Security Affairs

NOVEMBER 28, 2022

Several Ukrainian organizations were hit by Russia-based RansomBoggs Ransomware in the last week, ESET reports. Researchers from ESET observed multiple attacks involving a new family of ransomware, tracked as RansomBoggs ransomware, against Ukrainian organizations. MSIL/Filecoder.RansomBoggs.A

Ransomware 122

Ransomware Encryption Telecommunications Malware 122

Security Affairs

AUGUST 6, 2023

In June a ransomware attack hit the Colorado Department of Higher Education (CDHE), now the organization disclosed a data breach. CDHE discovered the ransomware attack on June 19, 2023, it immediately launched an investigation into the security breach with the help of third-party specialists.

Education 85

Education Data breaches Ransomware Hacking 85

Security Affairs

DECEMBER 11, 2022

Truebot has been active since 2017 and some researchers linked it to the Silence Group , while a recent investigation linked it to threat actor TA505 (aka Evil Corp). “Post-compromise activity included data theft and the execution of Clop ransomware.” ” reads the analysis published by Talos. Pierluigi Paganini.

Ransomware 123

Ransomware Malware Internet Internet 123

Security Affairs

MARCH 29, 2020

The source code of the infamous Dharma ransomware is now available for sale on two Russian-language hacking forums. The source code of one of the most profitable ransomware families, the Dharma ransomware , is up for sale on two Russian-language hacking forums. ” concluded ZDNet.

Ransomware 110

Ransomware Hacking Advertising Malware 110

Security Affairs

MAY 6, 2024

Alexander Vinnik , a Russian national, pleaded guilty to conspiracy to commit money laundering for his involvement in operating the cryptocurrency exchange BTC-e from 2011 to 2017. In July 2017 law enforcement shut down the virtual currency exchange.

Cryptocurrency 98

Cryptocurrency Computers and Electronics Identity Theft Hacking 98

Security Affairs

AUGUST 13, 2021

Another ransomware gang, the Vice Society ransomware operators, is using Windows print spooler PrintNightmare exploits in its attacks. The Vice Society ransomware operators are actively exploiting Windows print spooler PrintNightmare vulnerability in their attacks against Windows servers. The flaw received a CVSS score of 7.3,

Ransomware 123

Ransomware Backups Education Malware 123

Security Affairs

MARCH 14, 2024

The ransomware attack that hit the systems of Nissan Oceania in December 2023 impacted roughly 100,000 individuals. Nissan immediately notified the Australian Cyber Security Centre and the New Zealand National Cyber Security Centre. In December 2017, Nissan Finance Canada was hacked , personal information of 1.13

Data breaches 96

Data breaches Identity Theft Financial Services Cybercrime 96

Security Affairs

OCTOBER 9, 2022

Three days later, Cybernews researchers revisited the database to see whether it had been closed, and found it had been hit with ransomware. The oldest entry goes as far back as 2017, and it is unclear how long this instance had been open prior to the Cybernews discovery. The 3.9GB-strong database held information from 2017 onwards.

Ransomware 97

Ransomware Passwords Encryption Identity Theft 97

Security Affairs

MAY 21, 2019

A variant of the Satan ransomware recently observed includes exploits to its arsenal and targets machines leveraging additional flaws. Experts at FortiGuard Labs have discovered a new variant of the Satan ransomware that includes new exploits to its portfolio and leverages additional vulnerabilities to infect as many machines as possible.

Ransomware 82

Ransomware Advertising Malware Encryption 82

Security Affairs

OCTOBER 16, 2023

The researchers speculate the originating accounts of the instant messaging applications were compromised through the leaked credentials available on cybercrime forums. ” concludes the report.

Malware 109

Malware Cryptocurrency Accountability Cybercrime 109

Security Affairs

OCTOBER 3, 2023

Like all ransomware, this is a type of malware that, once introduced into an organization, encrypts the data and then requires the victim to pay a ransom in order to decrypt it. ” The analyzed attack spread the ransomware Lockbit 3.0 ” The analyzed attack spread the ransomware Lockbit 3.0 ORIGINAL_extension].specific/different

Ransomware 123

Ransomware Encryption Technology Backups 123

Security Affairs

DECEMBER 22, 2022

. “South Korea’s main spy agency, the National Intelligence Service, said North Korea’s capacity to steal digital assets is considered among the best in the world because of the country’s focus on cybercrimes since U.N. economic sanctions were toughened in 2017 in response to its nuclear and missile tests.” Citing the U.S.

Cryptocurrency 130

Cryptocurrency Cybercrime Media Government 130

Security Affairs

APRIL 10, 2023

Iran-linked APT group MERCURY is behind destructive attacks on hybrid environments masquerading as a ransomware operation. Threat actors masqueraded the attacks as a standard ransomware operation. ” DEV-1084 presented itself as cybercrime group likely as an attempt to hide its real motivation of a nation-state actor. .

