Krebs on Security

JUNE 15, 2021

Department of Justice (DOJ) last week announced the arrest of a 55-year-old Latvian woman who’s alleged to have worked as a programmer for Trickbot , a malware-as-a-service platform responsible for infecting millions of computers and seeding many of those systems with ransomware. Alla Witte’s personal website — allawitte[.]nl

Cybercrime 321

Cybercrime Ransomware Passwords Banking 321

Krebs on Security

JANUARY 28, 2022

In December 2021, researchers discovered a new ransomware-as-a-service named ALPHV (a.k.a. “ BlackCat “), considered to be the first professional cybercrime group to create and use a ransomware strain written in the Rust programming language. Image: Varonis. Image: Varonis. ” Meanwhile, the U.S.

Ransomware 279

Ransomware Accountability Cybercrime Malware 279

Krebs on Security

MARCH 11, 2024

Borrowing from the playbook of ransomware purveyors, the darknet narcotics bazaar Incognito Market has begun extorting all of its vendors and buyers, threatening to publish cryptocurrency transaction and chat records of users who refuse to pay a fee ranging from $100 to $20,000. “And yes, this is an extortion!!!! .”

Marketing 293

Marketing Scams Cryptocurrency Cybercrime 293

Krebs on Security

JUNE 7, 2021

million worth of Bitcoin that Colonial Pipeline paid to ransomware extortionists last month. The funds had been sent to DarkSide , a ransomware-as-a-service syndicate that disbanded after a May 14 farewell message to affiliates saying its Internet servers and cryptocurrency stash were seized by unknown law enforcement entities.

Ransomware 305

Ransomware Cybercrime Cryptocurrency Healthcare 305

Krebs on Security

MARCH 25, 2022

prison for his role in at least 13 ransomware attacks that caused losses of approximately $53 million. Prosecutors say the accused also enjoyed a lengthy career of “cashing out” access to hacked bank accounts worldwide. The DirectConnection cybercrime forum, circa 2011. Department of Justice.

Ransomware 249

Ransomware Banking Cybercrime Hacking 249

SC Magazine

JUNE 28, 2021

A technician inspects the backside of a cryptocurrency mining farm in Saint Hyacinthe, Quebec. Cryptocurrency is famously anonymous, but evading capture is not the only reason cryptocurrency is the go-to payment solution for ransomware. First, understanding the role of cryptocurrency in ransomware.

Cryptocurrency 92

Cryptocurrency Ransomware Banking Cybercrime 92

SC Magazine

JUNE 28, 2021

A technician inspects the backside of a cryptocurrency mining farm in Saint Hyacinthe, Quebec. Cryptocurrency is famously anonymous, but evading capture is not the only reason cryptocurrency is the go-to payment solution for ransomware. First, understanding the role of cryptocurrency in ransomware.

Cryptocurrency 69

Cryptocurrency Ransomware Banking Cybercrime 69

Krebs on Security

JULY 8, 2019

The crooks behind an affiliate program that paid cybercriminals to install the destructive and wildly successful GandCrab ransomware strain announced on May 31, 2019 they were terminating the program after allegedly having earned more than $2 billion in extortion payouts from victims. Image: Malwarebytes.

Ransomware 260

Ransomware Accountability Cybercrime Passwords 260

SecureWorld News

FEBRUARY 16, 2023

A joint Cybersecurity Advisory (CSA) has revealed that the Democratic People's Republic of Korea (DPRK) is doing its best to become the New Kids on the Block (NKOTB) of ransomware. The CSA provides updates to earlier alerts of malicious cyber actor activities involving DPRK ransomware campaigns—namely Maui and H0lyGh0st ransomware.

Healthcare 91

Healthcare Ransomware Cryptocurrency Cybercrime 91

Krebs on Security

JANUARY 26, 2024

33-year-old Aleksandr Ermakov allegedly stole and leaked the Medibank data while working with one of Russia’s most destructive ransomware groups, but little more is shared about the accused. government says Ermakov and the other actors behind the Medibank hack are believed to be linked to the Russia-backed cybercrime gang REvil.

Cybercrime 242

Cybercrime Ransomware Retail Insurance 242

Malwarebytes

JANUARY 20, 2023

The US Department of Justice (DOJ) has released information about the arrest of Anatoly Legkodymov, the founder and majority owner of a cryptocurrency exchange called Bitzlato, on money laundering charges. The exchange is thought to have fueled crypto-related crimes like ransomware by helping cybercriminals launder illegally obtained money.

