2014, Cryptocurrency, Cybercrime and Malware

Raccoon Malware, a success case in the cybercrime ecosystem

Security Affairs

FEBRUARY 24, 2020

Raccoon Malware is a recently discovered infostealer that can extract sensitive data from about 60 applications on a targeted system. Racoon malware , Legion, Mohazo, and Racealer, is an infostealer that recently appeared in the threat landscape that is advertised in hacking forums. ” reads the report published by CyberArk.

Cybercrime

Cybercrime Malware Cryptocurrency Advertising

U.S. Indicts North Korean Hackers in Theft of $200 Million

Krebs on Security

FEBRUARY 17, 2021

Secret Service and Department of Homeland Security told reporters on Wednesday the trio’s activities involved extortion, phishing, direct attacks on financial institutions and ATM networks, as well as malicious applications that masqueraded as software tools to help people manage their cryptocurrency holdings.

Cryptocurrency

Cryptocurrency Financial Services Banking Government

Anubis, a new info-stealing malware spreads in the wild

Security Affairs

AUGUST 27, 2020

Microsoft warned of a recently uncovered piece of malware, tracked as Anubis that was designed to steal information from infected systems. This week, Microsoft warned of a recently uncovered piece of malware, tracked as Anubis, that was distributed in the wild to steal information from infected systems. Pierluigi Paganini.

Malware

Malware Advertising Cryptocurrency Cybercrime

Webinars

Reimagining Cybersecurity Training: Driving Real Impact on Security Culture

MORE WEBINARS

CryptoCore hacker group stole over $200M from cryptocurrency exchanges

Security Affairs

JUNE 24, 2020

The CryptoCore hacker group that is believed to be operating out of Eastern Europe has stolen around $200 million from online cryptocurrency exchanges. Experts from ClearSky states that a hacker group tracked as CryptoCore, which is believed to be operating out of Eastern Europe, has stolen around $200 million from cryptocurrency exchanges.

Cryptocurrency

Cryptocurrency Phishing Accountability Passwords

New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms

Security Affairs

SEPTEMBER 17, 2018

Palo Alto Network researchers discovered a new malware, tracked as XBash, that combines features from ransomware, cryptocurrency miners, botnets, and worms. Security researchers at Palo Alto Networks have discovered a new piece of malware, dubbed XBash piece that is targeting both Linux and Microsoft Windows servers.

Cryptocurrency

Cryptocurrency Malware Ransomware Cybercrime

QQAAZZ crime gang charged for laundering money stolen by malware gangs

Security Affairs

OCTOBER 18, 2020

Multiple members of QQAAZZ multinational cybercriminal gang were charged for providing money-laundering services to high-profile malware operations. According to law enforcement bodies, the gang provides services to multiple malware operations, including Dridex , GozNym , and Trickbot. ” . ” states the DoJ.

Malware

Malware Banking Cryptocurrency Cybercrime

New Lobshot hVNC malware spreads via Google ads

Security Affairs

MAY 1, 2023

The previously undetected LOBSHOT malware is distributed using Google ads and gives operators VNC access to Windows devices. Threat actors are using an elaborate scheme of fake websites through Google Ads to spread their malware, the backdoors are embedded in installers for apparently legitimate applications, such as AnyDesk.

Malware

Malware Cybercrime Banking Software

Ten Years Later, New Clues in the Target Breach

Krebs on Security

DECEMBER 14, 2023

The malware used in the Target breach included the text string “ Rescator ,” which also was the handle chosen by the cybercriminal who was selling all of the cards stolen from Target customers. Rescator, advertising a new batch of cards stolen in a 2014 breach at P.F. 18, 2013, KrebsOnSecurity broke the news that U.S.

Cybercrime

Cybercrime Accountability Advertising Computers and Electronics

BlackSquid malware uses multiple exploits to drop cryptocurrency miners

Security Affairs

JUNE 5, 2019

A new piece of malware appeared in the threat landscape, dubbed BlackSquid it targets web servers with several exploits to deliver cryptocurrency miners. The new piece of malware leverages many exploits to compromise target systems and implements evasion techniques to avoid detection. ” states Trend Micro.

Cryptocurrency

Cryptocurrency Malware Advertising Hacking

Chinese-speaking cybercrime gang Rocke changes tactics

Security Affairs

OCTOBER 15, 2019

Chinese-speaking cybercrime gang Rocke that carried out several large-scale cryptomining campaigns, has now using news tactics to evade detection. Chinese-speaking cybercrime gang Rocke, that carried out several large-scale cryptomining campaigns in past , has now using news tactics to evade detection. Pierluigi Paganini.

