Malwarebytes

APRIL 3, 2023

A new macOS malware—called MacStealer—that is capable of stealing various files, cryptocurrency wallets, and details stored in specific browsers like Firefox, Chrome, and Brave, was discovered by security researchers from Uptycs, a cybersecurity company specializing in cloud security. Users of macOS Catalina (10.5)

Malware 98

Malware Passwords Cryptocurrency Password Management 98

Malwarebytes

MARCH 17, 2022

The linked article focuses on misconfiguration, phishing issues, limiting data share, and the ever-present Internet of Things. Cryptocurrency wallet attacks. Digital wallet phish attempts are rampant on social media, and we expect this to rise. Below, we dig into a few of those. Ransomware supply chain triple-threat.

Cryptocurrency 115

Cryptocurrency Backups Phishing Password Management 115

Malwarebytes

JUNE 3, 2022

By focusing on this context, we hope that you’ll come away with a stronger understanding about, for instance, why you should use a password manager rather than that you should use a password manager. By selling fake raffle tickets for the promotion, the scammers raked in $438,000 worth of cryptocurrency.

Internet 123

Internet Internet Scams Passwords 123

Troy Hunt

JUNE 11, 2018

They suspected that a significant volume of the credentials obtained in these incidents have been used to access mailboxes, cryptocurrency exchanges, cloud service accounts and other similar online assets. In total, there were 655k records affected that are now searchable.

Cryptocurrency 128

Cryptocurrency Cybercrime Data breaches Passwords 128

Malwarebytes

MAY 10, 2022

Although the mail is being described as phishing, there is no direct request for passwords or logins linked to in the mail itself. The list of potential target areas includes: Internet browsers MAIL/FTP/VPN clients Cryptocurrency wallets Password managers Messengers Game programs. ” Source: CERT-UA.

Malware 94

Malware Phishing Passwords Password Management 94

Security Boulevard

MARCH 31, 2022

RedLine Password Theft Malware. The RedLine password theft malware is a hot topic this month with Microsoft’s employee compromise. Passwords: An Easy Target. Let’s not mince words: passwords are difficult for most organizations to manage. Autocomplete fields. Credit cards. All Gecko-based browsers (Mozilla, etc.).

Cybersecurity 98

Cybersecurity Social Engineering Passwords Malware 98

eSecurity Planet

APRIL 21, 2021

From news of a collage selling for almost $70 million at Christie’s auction house to a portrayal of Janet Yellen and Morpheus rapping about cryptocurrency on SNL , the current craze is all about non-fungible tokens (NFTs). Also Read: Best Password Management Software & Tools for 2021. How do NFTs work?

Cryptocurrency 112

Cryptocurrency Marketing Accountability Scams 112

Security Affairs

MAY 21, 2021

CyberNews researchers found that crooks could abuse cryptocurrency exchange API keys and steal cryptocurrencies. CyberNews researchers found that cybercriminals are able to abuse cryptocurrency exchange API keys and steal cryptocurrencies from their victims’ accounts without being granted withdrawal rights.

Cryptocurrency 74

Cryptocurrency Accountability Marketing Passwords 74

Security Affairs

FEBRUARY 25, 2021

The attack chain starts with COVID19-themed spear-phishing messages that contain either a malicious Word attachment or a link to one hosted on company servers. . The experts discovered the custom backdoor while investigating an incident, it was used by attackers for lateral movements and data exfiltration.

Malware 92

Malware Cryptocurrency Password Management Encryption 92

Malwarebytes

JUNE 17, 2021

Malwarebytes Browser Guard not only blocks some advertisements and trackers, it also stops in-browser cryptojackers (unwanted cryptocurrency miners), and it also uses an extended version of the Malwarebytes Premium blocklist that will stop malicious sites from loading—including sites that are involved in tech support scams. Click&Clean.

Advertising 116

Advertising Antivirus Passwords Password Management 116

Security Boulevard

JUNE 15, 2023

Oftentimes this is credential data, but it can be any data that may have financial value to an adversary; this includes paid online service accounts, cryptocurrency wallets, instant messenger, or email contacts lists, etc. Key Mystic Stealer functions include its ability to extract data from web browsers and cryptocurrency wallets.

Cryptocurrency 52

Cryptocurrency Password Management Malware DNS 52

SecureList

FEBRUARY 25, 2021

The group made use of COVID-19 themes in its spear-phishing emails, embellishing them with personal information gathered using publicly available sources. In this attack, spear phishing was used as the initial infection vector. The phishing emails claimed to have urgent updates on today’s hottest topic – COVID-19 infections.

Malware 136

Malware Phishing Passwords Encryption 136

Security Affairs

SEPTEMBER 22, 2019

A flaw in LastPass password manager leaks credentials from previous site. France and Germany will block Facebooks Libra cryptocurrency. taxpayers hit by a phishing campaign delivering the Amadey bot. Drone attacks hit two Saudi Arabia Aramco oil plants. Astaroth Trojan leverages Facebook and YouTube to avoid detection.

Adware 50

Adware Password Management Advertising Hacking 50

Identity IQ

JUNE 1, 2023

Phishing attacks. Phishing attacks refer to fraudulent attempts, usually through email or messaging platforms, to deceive individuals into revealing sensitive information like passwords, credit card details, or Social Security numbers. Spear phishing attacks. This makes it more likely for victims to fall for the scam.

Social Engineering 52

Social Engineering Scams Engineering Identity Theft 52

eSecurity Planet

DECEMBER 7, 2023

Users can establish a symmetric key to share private messages through a secure channel, like a password manager. Phishing and social engineering are common ways threat actors can obtain a symmetric key, but cryptanalysis and brute force attempts can also break symmetric key ciphers.

Encryption 107

Encryption Authentication Passwords Password Management 107

SecureList

JULY 29, 2021

We have designated it as a new threat actor and named it “HotCousin” The attacks began with a spear-phishing email which led to an ISO file container being stored on disk and mounted. Previous activity also connected with this group relied heavily on spear-phishing and Cobalt Strike throughout 2020.

Malware 142

Malware Phishing Password Management Social Engineering 142

Security Affairs

JANUARY 27, 2022

Other affected businesses include Chip, a UK-based savings app boasting 400,000 users; Hoolah, a shopping app with over 100,000 installs ; Mode, a cryptocurrency app with over 50,000 installs ; and Greenwheels, a car-sharing service with over 50,000 installs. Threat actors can abuse PII to conduct phishing and social engineering attacks.

Identity Theft 81

Identity Theft Accountability Data breaches Social Engineering 81

eSecurity Planet

JULY 25, 2023

Phishing attacks: Deceptive techniques, such as fraudulent emails or websites, trick individuals into revealing sensitive information like credit card and payment information, passwords, or login credentials. Cryptojacking : Unauthorized use of a computer’s processing power to mine cryptocurrencies.

Software 98

Software Data breaches DDOS Ransomware 98