Security Affairs

MAY 2, 2023

“Web resources offered users anonymous exchange of cryptocurrencies. ” Many of these services are advertised on cybercrime forums, the services were offering support in both Russian and English. . Such services were provided to facilitate the legalization and laundering of money obtained illegally.” authorities.”

Cybercrime 97

Cybercrime Cryptocurrency Advertising Education 97

Security Affairs

FEBRUARY 14, 2023

The threat actors behind a massive AdSense fraud campaign infected 10,890 WordPress sites since September 2022. In November 2022, researchers from security firm Sucuri reported to have tracked a surge in WordPress malware redirecting website visitors to fake Q&A sites via ois[.]is. Website backdoors to maintain unauthorized access.

Malware 90

Malware DDOS Hacking Cryptocurrency 90

Security Affairs

MAY 18, 2022

Microsoft researchers warn of the rising threat of cryware targeting non-custodial cryptocurrency wallets, also known as hot wallets. Microsoft warns of the rise of cryware, malicious software used to steal info an dfunds from non-custodial cryptocurrency wallets, also known as hot wallets. Ransomware. Password and info stealers.

Cryptocurrency 103

Cryptocurrency Social Engineering Malware Cybercrime 103

Security Affairs

APRIL 28, 2023

The malware allows operators to steal login credentials from popular services such as social media platforms and cryptocurrency wallets, then stolen data is sold on cybercrime forums by the operators. CryptBot distributors spread the malware through modified versions of legitimate software such as Google Earth Pro and Google Chrome.

Malware 98

Malware Cybercrime Cryptocurrency Media 98

ZoneAlarm

FEBRUARY 21, 2023

In March 2022, the Lazarus Group, a North Korea-backed hacking group, stole around $5.84 million worth of cryptocurrency through the Axie Infinity Ronin Bridge hack. However, over ten months later, the Norwegian police agency Økokrim announced they had seized the stolen funds.

Cryptocurrency 95

Cryptocurrency Hacking Data privacy Cybercrime 95

Krebs on Security

SEPTEMBER 13, 2024

The security firm CrowdStrike dubbed the group “ Scattered Spider ,” a recognition that the MGM hackers came from different hacker cliques scattered across an ocean of Telegram and Discord servers dedicated to financially-oriented cybercrime. ” Beige members were implicated in two stories published here in 2020.

Cybercrime 262

Cybercrime Accountability Mobile Hacking 262

Security Affairs

JUNE 3, 2022

The bot focuses on cryptocurrency mining and cryptocurrency theft via clipboard hijacking. “However, some funds had also been transferred to what appear to be cryptocurrency tumblers, also known as cryptocurrency mixing services.” SecurityAffairs – hacking, cryptocurrency). million in illicit gains.

Cryptocurrency 139

Cryptocurrency Malware Hacking Software 139

ZoneAlarm

FEBRUARY 21, 2023

In March 2022, the Lazarus Group, a North Korea-backed hacking group, stole around $5.84 million worth of cryptocurrency through the Axie Infinity Ronin Bridge hack. However, over ten months later, the Norwegian police agency Økokrim announced they had seized the stolen funds.

Cryptocurrency 77

Cryptocurrency Hacking Data privacy Cybercrime 77

Security Affairs

APRIL 9, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter newsletter) The post Security Affairs newsletter Round 414 by Pierluigi Paganini – International edition appeared first on Security Affairs.

Computers and Electronics 93

Computers and Electronics Backups Cybercrime Marketing 93

Security Affairs

MAY 15, 2022

The Eternity operators also sells the clipper malware for $110, it monitors the clipboard for cryptocurrency wallets and replaces them with the wallet address of the attackers, The Eternity Ransomware goes for $490 while the Eternity Worm is available for $390. To nominate, please visit:?

Ransomware 90

Ransomware DDOS Cybercrime Malware 90

Security Affairs

MAY 27, 2022

The malware is available for rent on underground forums for $5000 per month since March 2022. Available for rent on underground forums for $5K/month since March 2022, ERMAC 2.0 ESETresearch @LukasStefanko 1/3 pic.twitter.com/hGeD4ZSwve — ESET research (@ESETresearch) May 18, 2022. A new #Android banker ERMAC 2.0

Banking 143

Banking Malware Cybercrime Phishing 143

Krebs on Security

DECEMBER 5, 2022

The defendants, who initially pursued a strategy of counter suing Google for interfering in their sprawling cybercrime business, later brazenly offered to dismantle the botnet in exchange for payment from Google. 2022 by Google researcher Luca Nagy. Another slide from Google researcher Luca Nagy’s September 2022 talk on Glupteba.

Cybercrime 235

Cybercrime Malware Internet Internet 235

Security Affairs

MAY 1, 2023

While investigating the malware distribution, the researchers noticed the use of an infrastructure known to belong to cybercrime group TA505. com, which is a domain associated with the operations of the TA505 cybercrime gang. LOBSHOT targets specific cryptocurrency wallet extensions for Google Chrome, Edge, and Firefox.

