Top all-time · #398
Kaspersky official blog
Company blog · kaspersky.com/blogsecurity
Kaspersky official blog is the company blog at kaspersky.com, writing about security. Since 2010, 139 different Hacker News readers have linked it 146 times, most often “CamScanner, a malicious Android app with more than 100M downloads in Google Play”. It is still writing: the last post was on 2026-11-02, and you can follow it by feed.
Official Site – A Global Leader in next-generation cybersecurity solutions and services, Kaspersky offers premium protection against all cyber threats for your home and business.
Most-linked posts?
- CamScanner, a malicious Android app with more than 100M downloads in Google Play4 people · 4 mentions · first linked 2019-08-28
- /blog/blackhat-jeep-cherokee-hack-explained/9493/4 people · 4 mentions · first linked 2018-09-01
- Data – the new oil, or potential for a toxic oil spill?4 people · 4 mentions · first linked 2020-03-18
- New ransomware called BADRABBIT3 people · 3 mentions · first linked 2017-10-24
- Preliminary results of the internal Kaspersky investigation3 people · 3 mentions · first linked 2017-10-25
- APKPure v3.17.18 is not safe, distributes Trojans3 people · 3 mentions · first linked 2021-04-11
- Kaspersky discloses iPhone hardware feature vital in Operation Triangulation3 people · 3 mentions · first linked 2023-12-29
- Kaspersky uncovers sophisticated APT3 people · 3 mentions · first linked 2014-02-11
- Duqu is back3 people · 3 mentions · first linked 2015-06-10
- Equation Group: The Crown Creator of Cyber-Espionage2 people · 2 mentions · first linked 2015-02-18
What Hacker News says?
Sure, iOS has had 0-days in the past. Which major OS/Hypervisor hasn't? The point is that Android is more susceptible to "lower hanging fruit" attacks, such as in the examples below. For example: https://www.kaspersky.com/blog/camscanner-malicious-android-... Very recent example: https://www.techradar.com/in/news/more-brutal-malware-laden-...
Comment linking /blog/camscanner-malicious-android-app/28156/
on “EU Digital Markets Act, aimed at Google, Apple, Amazon, approved”Submitted CamScanner, a malicious Android app with more than 100M downloads in Google Play as a story · 301 points
HN discussionThe SIM Swap would seem to be a bit more accessible to the average fraudster. Hacking SS7 apparently requires setting up a "hub" and obtaining a carrier license from a lax country. That is, until we get to the bit about "illicit merchants offering ‘Connection-as-a-Service’ to such hubs." https://www.kaspersky.com/blog/hacking-cellular-networks/106...
Comment linking /blog/hacking-cellular-networks/10633/
on “SMS is not 2FA-secure”Submitted Kaspersky exposes hidden malware on GitHub stealing personal data as a story · 175 points
HN discussionMy understanding is that you don't even need to do a SIM swap, because the SS7 signaling system is insecure. SIM Swap is likely the easiest way as wage-slave employees are quite pliable to bribes[0]. But if you want to be even more anonymous, you can apparently re-route texts remotely [1]. 0: https://www.nbcbayarea.com/news/local/mans-1m-life-savings-s... 1: https://www.kaspersky.com/blog/ss7-hacked/25529/ I thought…
Comment linking /blog/ss7-hacked/25529/
on “SMS is not 2FA-secure”Submitted Farm equipment security at DEF CON 29 as a story · 153 points
HN discussionOn the point of trusting (big) Apple to keep us safe. This was linked in a similar discussion today. Either they knowingly provide backdoors for state actors or they are being so incompetent that it is laughable. Zero interaction remote exploit of hardware features designed to circumvent their own security measures? Why ? Seriously, find someone worthy of your trust, because that isn't Apple https://www.kaspersky.co…
Comment linking /about/press-releases/2023_kaspersky-discloses-iphone-hardware-feature-vital-in-operation-triangulation-case
on “Apple confirms it's breaking iPhone web apps in the EU on purpose”Submitted Kaspersky: Poorly detected backdoor targeting governments and NGOs around globe as a story · 122 points
HN discussion-- 8) Wait for a call from Aunt Susan after she installs some malware that told her it would boost her cell signal. :) * https://www.kaspersky.com/blog/infected-apkpure/39273/
Comment linking /blog/infected-apkpure/39273/
on “Apple’s crackdown on multicast”Submitted Kaspersky Lab Discovers 'Gauss' as a story · 104 points
HN discussionThis particular feature doesn’t rely on network connectivity or lack thereof. Here’s some info about how some spyware works: https://www.kaspersky.com/blog/commercial-spyware/50813/
Comment linking /blog/commercial-spyware/50813/
on “Reverse Engineering iOS 18 Inactivity Reboot”Submitted Kaspersky discloses iPhone hardware feature vital in Operation Triangulation as a story · 102 points
