Krebs on Security

DECEMBER 19, 2022

men have been charged with hacking into the Ring home security cameras of a dozen random people and then “swatting” them — falsely reporting a violent incident at the target’s address to trick local police into responding with force. conspired to hack into Yahoo email accounts belonging to victims in the United States.

Hacking 295

Hacking Media Passwords Identity Theft 295

Krebs on Security

FEBRUARY 26, 2023

Media coverage understandably focused on GoDaddy’s admission that it suffered three different cyberattacks over as many years at the hands of the same hacking group. GoDaddy has not disclosed the source of the breach in December 2022 that led to malware on some customer websites.

Hacking 277

Hacking Social Engineering Phishing Scams 277

Security Affairs

FEBRUARY 3, 2022

Threat actors have stolen $325 million in cryptocurrency leveraging a bug in the Wormhole communication bridge. This is the second-biggest hack of a DeFi platform ever, just after the $600 million Poly Network security breach. — Wormhole (@wormholecrypto) February 2, 2022. — samczsun (@samczsun) February 3, 2022.

Cryptocurrency 83

Cryptocurrency Hacking Accountability Network Security 83

Krebs on Security

MAY 29, 2024

” From 2015 to July 2022, 911 S5 sold access to hundreds of thousands of Microsoft Windows computers daily, as “proxies” that allowed customers to route their Internet traffic through PCs in virtually any country or city around the globe — but predominantly in the United States. The prices page for 911 S5, circa July 2022. $28

VPN 292

VPN Government Cybercrime Internet 292

Security Affairs

FEBRUARY 8, 2022

billion worth of cryptocurrency linked to the 2016 Bitfinex cryptocurrency exchange hack. Billion in stolen cryptocurrency stolen during the 2016 hack of Bitfinex. billion in cryptocurrency linked to that hack. billion in cryptocurrency linked to that hack. The law enforcement seized $3.6

Cryptocurrency 77

Cryptocurrency Hacking Accountability Marketing 77

Security Affairs

JANUARY 20, 2022

Crypto.com confirmed that a cyber attack compromised around 400 of its customer accounts leading in the theft of $33 million. Crypto.com is a cryptocurrency exchange app based in Singapore, the app currently has 10 million users and 3,000 employees. — Crypto.com (@cryptocom) January 17, 2022. ErgoBTC) January 18, 2022.

Accountability 81

Accountability Hacking Cryptocurrency Cyber Attacks 81

Security Affairs

AUGUST 1, 2023

Researchers spotted a Python variant of the NodeStealer that was designed to take over Facebook business accounts and cryptocurrency wallets. The malicious code was designed to take over Facebook business accounts and steal funds from cryptocurrency wallets. ” reads the analysis published by Palo Alto Networks.

Accountability 83

Accountability Cryptocurrency Malware Phishing 83

Security Affairs

JULY 19, 2022

FBI has warned of crooks developing malicious cryptocurrency-themed apps to steal crypto assets from the users. Federal Bureau of Investigation (FBI) has warned of crooks creating malicious cryptocurrency-themed apps to steal crypto assets from investors. million from 244 victims between October 4, 2021, and May 13, 2022.

Cryptocurrency 97

Cryptocurrency Mobile Hacking Accountability 97

Krebs on Security

JANUARY 30, 2024

authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. Sources close to the investigation tell KrebsOnSecurity the accused was a key member of a criminal hacking group blamed for a string of cyber intrusions at major U.S.

Social Engineering 326

Social Engineering Mobile Cybercrime Passwords 326

Security Affairs

JANUARY 31, 2022

Threat actors stole $80M worth of cryptocurrency from the Qubit DeFi platform by exploiting a flaw in the smart contract code used in an Ethereum bridge. The DeFi platform Qubit Finance was victim of a cyber heist, threat actors stole around $80 million in cryptocurrency last week. SecurityAffairs – hacking, REvil ransomware).

Cryptocurrency 81

Cryptocurrency Hacking Accountability Ransomware 81

Security Affairs

SEPTEMBER 22, 2022

Threat actors targeted tens thousands of unauthenticated Redis servers exposed on the internet as part of a cryptocurrency campaign. “Under certain conditions, if Redis runs with the root account (or not even), attackers can write an SSH public key file to the root account, directly logging on to the victim server through SSH.

Cryptocurrency 90

Cryptocurrency Internet Internet Hacking 90

SecureList

NOVEMBER 10, 2022

Cryptocurrency prices were dropping from the end of 2021 and throughout the first half of 2022. Apart from cryptocurrency theft they extort digital money or illicitly mine it using victim’s devices instead of their own. Cybercriminals pay neither for equipment, nor for electricity, which is rather expensive in 2022.

