Security Affairs

AUGUST 12, 2019

Researchers discovered a dump containing 6,840,339 records associated with StockX user accounts that surfaced in the cybercrime underground. A threat actor stole details of 6 million users, the stolen data includes user names, email addresses, addresses, shoe size, purchase history, and encrypted passwords (salted MD5).

Accountability 81

Accountability Data breaches Passwords Cybercrime 81

Security Affairs

MARCH 16, 2020

Last week, Open Exchange Rates disclosed a data breach that exposed the personal information and hashed passwords for customers of its API service. Last week, the currency data provider Open Exchange Rates has disclosed a data breach that exposed the personal information and salted and hashed passwords for customers of its API service.

Data breaches 105

Data breaches Passwords Advertising Accountability 105

Security Affairs

JUNE 7, 2020

The Indian video on demand giant ZEE5 has been hacked, attackers are threatening to sell the database on the cybercrime underground markets. The huge trove of data contains data, recent transactions, passwords, emails, mobile numbers, email addresses, messages, etc. ” reads the post published by the expert. Pierluigi Paganini.

Hacking 106

Hacking Cybercrime Advertising Passwords 106

Security Affairs

MARCH 16, 2020

. “We recently became aware that some of our customers’ personal information stored on one of our databases has been accessed without permission. To reassure you, the database did not include any passwords or financial details, such as bank account number or credit card information.” Pierluigi Paganini.

Data breaches 105

Data breaches Telecommunications Passwords Advertising 105

Krebs on Security

JULY 18, 2023

com , a service that sold access to billions of passwords and other data exposed in countless data breaches. KrebsOnSecurity has learned that the owner of Defiant Tech, a 32-year-old Ontario man named Jordan Evan Bloom , was hired in late 2014 as a developer for the marital infidelity site AshleyMadison.com.

Hacking 192

Hacking Accountability Data breaches Marketing 192

Security Affairs

MARCH 26, 2020

that is hosting various cybercrime products and services were being sold. companies for customers’ personal information.” store used by hackers to offer for sale thousands of compromised accounts, including gamer accounts and PII files containing user names, passwords, U.S. SecurityAffairs – cybercrime, DEER.IO).

Cybercrime 113

Cybercrime Advertising Hacking Accountability 113

Security Affairs

SEPTEMBER 2, 2019

Login details of more than 36 million Poshmark accounts are available for sale in the cybercrime underground. The company discovered unauthorized access to its servers, the intruders stole personal information of the users, including usernames , hashed passwords, first and last names, gender information, and city of residenc.

Accountability 83

Accountability Data breaches Passwords Advertising 83

Security Affairs

APRIL 17, 2022

The researchers attribute the botnet to the cybercrime group Keksec which focuses on DDoS-based extortion. Gafgyt is a popular choice for launching large-scale DDoS attacks, it first appeared in the threat landscape in 2014. The botnet targets multiple architectures, including arm, bsd, x64, and x86.

DDOS 135

DDOS Architecture Malware Cybercrime 135

Security Affairs

MARCH 13, 2020

European authorities dismantled two cybercrime organizations responsible for stealing millions through SIM hijacking. European authorities managed to dismantle the operations of two cybercrime gangs responsible for stealing millions through SIM hijacking. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Banking 114

Banking Cybercrime Mobile Accountability 114

Security Affairs

JULY 14, 2020

“The new finding came to light over the weekend after a hacker put up for sale the hotel’s data in an ad published on a dark web cybercrime marketplace.” The hacker claims to have obtained the database from the hack of the DataViper monitoring service operated by the security firm Night Lion Security.

Data breaches 117

Data breaches Advertising Hacking Cybercrime 117

Security Affairs

MAY 30, 2022

The researchers attribute the botnet to the cybercrime group Keksec which focuses on DDoS-based extortion. Gafgyt is a popular choice for launching large-scale DDoS attacks, it first appeared in the threat landscape in 2014. The botnet targets multiple architectures, including arm, bsd, x64, and x86. LFI CVE-2018-16763 Fuel CMS 1.4.1

Malware 142

Malware DDOS IoT Cybercrime 142

Security Affairs

MAY 20, 2019

LeakedSource was also cracking the associated passwords when it was possible. “LeakedSource.com had a database of approximately three billion personal identity records and associated passwords that could be purchased for a small fee. . Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Cybercrime 66

Cybercrime Data breaches Advertising Passwords 66

Security Affairs

OCTOBER 30, 2020

An attacker could also exploit the flaw to disable security features in the Netlogon authentication process and change a computer’s password on the domain controller’s Active Directory. The IT giant urged Windows administrators to install the released security updates as soon as possible. Pierluigi Paganini.

