article thumbnail

Operation Lyrebird: Group-IB assists INTERPOL in identifying suspect behind numerous cybercrimes worldwide

Security Affairs

According to Group-IB’s Threat Intelligence team, the suspect, dubbed Dr HeX by Group-IB based on one of the nicknames that he used, has been active since at least 2009 and is responsible for a number of cybercrimes, including phishing, defacing, malware development, fraud, and carding that resulted in thousands of unsuspecting victims.

article thumbnail

North Korea-linked Zinc group posed as Samsung recruiters to target security firms

Security Affairs

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. According to the Google Threat Horizons report, the state-sponsored hackers sent fake job offers to employees at the security companies. . ” reads the Google Threat Horizons report.

Malware 130
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Personal info of 90k hikers leaked by French tourism company La Malle Postale

Security Affairs

The leaked information included names, phone numbers, emails, private communication via SMS messages, passwords, and employees’ credentials. Founded in 2009, the company provides luggage and passenger transportation services on many popular hiking routes, including the famous Santiago de Compostela pilgrimage trail.

article thumbnail

Experts found 20 Million tax records for Russian citizens exposed online

Security Affairs

Security experts from Comparitech along with security researcher Bob Diachenko discovered 20 million tax records belonging to Russian citizens exposed online in clear text and without protection. “Potential victims should also be on the lookout for targeted phishing and other scams. ” continues the experts.

article thumbnail

Telehealth: A New Frontier in Medicine—and Security

SecureList

Number of data leaks from medical organizations, 2009–2020. Let’s see if there are any informational security issues with these wearables. From June to December of 2021, we found more than 150,000 phishing attacks that used the medical theme. The HIPAA Journal , which is focused on leaks in the U.S.

Phishing 116
article thumbnail

An ongoing Qbot campaign targeted customers of tens of US banks

Security Affairs

Security researchers at F5 Labs have spotted ongoing attacks using Qbot malware payloads to steal credentials from customers of dozens of US financial institutions. Qbot , aka Qakbot , is a data stealer worm with backdoor capabilities that was first detected by Symantec back in 2009. The campaign targets 36 different U.S.

Banking 103
article thumbnail

North Korea-linked Lazarus APT targets the COVID-19 research

Security Affairs

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. The wAgent backdoor allows the attackers to executed various shell commands to gather information from the infected device.