T-Mobile alerts millions of its customers to a breach of its website that resulted in subscriber names, zip codes, phone numbers, email addresses and account numbers being stolen.
Link: https://threatpost.com/t-mobile-alerts-2-3-million-customers-of-data-breach-tied-to-leaky-api/136896/
The spyware’s surveillance capabilities are extensive, logging every call, text, photo, video and more, and sending the data to the attackers.
Link: https://threatpost.com/triout-malware-carries-out-extensive-targeted-android-surveillance/136773/
After a report said Google tracks users even when they opt out, the company is under fire from activists and has been slapped with a lawsuit.
Link: https://threatpost.com/google-faces-legal-turmoil-after-location-tracking-debacle/136722/
Researchers launched a Proof-of-Concept attack on two Android mobile phones and an embedded system board.
Link: https://threatpost.com/side-channel-poc-attack-targets-encryption-software-glitch/136703/
Cryptocurrency angel investor Michael Terpin seeks damages for “gross negligence" by the carrier, alleging it turned a blind eye to store employees’ malicious activities.
Link: https://threatpost.com/att-faces-224m-legal-challenge-over-sim-jacking-rings/136645/
Misconfigured DIY smart-home hubs for home automation could allow attackers to track owners’ movements, see if smart doors and windows are opened or closed, and even open garage doors.
Link: https://threatpost.com/open-mqtt-servers-raise-physical-threats-in-smart-homes/136586/
Sloppy Android developers not following security guidelines for external storage opens the door to device takeover and more.
Link: https://threatpost.com/def-con-2018-man-in-the-disk-attack-surface-affects-all-android-phones/134993/
Mobile is redefining phishing, taking it out of the traditional inbox and into SMS and Facebook messages.
Link: https://threatpost.com/black-hat-2018-mobile-apts-redefining-phishing-attacks/134954/
The new strategy allows an attacker to instead lift ID information directly from the router, within minutes.
Link: https://threatpost.com/fresh-approach-to-wi-fi-cracking-uses-packet-sniffing/134777/
Security experts aren’t happy after Fortnite’s creator, Epic Games, announced it would not go through Google Play.
Link: https://threatpost.com/fortnite-skips-google-play-for-android-apps-irking-security-experts/134732/