Bug in Broadcom WiFi Chip Put iPhone And Android Phones At Risk

Google Project Zero is a team of professionals at Google, who keeps hunting in mainstream software and anti-virus products for bugs. According to UK International Business Times, the Google project team has discovered a vulnerability that could enable hackers to take control of the users device completely.

Apple device users can overcome this threat by updating the device to the latest iOS 10.3.1. If you are not in a situation to update your device, it is recommended to turn off your Wi-Fi connection.

Samsung users are in a real threat now since the company has not yet come up with a patch to this vulnerability.

Apple recommends its users to check if their devices are updated to the latest version by heading on to settings -> general -> software updates. If they have not yet received it, users can manually download the update from iTunes.

Netflix Scam Tries To Steal iPhone Users Credit Card Details

Having an iPhone with you is nice, having a Netflix account also has no problem. But as of now if you are having them both, then there is something to be alarmed, there is a new email scam that is ​​using a fake iTunes bill to fool you into giving the details of your credit card

Like any phishing scheme, these fraudulent emails contain fake bills for products you may not remember having purchased. The emails seem to originate from Apple, and they appear to contain receipts for purchases that you'd normally get in your email – if you have an Apple ID account and buy stuff from Apple's digital stores.

This particular receipt concerns Netflix, and it tries convince you that someone impersonating you has gained access to your Apple account to subscribe to Netflix. Naturally, you'll want to put a stop to it by clicking the available “refund” or “manage subscriptions” links in that email.

You'll then get to a website that looks like Apple's where you have to enter your account and credit card details for the refund. But what really happens is that those details are delivered straight to the scammers. And they'll then put it to good use, meaning that you can expect real warnings from your bank in the near future.

Android Adware Nearly Impossible To Remove

Lookout has found a new form of adware that can root the device automatically after installation, and then disguise itself as a system application. This makes it impossible to any normal method to eliminate it; even factory resetting the device won't help.

This is a new, more sophisticated version of typical adware, which constantly pushing advertisements on the user. Most users probably will not even know they are infected. It is an effective family of Trojan viruses.


Lookout discovered that this family of Trojans hides inside a legit apps like Candy Crush, Google Now, Facebook, NYTimes, Okta, Twitter, WhatsApp, Snapchat, and more than 20,000 others. Non-Infected versions of these applications are available on the Google Play store; users will be infected only if they are installing apps from outside play store. Since most instances of this malware leave the host app virtually unaltered, users may not notice the sneaky little culprit that snuck in on it.

Once the malware gets into a device, it will be "almost impossible" to get rid of, and that the only solution for most consumers is buying a new phone. Adware with this kind of power is obviously a security risk. Apps usually do not have access to files created by other applications, but root access bypasses this protection and could highlight the infected devices to fraud and identity theft.

Although this malware is dangerous, the probability of being infected by it is probably quite low. As already mentioned, these infected apps are found in third party stores, so if you stick to official channels - you should have little to worry about.

New Tricky iPhone Malware Spreading In China And Taiwan

A new kind of malware that show full screen ads thrives on Apple devices in China and Taiwan. The development follows reports last month that apps loaded with malware should be removed from the company's App Store.

The malicious software, called YiSpecter, is reportedly able to "install and start random iOS apps, replaces the existing apps with those it downloads, capes carrying other apps to display ads, modify Safari default search engine, bookmarks and open pages, and upload the device information, "according to US-based cyber security company Palo Alto Networks.

Victims of YiSpecter are reportedly tricked into infection by making them to download what appears to be a "private version" or "Version 5.0" of a popular but now defunct media player, called QVOD.


In China, QVOD was popular for its ability to enable users to share pornographic content. Pornography is illegal in China, but there is a vast underground network of secret sites and third-party apps to circumvent those laws. The offices of the app developer, Kuaibo, were raided by police in 2014.

YiSpecter is able to make use of private application programming interfaces (APIs) to install itself on infected machines and then trick iOS 'Springboard, software that manages things like app icons on the home screen, to prevent users remove. The malware this deception a step further by using the same name and logos of the system apps. It does not even need the iPhone or iPad to be jailbroken (the term used to describe the process unlocking a device, allowing you to install unauthorized apps require).

Ryan Olson, director of threats of Palo Alto Networks, told The Wall Street Journal that the culprit appears to be a China-based mobile advertising service and that Apple had made from this new threat.

The news comes two weeks after the XcodeGhost attack caused Apple to attract a large number of reliable, high-profile apps from China's app store.