Skip to content

Segurança Informática

Tópicos atuais sobre segurança da informação. A segurança informática é da responsabilidade de todos.

  • Breaking News
    • Hacking
    • Internet of Things
    • Data Breach
    • DarkWeb
    • Laws and Regulations
      • GDPR
    • Malware
      • ransomware
    • Reverse Engineering
    • Vulnerability
    • Cybercrime
    • Phishing
    • Reports
    • twitter On Twitter
  • Research
    • Malware and Phishing Analysis
    • Threat Report Portugal
    • GitBook – Read Teaming and Malware
    • Tutorials
    • Awesome Tools
  • youtube_mini_logo Videos
  • spotify_mini_logo Podcast
  • youtube_mini_logo 0xSI_f33d
  • gitbook GitBook
  • Tools
  • Scam Alerts
  • Contact
  • Author
Segurança Informática
  • Breaking News
    • Hacking
    • Internet of Things
    • Data Breach
    • DarkWeb
    • Laws and Regulations
      • GDPR
    • Malware
      • ransomware
    • Reverse Engineering
    • Vulnerability
    • Cybercrime
    • Phishing
    • Reports
    • twitter On Twitter
  • Research
    • Malware and Phishing Analysis
    • Threat Report Portugal
    • GitBook – Read Teaming and Malware
    • Tutorials
    • Awesome Tools
  • youtube_mini_logo Videos
  • spotify_mini_logo Podcast
  • youtube_mini_logo 0xSI_f33d
  • gitbook GitBook
  • Tools
  • Scam Alerts
  • Contact
  • Author

Categoria: Data Breach

computer security, Data Breach

Strava Fitness App Shares Secret Army Base Locations

Posted on 29 Janeiro, 201819 Fevereiro, 2018
strava-heat-map-location-tracking

Strava fitness tracking app published during November 2017 a visualization map to show where users make your own exercise. The exercise tracker published a data visualization map containing exercise routes shared by soldiers on active duty.

computer security, Data Breach, Hacking, Malware

Keylogger campaign infects 2,000 WordPress sites

Posted on 29 Janeiro, 201829 Janeiro, 2018
WP-keylogger

2,000 WordPress sites (possibly more) are infected with a keylogger that’s being loaded on the WordPress backend login page and a crypto jacking script (in-browser cryptocurrency miner) on their frontends.

computer security, Cryptocurrency, Data Breach

Hacker steals $150.000 in Ethereum

Posted on 29 Janeiro, 2018
Heavens Gates Opening

Experty‘s Initial Coin Offering (ICO), is composed to raise funds for a “Skype-like voice and video application” which could also take secure payments through the…

computer security, Data Breach

The 17 biggest data breaches of the 21st century

Posted on 27 Janeiro, 201819 Fevereiro, 2018
20151021-S3_Best-Practices-for-Handling-a-Data-Breach

In recent years, 17 serious data breaches were published. The data breach constitutes a huge loss of information and this has been a trend in our recent memory.

Cryptocurrency, Data Breach, Hacking

The biggest hack in the cryptocurrency history! $534 Million stolen

Posted on 27 Janeiro, 201827 Janeiro, 2018
468d5bd1-coincheck-www

This time Coincheck, Japanese cryptocurrency exchange has been hacked and lost $534 million in NEM tokens.

computer security, Data Breach, vulnerability

VirtualBox patches ten discovered vulnerabilities

Posted on 25 Janeiro, 201825 Janeiro, 2018
virtualbox_big

Oracle launches released patches for ten vulnerabilities in VirtualBox which allow attackers to break out of guest operating systems and attack the host operating system that VirtualBox runs on.

computer security, Data Breach

libcurl vulnerable since your inception

Posted on 25 Janeiro, 201819 Fevereiro, 2018
curl-logo

libcurl is a command-line transfer library that supports DICT, FILE, FTP, FTPS, Gopher, HTTP, HTTPS, IMAP and other. It is used to transfer data via URLs.  Are you prepared? It is vulnerable since the first commit we recorded and it was fixed in 7.58.0 version.

computer security, Data Breach, Hacking

Bell Canada – Leaked 100.000 individuals records

Posted on 24 Janeiro, 201819 Fevereiro, 2018
bell canada

Bell Canada has been compromised in a breach that reportedly affects up to 100.000 individuals. It was communicated to customers, that their names and personal emails were accessed in a malicious campaign.

