Facebook, Twitter profiles slurped by mobile apps using malicious SDKs
On Monday, Twitter and Facebook both claimed that bad apples in the app stores had been slurping hundreds of users’ profile data without permission. After getting tipped off by security researchers, the platforms blamed a “malicious” pair of software development kits (SDKs) – from marketing outfits One Audience and MobiBurn – used by the third-party iOS and Android apps to display ads. Neither Twitter nor Facebook have named names of the data-sucking apps, nor how many bad apps they’ve found.
Hackers Steal $49 Million in Ethereum From Cryptocurrency Exchange Upbit
South Korean cryptocurrency exchange Upbit today announced that hackers managed to steal $49 million in Ethereum. The crypto-coins were transferred from the Upbeat Ethereum Hot Wallet to an unknown wallet on November 27, announced Lee Seok-woo, CEO of Doo-myeon, which operates Upbit. The hackers, Seok-woo revealed in a notice published on the Upbit website, transferred 342,000 ETH (Ethereum), which is equal to roughly $49 million.
Almost 60% Of Malicious Ads Come from Three Ad Providers
In Confiant's "Demand Quality Report for Q3 2019", the ad fraud and security company analyzed 120 billion ad impressions between January 1st and September 20th that flowed through their systems in order to provide a breakdown of different malicious ad campaigns. While Confiant's report also discussed low quality ads and banner ads that appear in video slots, we will focus on the detected malicious ads and the campaigns that utilize them.
Magecart Group Switches Up Tactics with MiTM, Phishing
A fresh splinter group under the Magecart umbrella has been discovered ramping up activity starting in August-September of 2019. It’s using a unique codebase and different tactics to carry out its attacks, according to researchers. Magecart is an umbrella term encompassing several different threat groups who all use the same modus operandi: They compromise websites, stealing unsuspecting customers’ payment card details and other information entered into the fields on the page.
HP Warns That Some SSD Drives Will Fail at 32,768 Hours of Use
HP released firmware updates for a number of its Serial-Attached SCSI solid-state drives to prevent their failure at exactly 32,768 hours of operation time. The devices are used in multiple server and storage products for enterprise, such as HPE ProLiant, Synergy, Apollo, JBOD D3xxx, D6xxx, D8xxx, MSA, StoreVirtual 4335 and StoreVirtual 3200. The abnormal expiration time translates to 3 years, 270 days and 8 hours, a lot less than the normal lifespan of these products.
Splunk customers should update now to dodge Y2K-style bug
If you’re a Splunk admin, the company has issued a critical warning regarding a showstopping Y2K-style date bug in one of the platform’s configuration files that needs urgent attention. According to this week’s advisory, from 1 January 2020 (00:00 UTC) unpatched instances of Splunk will be unable to extract and recognise timestamps submitted to it in a two-digit date format.