Ransomware 84

Ransomware Cryptocurrency Accountability Cybercrime 84

Security Affairs

MARCH 23, 2024

An operation conducted by the Federal Criminal Police Office in Germany (BKA) and the Frankfurt cybercrime combating unit (ZIT) led to the seizure of the infrastructure of the darknet marketplace Nemesis Market in Germany and Lithuania. The law enforcement confiscated about 94,000 euros worth of cryptocurrencies.

Marketing 92

Marketing Cybercrime DDOS Internet 92

SecureWorld News

JANUARY 27, 2023

The United States Department of Justice (DOJ) recently announced that it has successfully taken down the HIVE ransomware network, an international cybercrime ring that had been responsible for stealing and encrypting the data of more than 1,500 companies from 80 different countries. Cybercrime is a constantly evolving threat.

Ransomware 81

Ransomware Cybercrime Cryptocurrency Telecommunications 81

Security Boulevard

AUGUST 2, 2022

Current threat actor activity is incentivized by a broad attack surface represented through high volumes of users and systems, and high potential profits represented through the variety of cryptocurrency offerings. It is easy to detect and block things like malicious cryptocurrency apps or crypto-phishing websites.

Cryptocurrency 98

Cryptocurrency Ransomware Government Risk 98

Krebs on Security

MAY 4, 2023

government this week put a $10 million bounty on the head of a Russian man who for the past 18 years operated Try2Check , one of the cybercrime underground’s most trusted services for checking the validity of stolen credit card data. In 2017, U.S. In Kulkov’s case, it no doubt was critical to U.S.

Marketing 244

Marketing Cybercrime Accountability Cryptocurrency 244

Krebs on Security

DECEMBER 29, 2022

Here’s a look at some of the more notable cybercrime stories from the past year, as covered by KrebsOnSecurity and elsewhere. Internal Revenue Service website for months: Anyone seeking to create an account to view their tax records online would soon be required to provide biometric data to a private company in Virginia — ID.me.

Cryptocurrency 239

Cryptocurrency Cybercrime Computers and Electronics Scams 239

Krebs on Security

AUGUST 29, 2023

government today announced a coordinated crackdown against QakBot , a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. Reliaquest says QakBot infections accounted for nearly one-third of all loaders observed in the wild during the first six months of this year.

Hacking 262

Hacking Malware Ransomware Government 262

SecureWorld News

NOVEMBER 8, 2023

The United States Treasury Department's Office of Foreign Assets Control (OFAC) has taken decisive action against Ekaterina Zhdanova, a Russian national, for her significant role in laundering and transferring funds using virtual currency on behalf of Russian elites and ransomware actors, including the notorious Ryuk gang.

Cryptocurrency 86

Cryptocurrency Ransomware Cybercrime Government 86

Krebs on Security

OCTOBER 31, 2022

A 26-year-old Ukrainian man is awaiting extradition from The Netherlands to the United States on charges that he acted as a core developer for Raccoon , a popular “malware-as-a-service” offering that helped paying customers steal passwords and financial data from millions of cybercrime victims. According to the U.S. Image: USDOJ.

Malware 300

Malware Identity Theft Cybercrime Accountability 300

Krebs on Security

FEBRUARY 25, 2024

The FBI’s takedown of the LockBit ransomware group last week came as LockBit was preparing to release sensitive data stolen from government computer systems in Fulton County, Ga. The accusation is an explosive one because nobody will pay a ransom if they don’t believe the ransomware group will hold up its end of the bargain.

Ransomware 349

Ransomware Cybercrime Hacking Government 349

SecureList

OCTOBER 20, 2021

Having been in the field for so long, we have witnessed some major changes in the cybercrime world’s modus operandi. This report shares our insights into the Russian-speaking cybercrime world and the changes in how it operates that have happened in the past five years.

Cybercrime 140

Cybercrime Banking Malware Ransomware 140

Krebs on Security

NOVEMBER 8, 2021

Department of Justice today announced the arrest of Ukrainian man accused of deploying ransomware on behalf of the REvil ransomware gang, a Russian-speaking cybercriminal collective that has extorted hundreds of millions from victim organizations. million in cryptocurrency sent to another REvil affiliate, and that the U.S.

Ransomware 307

Ransomware Cybercrime System Administration Passwords 307

Security Affairs

APRIL 28, 2024

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cybercrime 90

Cybercrime Spyware Data breaches Antivirus 90

Krebs on Security

DECEMBER 8, 2021

A 31-year-old Canadian man has been arrested and charged with fraud in connection with numerous ransomware attacks against businesses, government agencies and private citizens throughout Canada and the United States. Federal Bureau of Investigation (FBI) contacted them regarding ransomware attacks that were based in Canada.

Cybercrime 284

Cybercrime Ransomware Accountability Advertising 284

Krebs on Security

JANUARY 30, 2024

authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. 12 blog post , the attackers used their access to Mailchimp employee accounts to steal data from 214 customers involved in cryptocurrency and finance.

