Security Affairs

APRIL 11, 2020

Crooks are using a fake Cisco “critical security advisory” in a new phishing campaign aimed at stealing victims’ Webex credentials. The Cofense’s phishing defense center has uncovered an ongoing phishing campaign that uses a Cisco security advisory related to a critical vulnerability as a lure. ” concludes the experts.

Phishing 135

Phishing Advertising Healthcare Cyber Attacks 135

SecureList

AUGUST 5, 2021

In Q2 2021, corporate accounts continued to be one of the most tempting targets for cybercriminals. A fake notification about a Microsoft Teams meeting or a request to view an important document traditionally takes the victim to a phishing login page asking for corporate account credentials. Quarterly highlights.

Phishing 118

Phishing Banking Scams Computers and Electronics 118

Security Affairs

JANUARY 2, 2020

Crooks are exploiting the popularity of the Star Wars saga to monetize their efforts, experts warn of online streaming sites delivering malware. Cybercriminals leverage popular movies like Star Wars to lure users into downloading malware to watch exclusive scenes or the full movie. ” reads a press release published by Kasperky.

Phishing 75

Phishing Malware Advertising Media 75

Security Affairs

SEPTEMBER 18, 2020

Web-phishing targeting various online services almost doubled during the COVID-19 pandemic , it accounted for 46 percent of the total number of fake web pages. Downloaders , intended for the installation of additional malware,and backdoors , granting cybercriminals remote access to victims’ computers, also made it to top-3.

Phishing 101

Phishing Ransomware Spyware Banking 101

Malwarebytes

MAY 5, 2022

Agent Tesla is a well-known data stealer written in.NET that has been active since 2014 and is perhaps one of the most popular payloads observed in malspam campaigns. pw accounts, various scams). Based on these profiles, we can see this threat actor has an extensive criminal record starting at least from 2014. Test successful!

Malware 76

Malware Scams Phishing Accountability 76

SiteLock

AUGUST 27, 2021

According to the report “A resurgence of RAM scraping malware is the most prominent tactical development in 2013,” the same tactic used in the giant Target breach. The three most common forms of attack on web apps were phishing (to lure users into revealing their passwords), brute force attacks to crack passwords, and SQL injections.

Retail 52

Retail Data breaches DDOS Passwords 52

Security Affairs

AUGUST 19, 2019

Phishing is one of the oldest methods of cyberattacks. Types of Phishing Attacks. There are different types of phishing attacks and each is deceiving and manipulative in its own unique way. The most common type is phishing is carried out through fraudulent email receptionist. Another targeted phishing practice is Whaling.

Phishing 86

Phishing Accountability Authentication Passwords 86

Krebs on Security

AUGUST 30, 2019

But when accounts at those CRM providers get hacked or phished, the results can be damaging for both the client’s brand and their customers. Here’s a look at a recent CRM-based phishing campaign that targeted customers of Fortune 500 construction equipment vendor United Rentals.

Phishing 218

Phishing Marketing Accountability DNS 218

Security Affairs

JULY 22, 2019

Last week, hackers published a list of Discord credentials (email addresses/passwords) that were allegedly phished from the users of the gaming chat platform. Last week, a group of hackers published a list of Discord login credentials (email addresses and passwords) that were allegedly phished from the users of the gaming chat platform.

Phishing 74

Phishing Data breaches Passwords Advertising 74

Security Affairs

APRIL 30, 2020

Group-IB uncovered a new sophisticated phishing campaign, tracked as PerSwaysion, against high-level executives of more than 150 companies worldwide. . PerSwaysion is a highly-targeted phishing campaign. New round of phishing attempts leveraging current victim’s account usually takes less than 24 hours. Gone in 24 Hours.

Phishing 90

Phishing Accountability Financial Services Cloud Migration 90

Security Affairs

JUNE 12, 2020

The attackers first disable protections for running macro scripts in Outlook then deploy the code to send phishing messages to the victim’s contacts. “One tool, a VBA macro targeting Microsoft Outlook, uses the target’s email account to send spearphishing emails to contacts in the victim’s Microsoft Office address book.”

Malware 99

Malware Phishing Advertising Government 99

Security Affairs

DECEMBER 1, 2019

Over 90 percent of the users identified by Google were targeted via “credential phishing emails” that attempt to trick victims into providing their password or other account credentials to hijack their Google account. It doesn’t mean that hackers successfully compromised their Google accounts. Pierluigi Paganini.

