Recently, the FortiGuard Labs team noticed that one of the most successful applications on the market, “WhatsApp Messenger” developed by “WhatsApp Inc.”, has been the target of a lot of attention by scammers and criminals alike. [Read More]
by RSS Dario Durando  |  Nov 08, 2017  |  Filed in: Security Research
The competition for the most secure instant messaging tool has been running for years. It re-surfaced this month when WhatsApp announced it has completed implementing end-to-end encryption. Curiously, in security research circles, this has resulted in endless debates between WhatsApp and Telegram. Very much like Emacs vs Vi, everybody has a (strong) opinion, but there is no general consensus. ;) I think we can agree that Signal, WhatsApp, and Telegram stand out as the most secure messaging solutions - thanks to end-to-end encryption or Perfect... [Read More]
by RSS Axelle Apvrille  |  Apr 15, 2016  |  Filed in: Industry Trends
You've heard about StageFright, right? Where a malicious MMS compromises an Android handset by exploiting vulnerabilities on the phone's mediaserver. Are you aware that StageFright is not an MMS issue, but an issue with anything that will try to open a malicious MP4? If not, you are now, and I hope I am about to convince you even more thouroughly below... Telegram Yes, for instance, StageFright occurs with Telegram. The only (fortunate) difference is that Telegram does not preview the MP4, so it will only crash if you open the video... [Read More]
by RSS Axelle Apvrille  |  Aug 14, 2015  |  Filed in: Security Research
[Read More]
by RSS Michael Perna  |  Mar 15, 2014  |  Filed in: Industry Trends
After drive-by download malware on a Spanish newspaper in February, another Spanish newspaper is hit by malicious advertisement served on its website. This time, reading the news gets you to scare advertisement and then to subscription to paid services. This occurs from the main page of the online newspaper. The following windows pop up automatically without clicking on any advertisement. At first, you get pop ups about an alleged infection (Figure 1) or suggestions to update an application (Figure 2). One way or another, those ads typically... [Read More]
by RSS Axelle Apvrille  |  Mar 14, 2014  |  Filed in: Security Research