling the data online – again

Security Affairs

For the third time in the past four months, LinkedIn seems to have experienced another massive data scrape conducted by a malicious actor. Once again, an archive of data collected from hundreds of millions of LinkedIn user profiles surfaced on a hacker forum, where it’s currently being sold for an undisclosed sum.

Archiving 362
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Malicious PyPI package posed as SentinelOne SDK to serve info-stealing malware

Security Affairs

“The malicious functionality in the library does not execute upon installation, but waits to be called on programmatically before activating — a possible effort to avoid detection. ” reads the analysis published by ReversingLabs. ReversingLabs is calling this campaign “SentinelSneak.””

article thumbnail

Too much UPnP-enabled connected devices still vulnerable to cyber attacks

Security Affairs

UPnP-enabled devices running outdated software are exposed to a wide range of attacks exploiting known flaws in UPnP libraries. Most of the devices discovered by the expert still use old versions of UPnP libraries that are affected by years old flaws. CVE-2013-0229 , a vulnerability found MiniUPnPd before 1.4,

Libraries 260
article thumbnail

Approaching AI at the National Library of Scotland

CILIP

Approaching AI at the National Library of Scotland Image of the National Library of Scotland by Magnus Hagdorn, from Flickr Robert Cawston, Director of Digital and Service Transformation, introduces a new AI Statement for the National Library of Scotland.

article thumbnail

Chinese actor ‘Unfading Sea Haze’ remained undetected for five years

Security Affairs

Upon receiving a request, it executes the encoded JavaScript code using the Microsoft.JScript library. ” The threat actors used both custom malware and off-the-shelf tools to gather sensitive data from victim machines. .” reads the report. “SharpJSHandler operates by listening for HTTP requests.

Archiving 336
article thumbnail

Raspberry Robin operators are selling initial access to compromised enterprise networks to ransomware gangs

Security Affairs

Data collected by Microsoft Defender for Endpoint shows that nearly 3,000 devices in almost 1,000 organizations have seen at least one RaspberryRobin payload-related alert in the last 30 days. DEV-0950 group used Clop ransomware to encrypt the network of organizations previously infected with the Raspberry Robin worm.