Strava heatmap feature can be abused to find home addresses

According to BleepingComputer*, Researchers at the North Carolina State University Raleigh have discovered a privacy risk in the Strava app’s heatmap feature that could lead to identifying users’ home addresses. Strava is a popular running companion and fitness-tracking application with over 100 million users worldwide, helping people track their heart rate, activity details, GPS location, … More Strava heatmap feature can be abused to find home addresses

ESET Research deconstructs Asylum Ambuscade: group focused on cybercrime, cyberespionage and cyberattacks

Today, ESET Research released its analysis of Asylum Ambuscade, a cybercrime group that has been performing cyberespionage operations on the side. Asylum Ambuscade has been operating since at least 2020. It is a crimeware group that targets individuals, small and medium businesses, bank customers, and cryptocurrency traders in various regions, including North America and Europe. … More ESET Research deconstructs Asylum Ambuscade: group focused on cybercrime, cyberespionage and cyberattacks

Hear no evil: Ultrasound attacks on voice assistants

How  your voice assistant could do the bidding of a hacker – without you ever hearing a thing. Regular WeLiveSecurity readers won’t be stunned to read that cyberattacks and their methods keep evolving as bad actors continue to enhance their repertoire. It’s also become a common refrain that as security vulnerabilities are found and patched … More Hear no evil: Ultrasound attacks on voice assistants

Deepfakes being used in ‘sextortion’ scams

Miscreants are using AI to create faked images of a sexual nature, which they then employ in sextortion schemes. Scams of this sort used to see crims steal intimate images – or convince victims to send share them – before demanding payments to prevent their wide release. But scammers are now accessing publicly available and … More Deepfakes being used in ‘sextortion’ scams

MOVEit hack update: BBC, BA and Boots issued with ultimatum by cyber gang Clop

BBC reports* that a prolific cyber crime gang has issued an ultimatum to victims of a hack that has hit organisations around the world. The Clop group posted a notice on the dark web warning those affected by the MOVEit hack to email them before 14 June or stolen data will be published. More than … More MOVEit hack update: BBC, BA and Boots issued with ultimatum by cyber gang Clop