Security Affairs

APRIL 11, 2020

Crooks are using a fake Cisco “critical security advisory” in a new phishing campaign aimed at stealing victims’ Webex credentials. The Cofense’s phishing defense center has uncovered an ongoing phishing campaign that uses a Cisco security advisory related to a critical vulnerability as a lure. name=CVE-2016-9223.

Phishing 140

Phishing Advertising Healthcare Cyber Attacks 140

The Last Watchdog

JUNE 21, 2020

The infamous Locky ransomware was first spotted in the wild in February 2016. CryptXXX, another major family discovered in April 2016 and later rebranded as UltraCrypter, relied on exploit kits that used software vulnerabilities to infiltrate systems. The first viable Mac ransomware called KeRanger was spotted in the spring of 2016.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

DECEMBER 4, 2021

The Hancitor downloader has been active since at least 2016 for dropping Pony and Vawtrak. The Hancitor malware is distributed through phishing emails, or using compromised credentials, exploiting Microsoft Exchange vulnerabilities, or legitimate Remote Desktop Protocol (RDP) tools to gain initial access to a victim’s network.

Ransomware 138

Ransomware Hacking Malware Encryption 138

Security Affairs

MAY 3, 2024

The threat actors used the botnet harvest credentials, collect NTLMv2 digests, proxy network traffic, and host spear-phishing landing pages and custom tools. The Moobot botnet has been active since at least 2016, it also includes other routers and virtual private servers (VPS). ” reported Trend Micro.

Phishing 98

Phishing Cryptocurrency Internet Internet 98

Security Affairs

JULY 9, 2019

The malware samples shared by USCYBERCOM last week were first detected in December 2016 in attacks attributed to Iran-linked APT33. Last week the United States Cyber Command (USCYBERCOM) uploaded to VirusTotal a malware used by Iran-linked APT33 group in attacks in Dec 2016 and Jan 2017. SecurityAffairs – USCYBERCOM, hacking).

Malware 74

Malware InfoSec Advertising Government 74

Security Affairs

JULY 9, 2021

Threat actors have devised a new trick to disable macro security warning that leverage non-malicious docs in phishing attacks. Most of the phishing attacks leverage weaponized Microsoft Office documents and social engineering techniques to trick recipients into enabling the macros. SecurityAffairs – hacking, phishing).

Phishing 98

Phishing Social Engineering Banking Engineering 98

Security Affairs

JUNE 17, 2019

Security researchers at Cofense have spotted a phishing campaign aimed at commercial banking customers distributing a new remote access trojan (RAT) tracked as WSH RAT. Threat actors are using the RAT to deliver keyloggers and information stealers. Within five days, WSH RAT was observed being actively distributed via phishing.

Banking 103

Banking Phishing Advertising Malware 103

Security Affairs

JULY 11, 2020

A jury found Russian hacker Yevgeniy Nikulin guilty for the hack of LinkedIn, Dropbox, and Formspring back in 2012 and for the sale of the stolen data on cybercrime black marketplaces. The Russian criminal was arrested in Prague in October 2016 in an international joint operation with the FBI. SecurityAffairs – hacking, cybercrime).

Hacking 78

Hacking Cybercrime Data breaches Advertising 78

Security Affairs

APRIL 22, 2024

The group was involved also in the string of attacks that targeted 2016 Presidential election. Most of the APT28s’ campaigns leveraged spear-phishing and malware-based attacks. The group operates out of military unity 26165 of the Russian General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center (GTsSS).

Government 113

Government Education Phishing Malware 113

Security Affairs

OCTOBER 3, 2023

Our researchers found that the letters are dated between 2016 and 2021. Risk of plate cloning While the leaked parking permits are no longer valid, malicious actors could use the exposed data for identity theft and to craft spear phishing attacks. Researchers contacted MTC, and public access to the data was closed.

Identity Theft 103

Identity Theft Scams Risk Phishing 103

Security Affairs

FEBRUARY 8, 2021

Since 2016 , Microsoft has been alerting users of nation-state activity, now the IT giant added the same service to the Defender for Office 365 dashboard. The new security alert will notify companies when their employees are being targeted by state-sponsored attacks. SecurityAffairs – hacking, nation-state hacking).

System Administration 130

System Administration Hacking Cyber threats Accountability 130

Security Affairs

OCTOBER 8, 2021

Google warned more than 14,000 Gmail users that they have been the target of nation-state spear-phishing campaigns. Shane Huntley, the head of the Threat Analysis Group (TAG), wrote on Twitter that his group had sent an above-average batch of government-backed security warnings. . SecurityAffairs – hacking, spear-phishing).

