Krebs on Security

FEBRUARY 22, 2024

Security experts who reviewed the leaked data say they believe the information is legitimate, and that i-SOON works closely with China’s Ministry of State Security and the military. In 2021, the Sichuan provincial government named i-SOON as one of “the top 30 information security companies.”

Government 332

Government Hacking Cyber threats Mobile 332

Security Affairs

AUGUST 28, 2024

The indictment alleges that from 2013 to 2022, Kadariya played a key role in distributing the Angler Exploit Kit, which was used to spread various malware, including ransomware, through malvertising and other methods. Kadariya has been indicted for distributing the Angler Exploit Kit and other malware to millions of victims.

Malware 129

Malware Computers and Electronics Cybercrime Internet 129

Security Affairs

JULY 4, 2019

The hacker who brought offline with massive DDoS attacks online gaming networks between December 2013 and January 2014 has been sentenced to 27 months in prison. Austin Thompson (23) from Utah hit the principal gamins networks in 2013 and 2014, including Sony Online Entertainment. ” reads the press release published by DoJ.

DDOS 111

DDOS Computers and Electronics Advertising Internet 111

Security Affairs

MARCH 26, 2020

which is a Shopify-like platform that has been hosting hundreds of online shops used for the sale of hacked accounts and stolen user data. platform since October 2013. store used by hackers to offer for sale thousands of compromised accounts, including gamer accounts and PII files containing user names, passwords, U.S.

Cybercrime 144

Cybercrime Advertising Hacking Accountability 144

Security Affairs

DECEMBER 25, 2023

The APT33 group has been around since at least 2013, since mid-2016, the group targeted the aviation industry and energy companies with connections to petrochemical production. ” reads the report published by Microsoft. Most of the targets were in the Middle East, others were in the U.S., South Korea, and Europe.

Passwords 143

Passwords Accountability Malware Authentication 143

Security Affairs

MAY 26, 2024

UAC-0006 has been active since at least 2013. The threat actors focus on compromising accountants’ PCs (which are used to support financial activities, such as access to remote banking systems), stealing credentials, and making unauthorized fund transfers. ” continues the report.

Malware 138

Malware Banking Accountability Phishing 138

Security Affairs

JUNE 30, 2024

The unauthorized access to the IT infrastructure of the company occurred on June 26, threat actors used the credentials of a standard employee account within its IT environment. Upon detecting the suspicious activity by this account, the company immediately started the incident response measures.

Accountability 140

Accountability Hacking Architecture Malware 140

Security Affairs

APRIL 29, 2020

Keys was accused of providing Anonymous login credentials that allowed the group to deface access and deface the website of the Los Angeles Times in 2013. When Keys left Tribune Company-owned Sacramento KTXL Fox 40 in 2010, he shared login credentials of the CMS used by the website with members of Anonymous. ” states the Sacramento Bee.

Hacking 129

Hacking Advertising Accountability Media 129

Security Affairs

JUNE 9, 2023

They also used Bitcoin addresses associated with their accounts on two other Bitcoin exchanges The two Russian nations also used a Bitcoin brokerage service known as the New York Bitcoin Broker to transfer large amounts of funds to overseas bank accounts between March 2012 and April 2013 under the guise of an advertising services contract.

Hacking 98

Hacking Cryptocurrency Advertising Banking 98

Security Affairs

AUGUST 10, 2022

In November 2019, the former Twitter employees Abouammo and the Saudi citizen Ali Alzabarah have been charged with spying on thousands of Twitter user accounts on behalf of the Saudi Arabian government. The two former Twitter employees operated for the Saudi Arabian government with the intent of unmasking dissidents using the social network.

Government 136

Government Accountability Media Marketing 136

Security Affairs

APRIL 9, 2019

Yahoo is continuously trying to settle a lawsuit on the massive data breach over the period of 2013 to 2016. million for the settlement of 3 billion hacked accounts. million settlement with millions of people whose email addresses and other personal information were stolen in the largest data breach in history”.

Data breaches 106

Data breaches Small Business Advertising Cryptocurrency 106

Security Affairs

APRIL 23, 2020

The analysis of the submissions times in VirusTotal for the artifacts employed in the Nazar campaign allowed the expert to date the campaign between 2010 and 2013. Somehow, this operation found its way onto the NSA’s radar pre-2013, as far as I can tell, it’s eluded specific coverage from the security industry.

