Android Trojan steals money from PayPal accounts even with 2FA on

ESET researchers discovered a new Android Trojan using a novel Accessibility-abusing technique that targets the official PayPal app, and is capable of bypassing PayPal’s two-factor authentication

The post Android Trojan steals money from PayPal accounts even with 2FA on appeared first on WeLiveSecurity

from WeLiveSecurity https://ift.tt/2Lh5J1T
via IFTTT

Week in security with Tony Anscombe

DanaBot operators have been expanding the malware’s scope with new spam-sending capability. ESET researchers discovered a set of previously undocumented Linux malware families based on OpenSSH. Plus fitness-tracking apps use dodgy in-app payments to steal money from unaware iPhone and iPad users

The post Week in security with Tony Anscombe appeared first on WeLiveSecurity

from WeLiveSecurity https://ift.tt/2RAW0pq
via IFTTT

The Dark Side of the ForSSHe

ESET researchers discovered a set of previously undocumented Linux malware families based on OpenSSH. In the white paper, “The Dark Side of the ForSSHe”, they release analysis of 21 malware families to improve the prevention, detection and remediation of such threats

The post The Dark Side of the ForSSHe appeared first on WeLiveSecurity

from WeLiveSecurity https://ift.tt/2E1aBq5
via IFTTT