Remove 2008 Remove Cybercrime Remove Encryption Remove Malware
article thumbnail

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

Now new findings reveal that AVrecon is the malware engine behind a 12-year-old service called SocksEscort , which rents hacked residential and small business devices to cybercriminals looking to hide their true location online. ” According to Kilmer, AVrecon is the malware that gives SocksEscort its proxies.

Malware 203
article thumbnail

Avast released a free decryptor for the Windows version of the Akira ransomware

Security Affairs

In June 2023, the malware analyst rivitna published a sample of the ransomware that is compiled for Linux. “During the run, the ransomware generates a symmetric encryption key using CryptGenRandom() , which is the random number generator implemented by Windows CryptoAPI. . Files are encrypted by Chacha 2008 ( D.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Ragnar Locker Ransomware targets Greece Gas Company

CyberSecurity Insiders

And reports are in that Ragnar Locker Gang is demanding $12 million to free up data from encryption. Natural Gas supply hasn’t been hit by the malware, however, some systems on the administration side were reportedly disrupted.

article thumbnail

Law enforcement shutdown the VPN service VPNLab used by many cybercriminal gangs

Security Affairs

Europol this week announced the shutdown of VPNLab, a VPN service that is very popular in the cybercrime ecosystem. An international operation conducted by law enforcement bodies from 10 countries took down VPNLab.net, a VPN service provider that is very popular in the cybercrime ecosystem.

VPN 82
article thumbnail

Cybercriminals’ friend VPNLab.net shut down by law enforcement

Malwarebytes

VPNLab had been around since 2008 and had built its service around the OpenVPN technology, used strong encryption, and provided double VPN, with servers located in many different countries. We set a special encrypted channel between your computer and our foreign servers. Upon reaching the server it is encrypted again.

VPN 73
article thumbnail

WinDealer dealing on the side

SecureList

LuoYu is a lesser-known threat actor that has been active since 2008. In their initial disclosures on this threat actor, TeamT5 identified three malware families: SpyDealer, Demsty and WinDealer. Leaving the mystery of the delivery method aside for now, let’s look at the capabilities of the malware itself.

Malware 113
article thumbnail

Inside ‘Evil Corp,’ a $100M Cybercrime Menace

Krebs on Security

Justice Department this month offered a $5 million bounty for information leading to the arrest and conviction of a Russian man indicted for allegedly orchestrating a vast, international cybercrime network that called itself “ Evil Corp ” and stole roughly $100 million from businesses and consumers. HITCHED TO A MULE.