Hacking 139

Hacking Advertising Malware Engineering 139

Security Affairs

AUGUST 13, 2024

UAC-0006 has been active since at least 2013. The threat actors focus on compromising accountants’ PCs (which are used to support financial activities, such as access to remote banking systems), stealing credentials, and making unauthorized fund transfers.

Government 137

Government Phishing Malware Banking 137

Security Affairs

AUGUST 28, 2020

Iran-linked Charming Kitten group, (aka APT35 , Phosphorus , Newscaster , and Ajax Security Team) made the headlines in 2014 when experts at iSight issued a report describing the most elaborate net-based spying campaign organized by Iranian hackers using social media. Israel, Iraq, and Saudi Arabia.

Phishing 145

Phishing Accountability Advertising Media 145

Security Affairs

SEPTEMBER 29, 2023

The WBSC, headquartered in Switzerland, was established in 2013 and currently has 141 countries as members located in Asia, Africa, the Americas, Europe, and Oceania. Malicious actors can use stolen information to engage in fraudulent activities like opening bank accounts, applying for loans, and executing other types of fraud.

Identity Theft 135

Identity Theft Social Engineering Banking Risk 135

Security Affairs

SEPTEMBER 16, 2023

The APT33 group has been around since at least 2013, since mid-2016, the group targeted the aviation industry and energy companies with connections to petrochemical production. Most of the targets were in the Middle East, others were in the U.S., South Korean, and Europe. .”

Passwords 136

Passwords Accountability Authentication Hacking 136

Security Affairs

DECEMBER 1, 2022

In 2013, Yahoo suffered one of the worst data breaches in history, exposing over 3 billion user accounts. While no plaintext passwords or financial data was stolen, the hack did expose answers to security questions. This allowed hackers to breach many user accounts. Organizations must have a robust password policy.

Data breaches 107

Data breaches Passwords Social Engineering Encryption 107

SecureWorld News

MAY 26, 2022

Federal Trade Commission (FTC) and the Department of Justice (DOJ) charged Twitter with a $150 million penalty for " deceptively using account security data for targeted advertising.". Twitter, like many other social media websites, asks users to provide their phone number and email address to better protect their account.

Advertising 98

Advertising Media Accountability Account Security 98

Security Affairs

DECEMBER 16, 2020

. “The types of sites used to distribute these malicious apps and the information exfiltrated suggests that the ultimate goal is extortion or blackmail.” These sites advertise account IDs for secure messaging apps such as KakaoTalk or Telegram that could allow to communicate with the escorts.

Spyware 142

Spyware Mobile Surveillance Malware 142

Security Affairs

OCTOBER 1, 2020

. “According to the information, these Democratic People’s Republic of Korea cyberactors launched a “security alert” – themed spear-phishing campaign in mid-March against Gmail accounts of the targeted individuals by placing malicious links in the email, utilizing a link to bypass spam blockers of the potential victims.”

Phishing 136

Phishing Advertising Malware Accountability 136

Security Affairs

OCTOBER 6, 2019

Microsoft has been tracking the threat actors at least since 2013, but experts believe that the cyberespionage group has been active since at least 2011. . “The targeted accounts are associated with a U.S. “The targeted accounts are associated with a U.S. ” reads the analysis published by Microsoft.

Accountability 105

Accountability Passwords Advertising Government 105

Security Affairs

JUNE 17, 2023

Polish police, as part of the international law enforcement operation PowerOFF, dismantled a DDoS-for-hire service that has been active since at least 2013. An international operation codenamed PowerOff led to the shutdown of a DDoS-for-hire service that has been active since at least 2013. user accounts, 76 thousand.

DDOS 98

DDOS Computers and Electronics Cybercrime Cryptocurrency 98

Security Affairs

AUGUST 27, 2020

Screenshot from the latest forum discussion about RepWatch in 2013: The CSV files appear to have included the same set of 350 million unique emails, separated into three groups: hashed, hashed and salted, and unencrypted files. Enable two-factor authentication (2FA) for as many of your online accounts as possible. Pierluigi Paganini.

Social Engineering 145

Social Engineering Passwords Marketing Phishing 145

Security Affairs

JUNE 12, 2020

The group was first discovered by Symantec and TrendMicro in 2015 but evidence of its activities has been dated back to 2013. “One tool, a VBA macro targeting Microsoft Outlook, uses the target’s email account to send spearphishing emails to contacts in the victim’s Microsoft Office address book.”

Malware 141

Malware Phishing Advertising Government 141

Security Affairs

JULY 15, 2021

SonicWall also provides recommendations to customers that can’t update their installs, the vendor suggests disconnecting devices immediately and reset their access passwords, and enable account multi-factor authentication, if supported. Continued use of this firmware or end-of-life devices is an active security risk,” states the alert.

