Security Affairs

AUGUST 8, 2022

“It’s worth pointing out that the wallet address is the miner reward receiving address of the Bitcoin Genesis Block , which occurred on January 3, 2009, and is believed to be held by Nakamoto.” SecurityAffairs – hacking, domain name system). .” reads the analysis published by the researchers.

Accountability 98

Accountability Cryptocurrency Malware Hacking 98

Security Affairs

NOVEMBER 15, 2021

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. SecurityAffairs – hacking, Operation Cyclone). Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Cybersecurity 108

Cybersecurity Engineering Software Malware 108

Security Affairs

JULY 28, 2022

Every European telecom operator that suffers a security incident, notifies its national authorities which share a summary of these reports to ENISA at the start of every calendar year. The reporting of security incidents has been part of the EU’s regulatory framework for telecoms since the 2009 reform of the telecoms package.

Authentication 97

Authentication Hacking Accountability Information Security 97

Security Affairs

MAY 6, 2023

The library has been active since 2009, it offers e-book files in a variety of file formats, stripped of their copyright protections. The Federal Bureau of Investigation (FBI) seized multiple domains used by the illegal shadow eBook library Z-Library. Z-Library operates as a complex network of approximately 249 interrelated web domains.

Accountability 87

Accountability Hacking Cybersecurity Cybercrime 87

Security Affairs

NOVEMBER 28, 2021

. “TAG observed a North Korean government-backed attacker group that previously targeted security researchers posing as recruiters at Samsung and sending fake job opportunities to employees at multiple South Korean information security companies that sell anti-malware solutions.” Pierluigi Paganini.

Malware 130

Malware Phishing Antivirus Hacking 130

Security Affairs

OCTOBER 23, 2023

billion Aadhaars issued by the UIDAI since this ID service launched in 2009, this system represents one of the largest biometric ID programs on the planet, according to a report published by think tank Brookings Institution. With roughly 1.4

Identity Theft 127

Identity Theft Banking Data breaches Malware 127

Security Affairs

JANUARY 26, 2022

The flaw, dubbed PwnKit, was introduced more than 12 years ago (May 2009) since the initial commit of pkexec, this means that all the versions are affected. SecurityAffairs – hacking, PwnKit). The post PwnKit: Local Privilege Escalation bug affects major Linux distros appeared first on Security Affairs. Pierluigi Paganini.

Architecture 99

Architecture Hacking Information Security 99

Security Affairs

FEBRUARY 22, 2022

The group (also known as Cicada, Stone Panda , MenuPass group, Bronze Riverside, and Cloud Hopper ) has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide.

Technology 97

Technology Hacking Passwords Software 97

Security Affairs

AUGUST 10, 2019

Security experts at McAfee discovered that a stack-based buffer overflow flaw in the Dynamic Host Configuration Protocol (DHCP) client discovered and fixed ten years ago is still affecting several Avaya phones. SecurityAffairs – Avaya, hacking). The vulnerability could be exploited using a specially crafted DHCP response. Only the H.323

Firmware 87

Firmware IoT Advertising Software 87

Security Affairs

OCTOBER 21, 2021

The two individuals, Aleksandr Skorodumov (33) of Lithuania, and Pavel Stassi (30) of Estonia, administrated the bulletproof hosting service between 2009 and 2015. SecurityAffairs – hacking, cyber security). The post Administrators of bulletproof hosting sentenced to prison in the US appeared first on Security Affairs.

System Administration 101

System Administration Malware Accountability Marketing 101

Security Affairs

NOVEMBER 18, 2020

The group, also known as Cicada, Stone Panda , and Cloud Hopper , has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide. ” Pierluigi Paganini.

Manufacturing 107

Manufacturing Hacking Engineering Malware 107

Security Affairs

OCTOBER 27, 2021

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. SecurityAffairs – hacking, supply chain attack). Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Malware 105

Malware System Administration Hacking Media 105

Security Affairs

AUGUST 4, 2022

The presidential office said it would up its monitoring in the face of “hybrid information warfare by external forces” In August 2020, Chinese hackers gained access to around 6,000 email accounts belonging to at least 10 Taiwan government agencies, officials said. SecurityAffairs – hacking, Taiwan). Pierluigi Paganini.

