Security Affairs

APRIL 1, 2020

Researchers spotted a campaign using Excel files to spread LimeRAT malware using the 8-year-old and well-known VelvetSweatshop bug. Researchers at the Mimecast Threat Center spotted a new campaign using Excel files to spread LimeRAT malware using the 8-year-old VelvetSweatshop bug. ” reads the analysis published by the experts.

Malware 98

Malware Passwords Encryption Advertising 98

Security Affairs

NOVEMBER 22, 2019

The Russian hacker who created and used Neverquest banking malware has finally been sentenced to 4 years in prison by a US District Court. The Russian hacker was suspected of being the author of the Neverquest malware , aka Vawtrak malware, and the person who administrated the control infrastructure. Pierluigi Paganini.

Banking 102

Banking Malware Advertising Passwords 102

Krebs on Security

FEBRUARY 24, 2023

The Mylobot malware includes more than 1,000 hard-coded and encrypted domain names, any one of which can be registered and used as control networks for the infected hosts. BHProxies has authored 129 posts on Black Hat World since 2012, and their last post on the forum was in December 2022. The website BHProxies[.]com

Accountability 229

Accountability Advertising Marketing Malware 229

The Last Watchdog

JUNE 21, 2020

The Archiveus Trojan from 2006 was the first one to use RSA cipher, but it was reminiscent of a proof of concept and used a static 30-digit decryption password that was shortly cracked. FBI spoofs 2012 – 2013. It surfaced in November 2012 and was making thousands of victims a day. None of these early threats went pro.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

SEPTEMBER 30, 2020

Russian national Yevgeniy Aleksandrovich Nikulin was sentenced to 88 months in prison for hacking LinkedIn, Dropbox, and Formspring in 2012. The Russian national Yevgeniy Aleksandrovich Nikulin was sentenced to 88 months in prison in the United States for hacking LinkedIn, Dropbox, and Formspring in 2012.

Identity Theft 106

Identity Theft Cybercrime Advertising Hacking 106

Security Affairs

JUNE 23, 2022

China-linked APT group Tropic Trooper has been spotted previously undocumented malware written in Nim language. SMS Bomber allows a user to flood the victim’s phone number with a very long list of pre-baked HTTP requests asking for one-time codes, verification messages, password recoveries and the like. Pierluigi Paganini.

Hacking 102

Hacking Wireless Encryption Passwords 102

Security Affairs

DECEMBER 29, 2023

On Christmas Eve, Resecurity’s HUNTER unit spotted the author of perspective password stealer Meduza has released a new version (2.2). Presently, Meduza password stealer supports Windows Server 2012/2016/2019/2022 and Windows 10/11.

Password Management 127

Password Management Cryptocurrency Passwords Authentication 127

CyberSecurity Insiders

FEBRUARY 13, 2022

A report published by Sentinel One states that a hacking group named “Modified Elephant” was seen carrying out such criminal activities since 2012 and has started the game of planting criminal evidence on devices of innocent online users. Then how to keep such cyber crimes at bay?

Surveillance 94

Surveillance Passwords Malware Hacking 94

Security Affairs

MARCH 27, 2023

Earth Preta, also known as “RedDelta” or “Bronze President,” has been active since at least 2012, it targeted American and European entities such as government organizations, think tanks, NGOs , and even Catholic organizations at the Vatican. The link points to a password-protected archive, the document also includes the password.

Malware 83

Malware Phishing Passwords Government 83

Krebs on Security

JANUARY 8, 2024

As detailed in my 2014 book, Spam Nation , Spamdot was home to crooks controlling some of the world’s nastiest botnets, global malware contagions that went by exotic names like Rustock , Cutwail , Mega-D , Festi , Waledac , and Grum. But the identity and whereabouts of Icamis have remained a mystery to this author until recently.

Cybercrime 209

Cybercrime Banking Computers and Electronics DDOS 209

The Last Watchdog

FEBRUARY 3, 2020

Samide and other experts say what’s coming next is very likely to be a series of varied attacks as combatants on all sides leverage footholds gained from ongoing intelligence gathering and malware planting. It’s notable that hacks to gain access to, and maintain control of, industrial control systems are a recurring theme in cyber warfare.

Energy and Utilities 330

Energy and Utilities Malware Hacking Passwords 330

Security Affairs

APRIL 6, 2023

Google experts are tracking ARCHIPELAGO since 2012 and have observed the group targeting individuals with expertise in North Korea policy issues. The fake browser window displays a URL and a login prompt designed to trick recipients into providing their password to a legitimate login page.

Phishing 80

Phishing Media Passwords Malware 80

Security Affairs

JUNE 21, 2020

The United States has deported the author of NeverQuest banking malware, the computer programmer Stanislav Vitaliyevich Lisov to Russia. . The Russian hacker was suspected of being the author of the Neverquest malware , aka Vawtrak malware, and the person who administrated the control infrastructure. Pierluigi Paganini.