Malware 96

Malware Cybercrime Banking Software 96

Security Affairs

APRIL 5, 2023

The discovery of STYX coincides with Resecurity financial crime risk analysts observing a significant increase in threat actors offering money-laundering services that exploit digital banking and cryptocurrency accounts. The discovery of STYX also highlights the need for international cooperation in combating cybercrime.

Banking 91

Banking Cybercrime Accountability Risk 91

Security Affairs

MAY 17, 2022

Trend Micro researchers also discovered 40 fake cryptocurrency miner apps that are variants of similar apps that they discovered in August 2021. Web researchers, the development team behind the threat has frequently changed its code. Most of the malicious apps were VPN software (42), followed by Camera (20), and Photo Editing (13).

Spyware 97

Spyware Cryptocurrency VPN Malware 97

Security Boulevard

MARCH 11, 2022

Flashpoint analysts have uncovered 262 cryptocurrency addresses used in advertisements for donations to either Ukrainian or Russian causes related to the war since February 21, 2022. Click here for Flashpoint’s coverage of the role of intelligence in Russia’s war on Ukraine.

Cryptocurrency 115

Cryptocurrency Advertising Cybercrime 115

Security Affairs

APRIL 29, 2023

ViperSoftX is a JavaScript-based Remote Access Trojan (RAT) and cryptocurrency stealer that was first analyzed by Fortinet in February 2020. In November 2022, Avast researchers discovered a malicious extension for Chromium-based web browsers that was spreading via ViperSoftX. ” reads the analysis published by Trend Micro.

Encryption 96

Encryption Malware Cryptocurrency Software 96

Security Affairs

MAY 2, 2022

The Russian police arrested 14 alleged members of the ransomware gang and raided 25 addresses seizing computer equipment and cryptocurrency wallets. Timestamp 2022-04-27, new config, new mutex, campaign ID, etc. Raw config for the REvil ransommware reborn: [link] [link] — Vitali Kremez (@VK_Intel) May 2, 2022.

Ransomware 101

Ransomware Encryption Malware Cryptocurrency 101

Security Affairs

MAY 17, 2022

” Zagala designed multiple ransomware and sold or rented them in the cybercrime ecosystem. Zagala was accepting payment both in fiat currency and cryptocurrency. One of the ransomware developed by Zagala is “ Jigsaw v. 2,” includes a “Doomsday” counter used to count the victim’s attempts to eradicate the ransomware.

Ransomware 96

Ransomware Cybercrime VPN Malware 96

SecureWorld News

JANUARY 31, 2022

The cryptocurrency lending platform announced via Twitter that a hacker stole Binance Coin totaling over $80 million through its QBridge protocol. January 28, 2022. January 29, 2022. January 30, 2022. That trend appears to be continuing in 2022. They also added this: "It's not too late to return to funds.

Cryptocurrency 89

Cryptocurrency Cybercrime Hacking 89

Security Affairs

FEBRUARY 14, 2023

According to the experts, the activity is still ongoing and is part of a malicious campaign that they discovered on November 2022. Phylum pointed out that the obfuscation technique used in these packages is significantly different from the packages they have spotted in November 2022. ” reads the analysis published by Phylum.

Malware 85

Malware Cryptocurrency Hacking Software 85

Security Affairs

APRIL 6, 2022

Cash App is an app that allows users to easily send money, spend money, save money, and buy cryptocurrency. “On April 4, 2022, Block, Inc. The data breach involved a former employee that downloaded some unspecified reports of its Cash App Investing app that contained some U.S. customer information. customer information. .”

Data breaches 126

Data breaches Cryptocurrency Accountability Banking 126

Security Affairs

MAY 15, 2023

SHARP (37) was arrested in December 2021, in March he pleaded guilty to posing as an anonymous hacker and a whistleblower to extort almost $2 million worth of cryptocurrency while working at Ubiquiti. SHARP also acted to make its activity as malicious operations conducted by other coworkers.

Marketing 97

Marketing Cybercrime Cryptocurrency Hacking 97

Security Affairs

MAY 24, 2023

In December 2022, South Korea’s spy agency, the National Intelligence Service, estimated that North Korea-linked threat actors have stolen an estimated 1.5 billion) in cryptocurrency and other virtual assets in the past five years. billion (2 trillion won) worth of cryptocurrency from multiple exchanges during the past five years.

Government 93

Government Cryptocurrency Media Technology 93

Security Boulevard

AUGUST 4, 2022

Department of Justice announced on July 26 that it seized approximately half a million dollars’ worth of cryptocurrency assets from North Korean based threat actors, who receive the funds as ransom following a ransomware operation against U.S. based hospitals. 2 , 3 ) In late July, the U.S. 5 ) More recently, the U.S.

