Security Affairs

SEPTEMBER 30, 2020

Russian national Yevgeniy Aleksandrovich Nikulin was sentenced to 88 months in prison for hacking LinkedIn, Dropbox, and Formspring in 2012. The Russian national Yevgeniy Aleksandrovich Nikulin was sentenced to 88 months in prison in the United States for hacking LinkedIn, Dropbox, and Formspring in 2012.

Identity Theft 105

Identity Theft Cybercrime Advertising Hacking 105

Security Affairs

JANUARY 3, 2024

They were used to access the internal workplace systems for BMW dealers and could have been useful to attackers for spear-phishing campaigns or malware distribution. This exploit could also be used for mass phishing campaigns, targeting customers,” our researchers said.

Phishing 118

Phishing Manufacturing Firewall Cybercrime 118

Security Affairs

MARCH 25, 2022

has indicted four Russian government employees for their role in cyberattacks targeting hundreds of companies and organizations in the energy sector worldwide between 2012 and 2018. “In total, these hacking campaigns targeted thousands of computers, at hundreds of companies and organizations, in approximately 135 countries.”

Government 94

Government Energy and Utilities Malware Hacking 94

Security Affairs

APRIL 6, 2023

Google experts are tracking ARCHIPELAGO since 2012 and have observed the group targeting individuals with expertise in North Korea policy issues. The attack chain associated with ARCHIPELAGO starts with phishing emails that embed malicious links.

Phishing 82

Phishing Media Passwords Malware 82

Krebs on Security

APRIL 7, 2022

Security experts say both VPNFilter and Cyclops Blink are the work of a hacking group known as Sandworm or Voodoo Bear , the same Russian team blamed for disrupting Ukraine’s electricity in 2015. SANDWORM AND TRITON. energy facilities. and international companies and entities, including U.S. ” HYDRA. . ” HYDRA.

Marketing 254

Marketing Energy and Utilities Malware Ransomware 254

CyberSecurity Insiders

FEBRUARY 13, 2022

A report published by Sentinel One states that a hacking group named “Modified Elephant” was seen carrying out such criminal activities since 2012 and has started the game of planting criminal evidence on devices of innocent online users.

Surveillance 94

Surveillance Passwords Malware Hacking 94

Security Affairs

OCTOBER 7, 2020

The hacking technique was employed by an unidentified hacking group to avoid detection. The threat actor that employed the Kraken technique, likely an APT group, launched a phishing attack that used messages with a.ZIP file attachment. SecurityAffairs – hacking, Kraken). Pierluigi Paganini.

Advertising 129

Advertising Hacking Manufacturing Phishing 129

Security Affairs

APRIL 14, 2020

PaloAlto Networks experts warn of malicious Coronavirus themed phishing campaigns targeting government and medical organizations. The attacks against the Canadian healthcare organizations were discovered between March 24 and March 26, they started with coronavirus -themed phishing campaigns that were carried out in the last months.

Healthcare 115

Healthcare Ransomware Phishing Government 115

Security Affairs

MARCH 27, 2023

Earth Preta, also known as “RedDelta” or “Bronze President,” has been active since at least 2012, it targeted American and European entities such as government organizations, think tanks, NGOs , and even Catholic organizations at the Vatican. The link points to a password-protected archive, the document also includes the password.

Malware 84

Malware Phishing Passwords Government 84

Security Affairs

MAY 11, 2020

.” The second issue, tracked as CVE-2020-9314 , could be exploited to inject external images which can be used for phishing and social engineering attacks. When used in combination with the “ productNameHeight ” and “ productNameWidth ” parameters, this can be used to inject an external image into a site to facilitate phishing.

Social Engineering 91

Social Engineering Phishing Advertising Encryption 91

Security Affairs

FEBRUARY 28, 2022

SecurityAffairs – hacking, newsletter). Are both linked to Evil Corp? worth of NFTs from tens of OpenSea users Trickbot operation is now controlled by Conti ransomware. worth of NFTs from tens of OpenSea users Trickbot operation is now controlled by Conti ransomware. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Ransomware 52

Ransomware Malware Encryption Phishing 52

Security Affairs

MAY 31, 2022

SideWinder has been active since at least 2012, the group main targeted Police, Military, Maritime, and the Naval forces of Central Asian countries. SecurityAffairs – hacking, SideWinder). The experts observed some newly registered domains that were likely used to expand the list of targets in other countries. Pierluigi Paganini.

Encryption 97

Encryption Malware Phishing Hacking 97

Security Affairs

MAY 9, 2022

In February 2022, Cisco Talos researchers started observing China-linked cyberespionage group Mustang Panda conducting phishing attacks against European entities, including Russian organizations. “The threat actor heavily relies on sending lures via phishing emails to achieve initial infection. To nominate, please visit:?