Banking 102

Banking Malware Advertising Hacking 102

Security Affairs

MAY 15, 2020

Data appears to come from past data breaches, the oldest one dates back as 2012 while the latest one dates April 2020. cyber #cybersecurity @BleepinComputer #malware pic.twitter.com/CtnppIyhxn — Cyble (@AuCyble) May 14, 2020. million April 2018 Netlog.com (Twoo.com) 57 million November 2012 Dubsmash.com Phone numbers 47.1

Data breaches 105

Data breaches Advertising Passwords Hacking 105

SiteLock

AUGUST 27, 2021

In each of these cases, the cybercriminals behind the breaches were after usernames and passwords. The most commonly used passwords today are, “password” and “123456,” and it only takes a hacker.29 Each stolen record contained an email address and password. In 2012, LinkedIn was hit with a breach and more than 6.5

Data breaches 52

Data breaches Media Passwords Accountability 52

Security Affairs

APRIL 28, 2021

Legitimate software abused by threat actors are: • ARO 2012 Tutorial 8.0.12.0 • VirusScan On-Demand Scan Task Properties (McAfee, Inc.) • Sandboxie COM Services (BITS) 3.55.06 (SANDBOXIE L.T.D) • Outlook Item Finder 11.0.5510 (Microsoft Corporation) • Mobile Popup Application 16.00 (Quick Heal Technologies (P) Ltd.). .”

Backups 97

Backups Malware Mobile Passwords 97

Security Affairs

JANUARY 4, 2021

The US authorities also accuse Assange of having conspired with Army intelligence analyst Chelsea Manning to crack a password hash for an Army computer to access classified documents that were later published on the WikiLeaks website. SecurityAffairs – hacking, Julian Assange). Pierluigi Paganini.

Government 133

Government Risk Passwords Hacking 133

SiteLock

AUGUST 27, 2021

In a report published at the end of 2012 on the growing hacking threat to websites, research firm Frost and Sullivan found that of all cyber security vulnerabilities, more than 98% were discovered by third-party researchers , while less than 2% were discovered by the people who made the applications that contained the vulnerabilities.

Cybersecurity 52

Cybersecurity Social Engineering Passwords Hacking 52

Security Affairs

FEBRUARY 26, 2019

The Russian hacker Stanislav Vitaliyevich Lisov pleads guilty to bank fraud after running a botnet that spread ‘NeverQuest’ malware for three years. The man has pled guilty to one count of conspiracy to commit computer hacking in Manhattan Federal Court, he faces a sentence of up to five years in prison. Pierluigi Paganini.

Banking 79

Banking Malware Advertising Accountability 79

Security Affairs

AUGUST 18, 2021

APT37 has been active since at least 2012, it mainly targeted government, defense, military, and media organizations in South Korea. Harvest cookies and a password database for supported browsers. SecurityAffairs – hacking, InkySquid). ” reads the post published by Volexity. com to malicious subdomains of jquery[.]services.

Internet 112

Internet Internet Media Engineering 112

Security Affairs

JUNE 20, 2019

Researchers discovered that recently patched Firefox zero-day (CVE-2019-11707) has been exploited to deliver Windows and Mac malware to cryptocurrency exchanges. The popular malware researcher Vitali Kremez published an interesting analysis of macOS and Windows malware delivered through the exploitation of the CVE-2019-11707 flaw.

Cryptocurrency 75

Cryptocurrency Malware Advertising Passwords 75

Security Affairs

MARCH 5, 2019

APT40 leverages phishing messages using weaponized documents that are able to trigger vulnerabilities within days of their disclosure, Some of the flaws exploited in past attacks are CVE-2012-0158 , CVE-2017-0199 , CVE-2017-8759 , and CVE-2017-11882 ). . SecurityAffairs – China APT40, hacking). ” FireEye concludes.

Technology 82

Technology Advertising Government Phishing 82

Security Affairs

APRIL 28, 2020

The Outlaw Hacking Group is back, malware researchers from Cybaze-Yoroi ZLab have uncovered a new botnet that is targeting European organizations. During our daily monitoring activities, we intercepted a singular Linux malware trying to penetrate the network of some of our customers. Introduction. Technical Analysis.

Architecture 101

Architecture Malware Hacking DDOS 101

Krebs on Security

JULY 18, 2022

re network uses at least two free VPN services to lure its users to install a malware-like software that achieves persistence on the user’s computer,” the researchers wrote. The website’s copyright suggests the ExE Bucks affiliate program dates back to 2012. 2022 closure of LuxSocks , another malware-based proxy network.

