Security Affairs

AUGUST 7, 2018

Group-IB researchers have investigated user data leaks from cryptocurrency exchanges and has analyzed the nature of these incidents. In 2017, when cryptocurrencies were gaining momentum, their record-breaking capitalization and a spike in Bitcoin’s exchange rate led to dozens of attacks on cryptocurrency services.

Cryptocurrency 48

Cryptocurrency Passwords Authentication Accountability 48

Security Affairs

FEBRUARY 10, 2022

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. Do not provide your mobile number account information over the phone to representatives that request your account password or pin. Be aware of any changes in SMS-based connectivity.

Mobile 89

Mobile Cryptocurrency Authentication Accountability 89

Security Affairs

JULY 2, 2023

WordPress sites using the Ultimate Member plugin are under attack LockBit gang demands a $70 million ransom to the semiconductor manufacturing giant TSMC Avast released a free decryptor for the Windows version of the Akira ransomware Iran-linked Charming Kitten APT enhanced its POWERSTAR Backdoor miniOrange’s WordPress Social Login and Register plugin (..)

Cybercrime 84

Cybercrime Hacking Ransomware Malware 84

Security Affairs

FEBRUARY 10, 2021

Europol investigators revealed that the cybercrime organization stole more than $100 million worth of cryptocurrency using SIM Swapping attacks. “This enabled them to steal money, bitcoin and personal information, including contacts synced with online accounts. . SecurityAffairs – hacking, cybercrime).

Cybercrime 78

Cybercrime Cryptocurrency Accountability Authentication 78

Security Affairs

FEBRUARY 4, 2024

Ransomware Revenue Down As More Victims Refuse to Pay Energy giant Schneider Electric hit by Cactus ransomware attack Hundreds Of Network Operators’ Credentials Found Circulating In Dark Web Fla.

Identity Theft 102

Identity Theft VPN Malware Ransomware 102

Security Affairs

FEBRUARY 25, 2024

Uninstall it immediately Microsoft Exchange flaw CVE-2024-21410 could impact up to 97,000 servers ConnectWise fixed critical flaws in ScreenConnect remote access tool More details about Operation Cronos that disrupted Lockbit operation Cactus ransomware gang claims the theft of 1.5TB of data from Energy management and industrial automation firm Schneider (..)

Spyware 91

Spyware Cyber Insurance Hacking Advertising 91

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 85

Spyware Hacking Malware Social Engineering 85

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 75

Malware Cybercrime Cryptocurrency Social Engineering 75

Security Affairs

OCTOBER 28, 2021

claims to be a trader of cryptocurrencies in social networks. “According to information from Bayerischer Rundfunk and Zeit Online, German investigative authorities have been targeting Nikolay K. That comes from a database of the IT security company Domaintools. SecurityAffairs – hacking, cybercrime).

Cryptocurrency 113

Cryptocurrency Ransomware Cybercrime Accountability 113

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M worth of cryptocurrency. Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M worth of cryptocurrency.

Cryptocurrency 77

Cryptocurrency VPN Manufacturing Firewall 77

Security Affairs

JANUARY 9, 2023

The crypto-miner Kinsing was first spotted by security firm Aqua Security in April 2020, at the time the experts spotted threat actors scanning the Internet for Docker servers running API ports exposed without a password. The Kinsing malware abuses the resources of the Docker installations to mine cryptocurrency.

Malware 90

Malware Authentication Cryptocurrency Internet 90

Security Affairs

MARCH 26, 2020

that is hosting various cybercrime products and services were being sold. companies for customers’ personal information.” platform, an automated set-up wizard allowed the owner to upload the products and services offered through the shop and configure the payment process via cryptocurrency wallets. Pierluigi Paganini.

Cybercrime 111

Cybercrime Advertising Hacking Accountability 111

Security Affairs

MARCH 23, 2023

“Nexus provides all the main features to perform ATO attacks (Account Takeover) against banking portals and cryptocurrency services, such as credentials stealing and SMS interception. The Nexus Trojan can target multiple banking and cryptocurrency in an attempt to take over customers’ accounts.

