Security Affairs

DECEMBER 2, 2019

The malicious code executes a small program, just before starting the encryption process, to disable security tools running on the infected systems that could detect its operations. The malicious code also targets older computers by uninstalling Microsoft Security Essentials. These are encrypted under the suffix.

Ransomware 114

Ransomware Encryption Advertising Cybercrime 114

The Last Watchdog

JUNE 21, 2020

Although most people think of ransomware as a dodgy application that encrypts data and holds it for ransom, the concept is much more heterogeneous than that. File encryption 2013 – 2015. It emerged in September 2013 and paved the way for hundreds of file-encrypting menaces that have splashed onto the scene ever since.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

AUGUST 21, 2020

The university notified appropriate law enforcement entities, and the university’s Information Security Office (ISO) investigated and resolved the incident in consultation with an external firm that specializes in responding to ransomware attacks.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 144

Ransomware Cyber Insurance Insurance Advertising 144

Security Affairs

NOVEMBER 4, 2020

. “On July 28, 2020, Mattel discovered that it was the victim of a ransomware attack on its information technology systems that caused data on a number of systems to be encrypted. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” reads the 10-Q form. Pierluigi Paganini.

Ransomware 110

Ransomware Retail Advertising Malware 110

Security Affairs

SEPTEMBER 2, 2020

Researchers from Malwarebytes reported that Magecart groups are using the encrypted messaging service Telegram to exfiltrate stolen payment details from compromised websites. Attackers encrypt payment data to make identification more difficult before transferring it via Telegram’s API into a chat channel. ” concluded the post.

Encryption 101

Encryption Advertising Cybercrime Marketing 101

Security Affairs

JUNE 28, 2020

If you use the legacy email and password login, your passwords are encrypted, but we highly encourage that you change it. We do not store any credit card or payment related information on our servers.” “The reason we are informing you is because we believe it’s the right thing to do and we want to be transparent. .”

Media 141

Media Hacking Passwords Data breaches 141

Security Affairs

OCTOBER 11, 2020

The actors behind FONIX RaaS advertised several products on various cybercrime forums. Experts believe that However the FONIX RaaS can quickly become rampant if security firms and authorities underestimate it. The FONIX ransomware only targets Windows systems, by default it encrypts all file types, excluding critical Windows OS files.

Ransomware 87

Ransomware Encryption Advertising DDOS 87

Security Affairs

MAY 27, 2020

pic.twitter.com/Q3BMs7fSvx — Microsoft Security Intelligence (@MsftSecIntel) May 27, 2020. Human-operated ransomware is a technique usually employed in nation-state attacks that is becoming very popular in the cybercrime ecosystem. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 104

Ransomware Security Intelligence Encryption Advertising 104

Security Affairs

MAY 22, 2019

Security experts at Emsisoft released a new decrypted in a few days, it could be used for free by victims of the GetCrypt ransomware to decrypt their files encrypted by the malware. The GetCrypt ransomware is served through the RIG exploit kit , it leveragesSalsa20 and RSA-4096 to encrypt the victims’ files.

Ransomware 76

Ransomware Encryption Advertising Cybercrime 76

Security Affairs

MARCH 19, 2020

” According to the experts, the first infections were observed in late 2019, victims reported their files were encrypted by a strain of malware. locked to the filename of the encrypted files. “On one of the compromised information systems, experts found encrypted files with the extension “ newversion.”

Government 106

Government Ransomware Encryption Penetration Testing 106

Security Affairs

MARCH 16, 2020

The security breach took place on February 9, 2020, and lasted since March 2, 2020, the company is aware that the unauthorized users might have extracted data from its systems due to a network misconfiguration. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. SecurityAffairs – data breach, cybercrime).

Data breaches 105

Data breaches Passwords Advertising Accountability 105

Security Affairs

JULY 27, 2019

The No More Ransom was launched by the Dutch Police along with security firms Kaspersky, and McAfee, but now has more than 150 partners. The website includes 89 decryptors that could allow decrypting for free files encrypted by 109 pieces of malware. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Advertising 73

Advertising Ransomware Cybercrime Encryption 73

Security Affairs

JUNE 29, 2020

million to cybercriminals to recover data encrypted during a ransomware attack that took place on June 1. While we stopped the attack as it was occurring, the actors launched malware that encrypted a limited number of servers within the School of Medicine, making them temporarily inaccessible,” reads a statement published by the UCSF.