Ransomware 88

Ransomware Cybercrime VPN Education 88

Security Affairs

OCTOBER 19, 2020

The Russian citizen Alexander Vinnik goes on trial in Paris for having defrauded nearly 200 victims across the world of 135 million euros using ransomware. The Russian man Alexander Vinnik goes on trial in Paris for having defrauded nearly 200 victims across the world of 135M euros using ransomware. Pierluigi Paganini.

Advertising 120

Advertising Cybercrime Hacking Cryptocurrency 120

Security Affairs

JULY 15, 2019

Some of the crooks behind the Dridex Trojan have split from the gang and released a forked version of the BitPaymer ransomware dubbed DoppelPaymer. Cybercrime gang tracked as TA505 has been active since 2014 and focusing on Retail and Banking industries. ” Now experts found a new variant of the ransomware tracked as DoppelPaymer.

Ransomware 74

Ransomware Encryption Advertising Malware 74

Security Affairs

NOVEMBER 12, 2019

The analysis of a malicious email revealed a possible raising interest of the TA505 cybercrime gang in system integrator companies. The domain validtree.com is registered through namecheap.com on 2017-12-07T15:55:27Z but recently renewed on 2019-10-16T05:35:18Z. I am a computer security scientist with an intensive hacking background.

Cybercrime 42

Cybercrime Computers and Electronics Penetration Testing Malware 42

Security Affairs

NOVEMBER 30, 2020

Delaware County, Pennsylvania opted to pay a $500,000 ransom after it was the victim of a DoppelPaymer ransomware attack last weekend. During the last weekend Delaware County, Pennsylvania, was the victim of a DoppelPaymer ransomware attack that brought down part of its network. ” reported BleepingComputer.

Computers and Electronics 104

Computers and Electronics Ransomware Insurance Cybercrime 104

Security Affairs

DECEMBER 12, 2021

. “A Russian national was sentenced today to 48 months in prison for operating a “crypting” service used to conceal the Kelihos malware from antivirus software, which enabled hackers to systematically infect approximately hundreds of thousands of victim computers around the world with malicious software, including ransomware.”

Antivirus 87

Antivirus Malware Cybercrime Cyber threats 87

Security Affairs

OCTOBER 31, 2022

Reflecting on the Wannacry ransomware attack, which is the lesson learnt e why most organizations are still ignoring it. The spread of this ransomware was considered to be the worst cyber attack in terms of contamination rate and scope, putting public offices and companies (especially healthcare facilities) out of operation.

Malware 99

Malware Computers and Electronics Encryption Ransomware 99

Krebs on Security

APRIL 15, 2020

The Coronavirus has prompted thousands of information security professionals to volunteer their skills in upstart collaborative efforts aimed at frustrating cybercriminals who are seeking to exploit the crisis for financial gain. I am literally seeing phishing messages in every language known to man.”

Cybersecurity 301

Cybersecurity Cyber threats Government Phishing 301

Security Affairs

JUNE 13, 2021

Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the international press subscribe here. million customers impacted. million customers impacted.

Data breaches 62

Data breaches Hacking Cryptocurrency Scams 62

Security Affairs

JULY 1, 2023

The LockBit ransomware gang claims to have hacked Taiwan Semiconductor Manufacturing Company (TSMC). The LockBit ransomware group this week claimed to have hacked the Taiwan Semiconductor Manufacturing Company ( TSMC ) and $70 million ransom. ” reads the announcement published by Lockbit operators on their leak site.

Manufacturing 81

Manufacturing Ransomware Hacking Security Awareness 81

Security Affairs

DECEMBER 8, 2020

The man went on trial in Paris for having defrauded nearly 200 victims across the world of 135M euros using ransomware. The French court acquitted Vinnik of charges of extortion and association with a cybercrime organization. Vinnik is also accused to be responsible for the failure of the Japanese bitcoin exchange Mt.

Cryptocurrency 93

Cryptocurrency Hacking Ransomware Cybercrime 93

Security Affairs

JUNE 5, 2023

Truebot has been active since 2017 and some researchers linked it to the Silence Group , while a recent investigation linked it to threat actor TA505 (aka Evil Corp). When an organization is infected with this malware, it can quickly escalate to become a bigger infection, similar to how ransomware spreads throughout a network.”

Malware 78

Malware Ransomware Hacking Software 78

Security Affairs

NOVEMBER 19, 2019

Ransomware accounted for over half of all malicious mailings in H1 2019, Troldesh aka Shade being the most popular tool among cybercriminals. The report’s findings reveal that email remains the main method of delivering ransomware, banking Trojans, and backdoors. The revival of ransomware. Pierluigi Paganini.

