Krebs on Security

APRIL 30, 2024

A 26-year-old Finnish man was sentenced to more than six years in prison today after being convicted of hacking into an online psychotherapy clinic, leaking tens of thousands of patient therapy records, and attempting to extort the clinic and patients. After being charged with the attack in October 2022, Kivimäki fled the country.

DDOS 233

DDOS Cybercrime Hacking Passwords 233

Security Affairs

JULY 9, 2020

More than 15 billion username and passwords are available on cybercrime marketplaces, including over 5 billion unique credentials, states the experts. The credentials are sold for an average of $15.43, the most expensive pairs relate to banking and financial services accounts, with an average price of nearly $71. Pierluigi Paganini.

Cybercrime 128

Cybercrime Antivirus Marketing Accountability 128

Security Affairs

OCTOBER 10, 2020

Microsoft has uncovered Zerologon attacks that were allegedly conducted by the infamous TA505 Russia-linked cybercrime group. Microsoft spotted a series of Zerologon attacks allegedly launched by the Russian cybercrime group tracked as TA505 , CHIMBORAZO and Evil Corp. SecurityAffairs – hacking, Zerologon). Pierluigi Paganini.

Cybercrime 125

Cybercrime Security Intelligence Authentication Banking 125

Security Affairs

NOVEMBER 17, 2022

A suspected leader of the Zeus cybercrime gang, Vyacheslav Igorevich Penchukov (aka Tank), was arrested by Swiss police. Swiss police last month arrested in Geneva Vyacheslav Igorevich Penchukov (40), also known as Tank, which is one of the leaders of the JabberZeus cybercrime group. SecurityAffairs – hacking, Zeus).

Cybercrime 99

Cybercrime Banking Identity Theft Hacking 99

Security Affairs

JUNE 28, 2020

Asian media firm E27 has been hacked by a hacking group identifying themselves as “Korean Hackers” and “Team Johnwick”that asked for a “donation” to provide information on the vulnerabilities they have exploited in the attack. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Media 143

Media Hacking Passwords Data breaches 143

Krebs on Security

APRIL 18, 2023

.'” MRMURZA Faceless is a project from MrMurza , a particularly talkative member of more than a dozen Russian-language cybercrime forums over the past decade. MrMurza’s Faceless advertised on the Russian-language cybercrime forum ProCrd. Image: Darkbeast/Ke-la.com. 2012, from an Internet address in Magnitogorsk, RU.

Malware 231

Malware Passwords Accountability Advertising 231

Security Affairs

JUNE 7, 2020

The Indian video on demand giant ZEE5 has been hacked, attackers are threatening to sell the database on the cybercrime underground markets. In early April, the researcher Ax Sharma published a post on Medium about a dataset with some 1,023 compromised ZEE5 Premium accounts for an online streaming service. Pierluigi Paganini.

Hacking 111

Hacking Cybercrime Advertising Passwords 111

Security Affairs

JULY 6, 2020

employee who hacked into the accounts of thousands of users was sentenced to five years of probation. In September the former Yahoo software engineer Reyes Daniel Ruiz has admitted in court to hacking into 6,000 Yahoo! accounts back in 2018. systems for access to the accounts. SecurityAffairs – hacking, Yahoo!).

Accountability 102

Accountability Advertising Hacking Engineering 102

Krebs on Security

JUNE 1, 2023

One of Megatraffer’s ads on an English-language cybercrime forum. Megatraffer has continued to offer their code-signing services across more than a half-dozen other Russian-language cybercrime forums, mostly in the form of sporadically available EV and non-EV code-signing certificates from major vendors like Thawte and Comodo.

Malware 238

Malware Cybercrime Software Antivirus 238

Security Affairs

NOVEMBER 3, 2018

Cybercriminals offered for sale private messages from at least 81,000 Facebook accounts claiming of being in possession of data from 120 million accounts. Crooks are offering for sale Criminals are selling the private messages of 81,000 hacked Facebook accounts for 10 cents per account. ” states the BBC.

Accountability 106

Accountability Advertising Cybercrime Hacking 106

Security Affairs

JULY 11, 2020

A jury found Russian hacker Yevgeniy Nikulin guilty for the hack of LinkedIn, Dropbox, and Formspring back in 2012 and for the sale of the stolen data on cybercrime black marketplaces. The data stolen by Nikulin were available on the cybercrime underground between 2015 and 2016, they were offered for sale by multiple traders.

Hacking 87

Hacking Cybercrime Data breaches Advertising 87

Security Affairs

FEBRUARY 17, 2024

On October 2022, Swiss police arrested Penchukov in Geneva, also known as Tank, which is one of the leaders of the JabberZeus cybercrime group. In 2012, the Ukrainian national Vyacheslav Igorevich Penchukov was accused of being a member of a cybercrime gang known as JabberZeus crew.

