Stalkerware researcher maia arson crimew strikes again. Big time. We know maia as a researcher that loves to go after stalkerware peddlers, which Malwarebytes—as one of the founding members of the Coalition Against Stalkerware—loves to see.
The investigation into Tracki, besides uncovering a tangled web of companies, dubious websites, and false identities, also led to a data breach that maia says could possibly affect almost 12 million users. Researching the technology behind the tracker and the web portal for customers that want to see all their trackers on a map, maia found various hardcoded usernames and passwords used to load data from a number of administration and support tools.
Read more…
Source: Malwarebytes Labs
Related:
- Millions of scraped public social net profiles left in open AWS S3 box
April 19, 2018
US social network data aggregator LocalBlox has been caught leaving its AWS bucket of 48 million records – harvested in part from public Facebook, LinkedIn and Twitter profiles – available to be viewed by anyone who stopped by. Security biz Upguard wandered by on February 18, and found the publicly accessible files in a misconfigured AWS ...
- Facebook moving 1.5 billion users away from GDPR protection
April 19, 2018
If a new European law restricting what companies can do with people’s online data went into effect tomorrow, almost 1.9 billion Facebook users around the world would be protected by it. But the online social network is making changes that ensure the number will be much smaller. Facebook members outside the United States and Canada, whether they ...
- ID theft in UK hits record high as crooks shift to more vulnerable targets
April 18, 2018
Identity fraud in Blighty hit a record high of 174,523 incidents last year – and the vast majority of it happened online. According to the latest report by fraud prevention service Cifas, ID theft rose 1 per cent on last year. However, that is an increase of 125 per cent on 2007, the Fraudscape (PDF) report shows. Read more… Source: The ...
- 75% of consumers won’t buy your product if they don’t trust you to protect their data
April 17, 2018
Consumers are increasingly concerned over their data privacy and security when deciding what products and services to use, according to a new survey from IBM conducted by the Harris Poll. Some 78% of the 10,000 consumers surveyed said that a company’s ability to keep their data private is “extremely important.” However, only 20% said they “completely ...
- Europe Tells ICANN Its GDPR Compliance Plans Need More Work
April 16, 2018
The internet supervisory body says it will continue to press for a moratorium on GDPR enforcement while it works to makes changes The European Commission’s data protection advisory body has said it continues to have “concerns” about plans to bring the internet’s WHOIS service into compliance with sweeping new data rules set to come into force in Europe ...
- Critical Code Execution Flaw Found in CyberArk Enterprise Password Vault
April 9, 2018
A critical remote code execution vulnerability has been discovered in CyberArk Enterprise Password Vault application that could allow an attacker to gain unauthorized access to the system with the privileges of the web application. Enterprise password manager (EPV) solutions help organizations securely manage their sensitive passwords, controlling privileged accounts passwords across a wide range of client/server and mainframe operating ...