2014, Cryptocurrency and Ransomware - Cyber Security Informer

The G7 expresses its concern over ransomware attacks

Security Affairs

OCTOBER 14, 2020

G7 Finance ministers expressed concern on Tuesday over the rise in ransomware attacks during the Covid-19 pandemic, including some involving cryptocurrencies. G7 Finance ministers warn of ransomware attacks that have been growing in scale, sophistication, and frequency over the past two years. ” continues the statement.

Ransomware

Ransomware Cryptocurrency Financial Services Banking

Sodinokibi Ransomware crew chooses Monero for ransom payments

Security Affairs

APRIL 13, 2020

The crew behind the Sodinokibi Ransomware plans to stop accepting Bitcoin and switched on Monero cryptocurrency to hide the money trail. The gang behind the Sodinokibi Ransomware has started accepting the Monero cryptocurrency instead of Bitcoin to make it harder investigation by law enforcement agencies.

Ransomware

Ransomware Cryptocurrency Advertising Hacking

Will cryptocurrency mining soon saturate AWS, Microsoft Azure and Google Cloud?

The Last Watchdog

JUNE 20, 2018

Cryptojacking, as defined by the Federal Trade Commission , is the use of JavaScript code to capture cryptocurrencies in users’ browsers without asking permission. Related: Why cryptojacking is more insidious than ransomware. LW: So cryptocurrency got discovered as the ideal payment vehicle for ransomware.

Cryptocurrency

Cryptocurrency Passwords Ransomware Malware

New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms

Security Affairs

SEPTEMBER 17, 2018

Palo Alto Network researchers discovered a new malware, tracked as XBash, that combines features from ransomware, cryptocurrency miners, botnets, and worms. The malicious code combines features from different families of malware such as ransomware, cryptocurrency miners, botnets, and worms. ” continues the report.

Cryptocurrency

Cryptocurrency Malware Ransomware Cybercrime

US officials charge two Chinese men for laundering cryptocurrency for North Korea

Security Affairs

MARCH 3, 2020

The Department of Justice has charged the two Chinese nationals for laundering cryptocurrency for North Korea-linked APT groups. for helping North Korea-linked hackers in laundering cryptocurrency. The cryptocurrency have been stolen by the APT groups from two cryptocurrency exchanges. and Li Jiadong (???),

Cryptocurrency

Cryptocurrency Banking Hacking Accountability

Could Your Company Survive a Ransomware Attack?

CyberSecurity Insiders

AUGUST 26, 2022

One of the most ruthless cyberattacks is a ransomware attack. What Is a Ransomware Attack? Ransomware is a cyberattack that uses malware – software created to infiltrate a computer system and damage or disrupt it. Ransomware attacks are about as old as the internet itself. What Companies Have Suffered These Attacks?

Ransomware

Ransomware Education Software Malware

REvil Ransomware member win the auction for KPot stealer source code

Security Affairs

NOVEMBER 4, 2020

The source code for the KPot information stealer was put up for auction and the REvil ransomware operators want to acquire it. The authors of KPot information stealer have put its source code up for auction , and the REvil ransomware operators will likely be the only group to bid. KPOT source code up for sale! Pierluigi Paganini.

Ransomware

Ransomware Malware Advertising Cybercrime

Lazarus APT continues to target cryptocurrency businesses with Mac malware

Security Affairs

MARCH 28, 2019

The activity of the Lazarus Group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks and experts that investigated on the crew consider it highly sophisticated. The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFT attacks in 2016, and the Sony Pictures hack.

Cryptocurrency

Cryptocurrency Malware Advertising Antivirus

Attackers use a new CoronaVirus Ransomware to cover Kpot Infostealer infections

Security Affairs

MARCH 17, 2020

Coronavirus -themed attacks continue to increase, experts observed new Coronavirus ransomware that acts as a cover for Kpot Infostealer. In this campaign, crooks are exploiting the interest in the Coronavirus (COVID-19) outbreak to deliver a couple of malware, the CoronaVirus Ransomware and the Kpot information-stealing Trojan.

Ransomware

Ransomware Cryptocurrency Advertising Passwords

Sodinokibi ransomware gang launches auction site to sell stolen data

Security Affairs

JUNE 3, 2020

REvil /Sodinokibi ransomware operators launch an auction site to sell data stolen from victims that have chosen to not pay the ransom. The Sodinokibi ransomware operators have launched an eBay-like auction site for stolen data where they plan to sell data stolen from the victims. SecurityAffairs – ransomware, cybersecurity).

