{"id":35126,"date":"2020-05-22T12:55:16","date_gmt":"2020-05-22T12:55:16","guid":{"rendered":"https:\/\/blog.trendmicro.com\/?p=544089"},"modified":"2020-05-22T12:55:16","modified_gmt":"2020-05-22T12:55:16","slug":"this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/","title":{"rendered":"This Week in Security News: New Bluetooth Vulnerability Exposes Billions of Devices to Hackers and Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2018\/03\/Week-in-Security-News-Logo_RGB-300x300.jpg\" class=\"attachment-medium size-medium wp-post-image\" alt srcset=\"https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2018\/03\/Week-in-Security-News-Logo_RGB-300x300.jpg 300w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2018\/03\/Week-in-Security-News-Logo_RGB-768x768.jpg 768w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2018\/03\/Week-in-Security-News-Logo_RGB-1024x1024.jpg 1024w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2018\/03\/Week-in-Security-News-Logo_RGB-640x640.jpg 640w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2018\/03\/Week-in-Security-News-Logo_RGB-900x900.jpg 900w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2018\/03\/Week-in-Security-News-Logo_RGB-440x440.jpg 440w, https:\/\/blog.trendmicro.com\/wp-content\/uploads\/2018\/03\/Week-in-Security-News-Logo_RGB-380x380.jpg 380w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\"><\/p>\n<p>Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about a new security vulnerability in Bluetooth that could potentially allow an attacker to spoof a remotely paired device. Also, learn about two malware files that pose as Zoom installers but when decoded, contain malware code.<\/p>\n<p>Read on:<\/p>\n<p><a href=\"https:\/\/www.trendmicro.com\/us\/iot-security\/news\/5804\/Forward_looking_security_analysis_of_smart_factories_Part_1_Overlooked_attack_vectors\"><strong>Forward-Looking Security Analysis of Smart Factories &lt;Part 1&gt; Overlooked Attack Vectors<\/strong><\/a><\/p>\n<p><em>Trend Micro recently released a paper showing the results of proof-of-concept research on new security risks associated with smart factories. In this series of five columns, Trend Micro will explore the security risks to be aware of when promoting smart factories by examining overlooked attack vectors, feasible attack scenarios, and recommended defense strategies. This first column introduces the concept of \u201csmart manufacturing,\u201d and explains the research methods and attack vectors that are unique to smart factories.<\/em><\/p>\n<p><a href=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/\"><strong>Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers<\/strong><\/a><\/p>\n<p><em>Trend Micro found two malware files that pose as Zoom installers but when decoded, contain malware code. These malicious fake installers do not come from Zoom\u2019s official installation distribution channels. One of the samples installs a backdoor that allows threat actors to run malicious routines remotely, while the other sample involves the installation of the Devil Shadow botnet in devices.<\/em><\/p>\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/adobe-releases-critical-out-of-band-security-update\/\"><strong>Adobe Releases Critical Out-of-Band Security Update<\/strong><\/a><\/p>\n<p><em>This week, Adobe released four security updates, one of them being an out-of-band security update for Adobe Character Animator that fixes a critical remote code execution vulnerability. All these vulnerabilities were discovered by&nbsp;Mat Powell of Trend Micro\u2019s Zero Day Initiative and were not found in the wild.<\/em><\/p>\n<p><a href=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/qnodeservice-node-js-trojan-spread-via-covid-19-lure\/\"><strong>QNodeService: Node.js Trojan Spread via Covid-19 Lure<\/strong><\/a><\/p>\n<p><em>Trend Micro recently noticed a Twitter post by MalwareHunterTeam that showed a Java downloader with a low detection rate. Its name, \u201cCompany PLP_Tax relief due to Covid-19 outbreak CI+PL.jar\u201d, suggests it may have been used in a Covid-19-themed phishing campaign. Running this file led to the download of a new, undetected malware sample written in Node.js; this trojan is dubbed as \u201cQNodeService\u201d.<\/em><\/p>\n<p><a href=\"https:\/\/www.wired.com\/story\/shinyhunters-hacking-group-data-breach-spree\/\"><strong>ShinyHunters Is a Hacking Group on a Data Breach Spree<\/strong><\/a><\/p>\n<p><em>In the first two weeks of May, a hacking group called ShinyHunters went on a rampage, hawking what it claims is close to 200 million stolen records from at least 13 companies. Such binges aren\u2019t unprecedented in the dark web stolen data economy, but they\u2019re a crucial driver of identity theft and fraud.