Security Affairs

AUGUST 22, 2019

The popular malware researcher Lukas Stefanko from ESET discovered that a malicious spyware, built on the AhMyth open-source espionage tool, was uploaded on Google Play twice over two weeks, bypassing Google security checks. ” The source code of the RAT is available on GitHub since October 2017. . ” wrote Stafanko.

Spyware 79

Spyware Advertising Malware Mobile 79

SecureList

MARCH 1, 2021

The word “covid” in various combinations was typically used in the names of packages hiding spyware and banking Trojans, adware or Trojan droppers. The mobile malware Trojan-Ransom.AndroidOS.Agent.aq Last year was notable for both malware and adware, the two very close in terms of capabilities. More on that later.

Mobile 132

Mobile Malware Adware Banking 132

Hot for Security

JUNE 18, 2021

The updated password-stealing capabilities and security-dodging techniques paired with the malware distribution-as-a-service business model have proven highly profitable. Once accessed, the document downloads Agent Tesla malware. 46463520 , while Agent Tesla malware is detected as Trojan.GenericKD.46464231.

Phishing 105

Phishing Malware Spyware Software 105

Hot for Security

JUNE 18, 2021

The updated password-stealing capabilities and security-dodging techniques paired with the malware distribution-as-a-service business model have proven highly profitable. Once accessed, the document downloads Agent Tesla malware. 46463520 , while Agent Tesla malware is detected as Trojan.GenericKD.46464231.

Phishing 52

Phishing Malware Spyware Software 52

The Last Watchdog

JANUARY 28, 2019

And the malware that subsequently gets installed continues to get more stealthy and capable with each advancing iteration. Researchers recently flushed out a new variety of the Xbash family of malware tuned to seek out administrators’ rights and take control of Linux servers. Apps from other sources can carry malware or spyware.

Passwords 196

Passwords Password Management Antivirus Internet 196

Security Affairs

APRIL 28, 2020

The malware was an info stealer and according to the researchers, it was part of a long-term campaign, tracked as “PhantomLance” that has been active at least since December 2015. We informed Google of the malware, and it was removed from the market shortly after.” ” reads the analysis published by Kaspersky.

Malware 107

Malware Advertising Spyware Marketing 107

SecureList

NOVEMBER 1, 2022

Since the malware in this incident was compiled on April 15, 2021, and compilation dates are the same for all known samples, this incident is likely to be the first involving Maui ransomware. This report included technical details of malware used in the campaign, such as Ecipekac, SodaMaster, P8RAT, FYAnti and QuasarRAT.

Malware 139

Malware Ransomware Spyware Encryption 139

Security Affairs

NOVEMBER 25, 2020

Since at least 2017, the prolific gang compromised at least 500,000 government and private sector companies in more than 150 countries. The gang was also seen using earlier compromised email account to push a new round of phishing attempts. The investigation continues as some of the gang members remain at large.

Cybercrime 128

Cybercrime Phishing Social Engineering Spyware 128

SecureList

DECEMBER 1, 2023

To exfiltrate data and deliver next-stage malware, the attackers abuse cloud-based data storage, such as Dropbox or Yandex Disk, as well as a temporary file sharing service. However, they included an additional module that constantly monitored the messenger and sent data to the spyware creator’s C2 server.

Malware 91

Malware Ransomware Encryption Energy and Utilities 91

SecureList

AUGUST 30, 2023

Both infection methods resulted in the same malware (the DeathNote downloader), which uploaded the target’s information and retrieved the next-stage payload at the discretion of the C2 (Command and Control) server. It’s thought that the malware was spread through a vulnerability in the software.

Malware 73

Malware Spyware Cryptocurrency Government 73

eSecurity Planet

FEBRUARY 16, 2021

Malware, short for “malicious software,” is any unwanted software on your computer that, more often than not, is designed to inflict damage. Since the early days of computing, a wide range of malware types with varying functions have emerged. Best Practices to Defend Against Malware. Jump ahead: Adware. RAM scraper.

Malware 105

Malware Adware Spyware Antivirus 105

SiteLock

AUGUST 27, 2021

Cyberattacks are often caused by malware, which is the umbrella term used to describe software created for malicious purposes. You may be most familiar with computer malware such as Trojan viruses and spyware, which can be used to retrieve sensitive data from a computer or even take control of the system. Ransomware.

Small Business 98

Small Business DDOS Malware Phishing 98

Security Affairs

APRIL 26, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Spyware 95

Spyware Hacking Advertising Antivirus 95

Security Affairs

JULY 28, 2019

Twitter account of Scotland Yard hacked and posted bizarre messages. WizzAir informed customers it forced a password reset on their accounts. New APT34 campaign uses LinkedIn to deliver fresh malware. WSJ says Equifax to Pay $700 million settlement for 2017 breach. A new ProFTPD vulnerability exposes servers to hack.

Antivirus 59

Antivirus Spyware Advertising Hacking 59

The Last Watchdog

MAY 2, 2019

Gill Today, very sophisticated tools are out there for anyone to use and are being incorporated into a wider variety of malware families. AppRiver has been tracking Eternal Blue showing up regularly in malware samples targeting SMBs. The hacker can then easily email a document filled with malware and ask the recipient to take a look.

Risk 182

Risk Cyber Risk Cyber threats Banking 182

Security Affairs

MARCH 19, 2019

New malware in gang’s arsenal. In January 2019, Group-IB specialists obtained information about previously unknown malware sample used in this attack, dubbed by Group-IB RATv3.ps The malware spreader as part of this campaign was primarily aimed at collecting information from the victim’s computer according to various commands.