Ransomware

Ransomware Advertising Cryptocurrency Malware

SentinelOne released free decryptor for ThiefQuest ransomware

Security Affairs

JULY 8, 2020

Good news for the victims of the ThiefQuest (EvilQuest) ransomware, they can recover their encrypted files for free. The victims of the ThiefQuest (EvilQuest) ransomware victims can recover their encrypted files without needing to pay the ransom due to the availability of a free decryptor. macOS ransomware #decryptor ( #EvilQuest )! |

Ransomware

Ransomware Encryption Malware InfoSec

SeaChange video delivery software solutions provider hit by Sodinokibi ransomware

Security Affairs

APRIL 24, 2020

The popular SeaChange video platform is the latest victim of the Sodinokibi Ransomware gang, which is threatening to leak the stolen data. SeaChange International, the multinational supplier of video delivery software solutions, was the victim of the Sodinokibi Ransomware gang. SecurityAffairs – Sodinokibi Ransomware, hacking).

Software

Software Ransomware VPN Advertising

STOP ransomware encrypts files and steals victim’s data

Security Affairs

MARCH 11, 2019

Experts observed the STOP ransomware installing the Azorult password-stealing Trojan to steal account credentials, cryptocurrency wallets, and more. The STOP ransomware made the headlines because it is installing password-stealing Trojans on the victims’ machines. ” reads a blog post published by Bleepingcomputer.

Encryption

Encryption Ransomware Cryptocurrency Passwords

Sodinokibi gang hacked law firm of the celebrities and threatens to release the docs

Security Affairs

MAY 9, 2020

The Sodinokibi ransomware gang stolen gigabytes of legal documents from the law firm of the stars, Grubman Shire Meiselas & Sacks (GSMLaw). The Sodinokibi ransomware gang has published a screenshot of the folders they have stolen from the law firm. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Hacking

Hacking Ransomware Advertising Cryptocurrency

Actions Target Russian Govt. Botnet, Hydra Dark Market

Krebs on Security

APRIL 7, 2022

and Germany moved to decapitate “ Hydra ,” a billion-dollar Russian darknet drug bazaar that also helped to launder the profits of multiple Russian ransomware groups. ” In Dragonfly’s second iteration between 2014 and 2017, the hacking group spear-phished more than 3,300 people at more than 500 U.S.

Marketing

Marketing Energy and Utilities Malware Ransomware

Ukraine police and Binance dismantled a cyber gang behind $42M money laundering

Security Affairs

AUGUST 18, 2020

Ukrainian authorities arrested the members of a cybercrime gang who ran 20 cryptocurrency exchanges involved in money laundering. Police in Ukraine announced the arrest of the members of a cybercrime gang composed of three individuals who ran 20 cryptocurrency exchanges used in money laundering activities. Pierluigi Paganini.

Cryptocurrency

Cryptocurrency Computers and Electronics Cybercrime Digital transformation

U.S. DoJ charges Iranian duo over SamSam Ransomware activity

Security Affairs

NOVEMBER 29, 2018

DoJ charges two Iranian men over their alleged role in creating and spreading the infamous SamSam ransomware. Two Iranian men, Faramarz Shahi Savandi (34) and Mohammad Mehdi Shah Mansouri (27) have been charged by DoJ for their role in creating and distributing the dreaded SamSam ransomware. ” reads the DoJ indictment. .

Ransomware

Ransomware Encryption Advertising Backups

FTX Collapse Highlights the Cybersecurity Risks of Crypto

eSecurity Planet

NOVEMBER 18, 2022

This involved using an “unsecured group email account as the root user to access confidential private keys and critically sensitive data for the FTX Group companies around the world…” About $740 million in cryptocurrency has been placed into new cold wallets. One way is through hijacking computer resources to mine cryptocurrencies.

Risk

Risk Cybersecurity Cryptocurrency Social Engineering

US DoJ charges three members of the North Korea-linked Lazarus APT group

Security Affairs

FEBRUARY 17, 2021

Department of Justice charged Park over WannaCry and 2014 Sony Pictures Entertainment Hack. billion of money and cryptocurrency from financial institutions and companies, to create and deploy multiple malicious cryptocurrency applications, and to develop and fraudulently market a blockchain platform.” sanctions.

