Privacy News Tainted VPNs Being Used to Spread EyeSpy Surveillanceware

[Stopspying]

Content source

https://thehackernews.com/2023/01/beware-tainted-vpns-being-used-to.html

"Tainted VPN installers are being used to deliver a piece of surveillanceware dubbed EyeSpy as part of a malware campaign that started in May 2022.
It uses "components of SecondEye – a legitimate monitoring application – to spy on users of 20Speed VPN, an Iranian-based VPN service, via trojanized installers," Bitdefender said in an analysis.
A majority of the infections are said to originate in Iran, with smaller detections in Germany and the U.S., the Romanian cybersecurity firm added.
SecondEye, according to snapshots captured via the Internet Archive, claims to be a commercial monitoring software that can work as a "parental control system or as an online watchdog." As of November 2021, it's offered for sale anywhere between $99 to $200.
It comes with a wide range of features that allows it to take screenshots, record microphone, log keystrokes, gather files and saved passwords from web browsers, and remotely control the machines to run arbitrary commands.
SecondEye previously came under the radar in August 2022, when Blackpoint Cyber revealed the threat actors' use of its spyware modules and infrastructure for data and payload storage..."

Beware: Tainted VPNs Being Used to Spread EyeSpy Surveillanceware

Beware of tainted VPN installers! They're being used to deliver a surveillanceware called EyeSpy as part of a malware campaign.

thehackernews.com

 

[Zero Knowledge]

to spy on users of 20Speed VPN, an Iranian-based VPN service, via trojanized installers

lol Iranian vpn, you're asking for trouble if you download that . But hey at least it's located in non 5 eyes lol .

 

[Stopspying]

lol Iranian vpn, you're asking for trouble if you download that . But hey at least it's located in non 5 eyes lol .

I can't say that I know anyone who has tried it, it could just be that it's not as bad as it might seem. I can think of an apparently Iranian software/app that seems fine - Hibit Uninstaller. Or maybe its some sort of sleeper

 

[Zero Knowledge]

Or maybe its some sort of sleeper

That is the problem with software from such countries. You understand that the government can coerce people at any time using violence .

 

[Stopspying]

That is the problem with software from such countries. You understand that the government can coerce people at any time using violence .

Governments and their agencies from all parts of the political spectrum are capable of doing this sort of thing, not always with violence though, and do do it. Five (+) Eyes, Israel....

 

[Zero Knowledge]

Governments and their agencies from all parts of the political spectrum are capable of doing this sort of thing, not always with violence though, and do do it. Five (+) Eyes, Israel....

Agreed. They all use coercion and violence to get what they want if they need to get a result . But at least in western liberal democracies there is some sort of transparency, regulation and oversight. Also, the free press also helps keep law enforcement/intelligence agencies to account.

 

[amir 957]

EyeSpy - Iranian Spyware Delivered in VPN Installers

Consumer VPN solutions have witnessed explosive growth in the past few years.

www.bitdefender.com

As you know due to high internet blocking in Iran, Iranians have to use VPNs and some of VPN providers related to government itself like “20Speed VPN” are spying on users