Mensh123, to Minecraft
@Mensh123@cyberplace.social avatar

Low severity [ incident] A mod called "Windows Borderless" on was taken down yesterday. It contained wich stole credentials from Chrome and Chromium-Based browsers. Only Windows users were affected. The mod was not found in any modpacks and was not uploaded to other platforms. A detection tool can be found in the official blog post. According to @modrinth, ~372 IPs downloaded the mod.
https://blog.modrinth.com/p/windows-borderless-malware-disclosure

alshafei, to random
@alshafei@mastodon.social avatar

"NSO Group, which makes Pegasus spyware, keeps trying to extract information from Citizen Lab researchers."

"With the lawsuit now moving forward, NSO is trying a different tactic: demanding repeatedly that Citizen Lab hand over every single document about its Pegasus investigation."

Worth noting that former NSO Group CEO behind this spyware is already back with a heavily VC funded surveillance company called "Dream Security" -

https://theintercept.com/2024/05/06/pegasus-nso-group-israeli-spyware-citizen-lab/

br00t4c, to apple
@br00t4c@mastodon.social avatar

Apple's iPhone Spyware Problem Is Getting Worse. Here's What You Should Know

https://www.wired.com/story/apple-iphone-spyware-101/

jsrailton, (edited ) to infosec
@jsrailton@mastodon.social avatar

Big companies are churning out bullshit "security advice" on an industrial scale.

It's a marketing funnel that targets those seeking help.

And then misinforms them.

I wish it stopped there

The nonsense makes its way to victims of spyware, where misinformation can have life, death and liberty impacting consequences.

jsrailton, (edited ) to hacking
@jsrailton@mastodon.social avatar

BREAKING: #Israeli private investigator arrested for cyberespionage on behalf of American PR firm.

Caught by UK under #RedNotice from 🇺🇸US while boarding a flight.

BIG TWIST in a wild case that began w/our @citizenlab investigation into indian hack-for-hire group #belltrox

Sound familiar?

Because Amit Forlit is the second PI from #Israel arrested in similar way for this case.

First = convicted.

https://www.reuters.com/world/israeli-private-eye-arrested-uk-over-alleged-hacking-us-pr-firm-2024-05-02/

#hacking #cybersecurity #infosec #malware #espionage #intelligence

jsrailton, (edited )
@jsrailton@mastodon.social avatar

I'd bet my bottom dollar that this "unnamed...PR and lobbying firm" knows exactly who they are...

...and are no doubt experiencing an afternoon of the purest panic.

Using the offshore hack-for-hire ecosystem has been largely consequence-free for the middlemen & the ultimate beneficiaries of stolen information.

The tide may be turning & this latest arrest suggests that more consequences may be inbound.

#hacking #infosec #spyware #malware #cybersecurity #phishing #India

tek, to infosec
@tek@todon.eu avatar

A WEB OF SURVEILLANCE
Unravelling a murky network of
spyware exports to Indonesia
by @donncha @drwhax and the Amnesty Security Lab team
https://securitylab.amnesty.org/latest/2024/05/a-web-of-surveillance/

br00t4c, to random
@br00t4c@mastodon.social avatar
jsrailton, to poland
@jsrailton@mastodon.social avatar

NEW: "shocking and depressing"

"...even in this room I am speaking to people who were victims of this system"

's prosecutor general testifies to 🇵🇱 parliament about hacking of 100s with spyware.

Story: https://apnews.com/article/poland-spyware-pegasus-nso-group-israel-413bb3cb27daac011d52b524c6d16160

image/png

NotImpressed, to Palestine
@NotImpressed@mas.to avatar


"Spain’s High Court, on Tuesday, reopened an investigation into the use of Israeli cyber-intelligence firm, NSO Group’s Pegasus software, to spy on Prime Minister, Pedro Sanchez, and other Spanish politicians.

The investigators will share information with France, where politicians and other figures were also targeted."

https://www.middleeastmonitor.com/20240423-spain-reopens-israel-spyware-probe-sharing-information-with-france/

jsrailton, to infosec
@jsrailton@mastodon.social avatar

BREAKING: US imposes visa restrictions on 13 mercenary spyware proliferators / immediate family.

First known application of policy rolled out in Feb.

A lot of shady players are surely having a little panic.

...wondering if their name is or will be on a list.

#spyware #pegasus #malware #mercenary #infosec #cybersecurity #hacking

KimPerales, to random
@KimPerales@toad.social avatar

abuses:

" is an assault on human autonomy."
-S Zuboff.

"Female army officers that reported sexual harassment... were hacked with .

