Security Affairs

JULY 11, 2020

The Russian hacker Yevgeniy Nikulin found guilty for LinkedIn, Dropbox, and Formspring data breach back in 2012 and the sale of their users’ data. A jury found Russian hacker Yevgeniy Nikulin guilty for the hack of LinkedIn, Dropbox, and Formspring back in 2012 and for the sale of the stolen data on cybercrime black marketplaces.

Hacking 116

Hacking Cybercrime Advertising Data breaches 116

Security Affairs

APRIL 14, 2020

PaloAlto Networks experts warn of malicious Coronavirus themed phishing campaigns targeting government and medical organizations. The attacks against the Canadian healthcare organizations were discovered between March 24 and March 26, they started with coronavirus -themed phishing campaigns that were carried out in the last months.

Healthcare 144

Healthcare Ransomware Phishing Government 144

Security Affairs

SEPTEMBER 30, 2020

Russian national Yevgeniy Aleksandrovich Nikulin was sentenced to 88 months in prison for hacking LinkedIn, Dropbox, and Formspring in 2012. The Russian national Yevgeniy Aleksandrovich Nikulin was sentenced to 88 months in prison in the United States for hacking LinkedIn, Dropbox, and Formspring in 2012.

Identity Theft 110

Identity Theft Cybercrime Advertising Hacking 110

Krebs on Security

APRIL 7, 2022

The Justice Department said that in Dragonfly’s first stage between 2012 and 2014, the defendants hacked into computer networks of industrial control systems (ICS) companies and software providers, and then hid malware inside legitimate software updates for such systems. energy facilities. ” HYDRA. . ” HYDRA.

Marketing 306

Marketing Energy and Utilities Malware Ransomware 306

CyberSecurity Insiders

JANUARY 5, 2022

Highly placed sources say that the malware has been distributed via phishing campaign by a cyber threat group named MalSmoke. Microsoft that fixed this security vulnerability in 2012-13 by implementing strict file verification policies is busy urging admins to follow its legacy advisory published in August 2013 in order to fix the issue.

Malware 131

Malware Spyware Antivirus Cyber threats 131

CSO Magazine

JUNE 8, 2023

Operating since at least 2012, the group often employs targeted phishing and social engineering tactics to gather intelligence and access sensitive information." To read this article in full, please click here

Social Engineering 108

Social Engineering Engineering Phishing Government 108

Security Affairs

FEBRUARY 21, 2024

Mustang Panda has been active since at least 2012, it targeted American and European entities such as government organizations, think tanks, NGOs , and even Catholic organizations at the Vatican. “Based on our observations, we believe Earth Preta tends to use spear-phishing emails and Google Drive links in its attacks.”

Malware 141

Malware Phishing Government Passwords 141

Heimadal Security

MAY 18, 2023

At least since 2012, SideWinder has been active, using spear-phishing attacks to gain access to targeted environments. Researchers have uncovered previously unknown attack infrastructure used by Pakistani and Chinese entities operated by the state-sponsored group SideWinder.

Cybercrime 94

Cybercrime Phishing Cybersecurity 94

Security Affairs

MAY 11, 2020

.” The second issue, tracked as CVE-2020-9314 , could be exploited to inject external images which can be used for phishing and social engineering attacks. When used in combination with the “ productNameHeight ” and “ productNameWidth ” parameters, this can be used to inject an external image into a site to facilitate phishing.

Social Engineering 125

Social Engineering Phishing Advertising Encryption 125

CyberSecurity Insiders

JULY 21, 2021

According to a press release from Associated Press, the Saudi Arabia-based petroleum producer was hit by a cyber attack in 2012 where the servers of the company were targeted by a malware named ‘Shamoon’ via a ‘spear phishing’ attack deceptively launched by Iran.

Ransomware 139

Ransomware Encryption Cryptocurrency Cyber Attacks 139

Vipre

MAY 5, 2021

For instance, failing to educate users on the dangers of phishing amounts to business malpractice. Your answers should make it obvious in which areas of security you need to invest: Are you training users on the dangers of phishing? 66% of ransomware infections are due to spam and phishing emails.

Ransomware 122

Ransomware Backups Phishing Education 122

CyberSecurity Insiders

OCTOBER 24, 2021

times the amount observed during the 2012 London Olympics. According to a finding discovered by NTT Corporation that was assigned operating the digital services across the event, state funded hackers tried their best to disrupt the event that counted over 2.5

Cyber Attacks 141

Cyber Attacks Cyber Risk Backups Cyber threats 141

Security Affairs

MARCH 22, 2020

The expert Bob Diachenko has discovered an unsecured Elasticsearch install belonging to a UK security firm that contained 5 billion records of data leaked in previous incidents that took place between 2012 and 2019. Most of the data come from previously known source s, it could expose affected people to scams and phishing campaigns.