Government 78

Government Malware Phishing Hacking 78

Security Affairs

MARCH 25, 2022

Scarab APT was first spotted in 2015, but experts believe it has been active since at least 2012, conducting surgical attacks against a small number of individuals across the world, including Russia and the United States. The attacker spread their malware through phishing messages using weaponized documents that deploy the HeaderTip malware.

Malware 86

Malware Phishing Hacking Information Security 86

Security Affairs

FEBRUARY 24, 2021

“Amnesty Tech’s Security Lab found technical evidence in phishing emails sent to two prominent Vietnamese human rights defenders, one of whom lives in Germany, and a Vietnamese NGO based in the Philippines, showing that Ocean Lotus is responsible for the attacks between 2018 and November 2020.” SecurityAffairs – hacking, APT32).

Spyware 90

Spyware Government Surveillance Phishing 90

Security Affairs

MARCH 22, 2020

The expert Bob Diachenko has discovered an unsecured Elasticsearch install belonging to a UK security firm that contained 5 billion records of data leaked in previous incidents that took place between 2012 and 2019. Most of the data come from previously known source s, it could expose affected people to scams and phishing campaigns.

Data breaches 99

Data breaches DNS Advertising Engineering 99

Security Affairs

DECEMBER 11, 2020

The APT32 group has been active since at least 2012, it has targeted organizations across multiple industries and foreign governments, dissidents, and journalists. Threat actors were contacting people of interest with romantic lures, they set up pages that were specifically designed to target followers with malware and phishing attacks.

Retail 127

Retail Malware Mobile Accountability 127

Security Affairs

MAY 2, 2023

” ScarCruft has been active since at least 2012, it made the headlines in early February 2018 when researchers revealed that the APT group leveraged a zero-day vulnerability in Adobe Flash Player to deliver malware to South Korean users. RokRat is believed to be the handiwork of the ScarCruft group. .”

Malware 84

Malware Education Media Phishing 84

Security Affairs

APRIL 23, 2020

The Vietnam-linked cyberespionage group tracked as APT32 carried out hacking campaigns against Chinese entities to collect intelligence on the COVID-19 crisis. The APT32 group has been active since at least 2012, it has targeted organizations across multiple industries and foreign governments, dissidents, and journalists.

Government 82

Government Advertising Phishing Malware 82

Security Boulevard

MARCH 30, 2022

Three Russian computer hackers, who were officers in Center 16, carried out energy sector attacks between 2012 and 2014 in phase one of the campaign. The hacking campaigns were directed at hundreds of companies and organizations in 135 countries. What the supply chain hackers did. During the Dragonfly 2.0

Software 52

Software Government InfoSec Malware 52

Security Affairs

MARCH 22, 2020

The expert Bob Diachenko has discovered an unsecured Elasticsearch install belonging to the security firm Keepnet Labs that contained 5 billion records of data leaked in previous incidents that took place between 2012 and 2019. ” wrote Security Discovery’s researcher Bob Diachenko. Adobe, Last.

Data breaches 61

Data breaches DNS Advertising Engineering 61

Security Affairs

JUNE 6, 2019

According to Microsoft, the Platinum has been active since at least 2009, it was responsible for spear phishing attacks on ISPs, government organizations, intelligence agencies, and defense institutes. The campaign, which may have started as far back as 2012, featured a multi-stage approach and was dubbed EasternRoppels.”

Encryption 70

Encryption Government Advertising Cyber Attacks 70

Krebs on Security

MARCH 4, 2019

In an ironic twist, the marketing empire that owns the hacked online properties appears to be run by a Canadian man who’s been sued for fraud by the U.S. I also pinged several customer support email addresses tied to the data-broker Web sites that were hacked. at the victim in this hacking case. Nor has Mr. Willms.

Marketing 194

Marketing Passwords Hacking Advertising 194

Security Affairs

AUGUST 23, 2019

. “However, when we encountered Asruex in a PDF file, we found that a variant of the malware can also act as an infector particularly through the use of old vulnerabilities CVE-2012-0158 and CVE-2010-2883 , which inject code in Word and PDF files respectively.” ” reads the report published by Trend Micro.