<\/em><\/p>\n<p><a href=\"https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/netwalker-fileless-ransomware-injected-via-reflective-loading\/\"><strong>Netwalker Fileless Ransomware Injected via Reflective Loading<\/strong><\/a><\/p>\n<p><em>Trend Micro has observed Netwalker ransomware attacks involving malware that is not compiled but written in PowerShell and executed directly in memory and without storing the actual ransomware binary into the disk. This makes this ransomware variant a fileless threat, enabling it to maintain persistence and evade detection by abusing tools that are already in the system to initiate attacks.<\/em><\/p>\n<p><a href=\"https:\/\/www.helpnetsecurity.com\/2020\/05\/21\/logmein-security-update-phishing\/\"><strong>Beware of Phishing Emails Urging for a LogMeIn Security Update<\/strong><\/a><\/p>\n<p><em>LogMeIn users are being targeted with fake security update requests, which lead to a spoofed phishing page.<\/em> <em>The phishing email has been made to look like it\u2019s coming from LogMeIn. Not only does the company logo feature prominently in the email body, but the sender\u2019s identity has been spoofed and the phishing link looks, at first glance, like it might be legitimate.<\/em><\/p>\n<p><a href=\"https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/cybercrime-and-digital-threats\/phishing-site-uses-netflix-as-lure-employs-geolocation\"><strong>Phishing Site Uses Netflix as Lure, Employs Geolocation<\/strong><\/a><\/p>\n<p><em>A phishing site was found using a spoofed Netflix page to harvest account information, credit card credentials, and other personally identifiable information (PII), according to a Twitter post by PartnerRe Information Security Analyst Andrea Palmieri. Trend Micro looked into the malicious site, hxxp:\/\/secure-up-log.com\/netflix\/, to learn more about the operation and found that the sites have geolocation features.<\/em><\/p>\n<p><a href=\"https:\/\/thehackernews.com\/2020\/05\/hacking-bluetooth-vulnerability.html\"><strong>New Bluetooth Vulnerability Exposes Billions of Devices to Hackers<\/strong><\/a><\/p>\n<p><em>Academics from \u00c9cole Polytechnique F\u00e9d\u00e9rale de Lausanne (EPFL) disclosed a security vulnerability in Bluetooth that could potentially allow an attacker to spoof a remotely paired device, exposing over a billion modern devices to hackers. The attacks, dubbed Bluetooth Impersonation Attacks or BIAS, concern Bluetooth Classic, which supports Basic Rate (BR) and Enhanced Data Rate (EDR) for wireless data transfer between devices.<\/em><\/p>\n<p><a href=\"https:\/\/trendtalks.fyi\/security\/\"><strong>#LetsTalkSecurity: Fighting Back<\/strong><\/a> <strong>&nbsp;<\/strong><\/p>\n<p><em>This Week, Rik Ferguson, vice president of Security Research at Trend Micro, hosted the third episode of #LetsTalkSecurity featuring guest Katelyn Bowden, CEO &amp; founder of The BADASS Army. In this week\u2019s episode, Rik and Katelyn discuss fighting back and more. Check out this week\u2019s episode and follow the link to find information about upcoming episodes and guests.<\/em><\/p>\n<p><a href=\"https:\/\/threatpost.com\/fraudulent-unemployment-covid-19-relief-claims-earn-bec-gang-millions\/155925\/\"><strong>Fraudulent Unemployment, COVID-19 Relief Claims Earn BEC Gang Millions<\/strong><\/a><\/p>\n<p><em>An infamous business email compromise (BEC) gang has submitted hundreds of&nbsp;fraudulent claims with state-level U.S. unemployment websites and coronavirus relief funds. Behind the attacks is Scattered Canary, a&nbsp;highly organized Nigerian cybergang&nbsp;that employs dozens of threat actors to target U.S. enterprise organizations and government institutions.&nbsp;Researchers who tracked the fraudulent activity said the gang may have made millions from the fraudulent activity.<\/em><\/p>\n<p><a href=\"https:\/\/www.trendmicro.com\/us\/iot-security\/news\/5815\/Factory_Security_Problems_from_an_IT_Perspective_Part_1_Gap_between_the_objectives_of_IT_and_OT\"><strong>Factory Security Problems from an IT Perspective (Part 1): Gap Between the Objectives of IT and OT<\/strong><\/a><\/p>\n<p><em>The manufacturing industry is undergoing drastic changes and entering a new transition period. Today, it may be difficult to find companies that don\u2019t include Digital Transformation (DX) or the Internet of Things (IoT) in their strategies. Manufacturing companies need to include cybersecurity in both the information technology (IT) domain and the operational technology (OT) one as well. This three-part blog series discusses the challenges that IT departments face when assigned the task of overseeing cybersecurity in factories and implementing measures to overcome these challenges.