Malware 102

Malware Cybercrime Banking Hacking 102

Security Affairs

AUGUST 12, 2019

Researchers discovered a dump containing 6,840,339 records associated with StockX user accounts that surfaced in the cybercrime underground. Last week media reported the hack of StockX , the fashion and sneaker trading platform. Now a dump containing 6,840,339 unique StockX user accounts surfaced in the cybercrime underground.

Accountability 87

Accountability Data breaches Passwords Cybercrime 87

Security Affairs

NOVEMBER 16, 2018

According to Group-IB’s report findings, Asia is one of the most actively attacked regions in the world, the company presented latest cybercrime trends. Thirteen exchanges were hacked in 2017 and in the first three quarters of 2018, amounting to a total loss of $877 million. Attacks on Crypto. million dumps, which cost as much as $567.8

Cybercrime 88

Cybercrime Hacking Banking Phishing 88

Krebs on Security

JUNE 29, 2023

Nikita Kislitsin , formerly the head of network security for one of Russia’s top cybersecurity firms, was arrested last week in Kazakhstan in response to 10-year-old hacking charges from the U.S. Prosecutors in Northern California indicted Kislitsin in 2014 for his alleged role in stealing account data from Formspring.

Cybersecurity 246

Cybersecurity Cybercrime Hacking Technology 246

Krebs on Security

JANUARY 8, 2024

In 2020, the United States brought charges against four men accused of building a bulletproof hosting empire that once dominated the Russian cybercrime industry and supported multiple organized cybercrime groups. From January 2005 to April 2013, there were two primary administrators of the cybercrime forum Spamdot (a.k.a

Cybercrime 206

Cybercrime Banking Computers and Electronics DDOS 206

Security Affairs

OCTOBER 5, 2020

Threat actors have hacked at least three Swiss universities, including the University of Basel and managed to drain employee salary transfers. It added that part of the misappropriated funds was now in foreign accounts.” ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Advertising 144

Advertising Phishing Cybercrime Hacking 144

Krebs on Security

JUNE 21, 2023

If you operate a cybercrime business that relies on disseminating malicious software, you probably also spend a good deal of time trying to disguise or “crypt” your malware so that it appears benign to antivirus and security products. biz , a long-running crypting service that is trusted by some of the biggest names in cybercrime.

Malware 216

Malware Antivirus Cybercrime Hacking 216

Security Affairs

APRIL 22, 2024

The threat actors shared a portion of the stolen data with TechCrunch as proof of the hack, it includes records on current and former government officials, diplomats, and politically exposed people. In June 2016, security researcher Chris Vickery found a copy of the World-Check database dated 2014 that was accidentally exposed online.

Risk 124

Risk Spyware Hacking Accountability 124

Security Affairs

APRIL 24, 2020

Nintendo has disconnected the NNID legacy login system from main Nintendo profiles after it has discovered a massive account hijacking campaign. The gaming giant Nintendo announced that hackers gained accessed at least 160,000 user accounts as part of an account hijacking campaign since early April. ” reported ZDNet.

Accountability 99

Accountability Passwords Data breaches Advertising 99

Security Affairs

MARCH 18, 2020

. ” “We cannot state with certainty that your data was specifically accessed, however you should know that the information that was potentially subject to unauthorised access includes your name, address, payment card account number, card expiration date and security code.”. SecurityAffairs – TrueFire, cybercrime).

Hacking 102

Hacking Data breaches Advertising Accountability 102

Security Affairs

SEPTEMBER 21, 2019

US authorities have indicted two men for hacking the exchange EtherDelta in December 2017, one of them was also accused of TalkTalk hack. US authorities have indicted two men, Elliot Gunton and Anthony Tyler Nashatka, for hacking the cryptocurrency exchange EtherDelta in 2017. ” reported ZDNet.

Hacking 82

Hacking DNS Cryptocurrency Accountability 82

Security Affairs

SEPTEMBER 2, 2019

Login details of more than 36 million Poshmark accounts are available for sale in the cybercrime underground. “In mid-2018, social commerce marketplace Poshmark suffered a data breach that exposed 36M user accounts. Now Scott told BleepingComputer that a set of one million cracked Poshmark accounts is circulating online.

Accountability 88

Accountability Data breaches Passwords Advertising 88

Security Affairs

MARCH 26, 2020

that is hosting various cybercrime products and services were being sold. was shut down by the FBI today, and its suspected administrator – alleged Russian hacker Kirill Victorovich Firsov – was arrested and charged with crimes related to the hacking of U.S. The Russian man also advertised the platform on other hacking forums.

Cybercrime 123

Cybercrime Advertising Hacking Accountability 123

Krebs on Security

FEBRUARY 5, 2023

A notorious hacker convicted of perpetrating tens of thousands of cybercrimes, Kivimäki had been in hiding since October 2022, when he failed to show up in court and Finland issued an international warrant for his arrest.