DDOS 89

DDOS Government Cyber Attacks Hacking 89

Security Affairs

MARCH 8, 2022

SecurityAffairs – hacking, SIM swapping). The post CISA urges to fix actively exploited Firefox zero-days by March 21 appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Authentication 97

Authentication Hacking Cybersecurity Risk 97

Security Affairs

MAY 13, 2023

The leaked information included names, phone numbers, emails, private communication via SMS messages, passwords, and employees’ credentials. Founded in 2009, the company provides luggage and passenger transportation services on many popular hiking routes, including the famous Santiago de Compostela pilgrimage trail.

Passwords 94

Passwords Identity Theft Scams Social Engineering 94

Security Affairs

DECEMBER 25, 2020

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. SecurityAffairs – hacking, North Korea).

Cryptocurrency 129

Cryptocurrency Malware Hacking Phishing 129

Security Affairs

JULY 6, 2021

According to Group-IB’s Threat Intelligence team, the suspect, dubbed Dr HeX by Group-IB based on one of the nicknames that he used, has been active since at least 2009 and is responsible for a number of cybercrimes, including phishing, defacing, malware development, fraud, and carding that resulted in thousands of unsuspecting victims.

Cybercrime 99

Cybercrime Phishing Banking Telecommunications 99

Security Affairs

JANUARY 27, 2022

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. SecurityAffairs – hacking, Lazarus APT). Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Malware 83

Malware Hacking Phishing Ransomware 83

Security Affairs

JUNE 7, 2021

SecurityAffairs – hacking, RockYou2021). billion entries appeared first on Security Affairs. About the author: Edvardas Mikalauskas. Edvardas is a Senior Writer and Researcher at CyberNews. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Passwords 113

Passwords Data breaches Accountability Password Management 113

Security Affairs

NOVEMBER 25, 2022

that dates back to 2009. “We see an urgent need for an extra layer of SBOM Validation when it comes to compiled code to validate on the binary level, the list of third-party dependency information that matches the actual SBOM provided by the vendor,” concludes the report. SecurityAffairs – hacking, firmware).

Firmware 100

Firmware Manufacturing Hacking Software 100

Security Affairs

OCTOBER 10, 2020

Orange Belgium is using Huawei equipment since 2007 for its mobile network in Belgium and Luxembourg, while the collaboration between Proximus and the Shenzhen-based company started in 2009 for the progressive upgrading of its network. SecurityAffairs – hacking, Proximus). Pierluigi Paganini.

Mobile 119

Mobile Manufacturing Wireless Internet 119

Security Affairs

MARCH 23, 2020

Weibo is a popular Chinese micro-blogging ( weibo ) website, it was launched by Sina Corporation on 14 August 2009, it claimed over 445 million monthly active users as of Q3 2018. . The company confirmed that the data were obtained in 2019 due to credential stuffing attacks and other information gathered online.

Accountability 116

Accountability Passwords Advertising Internet 116

Security Affairs

JULY 31, 2020

The group has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide. SecurityAffairs – hacking, EU sanctions). ” conclude the EU.

Cyber Attacks 99

Cyber Attacks Hacking Advertising Government 99

Security Affairs

NOVEMBER 17, 2022

Krebs reported that Gary Warner, director of research in computer forensics at the University of Alabama at Birmingham, noted in 2014 that Tank told co-conspirators in a JabberZeus chat on July 22, 2009 that his daughter, Miloslava, was and told him Miloslava birth weight. SecurityAffairs – hacking, Zeus). Pierluigi Paganini.

Cybercrime 96

Cybercrime Banking Identity Theft Hacking 96

Security Affairs

SEPTEMBER 13, 2019

The US Treasury placed sanctions on three North Korea-linked hacking groups, the Lazarus Group, Bluenoroff, and Andarial. The US Treasury sanctions on three North Korea-linked hacking groups, the Lazarus Group , Bluenoroff , and Andarial. SecurityAffairs – North Korea, hacking). ” continues the US Treasury.

