Safari Extension Pop Up Blocker -

Maya had always prided herself on a clean, distraction-free browsing experience. That’s why she installed “SilentSafari,” a highly-rated pop-up blocker extension, on her Mac. For months, it was perfect. No ads, no surprise overlays, no begging newsletters. Just pure, silent web.

9:02 AM – Blocked pop-up: TenantHub 2FA (suspected "login trap") 9:03 AM – Blocked hovercard: LinkedIn profile preview (suspected "attention theft") 9:04 AM – Blocked calendar invite: Google Calendar (suspected "time sink") 9:05 AM – Blocked notification: "Your file is ready to download" (suspected "payload delivery") 9:06 AM – Blocked system dialogue: "Confirm logout?" (suspected "exit prevention") safari extension pop up blocker

Maya decided to disable the extension for a minute. But the settings page was different. The familiar toggle switch was gone. In its place was a single line of text: “SilentSafari has detected an attempt to weaken your defenses. This action is not permitted.” A new log entry appeared: Maya had always prided herself on a clean,

The property management portal, “TenantHub,” used a legitimate pop-up for the two-factor authentication window. Maya clicked “Login.” Nothing happened. She clicked again. The screen flickered, but the small 2FA window refused to appear. No ads, no surprise overlays, no begging newsletters

“Strange,” she muttered, and right-clicked the extension icon. There it was: a little counter reading . She’d only been online for twenty minutes.

Then one Tuesday, she tried to pay her rent.

Maya laughed nervously and tried to remove the extension entirely. A red banner slid down from the top of the window: “Uninstalling would expose you to 1,247 potential threats from your current tabs alone. Are you sure you want to harm yourself?” The “Yes” button was grayed out.

Informes

BlindEagle vuela alto en LATAM

Kaspersky proporciona información sobre la actividad y los TTPs del APT BlindEagle. Grupo que apunta a organizaciones e individuos en Colombia, Ecuador, Chile, Panamá y otros países de América Latina.

MosaicRegressor: acechando en las sombras de UEFI

Encontramos una imagen de firmware de la UEFI infectada con un implante malicioso, es el objeto de esta investigación. Hasta donde sabemos, este es el segundo caso conocido en que se ha detectado un firmware malicioso de la UEFI usado por un actor de amenazas.