Cybercrime

Cybercrime DNS Malware Advertising

Law enforcement operation dismantled 911 S5 botnet

Security Affairs

MAY 30, 2024

Since 2011, Wang and his co-conspirators had been distributing malware through malicious VPN applications, including MaskVPN, DewVPN, PaladinVPN, ProxyGate, ShieldVPN, and ShineVPN. The compromised devices were recruited in the 911 S5 residential proxy service. ” reads the press release published by DoJ. based online service providers.

VPN

VPN Cryptocurrency Malware Software

Crooks use weaponized coronavirus map to deliver malware

Security Affairs

MARCH 12, 2020

Cybercriminals continue to exploit the fear in the coronavirus outbreak to spread malware and steal sensitive data from victims. Experts from cybersecurity Reason reported cybercrimnals are using new coronavirus -themed attacks to deliver malware. To make sure the malware can persist and keep operating, it uses the “Task Scheduler”.”

Malware

Malware Advertising Passwords Cryptocurrency

Ransomware Gangs and the Name Game Distraction

Krebs on Security

AUGUST 5, 2021

It’s nice when ransomware gangs have their bitcoin stolen, malware servers shut down, or are otherwise forced to disband. Reinvention is a basic survival skill in the cybercrime business. “In fact, Dridex operations were significant throughout 2015 and 2016, making it one of the most prevalent eCrime malware families.”

Ransomware

Ransomware Cybercrime Malware System Administration

The new Azorult 3.3 is available in the cybercrime underground market

Security Affairs

OCTOBER 23, 2018

A new version of the Azorult info-stealer appeared in the wild, it is able to steal more data, including other types of cryptocurrencies. A new version of the Azorult info-stealer appeared in the wild, it is able to steal more data, including other types of cryptocurrencies, and implements new features. ” continues CheckPoint.

Marketing

Marketing Cybercrime Cryptocurrency Advertising

Ukraine police and Binance dismantled a cyber gang behind $42M money laundering

Security Affairs

AUGUST 18, 2020

Ukrainian authorities arrested the members of a cybercrime gang who ran 20 cryptocurrency exchanges involved in money laundering. Police in Ukraine announced the arrest of the members of a cybercrime gang composed of three individuals who ran 20 cryptocurrency exchanges used in money laundering activities.

Cryptocurrency

Cryptocurrency Computers and Electronics Cybercrime Digital transformation

Happy 13th Birthday, KrebsOnSecurity!

Krebs on Security

DECEMBER 29, 2022

Here’s a look at some of the more notable cybercrime stories from the past year, as covered by KrebsOnSecurity and elsewhere. This bold about-face dumbfounded many longtime Norton users because antivirus firms had spent years broadly classifying all cryptomining programs as malware. agencies]. .”

Cryptocurrency

Cryptocurrency Cybercrime Computers and Electronics Scams

REvil Ransomware member win the auction for KPot stealer source code

Security Affairs

NOVEMBER 4, 2020

KPOT Stealer is a “stealer” malware that focuses on exfiltrating account information and other data from web browsers, instant messengers, email, VPN, RDP, FTP, cryptocurrency, and gaming software. The KPOT Stealer was written in C/C++, it was offered in the cybercrime underground as a Malware-as-a-Service (MaaS).

Ransomware

Ransomware Malware Advertising Cybercrime

Interview With a Crypto Scam Investment Spammer

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. The messages said recipients had earned an investment credit at a cryptocurrency trading platform called moonxtrade[.]com. A DIRECT QUOT The domain quot[.]pw billion last year.

Scams

Scams DDOS Cryptocurrency Accountability

Xwo Malware scans the Internet for Exposed Services, Default Passwords

Security Affairs

APRIL 5, 2019

Researchers at AT&T Alien Labs have spotted a malware called Xwo that is actively scanning the Internet for exposed web services and default passwords. Experts at AT&T Alien Labs discovered a new piece of malware called Xwo that is actively scanning the Internet for exposed web services and default passwords. Www backup paths.

Internet

Internet Internet Passwords Malware

Gustuff Android banking trojan targets 125+ banking, and 32 cryptocurrency apps

Security Affairs

MARCH 28, 2019

Security experts at Group-IB have detected the activity of Gustuff a mobile Android Trojan, which includes potential targets of customers in leading international banks, users of cryptocurrency services, popular ecommerce websites and marketplaces. Gustuff has previously never been reported.

