Stay safe online - 2019-10-23

Several Android phone models impacted by a critical zero-day vulnerability

The critical flaw that is exploited in the wild affects phone models from Samsung, Huawei, Pixel, and others. More
News Web browsers and vulnerabilities   October 04, 2019  

Delivering GIFs via WhatsApp could have resulted in Android phone hack

WhatsApp patches the flaw helping hackers to misuse the malicious code in GIF image libraries. More
News Security   October 03, 2019  

VBulletin zero-day used to leak data of 245,000 Comodo forum users

Security software maker Comodo admitted that it suffered data breach due to the vBulletin CVE-2019-16759 vulnerability. More
News Security   October 02, 2019  

Guilty plea: former Yahoo engineer hacked thousands of email accounts

6,000 Yahoo email accounts of mostly young females got hacked in search for sexual images. More
News Spam and phishing   October 01, 2019  

Zynga hack led to data disclosure of 218M "Words with Friends" players

New data breach disclosed: a serial hacker Gnosticplayers snatched data from 218 million "Words with Friends" gamers. More
News Security   September 30, 2019  

Google deletes Play Store apps that overcharge Android users

Android app developers are found overcharging users after they forgot to cancel app trial period. More
News Security   September 28, 2019  

Nodersok malware uses its own LOLBins, turns PCs into proxy zombies

New fileless Nodersok malware brings Node.js and WinDiver LOLBins to operate a click-fraud scheme. More
News Viruses and parasites   September 27, 2019  

Code similarities show a technical relation between REvil and GandCrab

Researchers reveal code similarities between Sodinokibi/REvil and GandCrab: is the previous ransomware developer retirement fake? More
News Viruses and parasites   September 26, 2019  

VBulletin versions 5.0.0 - 5.5.4 affected by zero-day RCE exploit

An unidentified hacker published zero-day vulnerability in vBulletin forum software package. More
News Web browsers and vulnerabilities   September 25, 2019  

Microsoft issued a security patch for Internet Explorer Zero-day flaw

Microsoft fights Internet Explorer remote code execution flaw and a bug in Microsoft Defender with out-of-band security update. More
News Security   September 24, 2019  

Account hijacking campaign hits a large number of YouTube influencers

A coordinated phishing campaign hit a yet unknown number of prominent YouTube influencers specializing in gaming, car industry, tech, and other topics. More
News Spam and phishing   September 23, 2019  

Fake AdBlock and uBlock Origin participate in fraud schemes

"Cookie Stuffing" activities promoted via fake AdBlock and uBlock extensions. More
News Security   September 21, 2019  

Instagram accounts of Nicole Scherzinger and Yanet Garcia hacked

The hacked Instagram accounts of Nicole Scherzinger and Yanet Garcia directed users to survey scams and showed fake nudes. More
News   September 20, 2019  

Police warn about Venmo app texting scam that targets banking data

Phishing scam disguising as Venmo application is redirecting users to a fake website collecting personal and banking data. More
News Spam and phishing   September 19, 2019  

Malindo Air urging clients to change passwords due to data leak

Malino Air informs its clients about a massive data breach involving millions of people. More
News Security   September 19, 2019