Cryptocurrency

Cryptocurrency Banking Hacking Ransomware

Three North Korean hackers charged for financial and revenge-motivated hacks

SC Magazine

FEBRUARY 17, 2021

billion in currency and cryptocurrency and further other strategic interests for the North Korean government. The charges captures years-worth of North Korean hacking, including the widely publicized 2014 Sony hack, the 2016 hack of the Central Bank of Bangladesh, the 2017 WannaCry ransomware attack and others.

Hacking

Hacking Cryptocurrency Banking Malware

Group-IB detects a series of ransomware attacks by OldGremlin

Security Affairs

SEPTEMBER 23, 2020

Researchers from threat hunting and intelligence firm Group-IB have detected a successful attack by a ransomware gang tracked as OldGremlin. Group-IB , a global threat hunting and intelligence company headquartered in Singapore, has detected a successful attack by a ransomware gang, codenamed OldGremlin. Up-to-date phishing.

Ransomware

Ransomware Phishing Banking Advertising

Crooks exploit Oracle WebLogic flaw to deliver Sodinokibi Ransomware

Security Affairs

MAY 1, 2019

Threat actors are exploiting a recently patched critical Oracle WebLogic Server vulnerability to deliver the Sodinokibi ransomware to organizations. Talos also noted that threat actors were exploiting the flaw to deliver the popular Gandcrab ransomware. “We Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware

Ransomware Advertising Cryptocurrency Malware

Thief pulls off colossal, $600m crypto-robbery …and gives the money back

Malwarebytes

AUGUST 11, 2021

Let’s start at the beginning… In an apparent scream for mercy, 21 hours ago the Poly Network Team reached out via Twitter to “hacker(s)” that had managed to transfer roughly $600 million in digital tokens out of its control and into separate cryptocurrency wallets. Gox theft in 2014. A rough time for cryptocurrencies.

Cryptocurrency

Cryptocurrency Scams Accountability Hacking

Security Affairs newsletter Round 283

Security Affairs

SEPTEMBER 27, 2020

fitness chains Town Sports leaked online Group-IB detects a series of ransomware attacks by OldGremlin HOW DO PROVIDERS IMPLEMENT INTERNET BLOCKING IN BELARUS? fitness chains Town Sports leaked online Group-IB detects a series of ransomware attacks by OldGremlin HOW DO PROVIDERS IMPLEMENT INTERNET BLOCKING IN BELARUS?

IoT

IoT Banking Advertising Ransomware

Security Affairs newsletter Round 242

Security Affairs

DECEMBER 1, 2019

Livingston School District hit by a ransomware attack. Upbit cryptocurrency exchange hacked, crooks stole $48.5 A Ransomware infected the network of the cybersecurity firm Prosegur. Dutch National Cyber Security Centre warns ransomware infected thousands of businesses. Great Plains center hit by ransomware attack.

Advertising

Advertising Ransomware Cryptocurrency Government

Australian beverages firm Lion hit for the second time in a few days by a cyber attack

Security Affairs

JUNE 20, 2020

This is the second cyber attack is a few days, last week the systems at Lion were infected with the REvil ransomware and attackers demanded a ransom of reportedly $1 million last week. ” According to the media, the Lion’s IT staff is now focusing on defence efforts over restoration from the previous ransomware attack. .

Cyber Attacks

Cyber Attacks Media Advertising Manufacturing

Alexander Vinnik, the popular cyber criminal goes on trial in Paris

Security Affairs

OCTOBER 19, 2020

The Russian citizen Alexander Vinnik goes on trial in Paris for having defrauded nearly 200 victims across the world of 135 million euros using ransomware. The Russian man Alexander Vinnik goes on trial in Paris for having defrauded nearly 200 victims across the world of 135M euros using ransomware. million withdrawn.

Advertising

Advertising Cybercrime Hacking Cryptocurrency

Security Affairs newsletter Round 279

Security Affairs

AUGUST 30, 2020

A Google Drive weakness could allow attackers to serve malware Adobe released open- source tool Stringlifier to identify randomly generated strings Canadian delivery company Canpar Express suffered a ransomware attack Cybercriminal greeners from Iran attack companies worldwide for financial gain Dark web Empire Market still down after 3 days.

