Puush Server Breached with Malware

Scmagazine.com reported on 30th March, 2015 stating that the screen sharing platform was struck by a cyber attack in the last weekend of March 2015 which injected malware into a server.

The Puush Twitter broke the news on Monday (30th March, 2015) that users of the platform which is available as an app for Windows, OS X and iOS had been attacked with a possible malware masked as a Puush update.

Zdnet.com published a report on 30th March, 2015 quoting the company's Twitter page as "we have received complaints of possible malware attack in the form of masked Puush update. Hence, we now recommend to close the Puush app (Windows only)."

After sometime Puush had asked users with Windows to run a virus scan on their PCs and uninstall the Windows Puush client.

Puush initially claimed that passwords of users were not compromised but later tweeted that it had received unverified reports from a person, who analyzed the malware, about an attempt to obtain passwords from local systems of users.

Betanews.com published news on 30th March, 2015 quoting an official statement from Puush after this as "The malware might collect locally stored-up passwords but we are yet to ascertain it as these have been communicated back to a distant location. We have been running the malicious software in sandboxed environments and have not been successful to imitate any such behavior. But even then, we advise you to change any significant passwords which were stored in your computer (unless they were in a secure password manager) including Chrome/Firefox saved passwords.

Puush says that it has now reinstated its systems and fixed its servers with the most recent security patches.

Graham Cluley, Researcher of hotforsecurity.com blogged on 30th March, 2015 stating that hopefully they may do exhaustive review urgently to find out what went wrong during the coming days and set systems in place to make sure that unauthorized and hijacked variants of its software can never be sent to customers again.

He advised that you have to make sure that suppliers don't infect your PCs with malware by using updated anti-virus software and should always apply the latest security fixes.

» SPAMfighter News - 4/7/2015