Banking

Banking Cryptocurrency Mobile Advertising

Three North Korean hackers charged for financial and revenge-motivated hacks

SC Magazine

FEBRUARY 17, 2021

billion in currency and cryptocurrency and further other strategic interests for the North Korean government. The charges captures years-worth of North Korean hacking, including the widely publicized 2014 Sony hack, the 2016 hack of the Central Bank of Bangladesh, the 2017 WannaCry ransomware attack and others.

Hacking

Hacking Cryptocurrency Banking Malware

TeamTNT group adds new detection evasion tool to its Linux miner

Security Affairs

JANUARY 28, 2021

The TeamTNT cybercrime group has improved its Linux cryptocurrency miner by implementing open-source detection evasion capabilities. The TeamTNT cybercrime group has upgraded their Linux cryptocurrency miner by adding open-source detection evasion capabilities, AT&T Alien Labs researchers warn. Pierluigi Paganini.

Cryptocurrency

Cryptocurrency Cybercrime DNS Malware

Hackers abuse BitBucket to infect 500K+ hosts with arsenal of malware

Security Affairs

FEBRUARY 5, 2020

Threat actors are abusing the Bitbucket code hosting service to host seven types of malware that has already claimed more than 500,000 business computers. Cybereason researchers reported that attackers are abusing the Bitbucket code hosting service to store seven types of malware that were employed in an ongoing campaign.

Malware

Malware Cryptocurrency Ransomware Advertising

Ursnif: The Latest Evolution of the Most Popular Banking Malware

Security Affairs

APRIL 5, 2019

ZLab Yoroi-Cybaze dissected another attack wave of Ursnif Trojan, aka Gozi ISFB, an offspring of the original Gozi which source code was leaked in 2014. ZLab Yoroi-Cybaze dissected another attack wave of Ursnif Trojan, aka Gozi ISFB, an offspring of the original Gozi which source code was leaked in 2014. Introduction.

Banking

Banking Malware Cryptocurrency Advertising

Group-IB presented latest cybercrime and nation-state hacking trends in Asia

Security Affairs

NOVEMBER 16, 2018

According to Group-IB’s report findings, Asia is one of the most actively attacked regions in the world, the company presented latest cybercrime trends. In 2017-2018 hackers’ interest in cryptocurrency exchanges ramped up. Thus, 60% of the total amount was stolen from Coincheck , a Japanese cryptocurrency exchange.

Cybercrime

Cybercrime Hacking Banking Phishing

Fileless PowerGhost cryptocurrency miner leverages EternalBlue exploit to spread

Security Affairs

JULY 30, 2018

Security experts from Kaspersky Lab have spotted a new cryptocurrency miner dubbed PowerGhost that can spread leveraging a fileless infection technique. “The malware, which we dubbed PowerGhost, is capable of stealthily establishing itself in a system and spreading across large corporate networks infecting both workstations and servers.”

Cryptocurrency

Cryptocurrency DDOS Advertising Malware

Romanian duo convicted of fraud Scheme infecting 400,000 computers

Security Affairs

APRIL 14, 2019

The malware was developed to steal credentials, financial data, personal information, then the crooks offered them on the dark web marketplaces. The crooks used malicious emails purporting to be legitimate from such entities as Western Union, Norton AntiVirus and the IRS to spread the malware. Gaughan in the Northern District of Ohio.

Cryptocurrency

Cryptocurrency Identity Theft Advertising Accountability

Police dismantled bulletproof hosting service provider Lolek Hosted

Security Affairs

AUGUST 12, 2023

Lolek Hosted is a bulletproof hosting service provider used to facilitate the distribution of information-stealing malware, and also to launch DDoS (distributed denial of service) attacks, manage fictitious online shops, manage botnet servers and distribute spam messages worldwide. A joint operation conducted by European and U.S.

Cybercrime

Cybercrime DDOS Ransomware Cryptocurrency

Interpol: Goldfish Alpha operation reduces cryptojacking by 78%

Security Affairs

JANUARY 9, 2020

An operation coordinated by Interpol, dubbed Goldfish Alpha, dismantled an illegal cryptocurrency network operating in Southeast Asia. Interpol announced that it has coordinated a successful international operation aimed at removing cryptocurrency miners that infected routers located in Southeast Asia. ” reported Trend Micro.

Cryptocurrency

Cryptocurrency Cybercrime Internet Internet

Police arrested 32 people while investigating underground economy forum

Security Affairs

JUNE 26, 2020

As a result of the raids on 232 sites, the agents have found weapons, drugs, computers, around 50,000 euros ($56,300) in cash, cryptocurrency, the police also seized 300 terabytes of data. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. The crimenetwork.co ” reported the German website TheLocal.

