Share Swiss Exec helped Governments track phones, Malicious Free Utility Notepad++ in the wild and Poor OAuth Implementation Leads to Redirection Attacks

Copy link

December 12, 2021

Swiss Exec helped Governments track phones, Malicious Free Utility Notepad++ in the wild and Poor OAuth Implementation Leads to Redirection Attacks

12 minutes

Swiss Company, Mitto AG is said to have operated a service that ultimately helped governments secretly surveil and track mobile phones. A hacking group known as Strongpity has made an infected version of the Notepad++ text editor app that installs malware on a victim's computer. Poor implementation of popular OAuth2.0 leads to redirection attacks that bypass most phishing detection solutions and email security solutions. Thank you for listening.

Salaudeen Amao gives a breakdown of recent news in cyberspace. Learn something about security and more that can help you get Cybersmart both online and offline. Episodes are released every week. Follow him on Twitter @Major_Jeneral. Send your questions, comments, and suggestions via voice message on the Anchor app or email to [email protected]

LINKS:

- Swiss Firm Executive Operates Secret Surveillance Operation, Sources Say

- A new StrongPity variant hides behind Notepad++ installation

- Malicious Notepad++ installers push StrongPity malware

- Microsoft and GitHub OAuth Implementation Vulnerabilities Lead to Redirection Attacks

...more