Hacks

A new campaign dubbed Operation Poisoned News that uses news local news sites links to deploy  malware  called lightSpy on the user’s iOS devices. Attackers posted the news articles in various forums, by clicking on the link it takes users to the news sites, but they also have hidden iframe that loads malicious code. The malicious code is capable of exploiting vulnerabilities present in iOS 12.1 and 12.2, clicking on those links leads to the installation of malware lightSpy on the iOS devices. Poisoned News Campaign The lightSpy is the backdoor module that allows attackers to execute the code remotely and to manipulate files in the affected device. Security researchers from Trend Micro  observed  the watering hole attack targeting iOS users. The links posted by the attackers include three iframes. The only visible link is the original news website, with the other two invisible links, one used for analytics purposes and another site hosting exploits. ...

A prolific phishing kit distribution network dubbed “16Shop” believed to be active since 2018 and developed by a hacking group called the “Indonesian Cyber Army.” It’s a huge first attack targeting Apple kits and then attacked Amazon customers before the prime day in 2019. The analysis also explained that 16Shop is using three different anti-bot and anti-indexing features.  16Shop Phishing Kit Service 16Shop offers services that are similar to software-as-a-service (SaaS), where the users can purchase the kits and distribute them for a cost. Earlier this January, ZeroFOX Alpha  obtained  a phishing kit that targets PayPal customers along with Apple and Amazon, also traces are indicating the possibility of an American Express kit. This indicates that threats actors behind the Phishing Kit Distribution network continuously upgrading its features and attack methods. The latest version of 16Shop obtained by the ZeroFOX Alpha Team includes several features ...