Firmware 117

Firmware Ransomware Passwords Mobile 117

Security Affairs

FEBRUARY 2, 2024

The attack did not impact systems employed in the 2013 census. We join in Prime Minister Rama’s call for Iran to be held accountable for this unprecedented cyber incident. The United States will take further action to hold Iran accountable for actions that threaten the security of a U.S.

Cyber Attacks 139

Cyber Attacks Computers and Electronics Government Hacking 139

Notice Bored

JUNE 5, 2022

The organisation cannot adopt a generic suite of information security controls simply on the basis that they have been recommended or suggested by someone - not even if they are noted in Annex A. Justification for including a control is its effect on modifying information security risk. Subclause 6.1.3 Subclause 6.1.3

Risk 72

Risk Information Security Accountability InfoSec 72

Security Affairs

OCTOBER 2, 2019

Today the company published a security notice to disclose the incident. “We recently were alerted by a third party regarding a security matter that may have affected the Zendesk Support and Chat products and customer accounts of those products activated prior to November of 2016.” ” reads the security notice.

Data breaches 97

Data breaches Passwords Accountability Authentication 97

Security Affairs

OCTOBER 13, 2019

Security experts at ClearSky analyzed attacks recently uncovered by Microsoft that targeted a US presidential candidate, government officials, journalists, and prominent expatriate Iranians. The messages include a link and claim to inform the recipient of an attempt to compromise their email account.

Media 92

Media Social Engineering Phishing Advertising 92

Security Affairs

JULY 17, 2020

contacts, images, and files) from various online accounts associated cloud storage services. Microsoft has been tracking the threat actors at least since 2013, but experts believe that the cyberespionage group has been active since at least 2011. . Some of the videos were showing how to exfiltrate data (i.e.

Advertising 129

Advertising Media Authentication Hacking 129

Security Affairs

JANUARY 29, 2020

27, a popular fraud bazaar known as Joker’s Stash began selling card data from “a new huge nationwide breach” that purportedly includes more than 30 million card accounts issued by thousands of financial institutions across 40+ U.S.” . “On the evening of Monday, Jan. ” reads the post published by Brian Krebs.

Data breaches 129

Data breaches Advertising Retail Malware 129

Security Affairs

JULY 31, 2020

The motion picture acquisition agreements, tax ID requests, and contract addendum scans all date between 2013 and 2016. While IndieFlix believes that the bucket has been publicly accessible since May 2015, the company has not found any suspicious activity or unauthorized access attempts to any of its accounts during the period.

Identity Theft 87

Identity Theft Accountability Advertising Marketing 87

Security Affairs

JUNE 29, 2023

As a result of the attack, the criminals gained access to e-mail addresses, telephone numbers and the content of messages collected on accounts,” reads a statement published by the company. Customers can use the app by paying a monthly subscription of $6 for a standard license or $12 for a Pro license. “As India, and Africa.

Data breaches 98

Data breaches Spyware Hacking Accountability 98

Security Affairs

APRIL 28, 2020

OceanLotus APT (also known as APT32 or Cobalt Kitty ) has been active since at least 2013, it is a state-sponsored hacking group that targeted organizations across multiple industries and have also targeted foreign governments, dissidents, and journalists. This allowed us to uncover more pieces of the attackers’ infrastructure.”

Malware 141

Malware Advertising Marketing Hacking 141

eSecurity Planet

JUNE 3, 2021

Mandia will become CEO of Mandiant, the company he founded in 2004 and sold to FireEye in late 2013. Products accounted for $795 million of the company’s $941 million in revenue in 2020. FireEye Products EVP Bryan Palma will take the helm of the new products company.

Cyber Attacks 70

Cyber Attacks Marketing Information Security Accountability 70

Security Affairs

DECEMBER 16, 2022

.” In November 2019, the former Twitter employees Abouammo and the Saudi citizen Ali Alzabarah have been charged with spying on thousands of Twitter user accounts on behalf of the Saudi Arabian government. The man opened a bank account in the name of his father in Lebanon and used it to receive $200,000 in two transfers.

Government 98

Government Accountability Banking Media 98

Security Affairs

MAY 8, 2023

Threat actors are using emails sent from compromised accounts with the subject “bill/payment” with an attachment in the form of a ZIP archive. CERT-UA attributed the campaign to the financially motivated threat actor UAC-0006 which has been active since at least 2013.

Malware 98

Malware Phishing VPN Accountability 98