Cryptocurrency 111

Cryptocurrency Malware Software Ransomware 111

Security Affairs

APRIL 4, 2023

Threat actors behind the 3CX supply chain attack have targeted a limited number of cryptocurrency companies with a second-state implant. SentinelOne is tracking the malicious activity as SmoothOperator, the company speculates that the threat actor behind the attack has set up its infrastructure starting as early as February 2022.

Cryptocurrency 75

Cryptocurrency Malware Software Manufacturing 75

SecureWorld News

MARCH 15, 2023

Alright, how many of you saw a cryptocurrency ad on TV in 2022? Now the important question: how many of you got scammed in some sort of way by cryptocurrency or another type of investment? The report shows that phishing schemes were the most common type of cybercrime reported by victims in 2022, with 300,497 complaints.

Cybercrime 126

Cybercrime Scams Cryptocurrency Identity Theft 126

Security Affairs

OCTOBER 15, 2022

In July 2022, researchers from WithSecure (formerly F-Secure Business) discovered a DUCKTAIL campaign targeting individuals and organizations that operate on Facebook’s Business and Ads platform. The end goal is to hijack Facebook Business accounts managed by the victims. ” reads the analysis published by Zscaler. mediafire[.]com),

Accountability 121

Accountability Malware Cryptocurrency Media 121

Security Affairs

JULY 5, 2022

Threat actors compromised the Twitter and YouTube accounts of the British Army to promote online crypto scams. The Twitter and YouTube accounts of the British Army were used to promote NFT and other crypto scams. We are aware of a breach of the Army’s Twitter and YouTube accounts and an investigation is underway. .

Scams 78

Scams Accountability Authentication Cryptocurrency 78

Krebs on Security

SEPTEMBER 22, 2023

But critics say the move is little more than a public relations stunt that will do nothing to help countless early adopters whose password vaults were exposed in a 2022 breach at LastPass. KrebsOnSecurity last month interviewed a victim who recently saw more than three million dollars worth of cryptocurrency siphoned from his account.

Passwords 272

Passwords Encryption Password Management Cryptocurrency 272

Security Affairs

JUNE 15, 2022

PrivacyAffairs released the Dark Web Index 2022, the document provides the prices for illegal services/products available in the black marketplaces. The document updates the information provided in the Dark Web Index 2022 report. The document updates the information provided in the Dark Web Index 2022 report. 50 in 2021).

Identity Theft 90

Identity Theft Accountability DDOS Cybercrime 90

SecureList

FEBRUARY 16, 2023

Fake donation sites started popping up after the Ukraine crisis broke out in 2022, pretending to accept money as aid to Ukraine. These sites referenced public figures and humanitarian groups, offering to accept cash in cryptocurrency, something that should have raised a red flag in itself.

Phishing 95

Phishing Scams Accountability Energy and Utilities 95

Krebs on Security

MARCH 26, 2024

Assuming the user manages not to fat-finger the wrong button on the umpteenth password reset request, the scammers will then call the victim while spoofing Apple support in the caller ID, saying the user’s account is under attack and that Apple support needs to “verify” a one-time code. ” Ken said.

Passwords 346

Passwords Accountability Engineering Phishing 346

Krebs on Security

DECEMBER 29, 2022

Thanks to your readership and support, I was able to spend more time in 2022 on some deep, meaty investigative stories — the really satisfying kind with the potential to affect positive change. Some of that work is highlighted in the 2022 Year in Review review below.

Cryptocurrency 239

Cryptocurrency Cybercrime Computers and Electronics Scams 239

SecureList

AUGUST 3, 2022

Politically-motivated cyberattacks dominated the DDoS landscape in the second quarter of 2022 just as they did in the previous reporting period. The pro-Russian hacktivists Killnet, which first surfaced in January 2022, claimed responsibility for DDoS attacks on the websites of various European organizations from April through June.

DDOS 112

DDOS Government Marketing IoT 112

Krebs on Security

MAY 4, 2023

” That handle used the same ICQ instant messenger account number ( 555724 ) as a Mazafaka denizen named “ Nordex.” ” In February 2005, Nordex posted to Mazafaka that he was in the market for hacked bank accounts, and offered 50 percent of the take. In 2017, U.S.

Marketing 244

Marketing Cybercrime Accountability Cryptocurrency 244

SecureList

MAY 27, 2022

IT threat evolution in Q1 2022. IT threat evolution in Q1 2022. IT threat evolution in Q1 2022. In January, we reported a malicious campaign targeting companies that work with cryptocurrencies, smart contracts, decentralized finance and blockchain technology: the attackers are interested in fintech in general.