Authentication 133

Authentication Advertising Architecture Cybercrime 133

Security Affairs

DECEMBER 31, 2020

The Emotet campaign uses malicious emails that attempt to trick recipients into opening the zipped archive with the password included in the message. Emails accessed in this way require user action: open the file, unzip it with a password. Emails accessed in this way require user action: open the file, unzip it with a password.

Passwords 101

Passwords Malware Telecommunications Banking 101

Security Affairs

SEPTEMBER 22, 2020

The malware is able to steal sensitive information (a variety of credentials, including FTP credentials, stored email passwords, passwords stored in the browser, as well as a whole host of other credentials) . If these services are required, use strong passwords or Active Directory authentication. Pierluigi Paganini.

Malware 65

Malware Passwords Advertising Antivirus 65

Security Affairs

MAY 23, 2020

The source code of the Zeus Trojan is available in the cybercrime underground since 2011 allowing crooks to develop their own release since. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Banking 136

Banking Advertising Malware Cybercrime 136

Security Affairs

JUNE 10, 2019

HIBP received the data from dehashed.com on June 9th, 2019, exposed info includes mail addresses, IP address, usernames and passwords stored as salted MD5 hashes. million email addresses, IP address, usernames and passwords stored as salted MD5 hashes. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Data breaches 73

Data breaches Advertising Cybercrime Passwords 73

Security Affairs

APRIL 4, 2020

Once opened the file, the Lokibot infection starts, the malware steals sensitive information (a variety of credentials, including FTP credentials, stored email passwords, passwords stored in the browser, as well as a whole host of other credentials) and exfiltrates them to the URL: hxxp://bslines[.]xyz/copy/five/fre.php.

Advertising 105

Advertising Malware Passwords Cybercrime 105

Security Affairs

FEBRUARY 9, 2020

According to security experts at Fox-IT, the ransomware attack is compatible with other attacks carried out by the TA505 cybercrime gang. TA505 hacking group has been active since 2014 focusing on Retail and banking sectors. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 108

Ransomware Cyber Attacks Architecture Backups 108

Security Affairs

MARCH 1, 2020

FBI recommends using passphrases instead of complex passwords. Raccoon Malware, a success case in the cybercrime ecosystem. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Lampion malware v2 February 2020.

Banking 90

Banking Malware Advertising Ransomware 90

Security Affairs

OCTOBER 7, 2019

The StreetEasy data breach took place in the mid-2016 and exposed 988k records that included names, usernames, email addresses and SHA-1 password hashes. The data has been available for sale in the cybercrime underground since February. Impacted data includes names, usernames, email addresses and SHA-1 password hashes.

Data breaches 70

Data breaches Passwords Advertising Cybercrime 70

Security Affairs

OCTOBER 1, 2021

The attack against Neiman Marcus Group took place in May 2020, as a result of the attack, threat actors had access to customers’ information, including payment card data. Exposed personal information includes names and contact information, usernames, passwords, and answers to security questions associated with online accounts.

Data breaches 91

Data breaches Retail Passwords Accountability 91

Security Affairs

APRIL 24, 2020

“This time, using a login ID and password information obtained illegally by some means other than our service, a phenomenon that seems to have been made by impersonating the “Nintendo Network ID (* 1, NNID)” from around the beginning of April We have confirmed that it is occurring.” Pierluigi Paganini.

Accountability 98

Accountability Passwords Data breaches Advertising 98

Security Affairs

JUNE 13, 2020

The world of cybercrime is changing, and more and more malware variants have spread every day. An information stealer (or info stealer) is a Trojan that is designed to gather information from a system. Another common form this malware is to log user keystrokes which may reveal sensitive information. h/t: abuse.ch.

Internet 109

Internet Internet Malware Banking 109

Security Affairs

MARCH 18, 2020

TrueFire is requesting users to change passwords for their accounts. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. SecurityAffairs – TrueFire, cybercrime). Pierluigi Paganini.

