Skip to main content
Electronic Frontier Foundation

Related Content: threat lab

Related Content: threat lab

2023 Year in Review (text animated to change colors)
Deeplinks Blog by Bill Budington, Alexis Hancock | December 23, 2023

Sketchy and Dangerous Android Children’s Tablets and TV Set-Top Boxes: 2023 in Review

In a series of investigations this year, EFF researchers confirmed the existence of dangerous malware on set-top boxes manufactured by AllWinner and RockChip, and discovered sketchyware on a tablet marketed for kids from the manufacturer Dragon Touch.
malware-shark
Deeplinks Blog by Alexis Hancock | November 14, 2023

Low Budget Should Not Mean High Risk: Kids' Tablet Came Preloaded with Sketchyware

It’s easy to get Android devices from online vendors like Amazon at different price points. Unfortunately, it is also easy to end up with an Android device with malware at these lower budgets. There are several factors that contribute to this: multiple devices manufactured in the...

Security
Press Release | November 14, 2023

EFF Urges FTC to Address American Resellers of Malware on Android TV Set-Top Boxes

SAN FRANCISCO—The Federal Trade Commission (FTC) must act to halt sales by Amazon, AliExpress, and other resellers of Android television set-top boxes and mobile devices manufactured by AllWinner and RockChip that have been pre-infected with malware before ever reaching consumers, the Electronic Frontier Foundation (EFF) urged Tuesday in ...

EU-flag-circuits
Deeplinks Blog by Bill Budington, Eva Galperin | October 3, 2023

EFF And Other Experts Join in Pointing Out Pitfalls of Proposed EU Cyber-Resilience Act

Today we join a set of 56 experts from organizations such as Google, Panasonic, Citizen Lab, Trend Micro and many others in an open letter calling on the European Commission, European Parliament, and Spain’s Ministry of Economic Affairs and Digital Transformation to reconsider the obligatory vulnerability reporting mechanisms built...

Deeplinks Blog by Cooper Quintin | September 13, 2023

Apple and Google Are Introducing New Ways to Defeat Cell Site Simulators, But Is it Enough?

Cell-site simulators (CSS)—also known as IMSI Catchers and Stingrays—are a tool that law enforcement and governments use to track the location of phones, intercept or disrupt communications, spy on foreign governments, or even install malware. Cell-site simulators are also used by criminals to send spam and engage...

China Spying
Deeplinks Blog by Bill Budington | August 21, 2023

Vulnerability in Tencent’s Sogou Chinese Keyboard Can Leak Text Input in Real-Time

Security researchers at Citizen Lab discovered a number of cryptographic vulnerabilities in the Sogou Input Method keyboard software made by Tencent, the most popular input method in China. These vulnerabilities allow adversaries with a privileged network position (such as an ISP or anyone with access to upstream routers) to...

Deeplinks Blog by Bill Budington, Veridiana Alimonti | March 9, 2023

Flipper Zero Devices Being Seized by Brazil’s Telecom Agency

You may have heard of the Flipper Zero. It’s marketed as a “Portable Multi-tool Device for Geeks”—a programmable portable device packed with hardware that facilitates wireless penetration testing and hacking on the go. The device, which greets its owner with an adorable cyber-dolphin on its monochrome 128x64 pixel screen,...

woman holding phone with stalker message
Deeplinks Blog by Bill Budington | February 8, 2023

Stalkerware Maker Fined $410k and Compelled to Notify Victims

Last week, the New York Attorney General secured a $410,000 fine from Patrick Hinchy and 16 companies that he runs which produce and sell spyware and stalkerware. In addition, he and his companies must modify their stalkerware to alert victims that their devices have been compromised. This sends a...

Pages

Back to top

JavaScript license information