DDOS

DDOS Scams Malware Advertising

Security Affairs newsletter Round 270

Security Affairs

JUNE 28, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

DDOS

DDOS Spyware Advertising Healthcare

Ransomware Revival: Troldesh becomes a leader by the number of attacks

Security Affairs

NOVEMBER 19, 2019

Ransomware accounted for over half of all malicious mailings in H1 2019, Troldesh aka Shade being the most popular tool among cybercriminals. The report’s findings reveal that email remains the main method of delivering ransomware, banking Trojans, and backdoors. The revival of ransomware. Pierluigi Paganini.

Ransomware

Ransomware Antivirus Malware Banking

XCSSET Mac spyware spreads via Xcode Projects

Security Affairs

AUGUST 15, 2020

XCSSET is a new Mac malware that spreads through Xcode projects and exploits two zero-day vulnerabilities to steal sensitive information from target systems and launch ransomware attacks. The malware also implements ransomware behavior, it is able to encrypt files and display a ransom note. Pierluigi Paganini.

Spyware

Spyware Malware Advertising Cryptocurrency

Security Affairs newsletter Round 278

Security Affairs

AUGUST 23, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Data breaches

Data breaches Hacking Advertising Ransomware

Security Affairs newsletter Round 207 – News of the week

Security Affairs

MARCH 31, 2019

PewDiePie ransomware oblige users subscribe to PewDiePie YouTube channel. How to get back files encrypted by the Hacked Ransomware for free. Android Trojan Gustuff capable of targeting more than 100 global banking apps, cryptocurrency and marketplace applications. Operation ShadowHammer – Supply-Chain attack hit ASUS users.

Cryptocurrency

Cryptocurrency Banking Malware Data breaches

Security Affairs newsletter Round 254

Security Affairs

MARCH 8, 2020

Nemty ransomware LOVE_YOU malspam campaign. Nemty ransomware operators launch their data leak site. US officials charge two Chinese men for laundering cryptocurrency for North Korea. Visser Precision, a part maker for Tesla, Boeing, and Lockheed Martin hit with data-stealing ransomware. Pierluigi Paganini.

Data breaches

Data breaches Mobile Advertising Ransomware

North Korea-linked Lazarus APT targets the COVID-19 research

Security Affairs

DECEMBER 25, 2020

The activity of the Lazarus APT group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks. The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFT attacks in 2016, and the Sony Pictures hack. ” concludes Kaspersky.

Cryptocurrency

Cryptocurrency Malware Hacking Phishing

Security Affairs newsletter Round 259

Security Affairs

APRIL 12, 2020

Million ransom to restore after a ransomware attack CVE-2020-3952 flaw could allow attackers to hack VMware vCenter Server DoppelPaymer crew leaked internal confidential documents belonging to aerospace companies Hacker stole $250K from decentralized Bitcoin exchange Bisq Sophos Sandboxie is now available as an open-source tool Tails OS version 4.5

Hacking

Hacking Advertising Surveillance Phishing

Xwo Malware scans the Internet for Exposed Services, Default Passwords

Security Affairs

APRIL 5, 2019

.” Xwo code is similar to that the MongoLock, a family of ransomware that hit MongoDB servers and wipe their content, then demands the payment a ransom to recover the data. The malicious code combines features from different families of malware such as ransomware, cryptocurrency miners, botnets, and worms.

Internet

Internet Internet Passwords Malware

Security Affairs newsletter Round 260

Security Affairs

APRIL 19, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini. SecurityAffairs – newsletter, hacking). adrotate banner=”13″].

Scams

Scams Phishing Advertising DDOS

A new piece of Ryuk Stealer targets government, military and finance sectors

Security Affairs

JANUARY 26, 2020

In September 2019, BleepingComputer reported the discovery of a new piece of malware that included references to the Ryuk Ransomware and that was used to steal files with filenames matching certain keywords. It is not clear if the malware was developed by the threat actors behind Ryuk Ransomware for data exfiltration.

Government

Government Banking Malware Advertising

Security Affairs newsletter Round 261

Security Affairs

APRIL 26, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Spyware

Spyware Hacking Advertising Antivirus

Security Affairs newsletter Round 195 – News of the week

Security Affairs

JANUARY 6, 2019

Experts show that is easy to hack Hardware-based Cryptocurrency Wallets. Cloud Hosting Provider DataResolution.net hit by the Ryuk ransomware?. Did Aurora Ransomware infect you? Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Malware-based attack hit delivery chain of the major US newspapers.

