Cyber Security Today – Twitter hack aftermath, more Android malware, actors on alert

[Mike]

Cyber Security Today – Twitter hack aftermath, more Android malware, actors on alert and a streaming media warning

This week’s embarrassing hack of celebrity Twitter accounts so crooks could tweet a bitcoin scam should serve as a wake-up to organizations. Several experts I talked to said firms need to toughen security controls for IT administrators who have access to user accounts. The attackers didn’t hack individual accounts. They got into a bunch of accounts by accessing system management tools that were in the hands of a few employees. While Twitter was worried about disinformation and fake accounts on their platforms it forgot to take extra steps to prevent account takeovers. Twitter has given a vague account of what happened. It would be helpful to give a more detailed account so other companies can learn lessons. Meanwhile, consumers can learn too: If a deal sounds too good to be true it probably is, especially on the Internet. Especially if it’s offered by a celebrity. Why would a celebrity give away money? Answer: Because their account was hacked.

Criminals are finding new ways of infecting Android apps to steal money. A report this week from a security company called ThreatFabric details the latest malware. It’s aimed at stealing money and personal data from 337 apps including banks. Called BlackRock it is often distributed as a fake Google Update app, but NOT in the Google Play store. After installation any time a victim accesses their bank account or buy products this malware plants an overlay on top of the screen login screen. Then the malware copies the bank or payment card username and password and forwards it to the crooks. It also interferes with any antivirus software on their phone. Banks in Europe, Australia, the U.S. and Canada are among the targets as well as eBay, Amazon and PayPal. To make sure you’re not a victim limit the number of apps you download, only download apps from the Google Play store and when choosing an app make sure it’s from a reputable company and has been reviewed independently.

Read more Here