SecureWorld News

SEPTEMBER 24, 2020

The National Institute of Standards and Technology (NIST) recently developed a new method that will help prevent organizations and their employees from falling victim to phishing cyberattacks, which it calls the Phish Scale. A tool like the Phish Scale could be very useful for organizations in the fight against phishing.

Phishing 92

Phishing CISO Cybercrime Technology 92

Krebs on Security

AUGUST 8, 2023

Faced with customers trying to use WormGPT to create ransomware and phishing scams, the 23-year-old Portuguese programmer who created the project now says his service is slowly morphing into “a more controlled environment.” ” SlashNext asked WormGPT to compose this BEC phishing email. . Image: SlashNext.

Malware 220

Malware Cybercrime Advertising Phishing 220

Security Affairs

NOVEMBER 25, 2018

Researchers at AppRiver uncovered a very trivial phishing campaign targeting the streaming service Spotify, anyway, it is important to share info about it. Security researchers at AppRiver uncovered a phishing campaign targeting the popular streaming service Spotify. giving the attacker the ability to hijack the account.”

Phishing 82

Phishing Accountability Advertising Passwords 82

Security Affairs

AUGUST 5, 2019

A crook involved in a spear phishing scheme and that was in Kenya is facing up to 20 years in the US federal prison for stealing thousands of dollars from US universities. Amil Hassan Raage, 48, pleaded guilty last week in a southern California court to fraudulently receiving almost $750,000 as part of a spear phishing scheme.

Phishing 94

Phishing Banking Advertising Accountability 94

Security Affairs

OCTOBER 22, 2021

FIN7 is a Russian criminal group that has been active since mid-2015, it focuses on restaurants, gambling, and hospitality industries in the US to harvest financial information that was used in attacks or sold in cybercrime marketplaces. At the time of the report, some of the HTTP 404 errors remain unfixed. Pierluigi Paganini.

Cybercrime 100

Cybercrime Ransomware Cybersecurity Backups 100

Security Affairs

APRIL 25, 2019

Experts at Proofpoint discovered that free code repositories on GitHub have been abused since at least 2017 to host phishing websites. Researchers at Proofpoint reported that crooks are abusing free code repositories on GitHub to host phishing websites and bypass security defenses. SecurityAffairs – GitHub, cybercrime).

Phishing 81

Phishing Advertising Accountability Cybercrime 81

Krebs on Security

JUNE 29, 2023

Prosecutors in Northern California indicted Kislitsin in 2014 for his alleged role in stealing account data from Formspring. Burkov was arrested in 2015 by Israeli authorities, and the Russian government fought Burkov’s extradition to the U.S. Alexei Burkov, seated second from right, attends a hearing in Jerusalem in 2015.

Cybersecurity 258

Cybersecurity Cybercrime Hacking Technology 258

Security Affairs

OCTOBER 5, 2020

The hackers carried out spear-phishing attacks against the Swiss universities in an attempt of tricking its employees into providing their access data. The SonntagsZeitung also added that hackers attempted to breach the University of Zurich, but the employees at the university recognised the phishing attempts and neutralized them.

Advertising 144

Advertising Phishing Cybercrime Hacking 144

Security Affairs

SEPTEMBER 18, 2020

Web-phishing targeting various online services almost doubled during the COVID-19 pandemic , it accounted for 46 percent of the total number of fake web pages. Secure web- phishing. In the light of global pandemic and the businesses’ dive into online world, the share of this phishing category increased to remarkable 46 percent.

Phishing 101

Phishing Ransomware Spyware Banking 101

Security Affairs

NOVEMBER 16, 2018

According to Group-IB’s report findings, Asia is one of the most actively attacked regions in the world, the company presented latest cybercrime trends. Spear phishing remains the major vector of attack: approximately 56% of all money siphoned off from ICO were stolen using phishing. million dumps, which cost as much as $567.8

Cybercrime 81

Cybercrime Hacking Banking Phishing 81

Security Affairs

DECEMBER 26, 2023

The Carbanak gang was first discovered by Kaspersky Lab in 2015, the group has stolen at least $300 million from 100 financial institutions. The threat actors used sophisticated phishing techniques against bank employees. Imposters in November included the CRM platform HubSpot, data management software Veeam, and account tool Xero.”

Malware 108

Malware Ransomware Banking Healthcare 108

Security Affairs

APRIL 9, 2020

Group-IB’s CERT-GIB analyzed hundreds of coronavirus -related phishing emails and discovered top malware strains in COVID-19 campaigns. Group-IB’s Computer Emergency Response Team ( CERT-GIB ) analyzed hundreds of coronavirus-related phishing emails between February 13 and April 1, 2020. Spyware: the most likely COVID-19 payload.

