*** The Security News Thread ***

[TTraveler]

Now it's SAP's turn....

Malicious Cyber Activity Targeting Critical SAP Applications | CISA

I think this year everyone is going to get a turn.

[harrybarracuda]

And now LinkedIn...

Data scraped from 500 million LinkedIn users found for sale online

https://www.techrepublic.com/article/data-scraped-from-500-million-linkedin-users-found-for-sale-online/

[TTraveler]

Pwn2Own 2021: Microsoft Exchange Server, macOS, Windows 10 and Teams Hacked

Winners of the first day have earned more than half a million already.

Pwn2Own 2021: Microsoft Exchange Server, macOS, Windows 10 and Teams Hacked

[harrybarracuda]

Probably by design....

Joker malware infects over 500,000 Huawei Android devices

More than 500,000 Huawei users have downloaded from the company’s official Android store applications infected with Joker malware that subscribes to premium mobile services.

Researchers found ten seemingly harmless apps in AppGallery that contained code for connecting to malicious command and control server to receive configurations and additional components.

A report from antivirus maker Doctor Web notes that the malicious apps retained their advertised functionality but downloaded components that subscribed users to premium mobile services.

To keep users in the dark the infected apps requested access to notifications, which allowed them to intercept confirmation codes delivered over SMS by the subscription service.

According to the researchers, the malware could subscribe a user to a maximum of five services, although the threat actor could modify this limitation at any time.

The list of malicious applications included virtual keyboards, a camera app, a launcher, an online messenger, a sticker collection, coloring programs, and a game.

Joker malware infects over 500,000 Huawei Android devices

[harrybarracuda]

Malicious code in APKPure app

Recently, we’ve found malicious code in version 3.17.18 of the official client of the APKPure app store. The app is not on Google Play, but it is itself a quite a popular app store around the world. Most likely, its infection is a repeat of the CamScanner incident, when the developer implemented a new adware SDK from an unverified source.
We notified the developers about the infection on April 8. APKPure confirmed the issue and promptly fixed it with the release of version 3.17.19.

Malicious code in APKPure app | Securelist