Security Affairs

OCTOBER 30, 2023

Researchers from Kaspersky discovered a sophisticated malware, dubbed StripedFly, that remained under the radar for five years masquerading as a cryptocurrency miner. Further analysis revealed that the malware has been used since at least 2017. The malicious code has a complex modular structure that supports both Linux and Windows.

Malware 118

Malware Cryptocurrency Ransomware Hacking 118

Security Affairs

JANUARY 2, 2022

The cyberattacks against the cryptocurrency industry are a profitable business for threat actors, according to the experts, $12.1 billion worth of cryptocurrencies have been stolen in the last decade. “Cryptocurrency crime stands in direct proportion to the size of the cryptocurrency market. Threat actors stole $3.18

Cryptocurrency 104

Cryptocurrency Scams Marketing Hacking 104

Security Affairs

DECEMBER 22, 2022

billion worth of cryptocurrency and other virtual assets in the past five years. billion) in cryptocurrency and other virtual assets in the past five years. The Government of Pyongyang focuses on crypto hacking to fund its military program following harsh U.N. million in cryptocurrency through this program. 380 billion.

Cryptocurrency 127

Cryptocurrency Cybercrime Media Government 127

Security Affairs

JUNE 20, 2019

Researchers discovered that recently patched Firefox zero-day (CVE-2019-11707) has been exploited to deliver Windows and Mac malware to cryptocurrency exchanges. According to Martin, other cryptocurrency organizations were hit by similar attacks. SecurityAffairs – CVE-2019-11707, hacking). ” reported SecurityWeek. .”

Cryptocurrency 73

Cryptocurrency Malware Advertising Passwords 73

Security Affairs

AUGUST 30, 2020

The US DoJ has filed a civil forfeiture complaint with the intent to seize control over 280 Bitcoin and Ethereum accounts that are believed to be holding funds which are the proceeds of hacking campaigns conducted by North Korea-linked APT groups against two cryptocurrency exchanges. In the second attack, threat actors stole $2.5

Cryptocurrency 115

Cryptocurrency Hacking Advertising Accountability 115

Security Affairs

AUGUST 7, 2018

Group-IB researchers have investigated user data leaks from cryptocurrency exchanges and has analyzed the nature of these incidents. In 2017, when cryptocurrencies were gaining momentum, their record-breaking capitalization and a spike in Bitcoin’s exchange rate led to dozens of attacks on cryptocurrency services.

Cryptocurrency 48

Cryptocurrency Passwords Authentication Accountability 48

Security Affairs

JUNE 5, 2019

A new piece of malware appeared in the threat landscape, dubbed BlackSquid it targets web servers with several exploits to deliver cryptocurrency miners. Security experts at Trend Micro have discovered a new Monero cryptomining miner, dubbed BlackSquid, that is targeting web servers, network drives, and removable drives.

Cryptocurrency 62

Cryptocurrency Malware Advertising Hacking 62

Security Affairs

OCTOBER 16, 2023

” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, DarkGate ) The post DarkGate malware campaign abuses Skype and Teams appeared first on Security Affairs. . ” concludes the report.

Malware 105

Malware Cryptocurrency Accountability Cybercrime 105

Security Affairs

FEBRUARY 2, 2024

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, PurpleFox malware )

Malware 97

Malware Internet Internet DDOS 97

Security Affairs

FEBRUARY 17, 2021

Department of Justice charged Park over WannaCry and 2014 Sony Pictures Entertainment Hack. billion of money and cryptocurrency from financial institutions and companies, to create and deploy multiple malicious cryptocurrency applications, and to develop and fraudulently market a blockchain platform.” sanctions.

Cryptocurrency 73

Cryptocurrency Banking Hacking Ransomware 73

Security Affairs

OCTOBER 26, 2022

government computers; stolen account login credentials for social media accounts and bank accounts; stolen credit card information; stolen personally identifiable information; illegal drugs; botnets; and computer hacking tools.” ’s National Crime Agency (NCA) in February 2017. government agencies,” said U.S.

Marketing 86

Marketing Government Hacking Accountability 86

Security Affairs

JULY 21, 2022

The gang focuses on infecting cloud hosts to deploy cryptocurrency miners by exploiting known vulnerabilities and conducting brute-force attacks. PwnRig cryptocurrency miner execution. SecurityAffairs – hacking, 8220 Gang ). The post 8220 Gang Cloud Botnet infected 30,000 host globally appeared first on Security Affairs.

Cryptocurrency 89

Cryptocurrency Malware Internet Internet 89

Security Affairs

OCTOBER 19, 2020

Alexander Vinnik allegedly headed the Bitcoin exchange BTC-e, he is charged with different hacking crimes in Russia, France, and the United States. In 2017, Greek Police arrested the Russian national Alexander Vinnik and they accused the man of running the BTC-e Bitcoin exchange to launder more than US$4bn worth of the cryptocurrency.