Malware 84

Malware Spyware Advertising Encryption 84

Security Affairs

MARCH 5, 2019

The APT levera ges a variety of techniques for initial compromise, including web server exploitation, phishing campaigns delivering publicly available and custom backdoors, and strategic web compromises. SecurityAffairs – China APT40, hacking). Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Technology 82

Technology Advertising Government Phishing 82

Thales Cloud Protection & Licensing

NOVEMBER 14, 2017

The modern era of mass data breaches perhaps began in 2009, with the hack of 32 million account credentials held by software developer RockYou, in which a SQL injection attack revealed that passwords were simple held in cleartext in a database table. The following year saw a leak from Gawker Media’s servers, with another 1.5

Passwords 99

Passwords Internet Internet Data breaches 99

Security Affairs

AUGUST 3, 2018

If an admin chooses to turn the feature on, an email alert (to admins) is triggered when we believe a government-backed attacker has likely attempted to access a user’s account or computer through phishing, malware, or another method.” ” reads the security advisory published by Google.

Accountability 48

Accountability Advertising Government Phishing 48

Security Affairs

OCTOBER 10, 2018

Attacks on bank customers: The decline of Android Trojans and the triumph of phishing. This trend aimed at reducing threats from banking Trojans for PCs has been continuing in Russia since 2012. Using web phishing, criminals have managed to steal $3.7 On average, approximately $15 are stolen in each phishing attack.

Cyber Attacks 83

Cyber Attacks Banking Cyber threats Phishing 83

The Last Watchdog

MAY 11, 2020

Somewhat quietly since about 2012 or so, nation states in that region, led by Saudi Arabia and the United Arab Emirates, commenced a quiet surge to the forefront of implementing comprehensive cybersecurity regulations. Ransomware hacking groups extorted at least $144.35 That shortfall can be seen in windfall of criminal profits.

Computers and Electronics 113

Computers and Electronics Data privacy Encryption Media 113

Security Affairs

MARCH 4, 2019

Necurs botnet is currently the second largest spam botnet , it has been active since at least 2012 and was involved in massive campaigns spreading malware such as the Locky ransomware , the Scarab ransomware , and the Dridex banking Trojan. SecurityAffairs – Necurs botnet, hacking). ” continues the blog post. Pierluigi Paganini.

DNS 79

DNS Banking Advertising Ransomware 79

Security Affairs

FEBRUARY 26, 2020

Probably, the infection vector was a phishing mail containing a specific attachment. Finally, all the loot is sent to the remote command and control hosted at 66.154.98.108, operated by “Total server solutions LLC”, an US hosting provider operating since 2012. Technical Analysis. Figure 9: C2 connection.

Cyber Attacks 115

Cyber Attacks Malware Social Engineering Advertising 115

Spinone

NOVEMBER 30, 2018

In March 2014, hackers used login information leaked by eBay employees to access sensitive user data of 145 million customers , putting these users at risk of identity theft, password theft and phishing risks. A 2015 report by Risk Based Security found that hacking accounted for over half of all reported data breaches during the year.

Data breaches 40

Data breaches Passwords Backups Mobile 40

Security Affairs

SEPTEMBER 5, 2018

The group is back and is targeting once again Vietnam running a spear phishing campaign that uses weaponized documents featuring Vietnamese-language lures and themes. GOBLIN PANDA was focused on Vietnam, most of the targets were in the defense, energy, and government sectors.

Advertising 45

Advertising Government Malware Phishing 45

Security Affairs

FEBRUARY 26, 2021

Inova has been operating since 2012 and has handled thousands of cases since then. Although your data may not have been found by anyone else, in case any ill-intentioned hacker discovered it, here are some of the risks people exposed could face: Phishing Scams and Malware. SecurityAffairs – hacking, Data Breach).

Data breaches 97

Data breaches Insurance Identity Theft Education 97

Security Affairs

NOVEMBER 9, 2019

According to Microsoft, the Platinum has been active since at least 2009, it was responsible for spear phishing attacks on ISPs, government organizations, intelligence agencies, and defense institutes. The APT group was discovered by Microsoft in 2016, it targeted organizations in South and Southeast.

Encryption 47

Encryption Passwords Malware Software 47

Security Affairs

MARCH 2, 2019

In February 2019, SI-LAB captured multiple samples of phishing campaigns using an Office Excel document carrying a malicious Excel 4.0 This threat has been closely observed by researchers from Proofpoint that discovered the RAT used since the beginning of 2016 in targeted phishing campaigns as well as massive, multi-million message campaigns.

Malware 85

Malware Antivirus Technology Phishing 85

NopSec

DECEMBER 7, 2016

Remember Shamoon, the malware that disabled some 35,000 computers at one of the world’s largest oil companies in 2012? The attack vectors have broadened past spear phishing and vulnerable software. It gives the example of Hacking Team, based in Italy, and Vupen Security, based in France.

Cyber threats 40

Cyber threats Ransomware Cyber Attacks Manufacturing 40