Data breaches 111

Data breaches Advertising DNS Engineering 111

Security Affairs

MARCH 25, 2022

has indicted four Russian government employees for their role in cyberattacks targeting hundreds of companies and organizations in the energy sector worldwide between 2012 and 2018. ” reads a press release published by DoJ. ’ (aka Dragonfly , Berzerk Bear, Energetic Bear, and Crouching Yeti ).

Government 115

Government Energy and Utilities Malware Hacking 115

Security Affairs

JANUARY 3, 2024

They were used to access the internal workplace systems for BMW dealers and could have been useful to attackers for spear-phishing campaigns or malware distribution. This exploit could also be used for mass phishing campaigns, targeting customers,” our researchers said.

Phishing 136

Phishing Manufacturing Firewall Cybercrime 136

The Last Watchdog

JUNE 21, 2020

FBI spoofs 2012 – 2013. It surfaced in November 2012 and was making thousands of victims a day. The logic of the raid mainly comes down to using unsecured RDP ports or spear-phishing to infiltrate networks and gain a foothold in them. None of these early threats went pro.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

OCTOBER 7, 2020

The threat actor that employed the Kraken technique, likely an APT group, launched a phishing attack that used messages with a.ZIP file attachment. The APT32 group has been active since at least 2012, it has targeted organizations across multiple industries and foreign governments, dissidents, and journalists.

Advertising 138

Advertising Hacking Manufacturing Phishing 138

SecureList

MAY 6, 2024

A significant share of scam, phishing and malware attacks is about money. Methodology In this report, we present an analysis of financial cyberthreats in 2023, focusing on banking Trojans and phishing pages that target online banking, shopping accounts, cryptocurrency wallets and other financial assets. million in 2022. of attacks.

Phishing 132

Phishing Banking Mobile Scams 132

Security Affairs

MARCH 11, 2025

SideWinder (also known as Razor Tiger, Rattlesnake, and T-APT-04) has been active since at least 2012, the group mainly targeted Police, Military, Maritime, and the Naval forces of Central Asian countries. The infection flow is the same as past attacks, threat actors send spear-phishing emails with a DOCX file attached.

Malware 67

Malware Government Phishing Hacking 67

Security Affairs

FEBRUARY 24, 2021

“Amnesty Tech’s Security Lab found technical evidence in phishing emails sent to two prominent Vietnamese human rights defenders, one of whom lives in Germany, and a Vietnamese NGO based in the Philippines, showing that Ocean Lotus is responsible for the attacks between 2018 and November 2020.”

Spyware 128

Spyware Government Surveillance Phishing 128

eSecurity Planet

OCTOBER 11, 2023

“This is typically achieved through social engineering attacks with spear phishing to gain initial access to a host before searching for other internal vulnerable targets. For Server 2012/2012 R2 it is highly recommended to subscribe to ESU or migrate to a newer server edition.”

DDOS 109

DDOS Engineering Authentication Social Engineering 109

Security Affairs

DECEMBER 5, 2020

DeathStalker is a hack-for-hire group discovered by Kaspersky, it has been targeting organizations worldwide, mainly law firms and financial entities, since 2012. The PowerPepper attack chain is being delivered through weaponized Word documents distributed through spear-phishing messages.

DNS 122

DNS Phishing Encryption Antivirus 122

Malwarebytes

JUNE 1, 2021

The Kimsuky APT—also known as Thallium, Black Banshee, and Velvet Chollima—is a North Korean threat actor that has been active since 2012. On December 2020, KISA (Korean Internet & Security Agency) provided a detailed analysis about the phishing infrastructure and TTPs used by Kimsuky to target South Korea. Phishing Infrastructure.

Government 145

Government Phishing Encryption Media 145

Security Affairs

APRIL 6, 2023

Google experts are tracking ARCHIPELAGO since 2012 and have observed the group targeting individuals with expertise in North Korea policy issues. The attack chain associated with ARCHIPELAGO starts with phishing emails that embed malicious links.

Phishing 98

Phishing Media Passwords Malware 98

Security Affairs

AUGUST 23, 2019

. “However, when we encountered Asruex in a PDF file, we found that a variant of the malware can also act as an infector particularly through the use of old vulnerabilities CVE-2012-0158 and CVE-2010-2883 , which inject code in Word and PDF files respectively.” ” reads the report published by Trend Micro.