<\/em><\/p>\n<p>What did you think about this week\u2019s #LetsTalkSecuirty episode? Share your thoughts in the comments below or follow me on Twitter to continue the conversation: <a href=\"https:\/\/twitter.com\/jonlclay\">@JonLClay.<\/a><\/p>\n<p> Read More <a href=\"https:\/\/blog.trendmicro.com\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about a new security vulnerability in Bluetooth that could potentially allow an attacker to spoof a remotely paired device. Also, learn about two malware files that&#8230;<br \/>\nThe post This Week in Security News: New Bluetooth Vulnerability Exposes Billions of Devices to Hackers and Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers appeared first on . Read More HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":35127,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[61],"tags":[311,307],"class_list":["post-35126","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-trendmicro","tag-current-news","tag-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>This Week in Security News: New Bluetooth Vulnerability Exposes Billions of Devices to Hackers and Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"This Week in Security News: New Bluetooth Vulnerability Exposes Billions of Devices to Hackers and Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-05-22T12:55:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"This Week in Security News: New Bluetooth Vulnerability Exposes Billions of Devices to Hackers and Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers\",\"datePublished\":\"2020-05-22T12:55:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\\\/\"},\"wordCount\":998,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers.jpg\",\"keywords\":[\"Current News\",\"Security\"],\"articleSection\":[\"TrendMicro\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\\\/\",\"name\":\"This Week in Security News: New Bluetooth Vulnerability Exposes Billions of Devices to Hackers and Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers.jpg\",\"datePublished\":\"2020-05-22T12:55:16+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers.jpg\",\"width\":300,\"height\":300},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Current News\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/current-news\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"This Week in Security News: New Bluetooth Vulnerability Exposes Billions of Devices to Hackers and Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"This Week in Security News: New Bluetooth Vulnerability Exposes Billions of Devices to Hackers and Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/","og_locale":"en_US","og_type":"article","og_title":"This Week in Security News: New Bluetooth Vulnerability Exposes Billions of Devices to Hackers and Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-05-22T12:55:16+00:00","og_image":[{"width":300,"height":300,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"This Week in Security News: New Bluetooth Vulnerability Exposes Billions of Devices to Hackers and Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers","datePublished":"2020-05-22T12:55:16+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/"},"wordCount":998,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers.jpg","keywords":["Current News","Security"],"articleSection":["TrendMicro"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/","url":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/","name":"This Week in Security News: New Bluetooth Vulnerability Exposes Billions of Devices to Hackers and Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers.jpg","datePublished":"2020-05-22T12:55:16+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/05\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers.jpg","width":300,"height":300},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/this-week-in-security-news-new-bluetooth-vulnerability-exposes-billions-of-devices-to-hackers-and-backdoor-devil-shadow-botnet-hidden-in-fake-zoom-installers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Current News","item":"https:\/\/www.threatshub.org\/blog\/tag\/current-news\/"},{"@type":"ListItem","position":3,"name":"This Week in Security News: New Bluetooth Vulnerability Exposes Billions of Devices to Hackers and Backdoor, Devil Shadow Botnet Hidden in Fake Zoom Installers"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/35126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=35126"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/35126\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/35127"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=35126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=35126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=35126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}