Ransomware 72

Ransomware Antivirus Malware Banking 72

Security Affairs

AUGUST 14, 2021

AlphaBay was active between 2014 and June 2017, law enforcement seized the marketplace and arrested the administrator Alexandre Cazes (aka “Alpha02/Admin”), who died by suicide in prison in Thailand. The revamped marketplace also bans posts about illicit drugs, COVID-19 vaccines, and ransomware.

Marketing 107

Marketing Ransomware Hacking Banking 107

Security Affairs

JULY 27, 2019

Marcus Hutchins made the headlines after discovering the “ kill switch ” that halted the outbreak of the WannaCry ransomware. In August 2017, he was arrested in Las Vegas after attending the Def Con hacking conference and was detained by the FBI in the state of Nevada. SecurityAffairs – Marcus Hutchins, cybercrime).

Banking 73

Banking Malware Advertising Cybercrime 73

Security Affairs

JULY 23, 2020

The notorious Lazarus Group is using a new multi-platform malware framework, dubbed MATA, in attacks aimed at organizations worldwide, to deploy Kaspersky researchers observed that MATA was used by the threat actors to distribute ransomware (i.e. VHD ransomware) and steal customer databases. ” concludes the report.

Malware 100

Malware Ransomware Advertising Encryption 100

Security Affairs

JULY 29, 2019

The spike in the number of encrypted malware is the result of several factors, such as Ransomware as a Service (RaaS) and open-source malware kits. Ransomware continues to be a profitable business for the cybercrime ecosystem and the recent wave of attacks against US municipalities demonstrates it. .” continues the report.

IoT 85

IoT Encryption Malware Advertising 85

Security Affairs

AUGUST 24, 2020

The attackers used Dharma ransomware and a mix of publicly available tools to target companies in Russia, Japan, China, and India. Group-IB researchers have recently observed increased activities around Dharma ransomware distribution. In some attacks, they attempted to elevate privileges using exploit for CVE-2017-0213.

Threat Detection 88

Threat Detection Ransomware Advertising Cybercrime 88

Security Affairs

APRIL 20, 2023

The group is also the author of the NotPetya ransomware that hit hundreds of companies worldwide in June 2017. Google TAG also reported the malware-based attacks conducted by the group behind Cuba ransomware to distribute RomCom RAT in the networks of the Ukrainian government and military.

Phishing 87

Phishing Education Accountability Telecommunications 87

Security Affairs

JULY 6, 2023

Truebot has been active since 2017 and some researchers linked it to the Silence Group , while a recent investigation linked it to threat actor TA505 (aka Evil Corp). VMware’s Carbon Black Managed Detection and Response (MDR) team observed a surge of TrueBot activity in May 2023.

Malware 85

Malware Cyber threats Phishing Hacking 85

Security Affairs

FEBRUARY 23, 2022

The group is also the author of the NotPetya ransomware that hit hundreds of companies worldwide in June 2017, causing billions worth of damage. Sandworm (aka BlackEnergy and TeleBots) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST).

Malware 92

Malware Firmware Architecture Firewall 92

Security Affairs

OCTOBER 26, 2019

Impact of Privacy & Security Issues in Business Communication. I remember that in early 2017, the business world was hit by ransomware, which felt to them like a speedy bullet shot at their blind spot. The ransomware attack was labeled as WannaCry, which in reality made the victims wanted to cry.

Encryption 46

Encryption Cyber threats Ransomware Cybercrime 46

Security Affairs

APRIL 16, 2020

and UN sanctions, the DPRK has increasingly relied on illicit activities – including cybercrime – to generate revenue for its weapons of mass destruction and ballistic missile programs.” Under the pressure of robust U.S. ” reads the advisory. government refers to as HIDDEN COBRA. ” concludes the advisory.

Cyber threats 111

Cyber threats Banking Government Advertising 111

Security Affairs

FEBRUARY 19, 2019

Group-IB , an international company that specializes in preventing cyberattacks , has conducted high-tech cybercrimes research based on an analysis of responses to information security incidents carried out by Group-IB Incident Response team in 2018. More information can be found here. . Pierluigi Paganini.

Banking 77

Banking Marketing Cybercrime Information Security 77

Security Affairs

JUNE 23, 2020

It’s worth noting that despite the fact that Fxmsp stopped all public activity in late 2019, Group-IB discovered that a European energy company, that he was selling access to, fell victim to a ransomware attack in 2020. Fxmsp took his first steps in the cybercrime scene in September 2016 when he registered on an underground forum, fuckav[.]ru.

Antivirus 85

Antivirus Advertising Hacking Banking 85