Phishing 123

Phishing Accountability Advertising Cyber Attacks 123

Krebs on Security

APRIL 7, 2022

The DOJ said it did not seek to disinfect compromised devices; instead, it obtained court orders to remove the Cyclops Blink malware from its “command and control” servers — the hidden machines that allowed the attackers to orchestrate the activities of the botnet. energy facilities. ” HYDRA. . ” HYDRA. .

Marketing 255

Marketing Energy and Utilities Malware Ransomware 255

Security Affairs

MARCH 20, 2020

Most of APT28s’ campaigns leveraged spear-phishing and malware-based attacks, the recent mass scanning activity represents a change in the modus operandi of the group. “This report aims to shed light on some of Pawn Storm’s attacks that did not use malware in the initial stages. ” continues the report.

Phishing 130

Phishing Accountability Advertising DNS 130

Security Affairs

FEBRUARY 23, 2020

Cisco Talos researchers discovered a new malware, tracked as ObliqueRAT, that was employed targeted attacks against organizations in Southeast Asia. Experts from Cisco Talos discovered a new malware, tracked as ObliqueRAT, that appears a custom malware developed by a threat actor focused on government and diplomatic targets. .

Government 112

Government Malware Advertising Passwords 112

Security Affairs

MARCH 27, 2020

Google announced to have warned users of almost 40,000 alerts of state-sponsored phishing or malware attacks during 2019. Google shared data on alerts related to state-sponsored attacks, the tech giant revealed that it issued almost 40,000 alerts of state-sponsored phishing or malware attacks to its users during 2019.

Phishing 113

Phishing Accountability Advertising Malware 113

Security Affairs

OCTOBER 4, 2020

Visa revealed that two unnamed North American hospitality merchants have been infected with some strains of point-of-sale (POS) malware. “In May and June 2020, respectively, Visa Payment Fraud Disruption (PFD) analyzed malware samples recovered from the independent compromises of two North American merchants.”

Malware 136

Malware Advertising Accountability Hacking 136

Security Affairs

APRIL 23, 2020

Across Google products, we’re seeing bad actors use COVID-related themes to create urgency so that people respond to phishing attacks and scams.” One notable phishing campaign observed by Google’s experts targeted personal accounts of U.S. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Phishing 118

Phishing Government Accountability Advertising 118

Security Affairs

APRIL 12, 2020

The archive included credentials for Zoom accounts belonging to organizations in various industries, including banking, consultancy, healthcare software companies. While some of the accounts “only” included an email and password, others included meeting IDs, names and host keys.” ” concludes the report. Pierluigi Paganini.

Healthcare 145

Healthcare Phishing Accountability Banking 145

Security Affairs

JANUARY 6, 2022

North Korea-linked APT group Konni targets Russian Federation’s Ministry of Foreign Affairs (MID) new versions of malware implants. Security researchers at Cluster25 uncovered a recent campaign carried out by the North Korea-linked Konni APT group aimed at Russian diplomatic entities that used new versions of malware implants.

Phishing 129

Phishing Malware Hacking Accountability 129

Security Affairs

OCTOBER 5, 2020

The hackers carried out spear-phishing attacks against the Swiss universities in an attempt of tricking its employees into providing their access data. The SonntagsZeitung also added that hackers attempted to breach the University of Zurich, but the employees at the university recognised the phishing attempts and neutralized them.

Advertising 144

Advertising Phishing Cybercrime Hacking 144

Security Affairs

AUGUST 25, 2019

The Internal Revenue Service (IRS) is warning of an active IRS impersonation scam campaign sending spam emails to distribute malware. The Internal Revenue Service (IRS) issued an alert to warn taxpayers of a new scam campaign distributing malware. See Report Phishing and Online Scams for more details.” Pierluigi Paganini.

Malware 77

Malware Computers and Electronics Scams Passwords 77

Security Affairs

OCTOBER 1, 2020

A North-Korea-linked cyber espionage group has launched spear-phishing attacks aimed at compromising tens of officials from the United Nations Security Council. The campaign took place between March and April, threat actors attempted to compromise the Gmail accounts of UN officials by carrying out spear-phishing messages.

Phishing 114

Phishing Advertising Malware Accountability 114

Security Affairs

MAY 29, 2020

Hackers targeted suppliers of equipment and software for industrial enterprises with spear-phishing messages using malicious Microsoft Office documents. Attackers used PowerShell scripts, as well as various techniques to evade the detection and avoid the analysis of the malware. ” reads the report published by Kaspersky.

