April 09, 2024

Smoke and (screen) mirrors: A strange signed backdoor

Sophos X-Ops discovers a curious backdoored (and signed) executable, masquerading as something else entirely

Threat Research

November 05, 2021

“Customer complaint” email scam preys on your fear of getting into trouble at work

Stop. Think. Connect. Don't let the crooks trick you into acting in haste.

Naked Security

March 30, 2021

PHP web language narrowly avoids “backdoor” supply chain attack

The crooks got in and added a backdoor to PHP, but it looks as though it was caught before any harm was done.

Naked Security

October 16, 2020

US Department of Justice reignites the Battle to Break Encryption

How strong is too strong?

Naked Security

October 13, 2020

Creepy covert camera “feature” found in popular smartwatch for kids

This popular smartwatch aimed at kids had a backdoor that received covert encrypted commands via SMS.

Naked Security

July 08, 2020

Kinda sorta weakened version of EARN IT Act creeps closer

Critics say the amended bill that's headed for a full Senate hearing still threatens encryption, albeit less blatantly.

Naked Security

April 29, 2020

Flaw in defunct WordPress plugin exploited to create backdoor

A vulnerability in the defunct OneTone WordPress theme plugin is being exploited to compromise entire sites while installing backdoor admin accounts.

Naked Security

April 15, 2020

Signal: We’ll be eaten alive by EARN IT Act’s anti-encryption wolves

The Big Bad Wolves haven't blown the house down but did come up with a way to "hold the three little pigs responsible for being delicious," Signal said.

Naked Security

April 07, 2020

Thousands of Android apps contain undocumented backdoors, study finds

A study has found that thousands of legitimate Android apps are taking liberties or installing with capabilities that users wouldn’t expect to exist.

Naked Security