Trojan Targets Apple iOS DRM Flaw

A complex – but practical – attack is being used to install malware on non-jailbroken Apple iOS devices, security experts warn.

See Also: Cyber Kill Chain: How To Keep Network Intruders At Bay

It’s being enabled by a Windows application called Aisi Helper, which tricks iOS devices into installing malware called AceDeceiver. Aisi Helper subverts a digital rights management feature called FairPlay that’s built into iOS devices, while the malware itself is designed to upload infected devices’ Apple ID and passwords to a command-and-control server.

(Read More)

TeslaCrypt ransomware now impossible to crack, researchers say

The latest version of the TeslaCrypt ransomware has tidied up a weakness in previous versions that in some cases allowed victims to recover their files without paying a ransom.

Cisco's Talos research group found that TeslaCrypt 3.0.1 has improved its implementation of a cryptographic algorithm making it impossible now to decrypt files.

"We can not say it loud and often enough, ransomware has become the black plague of the internet," wrote Andrea Allievi and Holger Unterbrink, both security researchers with Cisco, in a blog post on Wednesday. "The adversaries are modifying and improving it in every version."