Data Breach, Hacking, Mobile, reverse engineering

Sonic apps in the Google Play published by SEGA leak users’ data

Posted on 23 Janeiro, 201819 Fevereiro, 2018

Android apps such as Sonic Dash, Sonic the Hedgehog™ Classic, and Sonic Dash 2: Sonic Boom, that have been totally downloaded millions of times are compromising user’s date.

computer security, Data Breach, Hacking, segurancainformatica

Vulnerabilidades Web em 2017

Posted on 29 Dezembro, 201729 Janeiro, 2018
OWASP-1-1024x512

Top de vulnerabilidades em 2017. Vulnerabilidades do tipo XSS e injeção continuam no TOP 10 da OWASP (2017). Vulnerabilidades na IoT continuam a crescer descontroladamente. PHP e o Wordpress continnuam a liderar a lista de vulnerabilidades nos CMS. Desastres da blockchain e previsões para 2018.

computer security, Data Breach, Hacking, segurancainformatica, tutorials

ShellShock

Posted on 31 Janeiro, 201529 Janeiro, 2018

Tutorial ShellShock () { :; } ;   O autor deste documento entende que este tutorial serve apenas para demonstrar a exploração da vulnerabilidade ShellShock…

Paginação dos conteúdos

← 1 … 6 7 8

Search in blog

    Author – Founder

    pedro tavares

    Pedro Tavares is a professional in the field of information security, Head of Offensive Unit of ArtResilia firm and also working as an Ethical Hacker/Pentester, Malware Researcher and a Security Evangelist. He is also a founding member at CSIRT.UBI and Editor-in-Chief of the security computer blog seguranca-informatica.pt.

    In recent years he has invested in the field of information security, exploring and analyzing a wide range of topics, such as pentesting, malware, exploitation, hacking, IoT and security in Active Directory networks.  He is also Freelance Writer and developer of the 0xSI_f33d – a feed that compiles phishing and malware campaigns targeting Portuguese citizens. He also launched his GitBook, where he publishes some of his notes entirely online, and took his first steps in podcasting by launching the podcast 'Manhãs em Cibersegurança,' in the Portuguese language."

    Read more here.

    Newsletter

    #0xSI_f33d

    The Portuguese Abuse Open Feed

    si_f33d
    @ VirusTotal offical ingestor

    Add a new phishing / malware campaing into 0xSI_f33d

    Podcast “Manhãs em Cibersegurança”

    Infographic – Threat Report Portugal Q3 & Q4 2022

    si_f33d

    Download [PDF] or [PNG]

    Taking the bait: The modus operandi of massive social engineering waves impacting banks in Portugal

    clickthebait

    The new maxtrilha trojan is being disseminated and targeting several banks

    maxtrilha

    The clandestine Horus Eyes RAT: From the underground to criminals’ arsenal

    qbot

    A taste of the latest release of QakBot

    qbot

    Javali trojan weaponizing Avira antivirus legitimate injector

    javali

    Anubis Network – The evolution of the Phishing schema

    anubis

    Threat analysis: The emergent URSA trojan impacts many countries using a sophisticated loader

    ursa

    In-depth analysis of a trojan banker impacting Portugal and Brazil

    trojan_portugal_and_Brazil

    Grandoreiro malware May 2020 – Portugal

    The updated Grandoreiro Malware equipped with latenbot-C2 features in Q2 2020 now extended to Portuguese banks

    grandoreiro_portugal_2020

    Brazilian trojan banker is targeting Portuguese users using browser overlay

    predictions

    Trojan Lampion – Portugal

    predictions

    New release of Lampion trojan spreads in Portugal with some improvements on the VBS downloader

    lampion

    Banking Phishing Portugal

    Banking Phishing | Targets Portugal, Spain, Brazil and Chile | From Brazil | Infection process

    Categories

    • APT
    • computer security
    • Cryptocurrency
    • Cryptography
    • Cybercrime
    • darkweb
    • Data Breach
    • Digital Identity
    • Distributed Ledger
    • GDPR
    • Hacking
    • Internet of Things
    • Laws and Regulations
    • Malware
    • Malware and Phishing Analysis
    • Manhãs em Cibersegurança
    • Mobile
    • newsletter
    • Phishing
    • ransomware
    • Reports
    • reverse engineering
    • segurancainformatica
    • Threat Report Portugal
    • tutorials
    • vulnerability

    Social Networks

    youtube_logo



               

    Segurança-Informática

    Partners / Sponsors

    trignosfera

    Tell Us About New Scams Here

    scam

    Support my work

    buymeacoffee



    license

    This work is licensed under a Creative Commons Attribution 4.0 International License. If you have queries about republishing, contact me. Check individual posts and images for licensing details.

    © 2026 Segurança Informática / Powered by WordPress / Theme by Design Lab
    • Research
    • Malware and Phishing Analysis
    • Scam Alerts
    • youtube_mini_logo Youtube
    • youtube_mini_logo 0xSI_f33d
    • Author
    • TERMS AND PRIVACY