Kaspersky Cyber Security
Kaspersky Discovers Zero-Day Exploit in Desktop Window Manager
Sourced from International IDEA Kaspersky has discovered another zero-day exploit, however, researchers are currently unable to link this exploit to any known threat actor. This kind of vulnerability is basically an unknown software bug – upon identification and discovery, they allow attackers to conduct malicious activities in the shadows, resulting in unexpected and destructive consequences. While analysing the CVE-2021-1732 exploit, Kaspersky researchers found another such zero-day exploit and reported it to Microsoft in February. After confirmation that it is indeed a zero-day, it received the designation CVE-2021-28310. According to the researchers, this exploit is used in the wild, potentially by several threat actors. It is an escalation of privilege (EoP) exploit, found in Desktop ...
What Preinstalled Adware Means for Mobile Users
Following analysis of attacks on mobile devices, cybersecurity researchers at Kaspersky have uncovered that 14.8% of its users who were targeted by malware or adware in 2019 suffered a system partition infection, making the malicious files undeletable. Moreover, pre-installed default applications also play a role here: depending on the brand, the risk of undeletable applications varies from one to five per cent in low-cost devices and goes up to 27% in extreme cases. A system partition infection entails a high level of risk for the users of infected devices, as a security solution cannot access the system directories meaning it cannot remove the malicious files. According to Kaspersky researchers, this type of infection is becoming a more common way to install adware – software creat...
