SecureWorld News

FEBRUARY 9, 2022

billion in stolen cryptocurrency linked to a 2016 hack of virtual currency exchange platform Bitfinex, making it the largest seizure of its kind. The total amount of cryptocurrency the two were laundering is currently valued at approximately $4.5 based business accounts to legitimize their banking activity.".

Cryptocurrency 77

Cryptocurrency Accountability Banking Hacking 77

Krebs on Security

DECEMBER 29, 2022

Here’s a look at some of the more notable cybercrime stories from the past year, as covered by KrebsOnSecurity and elsewhere. Internal Revenue Service website for months: Anyone seeking to create an account to view their tax records online would soon be required to provide biometric data to a private company in Virginia — ID.me.

Cryptocurrency 239

Cryptocurrency Cybercrime Computers and Electronics Scams 239

Security Affairs

MAY 6, 2024

Alexander Vinnik , a Russian national, pleaded guilty to conspiracy to commit money laundering for his involvement in operating the cryptocurrency exchange BTC-e from 2011 to 2017. Greek Police arrested the Russian national in 2017, and they accused the man of running the BTC-e Bitcoin exchange to launder billions worth of cryptocurrency.

Cryptocurrency 93

Cryptocurrency Computers and Electronics Identity Theft Hacking 93

Krebs on Security

DECEMBER 8, 2021

Matthew Filbert, in 2016. There is a now-dormant Myspace account for a Matthew Philbert from Orleans, a suburb of Ottawa, Ontario. The information tied to the Myspace account matches the age and town of the defendant. DCReavers2 was just the 22nd account to register on the Darkode cybercrime forum.

Cybercrime 284

Cybercrime Ransomware Accountability Advertising 284

Security Affairs

OCTOBER 18, 2020

QQAAZZ attempted to launder tens of millions stolen from victims starting with 2016 by the world’s foremost cybercriminals. “The funds were then transferred to other QQAAZZ-controlled bank accounts and sometimes converted to cryptocurrency using ‘tumbling’ services designed to hide the original source of the funds. .

Malware 104

Malware Banking Cryptocurrency Cybercrime 104

Security Boulevard

MAY 27, 2022

The Exfiltration Phase of The Kill Chain of a Cryptocurrency-Based Attack Provides the Greatest Opportunity to Identify Cybercriminals. Cryptocurrency gained through illicit means is less useable than other assets due to the way cryptocurrency systems currently do not fully protect owner identity and allow for only limited liquidity.

Cryptocurrency 59

Cryptocurrency Risk Marketing Architecture 59

Krebs on Security

JULY 29, 2022

These services can be used in a legitimate manner for several business purposes — such as price comparisons or sales intelligence — but they are massively abused for hiding cybercrime activity because they can make it difficult to trace malicious traffic to its original source. A cached copy of flashupdate[.]net

Cybercrime 270

Cybercrime Software VPN Backups 270

Krebs on Security

JANUARY 18, 2021

Joker’s Stash , by some accounts the largest underground shop for selling stolen credit card and identity data, says it’s closing up shop effective mid-February 2021. The announcement came on the heels of a turbulent year for the major cybercrime store, and just weeks after U.S. jokersstash[.]su).

Marketing 250

Marketing Cybercrime Accountability Cryptocurrency 250

Security Affairs

DECEMBER 29, 2023

One of the key significant improvements are support of more software clients (including browser-based cryptocurrency wallets), upgraded credit card (CC) grabber, and additional advanced mechanisms for password storage dump on various platforms to extract credentials and tokens.

Password Management 122

Password Management Cryptocurrency Passwords Authentication 122

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 76

Malware Cybercrime Cryptocurrency Social Engineering 76

Security Affairs

NOVEMBER 6, 2018

Group-IB and Swiss insurance broker ASPIS that owns CryptoIns project, have developed the world’s first scoring model for assessing cryptocurrency exchanges. Based on the risk score, CryptoIns experts have calculated insurance rates for cryptocurrency exchange users who can now insure their accounts against cyber threats.

