Tag: spyware
-
Germany says lawmakers’ iPhones may have been hacked with spyware
German lawmakers and a filmmaker are among the people who received notifications from Apple warning that their phones may have been hacked. First seen on techcrunch.com Jump to article: techcrunch.com/2026/11/02/germany-says-lawmakers-iphones-may-have-been-hacked-with-spyware/
-
âš¡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and More
Some attacks this week didn’t need much of a trick. A fake support call, a trusted extension, a shared link, or a device with no password. Small things that people barely think about. Yet each was enough to cause serious trouble.Then there were the bigger messes. Billions stolen, hidden networks of hacked devices, poisoned software,…
-
Apple warns users in 99 countries of mercenary spyware
Apple does not attribute attacks or the notices to specific malicious actors or geographical regions, the notification said, due to the “extreme cost, sophistication, and worldwide nature of mercenary spyware attacks [which] make them some of the most advanced digital threats in existence today.” First seen on therecord.media Jump to article: therecord.media/apple-warns-users-99-countries-mercenary-spyware
-
BITTER APT Using Fake Diplomatic Documents to Deliver PapRAT Spyware
FortiGuard Labs links BITTER to cyberespionage attacks on South Asian organizations using malicious Windows shortcuts, PowerShell scripts, and PapRAT malware. First seen on hackread.com Jump to article: hackread.com/bitter-apt-fake-diplomatic-documents-paprat-spyware/
-
Apple Issues Urgent Security Alerts Over Mercenary Spyware Attacks in 99 Countries
Apple has started sending a new round of threat notifications to users across 99 countries, warning them about targeted mercenary spyware attacks, according to cybersecurity researcher Costin Raiu. In his post, Raiu noted that these notifications are related to new attacks and are separate from the wave of alerts sent out in August. The notification…
-
Spyware-Alarm für Bundestag und Bundesregierung – Apple-Warnung vor Spyware löst BSI-Alarm bei Politikern aus
First seen on security-insider.de Jump to article: www.security-insider.de/spyware-warnung-bundestag-bundesregierung-iphone-bsi-a-9bd099bacb15f751a41434885b57ca44/
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter uCreator: virtualization-based Android spyware platform targeting WeChat, Telegram and other messaging apps deepveindrilling.com: Magento CMS block loader hits 953 stores CLAUDE CODE FOUND SPYWARE ON MY FAMILY’S PHONES AND A BACKDOOR ON MY MAC…
-
Apple notifications alert victims in 99 countries about mercenary spyware infections
The notifications come shortly before the Pall Mall Process is nearing final negotiations on guidelines for the use of commercial hacking tools. First seen on cyberscoop.com Jump to article: cyberscoop.com/apple-spyware-notifications-pall-mall-process/
-
Hackers Use Instagram Ads to Deploy Coruna and DarkSword Spyware on iPhones
Tags: attack, cyber, cybercrime, exploit, group, hacker, infrastructure, iphone, malicious, spyware, vulnerabilityCybercriminal groups are using malicious Instagram advertisements, abandoned analytics tags, and compromised websites to deliver Coruna and DarkSword exploit kits to vulnerable iPhones. The investigation exposes a scalable spyware distribution model in which attackers exploit advertising infrastructure to reach victims during ordinary browsing. Researchers describe these as “half-click” attacks: users must encounter an infected webpage…
-
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram
uCreater is Android spyware disguised as trusted apps, stealing credentials, messages and wallet data through a rentable platform. uCreater is a rentable Android spyware platform that hides inside repackaged legitimate apps, targeting messaging services and mobile wallets. Its YingGai framework can intercept one-time passwords, steal account and chat data, collect contacts, manipulate sessions and spoof…
-
uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the official app stores, or who run WeChat inside the kit makers’ own container app.The…
-
NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections
Citizen Lab confirmed Pegasus on a Serbian rector’s iPhone 6 days before elections, raising the known civil society spyware target count to 16. The Citizen Lab published a research note confirming that the iPhone of Vladan Äokić, Rector of the University of Belgrade, was infected with NSO Group’s Pegasus spyware sometime in 2026. The infection…
-
Spionagesoftware über Online-Werbung eingeschleust: Citizen Lab deckte neue Angriffsmethode auf
Tags: spywareCitizen Lab zeigt, wie man manipulierte Werbeanzeigen zur Verbreitung von Spyware nutzte. Die reine Anzeige ohne Aktion war ausreichend. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/cyberangriffe/spionagesoftware-ueber-online-werbung-eingeschleust-citizen-lab-deckte-neue-angriffsmethode-auf-334553.html
-