Ransomware 128

Ransomware Encryption Advertising Malware 128

Security Affairs

JANUARY 15, 2020

The cybercrime group behind Satan ransomware and other malware seems to be involved in the development of a new threat named 5ss5c. ru ) to the file name of each encrypted file, for example test.txt becomes [5ss5c@mail.ru ] test. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. dll –TargetIp.

Ransomware 68

Ransomware Cybercrime Architecture Advertising 68

Security Affairs

MARCH 29, 2020

.” reads the post published by “This, in turn, would result in the broader proliferation among multiple cybercrime groups, and an eventual surge in attacks.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 109

Ransomware Hacking Advertising Malware 109

Security Affairs

APRIL 9, 2020

million ransom to decrypt its files after being encrypted by the infamous Sodinokibi ransomware. “As part of this attack, the operators behind the Sodinokibi ransomware told BleepingComputer that they had encrypted the company’s entire network, deleted backup files, and copied more than 5GB of personal data.

Ransomware 115

Ransomware Encryption Advertising Backups 115

Security Affairs

AUGUST 12, 2019

Researchers discovered a dump containing 6,840,339 records associated with StockX user accounts that surfaced in the cybercrime underground. A threat actor stole details of 6 million users, the stolen data includes user names, email addresses, addresses, shoe size, purchase history, and encrypted passwords (salted MD5).

Accountability 81

Accountability Data breaches Passwords Cybercrime 81

Security Affairs

JULY 23, 2020

The Windows version of MATA is composed of a loader used to load an encrypted next-stage payload and the orchestrator module (“lsass.exe”). The activity of the Lazarus Group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks. ” concludes the report.

Malware 100

Malware Ransomware Advertising Encryption 100

Security Affairs

OCTOBER 24, 2020

The ransomware encrypted files and renamed their filenames by adding the “ easy2lock” extension, this extension was previously associated with recent WastedLocker ransomware infections. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 86

Ransomware Telecommunications Banking Advertising 86

Security Affairs

MAY 1, 2020

The hackers claim to have compromised the Banco BCR’s network in August 2019, and had the opportunity to exfiltrate its information before encrypting the files. Please vote Security Affairs for European Cybersecurity Blogger Awards – VOTE FOR YOUR WINNERS [link]. ” reads a post published by Cyble. Pierluigi Paganini.

Ransomware 133

Ransomware Banking Cyber Insurance Advertising 133

Security Affairs

FEBRUARY 9, 2020

It is unclear if the attackers have exfiltrated data from the systems before encrypting them. The attacker focused on encrypting data files in the Windows domain. ” N ow all critical systems at the University are online and offline backups were secured by the company. Pierluigi Paganini.

Ransomware 108

Ransomware Cyber Attacks Architecture Backups 108

Security Affairs

DECEMBER 24, 2019

Feds remind that both ransomware implements a secure encryption algorithm that means it impossible to decrypt the files without paying the ransom. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 60

Ransomware Backups Encryption Cyber Attacks 60

Security Affairs

APRIL 18, 2021

CARBANAK cybercrime gang was first uncovered in 2014 by Kaspersky Lab that dated its activity back to 2013 when the group leveraged the Anunak malware in targeted attacks on financial institutions and ATM networks. Between 2014 and 2016 the group used a new custom malware dubbed Carbanak that is considered a newer version of Anunak.

System Administration 116

System Administration Penetration Testing Malware Banking 116

Security Affairs

JULY 15, 2019

Cybercrime gang tracked as TA505 has been active since 2014 and focusing on Retail and Banking industries. The latest variant observed by the experts in November 2018 includes the victim’s name in the ransom note, it also uses 256-bit AES in cipher block chaining (CBC) mode for encryption. ” continues the analysis. .

Ransomware 73

Ransomware Encryption Advertising Malware 73

Security Affairs

NOVEMBER 6, 2020

Brazilian media outlet CISO Advisor claims it has viewed an internal report on the security breach incident that suggests the threat actor was a cybercrime organization financially motivated. Our report tried to contact the agency’s press office, but the contact information has even disappeared from Google’s cache.”