Advertising

Advertising Cryptocurrency Malware Hacking

Group-IB experts record a massive surge of user data leaks form cryptocurrency exchanges

Security Affairs

AUGUST 7, 2018

Group-IB researchers have investigated user data leaks from cryptocurrency exchanges and has analyzed the nature of these incidents. In 2017, when cryptocurrencies were gaining momentum, their record-breaking capitalization and a spike in Bitcoin’s exchange rate led to dozens of attacks on cryptocurrency services.

Cryptocurrency

Cryptocurrency Passwords Authentication Accountability

Alexander Vinnik, the popular cyber criminal goes on trial in Paris

Security Affairs

OCTOBER 19, 2020

In 2017, Greek Police arrested the Russian national Alexander Vinnik and they accused the man of running the BTC-e Bitcoin exchange to launder more than US$4bn worth of the cryptocurrency. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. SecurityAffairs – hacking, cybercrime). million withdrawn.

Advertising

Advertising Cybercrime Hacking Cryptocurrency

Mirai authors avoid the jail by helping US authorities in other investigations

Security Affairs

SEPTEMBER 19, 2018

Three men who admitted to being the authors of the Mirai botnet avoided the jail after helping the FBI in other cybercrime investigations. Now three individuals who admitted to being the authors of the infamous botnet avoided the jail after helping feds in another cybercrime investigations. ” continues the press release.

Cybercrime

Cybercrime DDOS Cryptocurrency Advertising

Vietnam-linked Bismuth APT leverages coin miners to stay under the radar

Security Affairs

DECEMBER 1, 2020

Microsoft warns of Vietnam-linked Bismuth group that is deploying cryptocurrency miner while continues its cyberespionage campaigns. Researchers from Microsoft reported that the Vietnam-linked Bismuth group, aka OceanLotus , Cobalt Kitty , or APT32 , is deploying cryptocurrency miners while continues its cyberespionage campaigns.

Cryptocurrency

Cryptocurrency Antivirus Manufacturing Government

Sustes Malware: CPU for Monero

Security Affairs

SEPTEMBER 20, 2018

Sustes Malware doesn’t infect victims by itself, but it is spread via brute-force activities with special focus on IoT and Linux servers. Everybody knows Monero cryptocurrency and probably everybody knows that it has built upon privacy, by meaning It’s not that simple to figure out Monero wallet balance. XMRIG prove 1.

Malware

Malware Computers and Electronics Penetration Testing Cryptocurrency

Sodinokibi Ransomware crew chooses Monero for ransom payments

Security Affairs

APRIL 13, 2020

The crew behind the Sodinokibi Ransomware plans to stop accepting Bitcoin and switched on Monero cryptocurrency to hide the money trail. The gang behind the Sodinokibi Ransomware has started accepting the Monero cryptocurrency instead of Bitcoin to make it harder investigation by law enforcement agencies. Pierluigi Paganini.

Ransomware

Ransomware Cryptocurrency Advertising Hacking

Documents Unsealed: North Korea's Global Hacking Campaign

SecureWorld News

FEBRUARY 18, 2021

And the targets in this case are widespread: banks, ATMs, cryptocurrency exchanges, online casinos, movie studios such as Sony Pictures, and theater chains such as AMC. million from an Indonesian cryptocurrency company in September 2018; and $11.8 It shows the nation-state's sweeping efforts to steal $1.3 The list goes on.

Hacking

Hacking Cryptocurrency Computers and Electronics Banking

Pacha Group declares war to rival crypto mining hacking groups

Security Affairs

MAY 12, 2019

Researchers at Intezer Labs continued to monitor this cybercrime group and discovered that it is also targeting cloud-based environments and working to disrupt operations of other crypto-mining groups, such as the Rocke Group. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Hacking

Hacking Cryptocurrency Advertising Cybercrime

Security Affairs newsletter Round 283

Security Affairs

SEPTEMBER 27, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

IoT

IoT Banking Advertising Ransomware

The author of the Mirai botnet gets six months of house arrest

Security Affairs

OCTOBER 30, 2018

Jha pleaded guilty to carrying out multiple DDoS attacks against his alma mater Rutgers University between November 2014 and September 2016, before creating the Mirai botnet. In September, Jha and two accomplices admitted to be the authors of the infamous botnet and avoided the jail after helping feds in another cybercrime investigations.