Official confirmation from PL's AG keep shedding light on more apparent spyware abuses by past gov."
-J Scott-Railton

Victims of harassment in the MIL Police *under Pegasus surveillance. Lives/health: destroyed. For 7 yrs: targeted, harassed, slandered, deprived of the opp. to serve in the army-.
https://wiadomosci.onet.pl/kraj/zglosily-molestowanie-w-zandarmerii-wojskowej-byly-inwigilowane-pegasusem/dylyrsv?utm_source=t.co_viasg_wiadomosci&utm_medium=social&utm_campaign=leo_automatic&srcc=undefined&utm_v=2

jsrailton, to poland
@jsrailton@mastodon.social avatar

NEW: female army officers that reported sexual harassment... were hacked with .

Official confirmations from 's AG keep shedding light on more apparent spyware abuses by past gov.

Link [in PL]: https://wiadomosci.onet.pl/kraj/zglosily-molestowanie-w-zandarmerii-wojskowej-byly-inwigilowane-pegasusem/dylyrsv

mjgardner, to privacy

Hardly anyone talks about anymore now that the word can be used to describe almost every major website and a significant amount of commonly used software and apps.

These days, it's only spyware if it's made in Russia or China. Otherwise, it's just sparkling espionage. 🍾 🥂

fight, to books
@fight@fightforthefuture.org avatar

Tomorrow, @internetarchive will file their reply brief in the suit from major #publishers to end the right of IA and all #libraries to own and preserve #spyware-free digital #books.

Reading what they’re replying to, we’ve gotta ask:

Who is the real “Napster” here?

A thread.

metin, to security
@metin@graphics.social avatar
stefan, to design
@stefan@stefanbohacek.online avatar

I wonder why the Android Gmail app shows the number of emails in your trash. They don't do that in the web version.

I use filters and labels pretty extensively, so this breaks the ability to quickly scan my unread emails.

Minor nuisance, but still makes me wonder about this design decision/inconsistency.

#design #UXUI #gmail #android

voorstad,
@voorstad@mastodon.nl avatar

@stefan

I wonder why people still use Gmail 🤔🙃

mattotcha, to poland
@mattotcha@mastodon.social avatar

Current and former Polish officials face probe of alleged spyware abuse
https://therecord.media/poland-pegasus-spyware-government-investigation

mattotcha, to apple
@mattotcha@mastodon.social avatar

Apple notifies users in 92 countries about mercenary spyware attacks
https://therecord.media/apple-spyware-notifications-92-countries

jsrailton, (edited ) to poland
@jsrailton@mastodon.social avatar

OFFICIAL CONFIRMATION:🇪🇺MEP Krzysztof Brejza is a spyware victim, per 's national prosecutor's office.

He was incessantly infected with spyware while coordinating opposition political strategy during Polish parliamentary elections.

After we publicly confirmed our findings, Brejza was targeted w/unrelenting, orchestrated disinformation. And harassment.

For a time, we @citizenlab were also a target. 1/

jsrailton, (edited )
@jsrailton@mastodon.social avatar

@citizenlab 2/
Baroque conspiracy theories were floated and amplified by various groups seeking to discredit the victims and our findings.

The formula was repeated for each victim we & others like Amnesty's Security Lab surfaced.

Didn't work, but if you'd asked me in 2022 if whether Poland's government would ever officially confirm spyware cases to victims, it would have seemed hopelessly optimistic.

Remarkable.

rdela, to apple
@rdela@mastodon.social avatar

Risky Biz News: breach has CISA and everyone else panicking

In other news: sends mercenary notifications in 92 countries; US prepares a full ban; bug impacts multiple programming languages.
@campuscodi
https://news.risky.biz/risky-biz-news-sisense-breach-has-cisa-and-everyone-else-panicking/

br00t4c, to apple
@br00t4c@mastodon.social avatar

This Spyware Warning From Apple Is Actually Real

https://lifehacker.com/tech/apple-spyware-warning-is-real

jsrailton, to apple
@jsrailton@mastodon.social avatar

IMPORTANT: has recently sent you a threat notification?

This is serious. Seek expert help.

If you're a journalist, activist, dissident, academic, etc. etc:

✅contact the Access Now Digital Security Helpline.

https://www.accessnow.org/help/

alshafei, to privacy
@alshafei@mastodon.social avatar

Anytime a new privacy app/tool pops up, you're right to be initially skeptical. How the FBI secretly ran its own tech startup to wiretap the world:

https://www.hachettebookgroup.com/titles/joseph-cox/dark-wire/9781541702691/

  • All
  • Subscribed
  • Moderated
  • Favorites
  • anitta
  • kavyap
  • cisconetworking
  • thenastyranch
  • magazineikmin
  • hgfsjryuu7
  • DreamBathrooms
  • InstantRegret
  • Youngstown
  • slotface
  • PowerRangers
  • Durango
  • everett
  • rosin
  • normalnudes
  • vwfavf
  • modclub
  • ethstaker
  • khanakhh
  • tacticalgear
  • ngwrru68w68
  • osvaldo12
  • mdbf
  • tester
  • cubers
  • Leos
  • GTA5RPClips
  • provamag3
  • All magazines