Phishing 94

Phishing Government Hacking Accountability 94

Security Affairs

DECEMBER 16, 2022

However the company recommends users to change their password as a precaution and remain vigilant to recognize phishing attempts. This is not the first time that the Social Blade infrastructure was breached, in 2016, the company suffered another security breach. SecurityAffairs – hacking, Social Blade).

Data breaches 93

Data breaches Passwords Media Phishing 93

Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. According to the Google Threat Horizons report, the state-sponsored hackers sent fake job offers to employees at the security companies. . SecurityAffairs – hacking, North Korea).

Malware 125

Malware Phishing Antivirus Hacking 125

Security Affairs

OCTOBER 27, 2023

The group was involved also in the string of attacks that targeted 2016 Presidential election. Most of the APT28s’ campaigns leveraged spear-phishing and malware-based attacks. The group operates out of military unity 26165 of the Russian General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center (GTsSS).

Government 108

Government Phishing Accountability Hacking 108

Security Affairs

MARCH 20, 2020

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election. Pierluigi Paganini.

Phishing 137

Phishing Accountability Advertising DNS 137

Security Affairs

MARCH 19, 2021

On Wednesday, the two US agencies published an advisory to warn organizations of a new wave of attacks conducted by cybercrime actors that are leveraging a traffic infringement phishing scheme to trick victims into installing the TrickBot malware. If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Phishing 101

Phishing Cybercrime Malware Ransomware 101

Security Affairs

DECEMBER 10, 2020

Russia-link cyberespionage APT28 leverages COVID-19 as phishing lures to deliver the Go version of their Zebrocy (or Zekapab) malware. Russia-linked APT28 is leveraging COVID-19 as phishing lures in a new wave of attacks aimed at distributing the Go version of their Zebrocy (or Zekapab) malware. SecurityAffairs – hacking, Zebrocy).

Malware 106

Malware Phishing Government Data collection 106

Security Affairs

APRIL 30, 2023

CERT-UA warns of a spear-phishing campaign conducted by APT28 group targeting Ukrainian government bodies with fake ‘Windows Update’ guides. The group was involved also in the string of attacks that targeted 2016 Presidential election. Most of the APT28s’ campaigns leveraged spear-phishing and malware-based attacks.

System Administration 92

System Administration Government Phishing Malware 92

Security Affairs

DECEMBER 2, 2021

The name EMMA is an acronym for European Money Mule Action operation, the first EMMA operation led by Europol took place in 2016. The money mules have a crucial role in criminal organizations to launder money for a wide array of illegal activities, such as online scams, sim-swapping, e-commerce fraud, and phishing. Pierluigi Paganini.

Banking 111

Banking Scams Phishing Media 111

Security Affairs

AUGUST 21, 2022

” The infection chain begins with a spear-phishing message written in Spanish that includes a link that points to a website that further downloads a malicious ZIP archive on the victim’s machine. . SecurityAffairs – hacking, Log4Shell). ” reads the post published by Zscaler. ” concludes the report.

Banking 92

Banking Malware Antivirus Phishing 92

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 79

Malware Cybercrime Cryptocurrency Social Engineering 79

Security Affairs

APRIL 8, 2022

for high-level hacking activity in the cybercrime group FIN7 (aka Carbanak Group and the Navigator Group). The cybercriminal had pleaded guilty to one count of conspiracy to commit wire fraud and one count of conspiracy to commit computer hacking. SecurityAffairs – hacking, FIN7). in May 2020. Polite, Jr. Attorney Nicholas W.

Cybercrime 106

Cybercrime Hacking Software Phishing 106

Security Affairs

SEPTEMBER 4, 2020

They could: XSS Phishing Bypass domain security Steal sensitive user data, cookies, etc.” ” An attacker could exploit the issue to target visitors of the website with phishing and cross-site scripting attacks. . SecurityAffairs – hacking, U.S. Pierluigi Paganini. Department of Defense). The post U.S.

