Security Affairs

SEPTEMBER 18, 2020

Ransomware , the headliner of the previous half-year, walked off stage: only 1 percent of emails analyzed by Group-IB’s Computer Emergency Response Team (CERT-GIB) contained this kind of malware. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Phishing 103

Phishing Ransomware Spyware Banking 103

Security Affairs

MARCH 5, 2020

In the sector highlight included in the report, experts mention a strain of malware tracked as MESSAGETAP that was employed by Wicked Panda in its operations. The MESSAGETAP spyware was reportedly used by WICKED PANDA to monitor short message service (SMS) traffic from telecom networks. ” reads the report. Pierluigi Paganini.

Telecommunications 89

Telecommunications Mobile Spyware Advertising 89

Security Affairs

OCTOBER 2, 2018

Checkpoint experts discovered in the Dark Web an online builder, dubbed Gazorp, that allows crooks to create customized binaries for the Azorult malware. Gazorp is designed for building binaries of the popular malware, Azorult, an infostealer used for stealing user passwords, credit card information, ” states CheckPoint.

Malware 80

Malware Advertising Spyware Passwords 80

Security Affairs

SEPTEMBER 23, 2018

New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms. NSO mobile Pegasus Spyware used in operations in 45 countries. Magecart cybercrime group stole customers credit cards from Newegg electronics retailer. Sustes Malware: CPU for Monero. Ngrok Mining Botnet. Pierluigi Paganini.

Computers and Electronics 55

Computers and Electronics Cryptocurrency Spyware Data breaches 55

Krebs on Security

APRIL 2, 2019

Canadian police last week raided the residence of a Toronto software developer behind “ Orcus RAT ,” a product that’s been marketed on underground forums and used in countless malware attacks since its creation in 2015. In 2014, the U.S. An advertisement for Orcus RAT.

Advertising 220

Advertising Malware Marketing Software 220

Security Affairs

NOVEMBER 17, 2019

TA505 Cybercrime targets system integrator companies. New TA2101 threat actor poses as government agencies to distribute malware. WhatsApp flaw CVE-2019-11931 could be exploited to install spyware. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

DDOS 51

DDOS Spyware Advertising Ransomware 51

Security Affairs

APRIL 21, 2019

Scranos – A Cross Platform, Rootkit-Enabled Spyware rapidly spreading. Analyzing OilRigs malware that uses DNS Tunneling. Operator of Codeshop Cybercrime Marketplace Sentenced to 90 months in prison. Marcus Hutchins pleads guilty to two counts of banking malware creation. Code execution – Evernote. Pierluigi Paganini.

Computers and Electronics 61

Computers and Electronics Spyware Data breaches Advertising 61

Security Affairs

OCTOBER 27, 2019

TA505 cybercrime group use SDBbot RAT in recent campaigns. malware to control Microsoft SQL Servers. Trend Micro Anti-Threat Toolkit could be used to run malware on Win PCs. Swedish Government grants police the use of spyware against violent crime suspects. Fake UpdraftPlus WordPress Plugins used to backdoor sites.

Spyware 41

Spyware Advertising Hacking DDOS 41

Security Affairs

AUGUST 4, 2018

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Paper Copy.

Cryptocurrency 41

Cryptocurrency Data breaches Spyware Surveillance 41

Security Affairs

APRIL 8, 2019

This data comes not only from the analysis of underground forums and phishing websites, but also from the analysis of cybercriminals’ infrastructure (including but not limited to C&Cs) and malware disassembling. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Map of Middle-Eastern Countries.

Artificial Intelligence 63

Artificial Intelligence Government Banking Advertising 63

Security Affairs

SEPTEMBER 2, 2018

. · BusyGasper spyware remained undetected for two years while spying Russians. · Federal prosecutors indicted a 20-year-old man who built the Satori botnet. · Hacking The Hacker. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini. Security Affairs – Newsletter ).

Spyware 41

Spyware Banking Data breaches Mobile 41

Security Affairs

MARCH 14, 2019

We dubbed this JS Sniffer family GMO because the malware uses gmo[.]li JS Sniffers is a type of malware that remains poorly researched. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. . li host.”. Pierluigi Paganini.

eCommerce 85

eCommerce Marketing Data breaches Advertising 85

SecureList

NOVEMBER 17, 2021

Last year, we foresaw the APT and cybercrime worlds becoming more porous on an operational level. The Israeli Defense Forces (IDF) have claimed that threat actors have been using catfishing to lure Israeli soldiers into installing spyware. Let’s start by looking at the predictions we made for 2021.