Phishing 132

Phishing Malware Advertising Encryption 132

Security Affairs

MARCH 11, 2019

Crooks are abusing the torrent website The Pirate Bay to distribute the PirateMatryoshka malware that fuels the victim’s PC with unwanted software. The PirateMatryoshka is a new piece of malware hosted by The Pirate Bay torrent tracking website, it has been estimated that it was already downloaded about 10,000 times.

Malware 80

Malware Adware Advertising Software 80

Malwarebytes

JULY 28, 2021

All of a sudden we have infectious email attachments, and compromised third-party sites serving up malware. The most interesting incident was probably a fake opening ceremonies website serving infections , via promotion from a bogus Twitter account. 2014 Sochi. Things began early, with Twitter account compromises in February.

Scams 137

Scams Hacking Malware Mobile 137

Security Affairs

MAY 28, 2020

Valak malware has rapidly changed over the past six months, it was initially designed as a loader, but now it implemented infostealer capabilities. The Valak malware completely changed over the past six months, it was first developed to act as a loader, but now it implements also infostealer capabilities. . ” concludes the post.

Malware 75

Malware Advertising Phishing Passwords 75

Security Affairs

SEPTEMBER 27, 2020

GADOLINIUM abuses Microsoft cloud services as command and control infrastructure, the experts uncovered a spear-phishing campaign using messages with weaponized attachments. Once infected computers, the threat actors used the PowerShell malware to install one of the 18 Azure AD apps.

Advertising 138

Advertising Malware Phishing Hacking 138

Security Affairs

MARCH 23, 2020

The University of Utah Health disclosed a security breach, it has discovered malware on its systems and revealed unauthorized access to some employee email accounts. Attackers breached the organization with a phishing attack, the intrusion took place between January 7 and February 21, 2020. ” continues the alert.

Accountability 98

Accountability Advertising Malware Phishing 98

eSecurity Planet

OCTOBER 3, 2022

The spear phishing campaigns have targeted engineers and technical support operators, and the cybercriminals have pretended to be IT recruiters. ZINC cybercriminals are considered sophisticated attackers who made themselves known with an attack against Sony Pictures Entertainment in 2014.

Software 126

Software Social Engineering Engineering Phishing 126

Krebs on Security

MARCH 2, 2020

A large number of French critical infrastructure firms were hacked as part of an extended malware campaign that appears to have been orchestrated by at least one attacker based in Morocco, KrebsOnSecurity has learned.

DNS 263

DNS Penetration Testing Malware Hacking 263

Security Affairs

APRIL 19, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Scams 81

Scams Phishing Advertising DDOS 81

Security Affairs

MAY 8, 2020

Group-IB, a Singapore-based cybersecurity company, observed the growth of the lifespan of phishing attacks in the second half of 2019. Figure 1 The distribution of web-phishing among target categories . CERT-GIB’s findings indicate that phishing attack perpetrators have revised their so-called target pool. Target reshuffle.

Phishing 55

Phishing Spyware Banking Malware 55

Security Affairs

AUGUST 13, 2019

A new malware-as-a- service dubbed Cerberus has emerged in the threat landscape, it is an Android RAT developed from scratch that doesn’t borrow the code from other malware. The malware implements banking Trojan capabilities such as the use of overlay attacks, the ability to intercept SMS messages and access to the contact list.

Banking 87

Banking Malware Advertising Social Engineering 87

Security Affairs

JUNE 24, 2020

. “While the group’s key infiltration vector to the exchange is usually through spear-phishing against the corporate network, the executives’ personal email accounts are the first to be targeted.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” continues the report.

Cryptocurrency 97

Cryptocurrency Phishing Accountability Passwords 97

Security Affairs

DECEMBER 11, 2020

Facebook has suspended some accounts linked to APT32 that were involved in cyber espionage campaigns to spread malware. Facebook has suspended several accounts linked to the APT32 cyberespionage that abused the platform to spread malware. The company also blocked the domains used by the group.

Retail 122

Retail Malware Mobile Accountability 122

Krebs on Security

NOVEMBER 15, 2022

Penchukov was named in a 2014 indictment by the U.S. The JabberZeus crew’s name is derived from the malware they used, which was configured to send them a Jabber instant message each time a new victim entered a one-time password code into a phishing page mimicking their bank. Tank, a.k.a.

Banking 277

Banking Small Business Accountability Cybercrime 277