scr3: November 2016

Wednesday 30 November 2016

"Gooligan" Android Malware Steals Authentication Tokens to Hack User Accounts

"Gooligan" Android Malware Steals Authentication Tokens to Compromise More Than 1 Million Google User Accounts

from SecurityWeek RSS Feed http://ift.tt/2gLwrPw
via https://ifttt.com/ IFTTT

"PluginPhantom" Android Trojan Uses Plugins to Evade Detection

A recently discovered Android Trojan dubbed “PluginPhantom” abuses a legitimate plugin framework to update itself and evade static detection, Palo Alto Networks reported on Wednesday.

from SecurityWeek RSS Feed http://ift.tt/2gJCTYH
via https://ifttt.com/ IFTTT

Microsoft Silently Fixes Kernel Bug That Led to Chrome Sandbox Bypass

Microsoft appears to have silently fixed a two-year-old bug in in Windows Kernel Object Manager that could have allowed for the bypass of privileges in Google's Chrome browser.

from Threatpost | The first stop for security news http://ift.tt/2gHezJ9
via https://ifttt.com/ IFTTT

FireEye Unveils Helix Platform to Streamline Security Operations

Just weeks after launching new cloud-based network security and threat intelligence offerings, FireEye on Tuesday unveiled a new platform designed to help customers efficiently integrate and automate security operations functions.

from SecurityWeek RSS Feed http://ift.tt/2fEzywu
via https://ifttt.com/ IFTTT

Thousands of UK National Lottery Accounts Breached

Camelot, the company that runs the UK National Lottery, announced today that approximately 26,500 customer accounts had been fraudulently accessed. The activity was discovered on Monday.

from SecurityWeek RSS Feed http://ift.tt/2gGA3pz
via https://ifttt.com/ IFTTT

Firefox Scrambles to Patch Zero Day Actively Exploiting Tor Browser

A zero-day vulnerability in Firefox, similar to one created by the FBI in 2013, is actively being exploited in the Tor Project’s anonymizing TorBrowser.

from Threatpost | The first stop for security news http://ift.tt/2fLSg0r
via https://ifttt.com/ IFTTT

Over 1 Million Google Accounts Hacked by 'Gooligan' Android Malware

If you own an Android smartphone, Beware! A new Android malware that has already breached more than 1 Million Google accounts is infecting around 13,000 devices every day. Dubbed Gooligan, the malware roots vulnerable Android devices to steal email addresses and authentication tokens stored on them. With this information in hands, the attackers are able to hijack your Google account and