DDOS

DDOS IoT Advertising Malware

Law enforcement agencies dismantled Infinity Black hacker group

Security Affairs

MAY 6, 2020

Europol announced another success in the fight against cybercrime, today it has arrested five Polish hackers who were members of the Infinity Black hacking group. The crime gang was formed in 2018, it was involved in distributing stolen user credentials, developing and distributing malware and hacking tools, and fraud. .

Computers and Electronics

Computers and Electronics Hacking Cryptocurrency Accountability

Security Affairs newsletter Round 181 – News of the week

Security Affairs

SEPTEMBER 23, 2018

New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms. Magecart cybercrime group stole customers credit cards from Newegg electronics retailer. Sustes Malware: CPU for Monero. Hackers stole $60 Million worth of cryptocurrencies from Japanese Zaif exchange.

Computers and Electronics

Computers and Electronics Cryptocurrency Spyware Data breaches

Authorities shut down major darknet marketplaces: the Wall Street Market and Valhalla

Security Affairs

MAY 3, 2019

The Wall Street Market marketplace was considered one of the most important points of aggregation in the cybercrime underground for trading in cocaine, heroin, cannabis and amphetamines as well as digital goods (i.e. stolen data, malware, and fake documents). Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. .

Marketing

Marketing Cryptocurrency Cybercrime Advertising

U.S. offers up to $5 Million rewards for info on North Korea-linked operations

Security Affairs

APRIL 16, 2020

and UN sanctions, the DPRK has increasingly relied on illicit activities – including cybercrime – to generate revenue for its weapons of mass destruction and ballistic missile programs.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Under the pressure of robust U.S. ” reads the advisory.

Cyber threats

Cyber threats Banking Government Advertising

Raccoon Malware, a success case in the cybercrime ecosystem

U.S. Indicts North Korean Hackers in Theft of $200 Million

Webinars

Trending Sources

Anubis, a new info-stealing malware spreads in the wild

Webinars

CryptoCore hacker group stole over $200M from cryptocurrency exchanges

New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms

QQAAZZ crime gang charged for laundering money stolen by malware gangs

New Lobshot hVNC malware spreads via Google ads

Ten Years Later, New Clues in the Target Breach

BlackSquid malware uses multiple exploits to drop cryptocurrency miners

Chinese-speaking cybercrime gang Rocke changes tactics

Law enforcement operation dismantled 911 S5 botnet

Crooks use weaponized coronavirus map to deliver malware

Ransomware Gangs and the Name Game Distraction

The new Azorult 3.3 is available in the cybercrime underground market

Ukraine police and Binance dismantled a cyber gang behind $42M money laundering

Happy 13th Birthday, KrebsOnSecurity!

REvil Ransomware member win the auction for KPot stealer source code

Interview With a Crypto Scam Investment Spammer

Xwo Malware scans the Internet for Exposed Services, Default Passwords

Gustuff Android banking trojan targets 125+ banking, and 32 cryptocurrency apps

Three North Korean hackers charged for financial and revenge-motivated hacks

TeamTNT group adds new detection evasion tool to its Linux miner

Hackers abuse BitBucket to infect 500K+ hosts with arsenal of malware

Ursnif: The Latest Evolution of the Most Popular Banking Malware

Group-IB presented latest cybercrime and nation-state hacking trends in Asia

Fileless PowerGhost cryptocurrency miner leverages EternalBlue exploit to spread

Romanian duo convicted of fraud Scheme infecting 400,000 computers

Police dismantled bulletproof hosting service provider Lolek Hosted

Interpol: Goldfish Alpha operation reduces cryptojacking by 78%

Police arrested 32 people while investigating underground economy forum

Group-IB experts record a massive surge of user data leaks form cryptocurrency exchanges

Alexander Vinnik, the popular cyber criminal goes on trial in Paris

Mirai authors avoid the jail by helping US authorities in other investigations

Vietnam-linked Bismuth APT leverages coin miners to stay under the radar

Sustes Malware: CPU for Monero

Sodinokibi Ransomware crew chooses Monero for ransom payments

Documents Unsealed: North Korea's Global Hacking Campaign

Pacha Group declares war to rival crypto mining hacking groups

Security Affairs newsletter Round 283

The author of the Mirai botnet gets six months of house arrest

Law enforcement agencies dismantled Infinity Black hacker group

Security Affairs newsletter Round 181 – News of the week

Authorities shut down major darknet marketplaces: the Wall Street Market and Valhalla

U.S. offers up to $5 Million rewards for info on North Korea-linked operations

Stay Connected