Advertising 116

Advertising Cybercrime Hacking Cryptocurrency 116

Security Affairs

JANUARY 14, 2022

The North Korea-linked APT group BlueNoroff has been spotted targeting cryptocurrency startups with fake MetaMask browser extensions. The North Korea-linked APT group BlueNoroff has been spotted targeting cryptocurrency startups with fake MetaMask browser extensions. SecurityAffairs – hacking, BlueNoroff APT ).

Cryptocurrency 92

Cryptocurrency Banking Passwords Malware 92

Security Affairs

JUNE 17, 2021

Koshkin and his co-conspirators claimed that their services could be used for malware such as botnets, remote-access trojans, keyloggers, credential stealers and cryptocurrency miners.” Koshkin was arrested in California in September 2019 , while Tsurkan was arrested in April 2017. SecurityAffairs – hacking, Kelihos).

Antivirus 101

Antivirus Malware Cryptocurrency Software 101

Security Affairs

NOVEMBER 22, 2023

Kinsing actors often exploited the PHPUnit vulnerability ( CVE-2017-9841 ) and it engaged in fully automated attacks as part of mining cryptocurrency. Recently, observers noticed Kinsing actors exploiting vulnerable Openfire servers.

Cryptocurrency 95

Cryptocurrency Hacking Risk Cybersecurity 95

Security Affairs

DECEMBER 8, 2020

Alexander Vinnik allegedly headed the Bitcoin exchange BTC-e, he is charged with different hacking crimes in Russia, France, and the United States. In 2017, Greek Police arrested the Russian national Alexander Vinnik and they accused the man of running the BTC-e Bitcoin exchange to launder more than US$4bn worth of the cryptocurrency.

Cryptocurrency 91

Cryptocurrency Hacking Ransomware Cybercrime 91

Security Affairs

JUNE 22, 2021

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. SecurityAffairs – hacking, botnet). The post DirtyMoe botnet infected 100,000+ Windows systems in H1 2021 appeared first on Security Affairs. Pierluigi Paganini.

DNS 127

DNS Cryptocurrency Internet Internet 127

Security Affairs

FEBRUARY 18, 2021

PaloAlto Network warns of the WatchDog botnet that uses exploits to take over Windows and Linux servers and mine cryptocurrency. Security researchers at Palo Alto Networks uncovered a cryptojacking botnet, tracked as WatchDog, that is targeting Windows and Linux systems. Oracle WebLogic Server CVE-2017-10271 – versions 10.3.6.0.0,

Cryptocurrency 140

Cryptocurrency Hacking Accountability Software 140

Security Affairs

JANUARY 30, 2022

The US agency received over 95,000 reports from US consumers victims of social media frauds, this marks an 18-fold increase over 2017 reported losses and more than double compared to 2020. Scammers tricked people into sending money, often cryptocurrency, on promises of huge returns. SecurityAffairs – hacking, social media frauds).

Media 86

Media Scams Cryptocurrency Marketing 86

Security Affairs

NOVEMBER 4, 2023

Kinsing actors often exploited the PHPUnit vulnerability ( CVE-2017-9841 ) and it engaged in fully automated attacks as part of mining cryptocurrency. Recently, Kinsing actors were observed exploiting vulnerable Openfire servers. ” concludes the report that also includes Indicators of Compromise (IoCs).

Architecture 98

Architecture Cryptocurrency Hacking Cybercrime 98

Security Affairs

OCTOBER 31, 2022

In the early afternoon of Friday 12 May 2017, the media broke the news of a global computer security attack carried out through a malicious code capable of encrypting data residing in information systems and demanding a ransom in cryptocurrency to restore them, the Wannacry ransomware. Twitter @Slvlombardo.

Malware 97

Malware Computers and Electronics Encryption Ransomware 97

Security Affairs

JUNE 4, 2021

Talos experts noticed that a version released on May 18 included Python versions of EternalBlue ( CVE-2017-0144 ) and EternalRomance ( CVE-2017-0147 ) exploits with a Windows download command line as the payload. SecurityAffairs – hacking, Necro Python bot). ” continues the post. Pierluigi Paganini.

Malware 113

Malware Passwords DDOS IoT 113

Security Affairs

AUGUST 26, 2019

The Binance cryptocurrency exchange revealed that leaked users’ KYC data were obtained by hackers from a third-party vendor. In July, the hack of the Binance cryptocurrency exchange made the headlines, hackers stole$41 Million worth of Bitcoin (over 7,000 bitcoins) from Binance. million at the time of the hack).

