Malware infection of Gigaset Android devices: Analyses and options for action (April 8/9. 2021) – Part 1

Posted on 2021-04-10 by guenni

[German]Smartphone vendor Gigaset published a document names Lösung Malware-Angriff Smartphones on April 8, 2021, that should help to cleas Android phones infected by malware since April 1, 2021. In the following text, I will compile and comment the information given from Gigaset and supplement it with my own findings, enriched with the many questions that remain unanswered here. After that, every owner of Gigaset devices should decide how to proceed.

Continue reading →

Posted in devices, Security | Tagged , , , , | Leave a comment

WSUS/MECM: No sync since April, 7, 2021

Posted on 2021-04-08 by guenni

Windows Update[German]Short note or question to the administrators of a Windows Server Update Service (WSUS): Does the synchronization work for you? There are reports, that sync (at MECM) is failing since yesterday.

Continue reading →

Posted in issue, Update | Tagged , | 1 Comment

Windows 10 V1909: Reminder for SSU KB5001205

Posted on 2021-04-08 by guenni

[German]Microsoft sent a short Microsoft Security Advisory Notification around last night, again pointing out the March 2021 updated servicing stack update Microsoft Security Advisory Notification.

Continue reading →

Posted in Update, Windows | Tagged , | Leave a comment

Preliminary analysis of Gigaset malware attack through auto-installer in firmware

Posted on 2021-04-08 by guenni

[German]Let me summarize in advance some findings that security analysts from Malwarebytes have documented regarding the malware attack on Gigaset Android smartphones. I've blogged about that within my German blog, but I'm publishing here a translated version for my English readers. The infection took place from a combination of an infected update server in conjunction with the Auto Installers com.redstone.ota.ui (also referred to as Android/PUP.Riskware.Autoins.Redstone) installed in the firmware of the Gigaset Android smartphones.

Continue reading →

Posted in Android, Security | Tagged , , , | Leave a comment

Microsoft Office Patchday (April 6, 2021)

Posted on 2021-04-08 by guenni

[German]On April 6, 2021 (first Tuesday of the month, Office Patchday), Microsoft released several non-security updates for versions of Microsoft Office that are still supported. Here's a brief overview.

Continue reading →

Posted in Office, Update | Tagged , , | Leave a comment

Why ISL Online: Critical factors when choosing a remote desktop solution

[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...

Data leak: 500 million LinkedIn user data for sale in underground forum

Posted on 2021-04-07 by guenni

[German]New data leak – in an underground forum, the user data of 500 million LinkedIn users is being offered for sale. A hacker has probably extracted them from the social network belonging to Microsoft and has already published two million user records as proof that the data is real.

Continue reading →

Posted in Security | Tagged | Leave a comment

Update on malware attack on Gigaset Android devices (April 6 2021)

Posted on 2021-04-07 by guenni

[German]A quick update for all those affected by the malware infection of Gigaset Android devices via update server. I had on April 5, 2021 a phone conversation with German vendor Gigaset where they informed me about a few preliminary details of this case.

Continue reading →

Posted in Android, devices, Security | Tagged , , | Leave a comment

Surface Book 2 driver/firmware updates (April 2, 2021)

Posted on 2021-04-06 by guenni

[German]Microsoft has released new driver/firmware updates for the Microsoft Surface Book 2 as of April 2, 2021. The update package includes drivers, among others to improve the graphics output. 

Continue reading →

Posted in devices, Update | Tagged , | Leave a comment

204 Fleeceware apps for Android and iOS make $400 million in revenue

Posted on 2021-04-05 by guenni

[German]So-called fleeceware apps are probably good business for criminal developers. AVAST has come across 204 of these apps for Android and iOS and puts the damage at over $400 million.

Continue reading →

Posted in Security, Software | Tagged , | Leave a comment

VMware publishes details of security vulnerability

Posted on 2021-04-04 by guenni

[German]VMware has fixed an authentication bypass vulnerability in data center security software with a patch. The security update should be installed as soon as possible.

Continue reading →

Posted in Security, Update, Virtualization | Tagged , , | Leave a comment