Banking 77

Banking Cryptocurrency Malware Advertising 77

Security Affairs

APRIL 4, 2022

During the weekend, multiple owners of Trezor hardware cryptocurrency wallets reported having received fake data breach notifications from Trezor, BleepingComputer first reported. We also recommend two-factor authentication and other account security measures for our users as added measures to keep accounts and passwords secure.”

Phishing 111

Phishing Data breaches Cryptocurrency Social Engineering 111

Security Affairs

APRIL 5, 2023

The discovery of STYX coincides with Resecurity financial crime risk analysts observing a significant increase in threat actors offering money-laundering services that exploit digital banking and cryptocurrency accounts. The discovery of STYX also highlights the need for international cooperation in combating cybercrime.

Banking 77

Banking Cybercrime Accountability Risk 77

Security Affairs

JANUARY 3, 2024

Besides Artificial Intelligence to scale operations, in a novel approach to circumvent two-factor authentication (2FA), the perpetrators crafted malicious Android code that mimics official mobile banking applications. This approach was used to deceive individuals into sharing sensitive information with malicious actors.

Artificial Intelligence 114

Artificial Intelligence Banking Scams Cybercrime 114

Security Affairs

MAY 9, 2021

Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager UNC2529, a new sophisticated cybercrime gang that targets U.S.

Data breaches 86

Data breaches DDOS VPN Hacking 86

Security Affairs

MARCH 13, 2020

European authorities dismantled two cybercrime organizations responsible for stealing millions through SIM hijacking. European authorities managed to dismantle the operations of two cybercrime gangs responsible for stealing millions through SIM hijacking. SecurityAffairs – SIM Hijacking, cybercrime). Pierluigi Paganini.

Banking 113

Banking Cybercrime Mobile Accountability 113

Security Affairs

JANUARY 23, 2022

The FBI announcement includes tips to protect people from such kind of attacks; feds recommend checking the URL obtained by scanning a QR code to make sure it is the intended site and looks authentic. Double-check any site navigated to from a QR code before providing login, personal, or financial information.

Cryptocurrency 95

Cryptocurrency Social Engineering Malware Scams 95

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 93

Data breaches Malware Mobile Spyware 93

Security Affairs

SEPTEMBER 11, 2022

IHG suffered a cyberattack that severely impacted its booking process China-Linked BRONZE PRESIDENT APT targets Government officials worldwide Scammers live-streamed on YouTube a fake Apple crypto event US Treasury sanctioned Iran ’s Ministry of Intelligence over Albania cyberattack $30 Million worth of cryptocurrency stolen by Lazarus from Axie Infinity (..)

Data breaches 94

Data breaches Ransomware Malware Phishing 94

Security Affairs

SEPTEMBER 27, 2022

Threat actors behind the new ‘Erbium’ information-stealing malware are distributing it as fake cracks and cheats for popular video games to steal victims’ credentials and cryptocurrency wallets. Ability to obtain information from various installed applications.

Malware 80

Malware Password Management Authentication Passwords 80

Security Affairs

FEBRUARY 10, 2022

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. Do not provide your mobile number account information over the phone to representatives that request your account password or pin. Be aware of any changes in SMS-based connectivity.

Banking 102

Banking Accountability Mobile Cryptocurrency 102

Security Affairs

SEPTEMBER 30, 2021

At the end of August, Atlassian released security patches to address the critical CVE-2021-26084 flaw that affects the Confluence enterprise collaboration product. The flaw is an OGNL injection issue that can be exploited by an authenticated attacker to execute arbitrary code on affected Confluence Server and Data Center instances. “An

Cryptocurrency 91

Cryptocurrency Authentication Malware Marketing 91

Security Affairs

SEPTEMBER 7, 2021

The development team behind the Jenkins server disclose a security breach, threat actors deployed a cryptocurrency miner on one of its servers. The development team behind the Jenkins Project disclosed a security breach after threat actors compromised one of their internal servers and installed a cryptocurrency miner.

Hacking 90

Hacking Cryptocurrency Authentication Internet 90

Security Affairs

JULY 13, 2021

After Mindaugas reached out to CyberNews, our investigators were able to follow the scam group’s money trail and locate a network of wallets used by the group to store and cash out Mindaugas’ stolen crypto, along with millions in cryptocurrency plundered from thousands of other victims. Falling for the scam.