Advertising 118

Advertising Phishing Hacking Technology 118

Security Affairs

DECEMBER 5, 2023

The group was involved also in the string of attacks that targeted 2016 Presidential election. Most of the APT28s’ campaigns leveraged spear-phishing and malware-based attacks. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, APT28)

Accountability 105

Accountability Government Phishing Authentication 105

Security Affairs

DECEMBER 7, 2023

The group was involved also in the string of attacks that targeted 2016 Presidential election. Most of the APT28s’ campaigns leveraged spear-phishing and malware-based attacks. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, APT28)

Government 109

Government Telecommunications Accountability Phishing 109

Security Affairs

DECEMBER 30, 2022

Newspaper Theme on WordPress Access Control (vulnerability CVE-2016-10972). ” Visitors of compromised pages are redirected to malicious sites used to distribute malware and serve phishing pages. SecurityAffairs – hacking, Lunix Malware). WordPress – Yuzo Related Posts. Yellow Pencil Visual Theme Customizer Plugin.

Malware 85

Malware Hacking Accountability Phishing 85

Security Affairs

JANUARY 12, 2022

The alert provides information about tactics, techniques, and procedures (TTPs) associated with Russia-Linked threat actors, along with recommendations on incident response and mitigations. Russia-linked cyber-espionage groups have used common tactics, such as spear-phishing, and brute force attacks. Pierluigi Paganini.

Malware 118

Malware Cyber threats Cybersecurity Government 118

Security Affairs

AUGUST 25, 2021

The group has been active since 2016, it leverages known malware such as PUNCHTRACK and BADHATCH to infect PoS systems and steal payment card data. Tune the e-mail security solution to automatically discard malicious or suspicious attachments. SecurityAffairs – hacking, FIN8). Pierluigi Paganini.

Retail 123

Retail Insurance Malware Phishing 123

Security Affairs

AUGUST 21, 2022

The Donot Team has been active since 2016, it focuses on government and military organizations, ministries of foreign affairs, and embassies in India, Pakistan, Sri Lanka, Bangladesh, and other South Asian countries. SecurityAffairs – hacking, Donot Team). ” reads the report published by Morphisec. Pierluigi Paganini.

Malware 95

Malware Spyware Phishing Government 95

Joseph Steinberg

MAY 12, 2021

And, just before the COVID-19 pandemic hit the United States, the Department of Homeland Security alerted information security professionals that a ransomware attack delivered via phishing emails had adversely impacted operations at one of the country’s natural gas processors. Nor were those isolated incidents.

Energy and Utilities 156

Energy and Utilities Ransomware Artificial Intelligence Cyber Attacks 156

Security Affairs

MAY 16, 2021

The Operation Transparent Tribe (Operation C-Major, APT36, and Mythic Leopard) was first spotted by Proofpoint Researchers in Feb 2016, in a series of cyber espionage operations against Indian diplomats and military personnel in some embassies in Saudi Arabia and Kazakhstan. SecurityAffairs – hacking, APT). Pierluigi Paganini.

Malware 103

Malware Phishing Hacking Information Security 103

Security Affairs

APRIL 15, 2022

While you may disagree, data breach studies show that employees and negligence are the most typical causes of security breaches, yet these prevalent issues are least discussed. While there are numerous approaches to promoting a more cyber secure workplace, here are the most common and effective ways: Trick Employees via a Phishing Campaign.

Cybersecurity 74

Cybersecurity Data privacy Data breaches Phishing 74

Security Affairs

DECEMBER 25, 2020

The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFT attacks in 2016, and the Sony Pictures hack. The wAgent backdoor allows the attackers to executed various shell commands to gather information from the infected device. . SecurityAffairs – hacking, North Korea).

Cryptocurrency 123

Cryptocurrency Malware Hacking Phishing 123

Security Affairs

APRIL 8, 2022

The group was involved also in the string of attacks that targeted 2016 Presidential election. Most of APT28s’ campaigns leveraged spear-phishing and malware-based attacks. SecurityAffairs – hacking, APT28). The post Microsoft disrupted APT28 attacks on Ukraine through a court order appeared first on Security Affairs.

Government 110

Government Media Malware Hacking 110

Security Affairs

JANUARY 7, 2021

” The VBA self-decoding technique is not a novelty, the threat actor is using it since 2016. “The primary initial infection vector used by APT37 is spear phishing, in which the actor sends an email to a target that is weaponized with a malicious document. SecurityAffairs – hacking, APT37). Pierluigi Paganini.

Government 94

Government Phishing Encryption Malware 94

Security Affairs

SEPTEMBER 27, 2022

The group was involved also in the string of attacks that targeted 2016 Presidential election. Most of APT28s’ campaigns leveraged spear-phishing and malware-based attacks. SecurityAffairs – hacking, Russia). The post Mandiant identifies 3 hacktivist groups working in support of Russia appeared first on Security Affairs.

DDOS 86

DDOS Cyber threats Phishing Hacking 86