Chinese regulators reportedly axed 8,000 malicious apps

China’s cyber regulators are tightening their grip on the country’s infamously censored internet even more, and it includes keeping a closer eye on games and apps. According to Reuters, the Cyberspace Administration of China (CAC) has deleted 7,873 mobile apps it deems malicious. Some of those applications reportedly overcharged users, while others stole their information. […]

PS4 owners say malicious messages are crashing their consoles

Malicious message crashes aren’t just for smartphones, it seems. Numerous PS4 owners have reported receiving PSN messages where an unrecognized character effectively bricks their consoles, making them crash and leaving them unable to start properly. And deleting any rogue messages (typically by leaving the conversation in the PS Messages mobile app) isn’t enough by itself […]

Malicious Chrome extensions infect 100,000-plus users, again

Enlarge / One the left, a legitimate Chrome extension. On the right, one of seven recently discovered malicious Chrome extensions impersonating it. (credit: Radware) Criminals infected more than 100,000 computers with browser extensions that stole login credentials, surreptitiously mined cryptocurrencies, and engaged in click fraud. The malicious extensions were hosted in Google’s official Chrome Web […]

Malicious Chrome extension is next to impossible to manually remove

(credit: Malwarebytes) Proving once again that Google Chrome extensions are the Achilles heel of what’s arguably the Internet’s most secure browser, a researcher has documented a malicious add-on that tricks users into installing it and then, he said, is nearly impossible for most to manually uninstall. It was available for download on Google servers until […]

Google Chrome extensions with 500,000 downloads found to be malicious

Enlarge (credit: ICEBRG) Researchers have uncovered four malicious extensions with more than 500,000 combined downloads from the Google Chrome Web Store, a finding that highlights a key weakness in what’s widely considered to be the Internet’s most secure browser. Google has since removed the extensions. Researchers from security firm ICEBRG stumbled on the find after […]

Chrome 63 offers even more protection from malicious sites, using even more memory

Enlarge / You might need more of this stuff if you want to use Chrome’s new Site Isolation mode. Well, not this stuff exactly; it’s RAM from a very obsolete VAX computer. (credit: Kevin Stanchfield) To further increase its enterprise appeal, Chrome 63—which hit the browser’s stable release channel yesterday—includes a couple of new security […]

New “Quad9” DNS service blocks malicious domains for everyone

Enlarge / All you really have to do is set your DNS to 9.9.9.9. (credit: GCA/ Quad9) The Global Cyber Alliance (GCA)—an organization founded by law enforcement and research organizations to help reduce cyber-crime—has partnered with IBM and Packet Clearing House to launch a free public Domain Name Service system. That system is intended to […]

Equifax rival TransUnion also sends site visitors to malicious pages

Enlarge / One of the bad pages delivered after researcher Jérôme Segura visited transunioncentroamerica.com (credit: Jérôme Segura) Equifax isn’t the only credit-reporting behemoth with a website redirecting visitors to fake Adobe Flash updates. A security researcher from AV provider Malwarebytes said transunioncentroamerica.com, a TransUnion site serving people in Central America, is also sending visitors to […]

Devs unknowingly use “malicious” modules snuck into official Python repository

Enlarge (credit: Cedar101) The official repository for the widely used Python programming language has been tainted with modified code packages, a computer security authority in Slovakia warned. The authority also said the packages have been downloaded by unwitting developers who incorporated them into software over the past three months. Multiple code packages were uploaded to […]