HN discussionI'm not sure I would consider a handful of examples of developers sneaking apps past the review team evidence of a "spotty record of stopping malware". Yes, you can trivially sneak things past app review by temporarily disabling disallowed features and re-enabling them once the app is released, this is literally what Epic did to get their payment processing system into Fortnite. But the fact that all app distributio…
Comment linking /blog/skygofree-smart-trojan/20717/
on “Your Phone Is Your Castle”Submitted Malware masked as textbooks and essays as a story · 61 points
HN discussion> What the article doesn't reveal is the attack vector, how did the firmware in these drives come to be infected? http://www.kaspersky.com/about/news/virus/2015/Equation-Grou... Classic spying methods to deliver malware The attackers used universal methods to infect targets: not only through the web, but also in the physical world. For that they used an interdiction technique – intercepting physical goods and replac…
Comment linking /about/news/virus/2015/Equation-Group-The-Crown-Creator-of-Cyber-Espionage
on “Russian researchers expose breakthrough U.S. spying program”Submitted Modern yacht hacking as a story · 58 points
HN discussionSource: http://www.kaspersky.com/about/news/virus/2012/Oracle_Java_s... (Chrome uses its own PDF system, not Adobe Reader, so it's not even close to the threat level of Java). Java has had multiple drive-by exploits discovered in just the past few months, which by definition don't require confirmation. I was inaccurate, however. Java is almost certainly the cause of most exploits , but I daresay that user inexperien…
Comment linking /about/news/virus/2012/Oracle_Java_surpasses_Adobe_Reader_as_the_most_frequently_exploited_software
on “Firefox introduces PDF viewer”Submitted Bluetooth Connectivity Threatens Security (2013) as a story · 40 points
HN discussionSeveral such cases are made public every year. Here's one: https://www.zdnet.com/article/microsoft-jet-vulnerability-st... "The vulnerability came to light in mid-September after the Trend Micro Zero-Day Initiative (ZDI) posted details about it on its site. ZDI said Microsoft had failed to patch the flaw in due time and they decided to make the issue public, so users and companies could take actions to protect thems…
Comment linking /blog/security-week-34/9637/
on “Apple was warned about the FaceTime eavesdropping bug last week”Submitted Kaspersky releases a malware scanner for Linux systems as a story · 28 points
HN discussionYou are right of course. But still. Once you can talk over the CAN bus you can spoof pretty much anything, if I recall correctly. You could at least have some intermediary module on both buses that acts as a proxy. Then if someone hacks your radio they can't pretend to be the ECM. Then again, this exact scenario actually happened and having an intermediary didn't help. https://www.kaspersky.com/blog/blackhat-jeep-ch…
Comment linking /blog/blackhat-jeep-cherokee-hack-explained/9493/
on “Reboot Your Dreamliner Every 248 Days to Avoid Integer Overflow (2015)”Submitted New Chrome Zero-Day as a story · 26 points
HN discussionApple is enough of a behemoth to finally drag this industry forward. I use Apple Pay whenever possible. Mostly because it’s fast and secure. And I don’t mean “fast and secure” like a marketer, but actually fast and actually secure. I can’t believe that the best thing the credit industry could come up with was chip and pin. Slow, insecure[1], and awful experience. Begone, parasites. 1. https://www.kaspersky.com/blog/…
Comment linking /blog/chip-and-pin-cards-insecure/12787/
on “Apple Pay on pace to account for 10% of global card transactions”Submitted Malicious updates for Asus laptops – Kaspersky Lab official blog as a story · 22 points
HN discussionCould a virtual SIM not replace physical SIMs, reducing the friction of switching providers? It seems we’re just waiting on carriers to catch up to the idea at the moment. https://www.kaspersky.com/blog/virtual-sim/11572/
Comment linking /blog/virtual-sim/11572/
on “Apple SIM”Submitted Kaspersky uncovers sophisticated APT as a story · 19 points
HN discussionhttps://www.kaspersky.com/blog/triada-trojan/11481/
Comment linking /blog/triada-trojan/11481/
on “The Huawei Disaster Reveals Google’s Iron Grip on Android”Submitted Preliminary results of the internal Kaspersky investigation as a story · 11 points
HN discussionI was under the the understanding that 1) readers can be tampered with - https://www.creditcards.com/credit-card-news/new-card-skimmi... and 2) there was some ability to clone the cards https://www.kaspersky.com/blog/chip-n-pin-cloning/21502/
Comment linking /blog/chip-n-pin-cloning/21502/
on “The Most Expensive Lesson of My Life: Details of SIM Port Hack”Submitted How Scary Can an Old-School Programmer Be? (2013) as a story · 10 points
HN discussion