Advertising

Advertising Cryptocurrency Hacking Ransomware

Russian Alexander Vinnik sentenced in Paris to five years in prison for money laundering

Security Affairs

DECEMBER 8, 2020

The man went on trial in Paris for having defrauded nearly 200 victims across the world of 135M euros using ransomware. In 2017, Greek Police arrested the Russian national Alexander Vinnik and they accused the man of running the BTC-e Bitcoin exchange to launder more than US$4bn worth of the cryptocurrency. million withdrawn.

Cryptocurrency

Cryptocurrency Hacking Ransomware Cybercrime

Hackers are scanning the internet for vulnerable Salt installs, Ghost blogging platform hacked

Security Affairs

MAY 4, 2020

The attackers compromised the blogging platform to deploy a cryptocurrency miner, the intrusion took place on May 3, 2020. Threat actors could exploit the two vulnerabilities to install backdoors, miners, and ransomware in the compromised infrastructures. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Internet

Internet Internet Hacking Advertising

The US Treasury placed sanctions on North Korea linked APT Groups

Security Affairs

SEPTEMBER 13, 2019

The groups are behind several hacking operations that resulted in the theft of hundreds of millions of dollars from financial institutions and cryptocurrency exchanges worldwide and destructive cyber-attacks on infrastructure. “ ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Cyber Attacks

Cyber Attacks Cryptocurrency Hacking Banking

The G7 expresses its concern over ransomware attacks

Sodinokibi Ransomware crew chooses Monero for ransom payments

Trending Sources

Will cryptocurrency mining soon saturate AWS, Microsoft Azure and Google Cloud?

New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms

US officials charge two Chinese men for laundering cryptocurrency for North Korea

Could Your Company Survive a Ransomware Attack?

REvil Ransomware member win the auction for KPot stealer source code

Lazarus APT continues to target cryptocurrency businesses with Mac malware

Attackers use a new CoronaVirus Ransomware to cover Kpot Infostealer infections

Sodinokibi ransomware gang launches auction site to sell stolen data

SentinelOne released free decryptor for ThiefQuest ransomware

SeaChange video delivery software solutions provider hit by Sodinokibi ransomware

STOP ransomware encrypts files and steals victim’s data

Sodinokibi gang hacked law firm of the celebrities and threatens to release the docs

Actions Target Russian Govt. Botnet, Hydra Dark Market

Ukraine police and Binance dismantled a cyber gang behind $42M money laundering

U.S. DoJ charges Iranian duo over SamSam Ransomware activity

FTX Collapse Highlights the Cybersecurity Risks of Crypto

US DoJ charges three members of the North Korea-linked Lazarus APT group

Three North Korean hackers charged for financial and revenge-motivated hacks

Group-IB detects a series of ransomware attacks by OldGremlin

Crooks exploit Oracle WebLogic flaw to deliver Sodinokibi Ransomware

Thief pulls off colossal, $600m crypto-robbery …and gives the money back

Security Affairs newsletter Round 283

Security Affairs newsletter Round 242

Australian beverages firm Lion hit for the second time in a few days by a cyber attack

Alexander Vinnik, the popular cyber criminal goes on trial in Paris

Security Affairs newsletter Round 279

Security Affairs newsletter Round 270

Ransomware Revival: Troldesh becomes a leader by the number of attacks

XCSSET Mac spyware spreads via Xcode Projects

Security Affairs newsletter Round 278

Security Affairs newsletter Round 207 – News of the week

Security Affairs newsletter Round 254

North Korea-linked Lazarus APT targets the COVID-19 research

Security Affairs newsletter Round 259

Xwo Malware scans the Internet for Exposed Services, Default Passwords

Security Affairs newsletter Round 260

A new piece of Ryuk Stealer targets government, military and finance sectors

Security Affairs newsletter Round 261

Security Affairs newsletter Round 195 – News of the week

Russian Alexander Vinnik sentenced in Paris to five years in prison for money laundering

Hackers are scanning the internet for vulnerable Salt installs, Ghost blogging platform hacked

The US Treasury placed sanctions on North Korea linked APT Groups

Stay Connected