Internet 59

Internet Internet Cryptocurrency Cybercrime 59

Security Affairs

MAY 21, 2023

TurkoRat is an information-stealing malware that can obtain a broad range of data from the infected machine, including account login credentials, cryptocurrency wallets, and website cookies. According to the experts, the activity is still ongoing and is part of a malicious campaign that they discovered on November 2022.

Social Engineering 97

Social Engineering Malware Cryptocurrency Engineering 97

Security Affairs

JUNE 15, 2022

Researchers discovered a new Golang-based peer-to-peer (P2P) botnet, dubbed Panchan, targeting Linux servers in the education sector since March 2022. Akamai security researchers discovered a new Golang-based P2P Botnet, tracked as Panchan, that is targeting Linux servers that has been active since March 2022. Pierluigi Paganini.

Malware 97

Malware Cryptocurrency Education Engineering 97

The Last Watchdog

SEPTEMBER 28, 2022

According to a new study, phishing attacks rose 61 percent in 2022, with cryptocurrency fraud increasing 257 percent year-over-year. Because the address comes across as an internal team member, people trust them, ultimately exposing themselves to cybercrime. Here are four new phishing trends keeping businesses on their toes.

Phishing 124

Phishing Scams Cybercrime Passwords 124

Security Affairs

MAY 7, 2023

If you’re paying through cryptocurrency, you don’t know who you’re paying it to,” Clifford Neuman, the director of USC’s Center for Computer Systems Security, told the Los Angeles Times. “It It could be a sanctioned entity, whether it’s Iran, whether it’s North Korea, whether it’s a terrorist organization.”

Ransomware 98

Ransomware Insurance Cryptocurrency Encryption 98

SecureList

SEPTEMBER 28, 2023

Last month we covered a wide range of cybercrime topics. But there’s more going on in the cybercrime landscape, so we also published reports on new versions of the Lumma stealer and Zanubis Android banking trojan. This blog post contains excerpts from those reports. This blog post contains excerpts from those reports.

Banking 106

Banking Malware Cybercrime Encryption 106

Security Affairs

MAY 15, 2022

. — Microsoft Security Intelligence (@MsftSecIntel) May 13, 2022. Sysrv-K leverages the exploits to take over the vulnerable web servers, the malware targets different issues, including a code injection vulnerability, tracked as CVE-2022-22947 , that resides in the Spring Cloud Gateway library. To nominate, please visit:?

Security Intelligence 94

Security Intelligence Malware Architecture Backups 94

SecureList

APRIL 27, 2022

This is our latest installment, focusing on activities that we observed during Q1 2022. In late February 2022, we identified two archives submitted from network addresses in Ukraine to an online multi-scanner service. They are designed to highlight the significant events and findings that we feel people should be aware of.

Malware 137

Malware Firmware Government Phishing 137

Webroot

JANUARY 7, 2022

The cybercrime marketplace also continued to get more robust while the barrier to entry for malicious actors continued to drop. This has created a perfect breeding ground for aspiring cybercriminals and organized cybercrime groups that support newcomers with venture capitalist-style funding. Cryptocurrency.

Cybercrime 110

Cybercrime Ransomware Phishing Cryptocurrency 110

SecureList

MAY 27, 2022

IT threat evolution in Q1 2022. IT threat evolution in Q1 2022. IT threat evolution in Q1 2022. In January, we reported a malicious campaign targeting companies that work with cryptocurrencies, smart contracts, decentralized finance and blockchain technology: the attackers are interested in fintech in general.

Phishing 117

Phishing Spyware Firmware Malware 117

The Last Watchdog

DECEMBER 16, 2021

I expect a new wave of ransomware operators that use cryptocurrency to avoid tracking, remotely-located operations to avoid extradition and arrest, and the hardening of operational security to avoid infrastructure take down. In 2022 we expect to see more aggressive and complex ransomware efforts. Reconstituted hacker rings.

CISO 262

CISO Ransomware Risk Authentication 262

Krebs on Security

JANUARY 26, 2024

The attackers who broke into Medibank in October 2022 stole 9.7 government says Ermakov and the other actors behind the Medibank hack are believed to be linked to the Russia-backed cybercrime gang REvil. “REvil was among the most notorious cybercrime gangs in the world until July 2021 when they disappeared.

Cybercrime 235

Cybercrime Ransomware Retail Insurance 235

Security Affairs

APRIL 27, 2023

CyberNews analyzed a classic cryptocurrency romance scam, also known as CryptoRom, explaining how scammers hid the money CryptoRom scammers hid the money with several layers of obfuscation, but the Cybernews research team discovered that the stolen funds ended up in Binance accounts. The victim is gently persuaded to invest in cryptocurrency.

Scams 94

Scams Cryptocurrency Social Engineering Accountability 94