Malware 110

Malware Advertising Spyware Encryption 110

Security Affairs

MARCH 22, 2020

The expert Bob Diachenko has discovered an unsecured Elasticsearch install belonging to the security firm Keepnet Labs that contained 5 billion records of data leaked in previous incidents that took place between 2012 and 2019. ” wrote Security Discovery’s researcher Bob Diachenko. Adobe, Last.

Advertising 93

Advertising Data breaches DNS Engineering 93

SC Magazine

MAY 5, 2021

A pair of related phishing campaigns this year took the unusual step of intentionally avoiding malicious links or attachments in its emails – a sign that threat actors may recognize the need to come up with new tactics. Here, workers prepare a presentation the day before the CeBIT 2012 technology trade fair.

Phishing 65

Phishing Scams Malware Social Engineering 65

CSO Magazine

MAY 5, 2022

A cyberespionage group whose targeting has historically been aligned with China's geopolitical interests has been targeting European and Russian entities using topical spear-phishing lures connected to the war in Ukraine.

Telecommunications 70

Telecommunications Phishing Cybersecurity 70

Security Affairs

JUNE 6, 2019

According to Microsoft, the Platinum has been active since at least 2009, it was responsible for spear phishing attacks on ISPs, government organizations, intelligence agencies, and defense institutes. The campaign, which may have started as far back as 2012, featured a multi-stage approach and was dubbed EasternRoppels.”

Encryption 102

Encryption Advertising Government Cyber Attacks 102

Security Affairs

APRIL 23, 2020

The APT32 group has been active since at least 2012, it has targeted organizations across multiple industries and foreign governments, dissidents, and journalists. According to FireEye, the nation-state hackers targeted the Wuhan Government and the Chinese Ministry of Emergency Management with spear-phishing attacks.

Government 124

Government Advertising Phishing Malware 124

Security Affairs

DECEMBER 11, 2020

The APT32 group has been active since at least 2012, it has targeted organizations across multiple industries and foreign governments, dissidents, and journalists. Threat actors were contacting people of interest with romantic lures, they set up pages that were specifically designed to target followers with malware and phishing attacks.

Retail 138

Retail Malware Mobile Accountability 138

Duo's Security Blog

NOVEMBER 20, 2023

“It took nearly 11 months (328 days) to identity and contain data breaches resulting from stolen or compromised credentials.” – IBM’s Cost of Data Breach Report 2023 I recently came across a 2012 article from CSO Online , and realized that it has been more than 11 years since the phrase “Identity is the new perimeter” was coined!

Threat Detection 138

Threat Detection Authentication Accountability Data breaches 138

Malwarebytes

JULY 28, 2021

2012 London. Articles warning of dangers mainly focused on search engine poisoning (still a threat back in 2012), fake sites, streaming , and once again Twitter makes an appearance as “one to watch.” Russian sites hosted Trojans claiming to be official 2012 game apps.

Scams 142

Scams Hacking Malware Mobile 142

CyberSecurity Insiders

FEBRUARY 13, 2022

A report published by Sentinel One states that a hacking group named “Modified Elephant” was seen carrying out such criminal activities since 2012 and has started the game of planting criminal evidence on devices of innocent online users.

Surveillance 94

Surveillance Passwords Malware Hacking 94

Security Affairs

JUNE 24, 2019

US DHS CISA agency warns of increased cyber-activity from Iran aimed at spreading data-wiping malware through password spraying , credential stuffing , and spear-phishing. ” Past attacks attributed to Iran-linked hackers are: 2012 – Shamoon wiped over 30,000 computers at Saudi Aramco. The attacks are targeting U.S.

Backups 109

Backups Advertising Accountability Passwords 109

eSecurity Planet

NOVEMBER 10, 2022

. “It has low complexity, uses the network vector, and requires no privilege to use, but it needs user interaction, such as using a phishing email to convince the victim to visit a malicious server share or website,” Walters said. “With a long list of Windows 10 and 11 impacted (in addition to Win 8.0,

Phishing 109

Phishing Malware Cybersecurity Network Security 109

Malwarebytes

SEPTEMBER 23, 2021

In just a year, they were able to steal a total of 11.72M USD (10M EUR) from hundreds of victims of phishing attacks and other fraudulent activities such as SIM swapping (also known as SIMjacking ), business email compromise (BEC) , and money muling. Cyber mafia” is not an unknown concept in the cybersecurity world.

Cybercrime 93

Cybercrime Computers and Electronics Cryptocurrency Phishing 93