Cyber Attacks 83

Cyber Attacks Cryptocurrency Hacking Banking 83

Security Affairs

JUNE 27, 2019

. “Teams of hackers connected to the Chinese Ministry of State Security had penetrated HPE’s cloud computing service and used it as a launchpad to attack customers, plundering reams of corporate and government secrets for years in what U.S. “The hacking campaign, known as “ Cloud Hopper ,” was the subject of a U.S.

Identity Theft 87

Identity Theft Hacking System Administration Advertising 87

Security Affairs

SEPTEMBER 9, 2019

The targets of the two groups show significant overlap, Billbug also targeted organizations many military and government organizations in South Asia since at least January 2009. Security experts at Symantec speculate that Thrip is a sub-group of Billbug. Billbug is a long-established espionage group, active since at least January 2009.

Government 83

Government Telecommunications Advertising Malware 83

Security Affairs

NOVEMBER 16, 2020

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. SecurityAffairs – hacking, Lazarus). by specifying hashes of binaries in the VeraPort configuration).”

Malware 104

Malware Software Cryptocurrency Financial Services 104

Security Affairs

MARCH 3, 2020

“ Two Chinese nationals were charged with laundering over $100 million worth of cryptocurrency from a hack of a cryptocurrency exchange. The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFT attacks in 2016, and the Sony Pictures hack. million from another exchange.

Cryptocurrency 102

Cryptocurrency Banking Hacking Accountability 102

Security Affairs

FEBRUARY 25, 2021

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. SecurityAffairs – hacking, Lazarus).

Malware 96

Malware Cryptocurrency Password Management Encryption 96

Security Affairs

JULY 20, 2019

SyTech , a contractor for the Federal Security Service of the Russian Federation (FSB) has been hacked, attackers stole data about interna l projects. Attackers have hacked SyTech, a contractor for the Federal Security Service of the Russian Federation (FSB), and exfiltrated data about interna l projects.

Data breaches 104

Data breaches Hacking Advertising Media 104

Security Affairs

JANUARY 29, 2021

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. “For proactive prevention of this type of attack, it is recommended that security professionals use an isolated environment (e.g.,

Malware 120

Malware Antivirus Hacking Accountability 120

Security Affairs

OCTOBER 1, 2019

Security experts from Comparitech along with security researcher Bob Diachenko discovered 20 million tax records belonging to Russian citizens exposed online in clear text and without protection. “A database of more than 20 million Russian tax records was found on an unsecured server, accessible to anyone with a web browser.”

Identity Theft 77

Identity Theft Scams Advertising Risk 77

Security Affairs

OCTOBER 30, 2019

.” The company, a Web.com subsidiary, discovered the security breach on October 16, the security incident likely took place in August 2019. According to the company, attackers hacked a “limited number” of systems that allowed them to access the huge trove of data. SecurityAffairs – data breach, hacking).

Data breaches 55

Data breaches Accountability Advertising Encryption 55

Security Affairs

APRIL 20, 2021

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. ” If you want to receive the weekly Security Affairs Newsletter for free subscribe here. Pierluigi Paganini.

Phishing 74

Phishing Hacking Cryptocurrency Encryption 74

Security Affairs

FEBRUARY 9, 2023

based financial institutions that occurred in 2009 and 2010, predating his involvement in Dyre or the Trickbot Group. District Court for the District of New Jersey charging Kovalev with conspiracy to commit bank fraud and eight counts of bank fraud in connection with a series of intrusions into victim bank accounts held at various U.S.-based

Banking 89

Banking Ransomware Cybercrime Malware 89

ForAllSecure

SEPTEMBER 10, 2021

Learn how even someone mid career in security can play on their own, and even fill in gaps on their own learning, all year round. Vamosi: Welcome to the hacker mind, and original podcast from for all secure, it's about challenging our expectations about the people who hack for a living. And they attack the problem differently.

Hacking 52

Hacking Education InfoSec Engineering 52