Google Analytics – no data validation?

/ Noviembre 29, 2016/ IT Security, IT Security News&Updates/ 0 comments

Recently, one of our clients contacted about something rather strange: a “language” value in his newly Google Analytics setup that stated: “Secret.ɢ You are invited! Enter only with this ticket URL. Copy it. Vote for Trump!” Of course, we all know that browser headers/requests can be easily altered, but we still wonder why Google allows such values in it’s [non-bot]

Read More

New IoT Malware? Anime/Kami

/ Septiembre 5, 2016/ IoT Devices&Security, IoT Security/ 0 comments

During August 2016, we came across several devices that were infected with a new malware that we couldn’t identify – for now. It resides in a read-write partition of some CCTV devices (most partitions on these devices are read-only), in a folder called .anime under the name .kami. It seems the attack used hard-coded telnet credentials and then downloaded the

Read More