Banking 79

Banking Government Passwords Marketing 79

Security Affairs

APRIL 8, 2019

This data comes not only from the analysis of underground forums and phishing websites, but also from the analysis of cybercriminals’ infrastructure (including but not limited to C&Cs) and malware disassembling. According to Group-IB’s annual Hi-Tech Crime Trends 2018 report, on average, from June 2017 to August 2018, the details of 1.8

Artificial Intelligence 64

Artificial Intelligence Government Banking Advertising 64

SecureList

FEBRUARY 15, 2021

Agentb malware family. Contact us to lose your money or account! In 2020, Bitcoin blackmailers stuck to their old scheme, demanding that their victims transfer money to a certain account and threatening adversity for failure to meet their demands. The most frequent targets of phishing attacks were online stores (18.12

Phishing 136

Phishing Malware Scams Accountability 136

SecureList

FEBRUARY 16, 2023

For example, one website offered users to obtain a COVID vaccination certificate by entering their British National Health Service (NHS) account credentials. Those who fell for the trick could lose access to their accounts, have their bank card details stolen, or waste the money they wanted to spend on the dirt-cheap item.

Phishing 90

Phishing Scams Accountability Energy and Utilities 90

SecureList

FEBRUARY 9, 2022

The most common malware family found in attachments were Agensla Trojans. The subject of investments gained significant relevance in 2021, with banks and other organizations actively promoting investment and brokerage accounts. Hurry up and lose your account: phishing in the corporate sector. In 2021: 56% of e-mails were spam.

Phishing 65

Phishing Scams Accountability Banking 65

SecureList

NOVEMBER 17, 2021

The Israeli Defense Forces (IDF) have claimed that threat actors have been using catfishing to lure Israeli soldiers into installing spyware. On September 24, the EU issued a statement regarding a disinformation campaign called “Ghostwriter”, ongoing since March 2017, intended to discredit NATO.

Mobile 128

Mobile Surveillance Ransomware Government 128

Krebs on Security

JANUARY 14, 2019

Kaye launched the attack using a botnet powered by Mirai , a malware strain that enslaves hacked Internet of Things (IoT) devices like poorly-secured Internet routers and Web-based cameras for use in large-scale cyberattacks. Daniel Kaye , an Israel-U.K. to face charges there.

DDOS 191

DDOS Internet Internet Spyware 191

SecureList

NOVEMBER 18, 2022

Rootkits are malware implants that are installed deep in the operating system. However, on one of the infected machines, we found malware that we think is probably related to CosmicStrand. This malware creates a user named “aaaabbbb” in the operating system with local administrator rights.

Malware 100

Malware Computers and Electronics Adware Cryptocurrency 100

SecureList

JULY 27, 2023

The most remarkable findings Early in June, we issued an early warning of a long-standing campaign that we track under the name Operation Triangulation , involving a previously unknown iOS malware platform distributed via zero-click iMessage exploits. Kaspersky employees were also affected by this threat.

Malware 84

Malware Government Phishing Social Engineering 84

SecureList

NOVEMBER 1, 2021

Accordingly, the Euro 2020 championship was used by scammers as bait to hijack accounts on the major gaming portal belonging to Japanese gaming giant Konami. If they entered their credentials, the attackers took over their account and the “bonus” evaporated into thin air.

Phishing 87

Phishing Scams Accountability Computers and Electronics 87

SecureList

MAY 3, 2021

In actual fact, scanning the code resulted in a data leak, money theft or device infection, if it contained a link to a web page with malware. The link redirected them to a phishing page requesting their Microsoft account credentials. The link also required entering corporate account credentials. Intrigue: emails from strangers.

Phishing 102

Phishing Banking Accountability Computers and Electronics 102

SecureList

AUGUST 5, 2021

In Q2 2021, corporate accounts continued to be one of the most tempting targets for cybercriminals. A fake notification about a Microsoft Teams meeting or a request to view an important document traditionally takes the victim to a phishing login page asking for corporate account credentials. Quarterly highlights. The corporate sector.

Phishing 116

Phishing Banking Scams Computers and Electronics 116

Security Affairs

APRIL 28, 2024

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cybercrime 96

Cybercrime Spyware Data breaches Antivirus 96

SecureList

OCTOBER 26, 2021

Following this, they were tricked into downloading previously unknown malware. The backdoor, dubbed Tomiris, bears a number of similarities to the second-stage malware, Sunshuttle (aka GoldMax), used by DarkHalo last year. ShadowPad is a highly sophisticated, modular cyberattack platform that APT groups have used since 2017.

Malware 140

Malware Government Surveillance Spyware 140

SecureList

MARCH 7, 2024

To get access to the content (or contest), phishing sites prompted the victim to sign in to one of their gaming accounts. If the victim entered their credentials on the phishing form, the account was hijacked. The information could later be used to steal both funds from victims’ accounts and their identities.

Phishing 95

Phishing Scams Cryptocurrency Accountability 95

Herjavec Group

AUGUST 26, 2021

They hack into their teacher’s account and leave messages making fun of him. Air Force research facility, discover a password “sniffer” has been installed onto their network, compromising more than 100 user accounts. After being released in 2003, he uses WiFi to commit attacks, program malware and steal credit card information.

Cybercrime 135

Cybercrime Computers and Electronics Banking Hacking 135