Ransomware 106

Ransomware CISO Encryption Cyber Attacks 106

Security Affairs

MARCH 1, 2020

Raccoon Malware, a success case in the cybercrime ecosystem. European Commission has chosen the Signal app to secure its communications. Kr00k Wi-Fi Encryption flaw affects more than a billion devices. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Lampion malware v2 February 2020.

Banking 90

Banking Malware Advertising Ransomware 90

Security Affairs

MARCH 21, 2020

HawkEye is a keylogger and credential-stealing malware employed in numerous campaigns over the past years, it allows hackers to steal email and browser credentials, capture screenshots, and exfiltrate stolen data through encrypted email. . This can have even more damaging consequences once their financial information is stolen and exposed.”

Phishing 105

Phishing Advertising Malware Cybercrime 105

Security Affairs

AUGUST 12, 2020

Now the City of Lafayette admitted they were a victim of a ransomware attack that encrypted its systems and confirmed that opted to pay a $45,000 ransom to receive a decryption tool to recover its files. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Backups 137

Backups Advertising Ransomware Hacking 137

Security Affairs

OCTOBER 3, 2020

In September, systems at the University Hospital New Jersey (UHNJ) were encrypted with the SunCrypt ransomware , threat actors also stolen documents from the institution and leaked a small portion of them online. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 142

Ransomware Advertising Encryption Phishing 142

Security Affairs

OCTOBER 28, 2019

. “For example, when encrypting files FuxSocy will skip files whose file path contain certain strings. ” The expert also noticed that the FuxSocy ransomware also scrambles the file name and extensions used by encrypted files in a way similar as the Cerber threat. .” SecurityAffairs – cybercrime, ransomware).

Ransomware 45

Ransomware Encryption Advertising Cybercrime 45

Security Affairs

SEPTEMBER 2, 2019

Login details of more than 36 million Poshmark accounts are available for sale in the cybercrime underground. The company discovered unauthorized access to its servers, the intruders stole personal information of the users, including usernames , hashed passwords, first and last names, gender information, and city of residenc.

Accountability 83

Accountability Data breaches Passwords Advertising 83

Security Affairs

OCTOBER 25, 2022

NET framework” and uses encrypted communication channel to avoid detection. On July 18, 2019, the source code for MajikPOS (aka MagicPOS) was offered for sale on the cybercrime forum “exploit[.]in” MajikPOS is written using the “.NET in” by the user cartonash.

Malware 79

Malware Cybercrime Banking Marketing 79

Security Affairs

MAY 16, 2019

“An unprecedented, international law enforcement operation has dismantled a complex, globally operating and organised cybercrime network.” Now the Europol announced the unprecedented, international law enforcement operation that allowed to dismantled the complex, globally operating and organised cybercrime network.

Banking 70

Banking Cybercrime Malware Advertising 70

Security Affairs

JANUARY 12, 2020

The victims of the Maze Ransomware are facing another risk, after having their data encrypted now crooks are threatening to publish their data online. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 69

Ransomware Manufacturing Advertising Encryption 69

Security Affairs

JUNE 17, 2019

. “This tool allows victims of ransomware to regain access to their information encrypted by hackers, without having to pay demanded ransoms.” The ransomware appeared in the threat landscape early 2018 when experts at cyber security firm LMNTRIX discovered a new ransomware-as-a-service dubbed GandCrab.

Ransomware 82

Ransomware Advertising Cybercrime Marketing 82

Security Affairs

AUGUST 3, 2020

He had no previous criminal records at the time of the arrest, but it is known to be a member of a cybercrime forum to become an affiliate for the GandCrab ransomware operation. ransom amount, individual bots and encryption masks). Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 117

Ransomware Advertising Malware Hacking 117

Security Affairs

JULY 28, 2019

According to a report published by cyber security firm Sixgill data for over 23 million payment card were on offer in underground forums in the first half of 2019. . A report published by cybersecurity firm Sixgill revealed that data for over 23 million payment card were offered for sale in the cybercrime underground.

eCommerce 94

eCommerce Marketing Advertising Retail 94