Cryptocurrency angel investor Michael Terpin seeks damages for “gross negligence" by the carrier, alleging it turned a blind eye to store employees’ malicious activities.
Link: https://threatpost.com/att-faces-224m-legal-challenge-over-sim-jacking-rings/136645/
Misconfigured DIY smart-home hubs for home automation could allow attackers to track owners’ movements, see if smart doors and windows are opened or closed, and even open garage doors.
Link: https://threatpost.com/open-mqtt-servers-raise-physical-threats-in-smart-homes/136586/
Sloppy Android developers not following security guidelines for external storage opens the door to device takeover and more.
Mobile is redefining phishing, taking it out of the traditional inbox and into SMS and Facebook messages.
Link: https://threatpost.com/black-hat-2018-mobile-apts-redefining-phishing-attacks/134954/
The new strategy allows an attacker to instead lift ID information directly from the router, within minutes.
Link: https://threatpost.com/fresh-approach-to-wi-fi-cracking-uses-packet-sniffing/134777/
Security experts aren’t happy after Fortnite’s creator, Epic Games, announced it would not go through Google Play.
Link: https://threatpost.com/fortnite-skips-google-play-for-android-apps-irking-security-experts/134732/
Analysis shows that the malware, previously a banking trojan focused on Android devices, has rapidly evolved just in the past month.
Link: https://threatpost.com/roaming-mantis-swarms-globally-spawning-ios-phishing-cryptomining/132149/
An array of malicious Android apps purporting to be popular game Fortnite are instead harvesting call logs and downloading cryptomining malware.
Link: https://threatpost.com/fake-fortnite-apps-for-android-spread-spyware-cryptominers/132062/
Samsung updates S9, Note 8 and S8 phones with 27 patches from a RCE bug to a patch that prevents an ancient peek-and-poke attack first identified in 1980s.
Link: https://threatpost.com/samsung-patches-six-critical-bugs-in-flagship-handsets/131940/
An attacker can gain man-in-the-middle access to inject a rogue executable file onto the phone.
Link: https://threatpost.com/severe-keyboard-flaws-in-lg-smartphones-allow-remote-code-execution/131829/