Cybercrime 227

Cybercrime DDOS Hacking Accountability 227

Security Affairs

NOVEMBER 18, 2018

The attackers exploited a PHP zero-day exploit leaked just a day before the hack and that was already fixed in db626a54a4f5 , but likely attackers used other flaws. “On November 15th around 10-11 PM UTC the hosting server got hacked. As per my analysis it seems someone got access to the database and deleted all accounts.”

Hacking 106

Hacking Advertising Cybercrime Accountability 106

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. Chaput said that at one point last week the volume of bot accounts being registered for the crypto spam campaign started overwhelming the servers that handle new signups at Mastodon.social.

Scams 239

Scams DDOS Cryptocurrency Accountability 239

Malwarebytes

JULY 25, 2022

Word is spreading of a compromise claimed to have accessed around 69 million user accounts. This compromise, posted to a hacking forum, is said to include both the database and around 460 MB of compressed source code from Neopets.com. In 2020, there were claims of ways to potentially gain access to user accounts.

Data breaches 81

Data breaches Accountability Passwords Password Management 81

Security Affairs

AUGUST 16, 2020

A 31-year-old man from Dallas, Texas, was sentenced last week to 57 months in prison for crimes related to the hacking of a major tech firm in New York. King (31), from Dallas, Texas, was sentenced to 57 months in prison for crimes related to the hacking of an unnamed major tech company based in New York. King’s accomplice, Ashley St.

Hacking 99

Hacking Identity Theft Advertising Accountability 99

Security Affairs

JULY 24, 2019

US authorities have sentenced to prison three Romanian men who hacked US servers and used them in a fraud scheme that totaled more than $21 million. The crooks also carried out a phishing campaign that reached thousands of victims and tricked them into providing social security numbers and bank account information. .

Hacking 88

Hacking Banking Identity Theft Phishing 88

Security Affairs

DECEMBER 26, 2023

The Carbanak malware has been active since at least 2014 and has been used by ransomware gangs to infiltrate financial systems. Imposters in November included the CRM platform HubSpot, data management software Veeam, and account tool Xero.” The threat actors used sophisticated phishing techniques against bank employees.

Malware 123

Malware Ransomware Banking Healthcare 123

Security Affairs

OCTOBER 18, 2020

. “Comprised of several layers of members mainly from Latvia, Georgia, Bulgaria, Romania, and Belgium, the QQAAZZ network opened and maintained hundreds of corporate and personal bank accounts at financial institutions throughout the world to receive money from cybercriminals who stole it from accounts of victims.”

Malware 118

Malware Banking Cryptocurrency Cybercrime 118

Security Affairs

SEPTEMBER 16, 2018

After seeing the exploit code, the EOSBet’s official Reddit account admitted the hack. Yep, we were hacked. stated the EOSBet’s official Reddit account. Eosbet official eos account: eosbetdicell.”. 1EOS=1BET, the official eos account: eosbetdicell, the transfer will automatically give the same BET.”.

Hacking 93

Hacking Accountability Advertising Cybercrime 93

Security Affairs

MARCH 15, 2020

A cybercrime gang focused on Business Email Compromise (BEC) has started using coronavirus-themed scam emails in its attacks. The researchers received a coronavirus-themed scam email that attempted to trick victims into using a different bank account for the payment due to the COVID-19 outbreak. A change of the bank account).

Scams 111

Scams Banking Cybercrime Advertising 111

Security Affairs

MARCH 13, 2020

European authorities dismantled two cybercrime organizations responsible for stealing millions through SIM hijacking. European authorities managed to dismantle the operations of two cybercrime gangs responsible for stealing millions through SIM hijacking. The authorities arrested tens of individuals in Spain and Romania. .

Banking 123

Banking Cybercrime Mobile Accountability 123

Security Affairs

OCTOBER 19, 2020

Alexander Vinnik allegedly headed the Bitcoin exchange BTC-e, he is charged with different hacking crimes in Russia, France, and the United States. Gox was the biggest Bitcoin exchange at the time of the shut down in 2014 that occurred after the platform was the victim of a series of cyber heists for a total of $375 million in Bitcoin.

Advertising 123

Advertising Cybercrime Hacking Cryptocurrency 123

Security Affairs

SEPTEMBER 22, 2020

The Wall Street Market marketplace was considered one of the most important points of aggregation in the cybercrime underground for trading in cocaine, heroin, cannabis and amphetamines as well as digital goods (i.e. ” the Head of Europol’s European Cybercrime Centre (EC3) , Edvardas Šileris said. Pierluigi Paganini.

Cybercrime 132

Cybercrime Advertising Marketing Internet 132