Hacking 100

Hacking Data breaches Advertising Accountability 100

Security Affairs

MARCH 10, 2020

international financial and corporate data, Personally Identifiable Information (PII), and compromised user accounts from many U.S. Individuals can also buy computer files, financial information, PII, and usernames and passwords taken from computers infected with malicious software (malware) located both in the U.S. storefront.”

Accountability 111

Accountability Advertising Passwords Hacking 111

Security Affairs

OCTOBER 22, 2020

An attacker could also exploit the flaw to disable security features in the Netlogon authentication process and change a computer’s password on the domain controller’s Active Directory. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” reads the advisory issued by the vendor.

Authentication 83

Authentication Advertising Architecture Cybercrime 83

Security Affairs

MARCH 12, 2020

“Shai Alfasi, found and analyzed this malware that had weaponized coronavirus map applications in order to steal credentials such as user names, passwords, credit card numbers and other sensitive information that is stored in the users’ browser.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Malware 137

Malware Advertising Passwords Cryptocurrency 137

Security Affairs

MARCH 19, 2020

“ “The password database was leaked shortly before the attack. ” Once compromised the target network, attackers attempt to exfiltrate the company’s accounts and passwords database. .” “On one of the compromised information systems, experts found encrypted files with the extension “ newversion.”

Government 106

Government Ransomware Encryption Penetration Testing 106

Security Affairs

JUNE 9, 2020

As part of the regular monitoring of cybercrime forums and markets in the deep-web and darkweb , Cyble researchers spotted a threat actor named as R3dr0x who leaked (BEML) internal documents. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” reads the post published by Cyble. ” concludes Cyble.

Data breaches 71

Data breaches Marketing Advertising Passwords 71

Security Affairs

OCTOBER 25, 2022

The crooks did not use sophisticated techniques to compromise the targets, they were able to gain access to the PoS systems through brute-force attacks on Virtual Network Computing (VNC) and Remote Desktop Protocol (RDP) services protected by easy-to-guess passwords. in” by the user cartonash.

Malware 79

Malware Cybercrime Banking Marketing 79

The Last Watchdog

JUNE 21, 2020

The Archiveus Trojan from 2006 was the first one to use RSA cipher, but it was reminiscent of a proof of concept and used a static 30-digit decryption password that was shortly cracked. The newsmaking emergence of CTB-Locker in 2014 and the CryptoWall ransomware in 2015 fully demonstrated this multi-pronged shift.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

SEPTEMBER 10, 2020

The popular cybercrime gang is demanding a $4.5 “Equinix is currently investigating a security incident we detected that involves ransomware on some of our internal systems.” Only use secure networks and avoid using public Wi-Fi networks. Use two-factor authentication with strong passwords. Pierluigi Paganini.

Ransomware 107

Ransomware VPN Data breaches Advertising 107

Security Affairs

APRIL 2, 2020

Human-operated ransomware is a technique usually employed in nation-state attacks that is becoming very popular in the cybercrime ecosystem. Any detections from security products or anomalies found in event logs should be investigated immediately. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 106

Ransomware VPN Healthcare Cyber Attacks 106

Security Affairs

SEPTEMBER 20, 2019

Security experts at Cofense uncovered a phishing campaign that is targeting taxpayers in the United States attempting to infect them with a new piece of malware named Amadey. Experts revealed that the botnet was used by the TA505 cybercrime gang to distribute the FlawedAmmy RAT and some email stealers. Pierluigi Paganini.

Phishing 82

Phishing Social Engineering Malware Advertising 82

Security Affairs

NOVEMBER 22, 2019

The banking trojan is able to record keystrokes, to steal passwords stored on the PC, and take screenshots and videos from the victims’ machine. million stolen login credentials – including usernames, passwords, and security questions and answers – for victims’ accounts on banking and other financial websites.

Banking 102

Banking Malware Advertising Passwords 102

Security Affairs

JULY 7, 2019

Cyber criminals have exploited an unproperly implemented password reset process in 7-Eleven to make unwanted charges on 900 customers’ accounts. “Knowing the email address, date of birth, and phone number, it turned out that a third party could change the 7pay 7-Eleven app password. 7-Eleven Inc. Pierluigi Paganini.

Mobile 75

Mobile Passwords Accountability Advertising 75