Insurance 60

Insurance Cryptocurrency Cyber threats Marketing 60

Security Affairs

AUGUST 7, 2018

Group-IB researchers have investigated user data leaks from cryptocurrency exchanges and has analyzed the nature of these incidents. In 2017, when cryptocurrencies were gaining momentum, their record-breaking capitalization and a spike in Bitcoin’s exchange rate led to dozens of attacks on cryptocurrency services.

Cryptocurrency 48

Cryptocurrency Passwords Authentication Accountability 48

Security Affairs

OCTOBER 19, 2020

In 2017, Greek Police arrested the Russian national Alexander Vinnik and they accused the man of running the BTC-e Bitcoin exchange to launder more than US$4bn worth of the cryptocurrency. French authorities accused Vinnik of defrauding more than 100 people in six French cities between 2016 and 2018. million withdrawn.

Advertising 114

Advertising Cybercrime Hacking Cryptocurrency 114

Security Affairs

OCTOBER 26, 2022

“Kaye allegedly operated The Real Deal, a Dark Web market for illicit items, including stolen account login credentials for U.S. Kaye laundered cryptocurrency obtained from the illegal The Real Deal operation through the mixing service Bitmixer.io. Kaye also trafficked login credentials for Twitter and LinkedIn accounts.

Marketing 86

Marketing Government Hacking Accountability 86

Security Affairs

OCTOBER 13, 2021

However, experts pointed out that the botnet uses more than 20 cryptocurrencies in total, for this reason the total financial gains could be greater than $24M. According to the researchers, the Smominru botnet has been active at least since 2016 and at the time of its discovery infected more than 526,000 Windows computers.

Cryptocurrency 98

Cryptocurrency Encryption Malware Hacking 98

Malwarebytes

JUNE 3, 2022

Just last month, after the Twitter account of a famous digital artist was hacked, cybercriminals abused the account to send promotions for a fraudulent collaboration between the artist and the luxury brand Lous Vuitton. By selling fake raffle tickets for the promotion, the scammers raked in $438,000 worth of cryptocurrency.

Internet 123

Internet Internet Scams Passwords 123

SecureWorld News

FEBRUARY 18, 2021

And the targets in this case are widespread: banks, ATMs, cryptocurrency exchanges, online casinos, movie studios such as Sony Pictures, and theater chains such as AMC. million from an Indonesian cryptocurrency company in September 2018; and $11.8 million from an Indonesian cryptocurrency company in September 2018; and $11.8

Hacking 99

Hacking Cryptocurrency Computers and Electronics Banking 99

SecureList

FEBRUARY 23, 2022

For the purposes of this report, “financial malware” refers to malicious software targeting entities within the financial services sector, including online banking, payment systems, e-money services, online stores and cryptocurrency services. A phishing login and account verification page imitating a U.S. share for banking.

Banking 101

Banking Phishing Cryptocurrency Malware 101

Security Affairs

FEBRUARY 13, 2022

US seizes $3.6 to replace Chinese equipment Hackers breached a server of National Games of China days before the event Russian Gamaredon APT is targeting Ukraine since October Israeli surveillance firm QuaDream emerges from the dark Argo CD flaw could allow stealing sensitive data from Kubernetes Apps.

Spyware 72

Spyware Surveillance Ransomware Hacking 72

SecureList

MAY 27, 2022

In January, we reported a malicious campaign targeting companies that work with cryptocurrencies, smart contracts, decentralized finance and blockchain technology: the attackers are interested in fintech in general. The campaign has two goals: gathering information and stealing cryptocurrency. Lapsus$ group hacks Okta.

Phishing 110

Phishing Spyware Firmware Malware 110

Security Affairs

SEPTEMBER 3, 2020

Transactions were paid in Bitcoin and other cryptocurrencies.” According to court documents, Herrell served as a marketplace moderator and scam watcher between May 2016 and July 2017 using the monikers ‘Penissmith’ and ‘Botah.’ ” reads a press release published by the Europol.