Pegasus Spyware Infection Confirmed on Serbian University Rector’s iPhone Days Before Election
The iPhone of Vladan Äokić, rector of the University of Belgrade and a prominent supporter of Serbia’s student protest movement, was infected with NSO Group’s Pegasus spyware in 2026, the Citizen Lab said on October 19.The finding came six days before Serbia’s October 25 snap parliamentary election. The infection used a zero-click exploit, meaning Äokić…
-
‘AdFection’ Turns Ad Impressions Into Zero-Click Spyware Delivery
Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest. First seen on darkreading.com Jump to article: www.darkreading.com/data-privacy/adfection-online-ads-spyware-delivery
-
Judge denies WhatsApp’s bid to hold spyware maker in contempt for allegedly targeting users
WhatsApp argued that NSO Group violated a 2025 injunction against using the messaging app to spread spyware. A federal judge said WhatsApp hurt its case by not revealing enough information. First seen on therecord.media Jump to article: therecord.media/whatsapp-denied-appeal-alleged-nso-group-violation-injunction
-
Two more Serbian opposition figures targeted with spyware, researchers say
A phone belonging to the rector of the University of Belgrade was discovered to have been infected with Pegasus spyware, the latest in a series of such discoveries in the lead-up to Serbia’s national elections. First seen on therecord.media Jump to article: therecord.media/serbia-spyware-pegasus-elections
-
Spyware found on devices belonging to prominent Serbian critics as elections loom
The confirmed and suspected targets include a university rector backing Serbia’s protests and a prosecutor who investigated a Trump-linked Belgrade development, weeks before parliamentary elections. First seen on cyberscoop.com Jump to article: cyberscoop.com/pegasus-spyware-serbia-critics-elections/
-
Targeted ads installed Candiru spyware in zero-click attacks
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim’s device. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware/
-
Zero-click attacks used targeted ads to deliver Candiru spyware
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim’s device. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware/
-
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malware/
-
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/10/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malware/
-
Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware
Tags: spywareCitizen Lab found targeted ads delivered Candiru spyware to Al Jazeera devices without clicks, while the same ad… First seen on hackread.com Jump to article: hackread.com/targeted-ads-infect-al-jazeera-devices-candiru-spyware/
-
Zero-click spyware infecting devices through online ads, researchers say
Tags: spywarePowerful zero-click spyware is infected devices worldwide through targeted ads, new research shows, an alarming development in the spread of surveillance technology. First seen on therecord.media Jump to article: therecord.media/spyware-citizen-lab-advertising
-
Governments are hacking people with ‘zero-click’ spyware by showing them online ads
The digital rights unit found evidence that dozens of devices at media organization Al Jazeera were hacked after being shown malicious online ads. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/15/citizen-lab-says-governments-are-abusing-online-ads-to-hack-people-with-zero-click-spyware/
-
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday.The hidden attack code ran the moment an ad loaded on the screen, and in some…
-
AdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks
Spyware vendors use online ad infrastructure to profile targets and deliver exploits without requiring users to click anything. The investigation links Discover-Tech to Candiru, an Israeli spyware vendor that the US government placed on its Entity List in 2021. Candiru has since used the name Integrity Labs. Citizen Lab also identified links involving other surveillance…
-
Hackers Use Online Ads to Infect Devices With Spyware Without a Single Click
Citizen Lab has confirmed the first public case of zero-click mercenary spyware delivered through targeted online ads. It calls the technique >>AdFection<<. The attack hit devices at Al Jazeera with Candiru spyware, and the ads were bought by an Israeli ad-tech firm called Discover-Tech. zero-click spyware attacks Online ads are sold in real-time auctions that…
-
Citizen Lab says governments are abusing online ads to hack people with ‘zero-click’ spyware
The digital rights unit found evidence that dozens of devices at media organization Al Jazeera were hacked after being shown malicious online ads. First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/15/citizen-lab-says-governments-are-abusing-online-ads-to-hack-people-with-zero-click-spyware/
-
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising. First seen on wired.com Jump to article: www.wired.com/story/nightmare-scenario-zero-click-spyware-is-infecting-phones-via-targeted-ads/