Phishing 108

Phishing Spyware Firmware Malware 108

Security Affairs

DECEMBER 8, 2023

Anatoly Legkodymov, the founder of the Bitzlato cryptocurrency exchange has pleaded in a money-laundering scheme. Anatoly Legkodymov (41) (aka Anatolii Legkodymov, Gandalf, and Tolik), the Russian founder of the unlicensed Bitzlato cryptocurrency exchange, has pleaded guilty in a money-laundering scheme.

Cryptocurrency 87

Cryptocurrency Marketing Advertising Hacking 87

Security Affairs

FEBRUARY 10, 2022

Spanish National Police has arrested eight alleged members of a crime organization who were able to steal money from the bank accounts of the victims through SIM swapping attacks. Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts.

Banking 99

Banking Accountability Mobile Cryptocurrency 99

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. The messages said recipients had earned an investment credit at a cryptocurrency trading platform called moonxtrade[.]com. A DIRECT QUOT The domain quot[.]pw

Scams 252

Scams DDOS Cryptocurrency Accountability 252

SecureList

NOVEMBER 23, 2021

Finally, we will make some forecasts about financial attacks in 2022. We should expect more fraud, targeting mostly BTC , because this cryptocurrency is the most popular. First of all, we are going to analyze the forecasts we made at the end of 2020 and see how accurate they were. Analysis of forecasts for 2021.

Cryptocurrency 110

Cryptocurrency Banking Cybercrime Ransomware 110

Security Affairs

MAY 30, 2024

“According to an indictment unsealed on May 24, from 2014 through July 2022, Wang and others are alleged to have created and disseminated malware to compromise and amass a network of millions of residential Windows computers worldwide.” The compromised devices were recruited in the 911 S5 residential proxy service.

VPN 83

VPN Cryptocurrency Malware Software 83

Malwarebytes

MARCH 13, 2023

The Federal Bureau of Investigation (FBI) has published its 2022 Internet Crime Report. Crypto-investment fraud saw an incredible growth in 2022, both in number of scams and in the amount of damage done. billion in 2022, which is a 127% rise. billion in 2022, an increase of 183%. Hacked social media accounts.

Cryptocurrency 62

Cryptocurrency Scams Media Social Engineering 62

Security Affairs

FEBRUARY 19, 2024

The Raccoon stealer was first spotted in April 2019, it was designed to steal victims’ credit card data, email credentials, cryptocurrency wallets, and other sensitive data. The Raccoon stealer is written in C++ by Russian-speaking developers who initially promoted it exclusively on Russian-speaking hacking forums. in the stolen data.

Identity Theft 87

Identity Theft Cryptocurrency Cybercrime Hacking 87

Security Affairs

APRIL 28, 2024

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cybercrime 90

Cybercrime Spyware Data breaches Antivirus 90

Security Affairs

JANUARY 17, 2022

Several Crypto.com users reported suspicious transactions that stole thousands of dollars in Ethereum (ETH) despite their accounts being protected with 2FA. I messaged yah guys hours ago about my account having 4.28ETH stolen out of nowhere and I’m also wondering how they got passed the 2FA? My wallet was just hacked.27

Cryptocurrency 77

Cryptocurrency Accountability Hacking Authentication 77

SecureWorld News

FEBRUARY 3, 2023

The operation took place between August and November 2022 and targeted organizations in medical research, healthcare, chemical engineering, energy, defense, and a leading research university. Related articles: Lazarus APT Targeting Cryptocurrency, CISA Warns North Korean APT Lazarus Targets Energy Sector in US, Canada, Japan

Hacking 83

Hacking Healthcare Cryptocurrency Malware 83

Security Affairs

SEPTEMBER 22, 2022

Malicious actors continue to target organizations in the cryptocurrency industry, the last victim in order of time is crypto trading firm Wintermute. ” Threat actors breached the company and performed multiple transactions that transferred multiple cryptocurrencies to a wallet under their control. ” Gaevoy added.

Marketing 78

Marketing Cryptocurrency Accountability Hacking 78

Security Affairs

APRIL 4, 2022

During the weekend, multiple owners of Trezor hardware cryptocurrency wallets reported having received fake data breach notifications from Trezor, BleepingComputer first reported. pic.twitter.com/BQSB2uV1JW — Life in DeFi (@lifeindefi) April 3, 2022. 1/ — Trezor (@Trezor) April 3, 2022. You may want to warn everyone.

Phishing 108

Phishing Data breaches Cryptocurrency Social Engineering 108

SecureList

JULY 28, 2022

This is our latest installment, focusing on activities that we observed during Q2 2022. We discovered a highly active campaign, starting in March 2022, targeting stock and cryptocurrency investors in South Korea. The actor used cryptocurrency-related contents or complaints from law enforcement as lure themes.

Malware 134

Malware Firmware Phishing Cryptocurrency 134