Scams 97

Scams Cryptocurrency Accountability Authentication 97

Security Affairs

AUGUST 10, 2023

Zscaler ThreatLabz researchers discovered a new information stealer malware, called Statc Stealer, that can steal a broad range of info from Windows devices. The malware can steal sensitive information from various web browsers, including login data, cookies, web data, and preferences.

Malware 84

Malware Encryption Advertising Cryptocurrency 84

Security Affairs

NOVEMBER 14, 2022

Akamai Security Research discovered a new evasive Golang-based malware, tracked as KmsdBot, that infects systems via an SSH connection that uses weak login credentials. The malware was employed in cryptocurrency mining campaigns and to launch denial-of-service (DDoS) attacks. Use public key authentication for your SSH connections.

DDOS 90

DDOS Malware Cryptocurrency Architecture 90

Security Affairs

DECEMBER 26, 2022

The advertisements impersonate websites of financial organizations and cryptocurrency exchange platforms. The landing websites were designed to prompt users to enter login credentials and financial information. A malicious domain name may be similar to the intended URL but with typos or a misplaced letter.

Advertising 88

Advertising Engineering Education Internet 88

Security Affairs

DECEMBER 8, 2022

Stealing seed phrases from several cryptocurrency wallets. “Such apps disguised as modified version of Instagram, WiFi Auto Authenticator, Football Live Streaming, etc. . “Such apps disguised as modified version of Instagram, WiFi Auto Authenticator, Football Live Streaming, etc. Keylogging. Stealing 2FA codes.

Malware 97

Malware Banking Cryptocurrency Advertising 97

Security Affairs

FEBRUARY 19, 2023

Every week the best security articles from Security Affairs are free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here.

DDOS 82

DDOS Data breaches Surveillance Ransomware 82

Security Affairs

SEPTEMBER 3, 2021

At the time of this writing, experts only observed threat actors exploiting the issue to deliver cryptocurrency miners, but attackers could start exploiting them to deliver other malware, including ransomware. reads the advisory published by the company.

Authentication 93

Authentication Cryptocurrency Hacking Government 93

Security Affairs

OCTOBER 31, 2022

In the early afternoon of Friday 12 May 2017, the media broke the news of a global computer security attack carried out through a malicious code capable of encrypting data residing in information systems and demanding a ransom in cryptocurrency to restore them, the Wannacry ransomware. About the author: Salvatore Lombardo.

Malware 95

Malware Computers and Electronics Encryption Ransomware 95

Security Affairs

DECEMBER 3, 2021

Threat actors stole $120 million in cryptocurrencies from multiple wallets connected to the decentralized finance platform BadgerDAO. million in crypto funds, blockchain security firm PeckShield reported. Multi-factor authentication systems protect our accounts against many phishing schemes or bulk credential stuffing attacks.

Hacking 94

Hacking Phishing Authentication Cryptocurrency 94

Security Affairs

OCTOBER 15, 2022

The threat actors target individuals and employees that may have access to a Facebook Business account, they use an information-stealer malware that steals browser cookies and abuse authenticated Facebook sessions to steal information from the victim’s Facebook account. mediafire[.]com),

Accountability 124

Accountability Malware Cryptocurrency Media 124

Security Affairs

OCTOBER 31, 2022

.” The droppers are designed to target include 231 banking and cryptocurrency wallet apps from entities in Italy, the U.K., The apps masqueraded as security authenticators or file recovery tools and deliver a novel variant of Vultur Android Banking malware. Germany, Spain, Poland, Austria, the U.S.,

Banking 81

Banking Cryptocurrency Authentication Malware 81

Security Affairs

JUNE 15, 2022

” The botnet is engaged in cryptomining activity, the malicious code has been designed to hijack the computer’s resources to mine cryptocurrencies. The bot uses “its built-in concurrency features to maximize spreadability and execute malware modules.” “The malware deploys two miners — xmrig and nbhash.

Malware 89

Malware Cryptocurrency Education Engineering 89