Skip to main content

Posts

Hackers to Take Full Control of User Accounts Using RCS - A New Android Text Messaging Service

RCS expanded as Rich Communications Services is the next generation SMS protocol aimed to replace the SMS and MMS services. It was taken over by GSM Association in the year February 2008. Starting from April 2018 Google started integrating RCS with its instant messaging mobile app Google Allo. RCS is the IP-based messaging service based on SIP and HTTP to provide various services such as group chats, video calls, file transfers and more. RCS Hacking Attacks According to the Security Research Labs report with some implementations RCS functionality not properly protected and it allows a range of different hacking attacks. The improper implementation of RCS functionality in many networks let hackers gain complete control over the user accounts by stealing RCS configuration files that include SIP and HTTP credentials. The implementation lack in certificate and domain validation which allows an attacker to intercept and manipulate communication in the middle and they also fa...

New Spying on Chrome and Firefox Browser by extension Avast and AVG Browsers

If your Firefox or Chrome browser has any of the below-listed four extensions offered by Avast and its subsidiary AVG installed, you should disable or remove them as soon as possible. Avast Online Security AVG Online Security Avast SafePrice AVG SafePrice Why? Because these four widely installed browser extensions have been caught collecting a lot more data on its millions of users than they are intended to, including your detailed browsing history. Most of you might not even remember downloading and installing these extensions on your web browser, and that's likely because when users install Avast or AVG antivirus on their PCs, the software automatically installs their respective add-ons on the users' browsers. Both online security extensions have been designed to warn users when they visit a malicious or phishing website; whereas, SafePrice extensions help online shoppers learn about best offers, price comparisons, travel deals, and discount coupons from various ...

Europol Shuts Down Over 30,500 Piracy Websites in Global Operation

In a coordinated global law enforcement operation, Europol has taken down more than 30,500 websites for distributing counterfeit and pirated items over the Internet and arrested three suspects. Among other things, the seized domains reportedly offered various counterfeit goods and pirated products and services, including pirated movies, illegal television streaming, music, electronics, cracked software downloads, counterfeit pharmaceuticals, and other illicit products. However, it should be noted that the seized web domains do not include any major pirate websites on the Internet. During the investigation, international law enforcement officials: shut down a total of 30,506 web domains, arrested three suspects, seized 26,000 luxury clothes and perfumes, seized 363 liters of alcoholic beverages, and seized an unspecified number of hardware devices. The officials also identified and froze more than €150,000 from several bank accounts and online payment platforms. The domai...

20Million + Users Stolen Personal Records and been Sold on Dark Web for $4,000 to $ 5000

MixCloud investigating a data breach that impacts more than 20 million registered users for the service. MixCloud is a popular music streaming service. The platform allows the listening and distribution of radio shows, DJ mixes, and podcasts which are uploaded by its users. The company said it has more than 17 million users. MixCloud  was found in the year 2008 and the company located in the United Kingdom and it falls under European data protection rules  GDPR  rules. MixCloud Data Breach A dark web seller knows bt the handle “A_W_S,” listed the data of MixCloud for sale on dark web forums from $4,000, to $5000 or about 0.5 bitcoin. According to Motherboard  analysis  of the data shared by the seller, the data breach found to happen in November and the data found to be authentic. Motherboard verified the data bu using an email sign-up feature, and they found those email addresses are already linked with the account. The following are the data...

Tens of Millions of SMS text Messages & Massive Private Data Leaked Online From Hacked Database

Researchers discovered a massive hacked database online that exposed tens of millions of SMS text messages, and private data belongs to a U.S company TrueDialog. TrueDialog is an American communication company that offering SMS texting solutions to companies such as businesses, universities, and colleges in the USA. Companies claim that they provide Enterprise-grade SMS Texting service, but this massive data leak indicates and leads to huge risks for their customers who have sent and received an SMS for a year of the period. By holding an unsecured database, TrueDialog leaked millions of people’s sensitive data across the USA, and the researchers confirmed that the unprotected database belongs to TrueDialog by finding the evidence of their Host ID “api.truedialog.com”. Discovered database, Also contains millions of account usernames and passwords, PII data of TrueDialog users and their customers, and much more. Since the uncovered database huge volume of data, there is n...

More than 60% of Malicious Ads Targeting Windows Computer Systems – Windows Users Beware!

A new report shows that 61% of malicious ads on the Internet targeting Windows computers to infect with malware or to steal the information. The malicious ads act as a platform to distribute malware, by attracting users and redirect them to malicious websites which results in downloading the malware. Windows as Prime Target According to Devcon  observation  between July 11 – November 22, 2019, 61% of the malicious ad campaigns primarily targeting the Windows operating system, when compared to other popular operating systems. Next to the Windows operating system, the second most targeted operating system in ChromeOS which accounts for 22.5%, next is MacOS at 10.5% and the least targeted device is Apple iPads at 0.8%. Malicious Ads Source: DEVCON In another  report  published by Confiant, the malicious ads increased from Q2 to Q3. The Q3 attacks are targeting desktop computers, mainly running Windows and they are attacking users mainly in Italy, Spain,...

Facebook will let you transfer photos to Google Photos soon

If you don’t automatically back up your photos on Google Photos just yet, you will now have an extra tool in your arsenal. Facebook has just announced that soon you will be able to backup your photos uploaded on the social network to your Google Photos account. This is part of their goal to bring data portability (that is hopefully secure) to their users through the Data Transfer Project involving other major technology brands like Apple, Google, Microsoft, Twitter, etc. Of course, you could always download your information, including photos, from Facebook any time you want. But now they want to give you the option to back them up on other platforms that are not theirs. This tool is just the first of many that they plan to introduce through the aforementioned Data Transfer Project that they have been working on together with the other tech brands. We might soon see that you could also back them up on Apple’s Photos or Microsoft’s OneDrive, etc. The  Google Photos backup t...