Marketing 76

Marketing Cryptocurrency Scams Advertising 76

Security Affairs

JANUARY 13, 2019

bit” C&C domains was added to protect the C2 infrastructure, this TLD is associated with the cryptocurrency Namecoin and requires special DNS servers that the malware uses (dedsolutions[.]bit, SecurityAffairs – TA505, cybercrime). ” continues Proofpoint. The support for “.bit” bit, arepos[.]bit).null. Pierluigi Paganini.

Malware 89

Malware DNS Financial Services Retail 89

SecureList

FEBRUARY 16, 2021

While the resource was down, cryptocurrency newbies were invited to download a copy of Bitcoin Core via a torrenting service. Cybercriminals used the names of well-known APT groups to intimidate victims, demanded ransoms in cryptocurrency, and carried out demonstration attacks to back up their threats.

DDOS 134

DDOS Cryptocurrency Marketing Internet 134

Security Affairs

NOVEMBER 19, 2019

Ransomware accounted for over half of all malicious mailings in H1 2019, Troldesh aka Shade being the most popular tool among cybercriminals. In 2017, password-protected archives accounted for only 0.08% of all malicious objects. Links account for 29%, while attachments—for 71%. Another trend was disguising malware in emails.

Ransomware 69

Ransomware Antivirus Malware Banking 69

SecureList

JULY 28, 2022

We found links to previously observed cybercrime activities, new, formerly unknown samples used by the attackers during post-exploitation activities, a wealth of recent information about C2 infrastructure and the latest samples distributed to compromise victims. Based on the domain naming scheme, we call this campaign NaiveCopy.

Malware 136

Malware Firmware Phishing Cryptocurrency 136

Security Affairs

MARCH 19, 2019

The new Trojan was presumably downloaded to a victim’s computer as part of the second phase of a so-called watering hole attack, which, according to Group-IB report on Lazarus , the group has been actively using since 2016. Cybercriminals steal user accounts’ data using special spyware aimed at obtaining users’ authentication data.

Banking 77

Banking Government Passwords Marketing 77

SecureList

AUGUST 30, 2023

While investigating an infection of a cryptocurrency company in Southeast Asia, we found Gopuram coexisting on target computers with AppleJeus , a backdoor attributed to the Lazarus. The threat actor specifically targeted cryptocurrency companies. We observed that they have a specific interest in cryptocurrency companies.

Malware 78

Malware Spyware Cryptocurrency Government 78

eSecurity Planet

NOVEMBER 2, 2022

It could install a keylogging program, allowing the hacker to gain access to sensitive information like bank account details, passwords, and physical addresses as long as the victim typed that information into their computer at any point. In March 2016, the Petya family of ransomware was first discovered.

Malware 140

Malware Ransomware Antivirus Internet 140

SecureList

JULY 28, 2021

This is well illustrated by the attack on DNS provider Dyn that downed more than 80 major websites and online services in 2016. With cryptocurrency prices still attractive, the DDoS market is not expected to grow. Geography of devices from which attempts were made to attack Kaspersky Telnet honeypots, Q2 2021 ( download ).

DDOS 134

DDOS DNS IoT Marketing 134

SecureList

JULY 29, 2021

KABA1 was an implant used against targets throughout the South China Sea that we attributed to the Naikon APT back in 2016. In recent operations, the group has focused on cryptocurrency businesses. Another interesting find was a related loader (found in a staging directory) that loaded a KABA1 implant variant.

Malware 143

Malware Phishing Password Management Social Engineering 143

eSecurity Planet

FEBRUARY 16, 2021

For access to the decryption key, the victim must make prompt payment, often in cryptocurrency shielding the attacker’s identity. Enterprise ransomware accounts for 81% of total infections, and by market segment, 62% are small to medium-sized businesses ( Symantec ). Attackers will inform the victim that their data is encrypted.

Ransomware 97

Ransomware Backups Software Encryption 97

Spinone

OCTOBER 13, 2020

Why Ransomware is the Fastest Growing Malware Threat Since 2016, over 4,000 ransomware attacks have occurred daily. Ransom payments are generally demanded in the form of untraceable cryptocurrency such as Bitcoin. It has been noted that paying a ransom demand only encourages this type of cybercrime and funds it.

Ransomware 52

Ransomware Backups Data breaches Encryption 52