Cryptocurrency 81

Cryptocurrency Hacking Advertising Accountability 81

Security Affairs

JANUARY 31, 2021

The malware is an evolution of a Monero cryptocurrency miner that was first spotted by Unit 42 researchers in 2019. In our analysis, we found Pro-Ocean targeting Apache ActiveMQ (CVE-2016-3088), Oracle WebLogic (CVE-2017-10271) and Redis (unsecure instances).” SecurityAffairs – hacking, Pro-Ocean). Pierluigi Paganini.

Malware 83

Malware Cryptocurrency Firewall Cybercrime 83

Security Affairs

JUNE 13, 2021

SecurityAffairs – hacking, newsletter). The post Security Affairs newsletter Round 318 appeared first on Security Affairs. million customers impacted. million customers impacted. million customers impacted. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Data breaches 61

Data breaches Hacking Cryptocurrency Scams 61

Security Affairs

AUGUST 6, 2023

The APT group has been active since at least 2017, its campaigns involve persistent phishing and credential theft campaigns leading to intrusions and data theft. ” Since at least December 17, 2022, the group has used a new naming pattern for its domains containing keywords related to information technology and cryptocurrency.

Phishing 77

Phishing Social Engineering Authentication Cryptocurrency 77

Security Affairs

APRIL 26, 2020

SecurityAffairs – newsletter, hacking). The post Security Affairs newsletter Round 261 appeared first on Security Affairs. Are Maze operators behind the attack on the IT services giant Cognizant? Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Spyware 94

Spyware Hacking Advertising Antivirus 94

Security Affairs

SEPTEMBER 13, 2019

The US Treasury placed sanctions on three North Korea-linked hacking groups, the Lazarus Group, Bluenoroff, and Andarial. The US Treasury sanctions on three North Korea-linked hacking groups, the Lazarus Group , Bluenoroff , and Andarial. SecurityAffairs – North Korea, hacking). ” continues the US Treasury. .

Cyber Attacks 81

Cyber Attacks Cryptocurrency Hacking Banking 81

Security Affairs

MARCH 21, 2022

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. SecurityAffairs – hacking, botnet). The post DirtyMoe modules expand the bot using worm-like techniques appeared first on Security Affairs. Pierluigi Paganini.

Malware 73

Malware Passwords DDOS Internet 73

Security Affairs

MAY 13, 2020

Now, USCYBERCOM shares five more samples, the older one dated 2017 while the rest has been created in 2018. COPPERHEDGE, aka Manuscrypt , has been employed in attacks on cryptocurrency exchanges. SecurityAffairs – North Korea, hacking). The samples belong to the COPPERHEDGE, TAINTEDSCRIBE, and PEBBLEDASH malware families.

Malware 116

Malware Advertising Government Cryptocurrency 116

ForAllSecure

SEPTEMBER 29, 2022

And the rest, they say is this as a reporter, I was in a position to learn as I wrote about information security. And, as you'll hear, in some cases, they'll even fly you around the world to learn how to hack. Vamosi: Welcome to the hacker mind that original podcast from for all secure. But what if you're on your own?

Hacking 40

Hacking Cryptocurrency Software InfoSec 40

Security Affairs

OCTOBER 26, 2020

The primary purpose of the KashmirBlack botnet is to abuse resources of compromised systems for cryptocurrency mining and redirecting a site’s legitimate traffic to spam pages. SecurityAffairs – hacking, KashmirBlack botnet). Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Advertising 114

Advertising Cryptocurrency Internet Internet 114

Security Affairs

APRIL 16, 2020

government is also offering a monetary reward of up to $5 million to anyone who can provide ‘information about the activities carried out by North Korea-linked APT groups. The offer also includes information about past hacking campaigns. SecurityAffairs – North Korea, hacking). ” states the advisory.

Cyber threats 109

Cyber threats Banking Government Advertising 109

Security Affairs

NOVEMBER 6, 2020

“The seizure represents the largest seizure of cryptocurrency in the history of the Department of Justice.” filed a civil complaint to forfeit the funds, this is the largest seizure of cryptocurrency funds the Department of Justice has ever made. SecurityAffairs – hacking, Silk Road). ” On November 5, the U.S.

Cryptocurrency 61

Cryptocurrency Advertising Marketing Government 61

Security Affairs

FEBRUARY 27, 2021

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. In 2017, hackers stole some personal information belonging to T-Mobile customers by exploiting a well-known vulnerability. SecurityAffairs – hacking, Data breach).

Mobile 91

Mobile Telecommunications Data breaches Identity Theft 91

SecureWorld News

MAY 27, 2021

Significantly, improper use incidents—which result from a violation of an organization's acceptable use policies, such as installing unapproved software or viewing inappropriate material—increased the most, from 249 in 2017 to 1,103 in 2020, a 343 percent growth. 6 key areas where NASA's information security is failing.

Cyber Risk 63

Cyber Risk Risk Architecture Cyber threats 63