Phishing 100

Phishing Malware Spyware DDOS 100

The Last Watchdog

JULY 13, 2023

The economic impact of cybercrime on business across the globe continues to reach new levels, with the cost predicted to reach US$10.5 trillion by 2025, a 300% increase since 2015 1. Yet, boardroom focus on cyber risk appears to be diminishing.

Cyber Risk 189

Cyber Risk Risk Insurance Energy and Utilities 189

Security Affairs

APRIL 8, 2022

A Ukrainian man was sentenced in the US to 5 years in prison for his criminal activity in the cybercrime group FIN7. for high-level hacking activity in the cybercrime group FIN7 (aka Carbanak Group and the Navigator Group). Iarmak is the third member of the FIN7 cybercrime group to be sentenced in the U.S. in May 2020.

Cybercrime 99

Cybercrime Hacking Software Phishing 99

Security Affairs

FEBRUARY 12, 2020

The FBI’s Internal Crime Complaint Center (IC3) released the FBI 2019 Internet Crime Report , a document that outlines cybercrime trends over the past year. The figure that most of all capture our attention is that victims of cybercrime activities lost $3.5 Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Internet 107

Internet Internet Scams Cybercrime 107

Security Affairs

JUNE 24, 2020

. “While the group’s key infiltration vector to the exchange is usually through spear-phishing against the corporate network, the executives’ personal email accounts are the first to be targeted.” Online cryptocurrency exchanges are a privileged target for cybercrime groups and nation-state actors.

Cryptocurrency 97

Cryptocurrency Phishing Accountability Passwords 97

Security Affairs

MARCH 15, 2020

A cybercrime gang focused on Business Email Compromise (BEC) has started using coronavirus-themed scam emails in its attacks. The researchers received a coronavirus-themed scam email that attempted to trick victims into using a different bank account for the payment due to the COVID-19 outbreak. A change of the bank account).

Scams 104

Scams Banking Cybercrime Advertising 104

Security Affairs

MARCH 13, 2020

European authorities dismantled two cybercrime organizations responsible for stealing millions through SIM hijacking. European authorities managed to dismantle the operations of two cybercrime gangs responsible for stealing millions through SIM hijacking. The authorities arrested tens of individuals in Spain and Romania. .

Banking 111

Banking Cybercrime Mobile Accountability 111

Security Affairs

JULY 11, 2020

A jury found Russian hacker Yevgeniy Nikulin guilty for the hack of LinkedIn, Dropbox, and Formspring back in 2012 and for the sale of the stolen data on cybercrime black marketplaces. Nikulin used data stolen from Linkedin to launch spear-phishing attacks against employees at other companies, including Dropbox. Pierluigi Paganini.

Hacking 73

Hacking Cybercrime Data breaches Advertising 73

Security Affairs

SEPTEMBER 30, 2020

Nikulin used data stolen from Linkedin to launch spear-phishing attacks against employees at other companies, including Dropbox. Nikulin also hacked into an employee account of a Formspring engineer and used it to access the company network between June 13, 2012, and June 29, 2012. SecurityAffairs – hacking, Cybercrime).

Identity Theft 104

Identity Theft Cybercrime Advertising Hacking 104

The Last Watchdog

OCTOBER 20, 2023

Unauthorised transactions made with the help of lost or stolen credit cards, counterfeit cards, ID document forgery and identity theft, fake identification, email phishing, and imposter scams are among the most common types of payment fraud today.” Cloud technologies also play an important role in the latest anti-fraud developments.

Artificial Intelligence 100

Artificial Intelligence Identity Theft Telecommunications Big data 100

Security Affairs

JULY 24, 2019

The crooks also carried out a phishing campaign that reached thousands of victims and tricked them into providing social security numbers and bank account information. . At the time of the arrest, Costea possessed 36,050 fraudulently obtained financial account numbers , Draghici had 3,465 and Dumitrescu had 3,278.

Hacking 79

Hacking Banking Identity Theft Phishing 79

Security Affairs

MAY 8, 2020

Group-IB, a Singapore-based cybersecurity company, observed the growth of the lifespan of phishing attacks in the second half of 2019. Figure 1 The distribution of web-phishing among target categories . CERT-GIB’s findings indicate that phishing attack perpetrators have revised their so-called target pool. Target reshuffle.

Phishing 55

Phishing Spyware Banking Malware 55

Security Affairs

AUGUST 3, 2018

Industrial sector hit by a surgical spear-phishing campaign aimed at installing legitimate remote administration software on victims’ machines. Attackers personalized the content of each phishing email reflecting the activity of the target organization and the type of work performed by the employee to whom the email is sent.