VPN 304

VPN Computers and Electronics Antivirus Software 304

Security Affairs

NOVEMBER 9, 2019

In June 2018, experts at Kaspersky were investigating attacks against government and military entities in South and Southeast Asian countries, The experts tracked the campaign as EasternRoppels, they speculate it may have started as far back as 2012. After that, the malware starts receiving commands. ” continues the analys i s.

Encryption 46

Encryption Passwords Malware Software 46

Security Affairs

JUNE 6, 2019

Security expert Marco Ramilli has analyzed the recently leaked APT34 hacking tool tracked as Jason – Exchange Mail BF. Username and password list can be selected (included in the distributed ZIP file) and threads number should be provided in order to optimize the attack balance. Jason Project GUI. WebService.dll assemply version.

Computers and Electronics 81

Computers and Electronics Penetration Testing DNS Passwords 81

Spinone

NOVEMBER 30, 2018

Details included names, addresses, telephone numbers, dates of birth and encrypted passwords, all of which could be used to access other accounts belonging to these users. The Hacker had discovered Zuckerberg’s password in a 2012 LinkedIn data breach and he had used the same password across several accounts.

Data breaches 40

Data breaches Passwords Backups Mobile 40

Schneier on Security

JULY 9, 2019

Their goal, the researchers believe, is to obtain and download rolling records on the target from the cell provider's database without having to deploy malware on each target's device. [.]. Before and since then, the hackers broke into one cell provider after the other to gain continued and persistent access to the networks.

Hacking 249

Hacking Telecommunications Malware Passwords 249

Security Boulevard

MAY 5, 2022

The last time we saw a bug of this scope was Heartbleed , the infamous attack on OpenSSL that lay undetected for two years (originating in 2012 and remaining unknown until 2014). Because OpenSSL is everywhere, infiltrating it is like hitting the hacking jackpot. It did not require sophisticated malware, and it was easy to replicate.

Encryption 52

Encryption Software Media Authentication 52

SecureWorld News

MARCH 24, 2022

One of the first hacks to ever get widespread public attention occurred on the night of April 27, 1986. RELATED: Original HBO Hack ]. To some, the ability to hack a satellite broadcast was unsettling. What was compromised: names, email addresses, and passwords. How could someone do that , the world asked? and Vietnam.

Data breaches 117

Data breaches Passwords Accountability Government 117

SecureWorld News

DECEMBER 29, 2020

One of the first hacks to get widespread public attention in the United States and Canada occurred on the night of April 27, 1986. Related: Original HBO Hack ]. To some, the ability to hack a satellite broadcast was unsettling. What was compromised: names, email addresses, and passwords. To others it was amusing.

Data breaches 98

Data breaches Passwords Accountability Government 98

Krebs on Security

DECEMBER 14, 2023

The malware used in the Target breach included the text string “ Rescator ,” which also was the handle chosen by the cybercriminal who was selling all of the cards stolen from Target customers. For starters, the text string “Rescator” was found in some of the malware used in the Target breach.

Cybercrime 225

Cybercrime Accountability Advertising Computers and Electronics 225

Security Affairs

MAY 16, 2023

MustangPanda has been active since at least 2012, it targeted American and European entities such as government organizations, think tanks, NGOs , and even Catholic organizations at the Vatican. Upon opening the reports, the infection process starts leading to the deployment of malware on the victim’s system.

Firmware 97

Firmware Encryption Government Malware 97

Security Affairs

AUGUST 21, 2019

The APT41 has been active since at least 2012, it was involved in both state-sponsored espionage campaigns and financially-motivated attacks since 2014. Unlike other China-based actors, the group used custom malware in cyber espionage operations, experts observed 46 different malware families and tools in APT41 campaigns.

Malware 84

Malware Telecommunications Advertising Healthcare 84

Security Affairs

JUNE 24, 2019

US DHS CISA agency warns of increased cyber-activity from Iran aimed at spreading data-wiping malware through password spraying , credential stuffing , and spear-phishing. Want to know more about password spraying and how to stop it? SecurityAffairs – Data wipers, hacking). The attacks are targeting U.S.

Backups 82

Backups Advertising Passwords Accountability 82

SecureList

OCTOBER 17, 2023

This email contained a link leading to a password-protected archive hosted on Google Drive, which represented the first stage of the infection – a.NET binary that was obfuscated and trying to pass itself off as an OpenVPN binary, when in fact it was a malware loader.

Government 101

Government Malware VPN Manufacturing 101

Security Affairs

JANUARY 4, 2020

These efforts are often enabled through common tactics like spear phishing, password spraying, and credential stuffing. ” In June 2019, US DHS CISA agency already warned of increased cyber-activity from Iran aimed at spreading data-wiping malware through password spraying , credential stuffing , and spear-phishing.

Cyber Attacks 71

Cyber Attacks Backups Passwords Advertising 71