Mobile 127

Mobile Surveillance Ransomware Government 127

BH Consulting

NOVEMBER 15, 2022

He argued that security works when it costs €100,000 for spyware to hack into a politician’s iPhone. He analysed ten years of ransomware and found the problem, in terms of volume and frequency, was in 2014. “So Detective Inspector Gerard Doyle of the Garda Siochana National Cybercrime Bureau urged victims not to pay the ransom.

Social Engineering 59

Social Engineering Insurance CISO Ransomware 59

Security Affairs

MARCH 19, 2019

New malware in gang’s arsenal. In January 2019, Group-IB specialists obtained information about previously unknown malware sample used in this attack, dubbed by Group-IB RATv3.ps The malware spreader as part of this campaign was primarily aimed at collecting information from the victim’s computer according to various commands.

Banking 79

Banking Government Passwords Marketing 79

Security Affairs

APRIL 9, 2020

Group-IB’s CERT-GIB analyzed hundreds of coronavirus -related phishing emails and discovered top malware strains in COVID-19 campaigns. Spyware turned out to be the most common malware class hiding in fraudulent COVID-19 emails, with AgentTesla topping the list of phishers’ favorite strains. Source: CERT-GIB. Source: CERT-GIB.

Phishing 105

Phishing Malware Spyware DDOS 105

Security Affairs

NOVEMBER 27, 2018

sLoad is a sophisticated script, used in the past to deliver different types of malware such as the dreaded “ Ramnit banker”. Technical details, including IoCs and Yara Rules, about the sLoad malware are available on the Yoroi blog. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Spyware 90

Spyware DNS Advertising Malware 90

Security Affairs

MAY 8, 2020

Malware delivery: what’s on the menu? H2 2019 has proved the tendency of past several years: mail remains the main method of delivering ransomware, spyware, backdoors and other malware, being used by cyber crooks in 94 percent of cases.

Phishing 56

Phishing Spyware Banking Malware 56

Krebs on Security

JULY 16, 2019

For at least the past decade, a computer crook variously known as “ Yalishanda ,” “ Downlow ” and “ Stas_vl ” has run one of the most popular “bulletproof” Web hosting services catering to a vast array of phishing sites, cybercrime forums and malware download servers.

Cybercrime 183

Cybercrime Phishing Banking Malware 183

Security Affairs

DECEMBER 11, 2018

According to Group-IB experts, cyber criminals stole user accounts’ data using special spyware – form grabbers, keyloggers, such as Pony Formgrabber, AZORult and Qbot ( Qakbot ). The infection came from a malware included as an email attachment disguised as a legitimate file or archive. Pierluigi Paganini.

Government 92

Government Cybercrime Accountability Advertising 92

SecureList

APRIL 27, 2021

In our initial report on Sunburst , we examined the method used by the malware to communicate with its C2 (command-and-control) server and the protocol used to upgrade victims for further exploitation. This campaign made use of a previously unknown malware family we dubbed FourteenHi.

Malware 137

Malware Spyware Government Social Engineering 137

Security Affairs

JULY 7, 2019

ViceLeaker Android spyware targets users in the Middle East. Cryptomining Campaign involves Golang malware to target Linux servers. Godlua backdoor, the first malware that abuses the DNS over HTTPS (DoH). Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Scams 48

Scams Spyware DNS Advertising 48

SecureList

OCTOBER 26, 2021

Following this, they were tricked into downloading previously unknown malware. The backdoor, dubbed Tomiris, bears a number of similarities to the second-stage malware, Sunshuttle (aka GoldMax), used by DarkHalo last year. When victims tried to access their corporate mail, they were redirected to a fake copy of the web interface.

Malware 139

Malware Government Surveillance Spyware 139

Herjavec Group

AUGUST 26, 2021

We can learn a lot from the cybercrime of the past…the history of cybercrime is a glimpse into what we can expect in the future. In the past 18 months, we’ve experienced the beginning of an era that has seen cybersecurity and cybercrime at the center of it all. Dateline Cybercrime . Robert Herjavec.

Cybercrime 135

Cybercrime Computers and Electronics Banking Hacking 135