Phishing 43

Phishing VPN Passwords Software 43

Security Affairs

MARCH 16, 2020

In response to the incident, Open Exchange Rates has forced a password reset for all accounts created before March 2, 2020. Open Exchange Rates recommends users to generate new API IDs using the account dashboard to access the service. Stolen data could be used by threat actors to target organizations with spear- phishing campaigns.

Data breaches 103

Data breaches Passwords Advertising Accountability 103

Security Affairs

JANUARY 2, 2020

Kaspersky researchers found over 30 fraudulent websites and social media profiles disguised as official movie accounts (the actual number of these sites may be much higher) that supposedly distribute free copies of the latest film in the franchise.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Phishing 75

Phishing Malware Advertising Media 75

SecureList

MAY 25, 2022

” Social engineering became an overwhelming problem this past year, highlighting the surge in repeated cybercrime tactics — 1. However, that same year the rise of hacktivism (particularly leaks) accounted for many attacks. “Actor Motives: Financial (89%), Espionage (11%).”

Social Engineering 89

Social Engineering Cybercrime Ransomware IoT 89

Security Affairs

SEPTEMBER 25, 2020

Polish authorities have dismantled a major hacker group that was involved in multiple cybercrime activities, including ransomware attacks, malware distribution, SIM swapping, banking fraud, running rogue online stores, and even making bomb threats at the behest of paying customers. ” reads the press release published by the Europol. .

Cybercrime 77

Cybercrime Banking Malware Mobile 77

Security Affairs

AUGUST 24, 2019

West carried out phishing scams against hundreds of companies since 2015, he stole financial data of tens of thousands of customers and then sold that information on cybercrime underground forums. He predominately used ‘phishing’ email scams to obtain the financial data of tens of thousands of customers. .”

Cryptocurrency 78

Cryptocurrency Scams Cybercrime Phishing 78

Security Affairs

NOVEMBER 15, 2019

The suspects stole the funds from at least 10 victims using SIM swapping between November 2015 and May 2018. Attackers obtain victims’ information by launching a phishing campaign, or by purchasing them in the underground market. ’ (slang for ‘Original Gangster’) social media account names.”

Cryptocurrency 79

Cryptocurrency Identity Theft Accountability Media 79

Security Affairs

OCTOBER 15, 2018

Group-IB: The online market for counterfeit goods in Russia has reached $1,5 billion, while the number of phishing attacks has surpassed 1,200 daily. Scammers create fake websites of known brands, fraudulent promotional campaigns, and fake accounts on social media. Phishing remains one of the most common online fraud.

Marketing 78

Marketing Phishing Media Engineering 78

Krebs on Security

OCTOBER 25, 2018

The fraudsters behind the often laughable Nigerian prince email scams have long since branched out into far more serious and lucrative forms of fraud, including account takeovers, phishing, dating scams, and malware deployment. When we started the list around Christmas of 2015, it was just myself and one FBI agent.

Scams 191

Scams Accountability Media Banking 191

Security Affairs

MAY 24, 2019

Getting your paycheck deposited directly into your bank account seems like a handy solution but in some cases. Getting your paycheck deposited directly into your bank account seems like a handy solution because you don’t have to pick up the check from your workplace and take it to the bank to deposit it. hackers can access them.

Phishing 85

Phishing Accountability Banking Social Engineering 85

Security Affairs

DECEMBER 11, 2018

Group-IB Threat Intelligence has detected government websites’ user accounts compromised by cyber criminals in 30 countries. Government employees, military and civilian citizens who had accounts on official government portals of France ( gouv.fr ), Hungary ( gov.hu ) and Croatia ( gov.hr ) became victims of this data compromise.

Government 89

Government Cybercrime Accountability Advertising 89

Security Affairs

OCTOBER 4, 2020

The attackers targeted the employees at the merchant with a phishing campaign to obtain credentials for user accounts and were able to take over an administrator account. The recent attacks demonstrate that the threat actors continue to target merchant POS systems to harvest card present payment account data.

Malware 136

Malware Advertising Accountability Hacking 136

Security Affairs

JULY 26, 2020

The company is also aware that a threat actor is attempting to sell the Dave user records in the cybercrime underground, it hired security firm CrowdStrike to investigate the security breach. “This database seems to be have dumped through sending Github phishing emails to Dave.com employees. ” continues Cyble.

Banking 111

Banking Advertising Education Cybercrime 111

Security Affairs

OCTOBER 8, 2019

Researchers from MalwareBytes and HYAS Threat Intelligence linked one of the hacking groups under the Magecart umbrella to the notorious Cobalt cybercrime Group. The experts found a link between the Magecart Group 4 and the Cobalt cybercrime Gang, such as patterns in the email addresses used to register domains used in Magecart operations.

Cybercrime 80

Cybercrime Banking Advertising Accountability 80