Social Engineering 327

Social Engineering Mobile Cybercrime Passwords 327

eSecurity Planet

OCTOBER 8, 2021

The surge in ransomware attacks in the last year have spurred attempts by government officials to bolster cybersecurity defenses, and those actions advanced on multiple fronts this week. Ransomware Fight Goes Global. Ransomware Fight Goes Global. New DOJ Ransomware Initiatives. In an op-ed piece published by CNBC, U.S.

Ransomware 103

Ransomware Cryptocurrency IoT Government 103

Security Affairs

JANUARY 13, 2024

Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

VPN 100

VPN Cybercrime Ransomware Hacking 100

Krebs on Security

DECEMBER 14, 2023

That reporting was based on clues from an early Russian cybercrime forum in which a hacker named Rescator — using the same profile image that Rescator was known to use on other forums — claimed to have originally been known as “Helkern,” the nickname chosen by the administrator of a cybercrime forum called Darklife.

Cybercrime 233

Cybercrime Accountability Advertising Computers and Electronics 233

SecureWorld News

APRIL 21, 2022

While the fight against cybercrime can seem like an impossibly huge challenge to overcome—and if we're being honest, it really is—these victories over cybercriminals will continue to add up and make a difference in the long run. Technical details of BlackCat ransomware. est.bat – copies the ransomware to other locations.

Ransomware 76

Ransomware Cybercrime Malware Cryptocurrency 76

SecureWorld News

MARCH 22, 2021

The FBI notes that the Internet Crime Complaint Center (IC3) has been key to its mission to track cybercrimes. The IC3 "provides the public with a trustworthy source for information on cyber criminal activity," and also is a useful tool for victims to report a cybercrime. And this year's report highlights five "hot topics.".

Cybercrime 54

Cybercrime Scams Banking Accountability 54

Security Affairs

NOVEMBER 4, 2020

The source code for the KPot information stealer was put up for auction and the REvil ransomware operators want to acquire it. The authors of KPot information stealer have put its source code up for auction , and the REvil ransomware operators will likely be the only group to bid. KPOT source code up for sale! Pierluigi Paganini.

Ransomware 132

Ransomware Malware Advertising Cybercrime 132

Security Affairs

JANUARY 31, 2022

Threat actors stole $80M worth of cryptocurrency from the Qubit DeFi platform by exploiting a flaw in the smart contract code used in an Ethereum bridge. The DeFi platform Qubit Finance was victim of a cyber heist, threat actors stole around $80 million in cryptocurrency last week. SecurityAffairs – hacking, REvil ransomware).

Cryptocurrency 81

Cryptocurrency Hacking Accountability Ransomware 81

Malwarebytes

MAY 10, 2021

Ransomware caused major trouble last week, as the famous Colonial Pipeline fell victim to a devastating cyber-attack. Ransomware brought everything to a standstill on Friday. As it happens, charities don’t want a bunch of stolen money circulating in their bank accounts. Presenting: the Colonial Pipeline. That’s where we are now.

Ransomware 131

Ransomware Cryptocurrency Banking Government 131

SecureList

NOVEMBER 23, 2021

The COVID-19 pandemic is likely to cause a massive wave of poverty, and that invariably translates into more people resorting to crime, including cybercrime. We should expect more fraud, targeting mostly BTC , because this cryptocurrency is the most popular. In April 2021, the Andariel group attempted to spread custom Ransomware.

Cryptocurrency 112

Cryptocurrency Banking Cybercrime Ransomware 112

Malwarebytes

JUNE 8, 2021

The US Department of Justice announced Monday that it recovered much of the ransomware payment that Colonial Pipeline paid to free itself from the attack that derailed the oil and gas supplier’s operations for several days last month. We will continue to target the entire ransomware ecosystem to disrupt and deter these attacks.”.

Cybercrime 77

Cybercrime Ransomware Cryptocurrency Government 77

Security Affairs

FEBRUARY 13, 2022

Organizations have paid more than $600 million in cryptocurrency during 2021, nearly one-third to the Conti ransomware gang. and Australia have published a joint advisory warning of an increased globalised threat of ransomware worldwide in 2021. Last week, cybersecurity agencies from the U.K., added the company. .”

Ransomware 85

Ransomware Cryptocurrency Cybercrime Malware 85

Security Affairs

OCTOBER 16, 2023

The researchers speculate the originating accounts of the instant messaging applications were compromised through the leaked credentials available on cybercrime forums. The message sent to the victims from a compromised Skype account contains a VBS script with a filename following the following format: <filename.pdf> www.skype[.]vbs.

Malware 100

Malware Cryptocurrency Accountability Cybercrime 100