CyberSecurity Insiders

JANUARY 3, 2023

Already some have used the OpenAI platform to have ChatGPT write phishing emails and insert malicious links. The emails don’t have the usual spelling, grammar, and syntax errors that today’s phishing messages composed by non-native-English speakers tend to contain – errors that serve as a tip-off to recipients.

Technology 135

Technology Cybercrime Artificial Intelligence Government 135

Krebs on Security

MAY 16, 2019

The locations of alleged GozNym cybercrime group members. According to the indictment, the GozNym network exemplified the concept of ‘cybercrime as a service,’ in that the defendants advertised their specialized technical skills and services on underground, Russian-language, online criminal forums. Source: DOJ.

Cybercrime 172

Cybercrime Banking Small Business Computers and Electronics 172

Malwarebytes

JUNE 8, 2021

Sometimes, it’s used even if an attack being discussed is a basic phish, or maybe some very generic malware. A Latvian woman has been charged for their alleged role in a transnational cybercrime organisation. As touched on above, the group hired experts in a variety of cybercrime fields. What happened this week, you ask?

Cybercrime 106

Cybercrime Malware Banking Phishing 106

Security Affairs

NOVEMBER 17, 2022

A China-based financially motivated group, tracked as Fangxiao, is behind a large-scale phishing campaign dating back as far as 2019. Researchers from Cyjax reported that a China-based financially motivated group, dubbed Fangxiao, orchestrated a large-scale phishing campaign since 2017. SecurityAffairs – hacking, phishing).

Phishing 109

Phishing Adware Retail Malware 109

Security Affairs

APRIL 25, 2019

Experts at Proofpoint discovered that free code repositories on GitHub have been abused since at least 2017 to host phishing websites. Researchers at Proofpoint reported that crooks are abusing free code repositories on GitHub to host phishing websites and bypass security defenses. SecurityAffairs – GitHub, cybercrime).

Phishing 87

Phishing Advertising Accountability Cybercrime 87

Tech Republic Security

APRIL 27, 2017

According to Verizon's 2017 Data Breach Investigations Report, espionage-related attacks are growing in popularity, with malware and phishing still go-to tools for hackers as well.

Cybercrime 142

Cybercrime Data breaches Phishing Malware 142

SecureList

OCTOBER 20, 2021

Having been in the field for so long, we have witnessed some major changes in the cybercrime world’s modus operandi. This report shares our insights into the Russian-speaking cybercrime world and the changes in how it operates that have happened in the past five years.

Cybercrime 137

Cybercrime Banking Malware Ransomware 137

Security Affairs

NOVEMBER 16, 2018

According to Group-IB’s report findings, Asia is one of the most actively attacked regions in the world, the company presented latest cybercrime trends. In 2017-2018 hackers’ interest in cryptocurrency exchanges ramped up. New cybercrime groups are also expected to start operations in Asia and Latin America. Attacks on Crypto.

Cybercrime 85

Cybercrime Hacking Banking Phishing 85

Malwarebytes

MARCH 29, 2022

We’ve also observed several different wipers and cybercrime groups such as FormBook using the same tactics. These methods include using documents that exploit CVE-2017-0199 and CVE-2021-40444, macro-embedded documents, and executables. Figure 1: Phishing template. Figure 2: Phishing template. Victimology.

Phishing 71

Phishing Education Telecommunications Technology 71

Krebs on Security

AUGUST 25, 2023

And there are indications that fraudsters may already be exploiting the stolen data in phishing attacks. SIM-swapping groups will often call employees on their mobile devices, pretend to be someone from the company’s IT department, and then try to get the employee to visit a phishing website that mimics the company’s login page.

Mobile 192

Mobile Cyber Risk Cryptocurrency Data breaches 192

Krebs on Security

JULY 20, 2021

.” Over the course of his 15-year cybercriminal career, Severa would emerge as a pivotal figure in the cybercrime underground , serving as the primary moderator of a spam community that spanned multiple top Russian cybercrime forums. Levashov was arrested in 2017 while in Barcelona, Spain with his family.

Antivirus 286

Antivirus Cybercrime Identity Theft Scams 286

Security Affairs

NOVEMBER 25, 2020

Group-IB supported an INTERPOL-led operation Falcon targeting business email compromise cybercrime gang from Nigeria, dubbed TMT. Group-IB , a global threat hunting and intelligence company, supported an INTERPOL-led operation Falcon targeting business email compromise (BEC) cybercrime gang from Nigeria, dubbed TMT by Group-IB.

Cybercrime 124

Cybercrime Phishing Social Engineering Spyware 124

Krebs on Security

AUGUST 19, 2020

The COVID-19 epidemic has brought a wave of email phishing attacks that try to trick work-at-home employees into giving away credentials needed to remotely access their employers’ networks. The employee phishing page bofaticket[.]com. Image: urlscan.io.

Phishing 354

Phishing VPN Social Engineering Media 354

CyberSecurity Insiders

NOVEMBER 8, 2022

BitDefender Mobile Security feature assists customers in protecting against malware spread and phishing scams. NOTE 2 – Bitdefender has been assisting Europol European Cybercrime Centre in solving cyber crime from the year 2017 and is also assisting Interpol from the year 2020.

Mobile 101

Mobile Antivirus VPN IoT 101

Security Affairs

APRIL 8, 2022

A Ukrainian man was sentenced in the US to 5 years in prison for his criminal activity in the cybercrime group FIN7. for high-level hacking activity in the cybercrime group FIN7 (aka Carbanak Group and the Navigator Group). Iarmak is the third member of the FIN7 cybercrime group to be sentenced in the U.S. in May 2020.

Cybercrime 107

Cybercrime Hacking Software Phishing 107

Krebs on Security

SEPTEMBER 6, 2021

In May 2015, KrebsOnSecurity briefly profiled “ The Manipulaters ,” the name chosen by a prolific cybercrime group based in Pakistan that was very publicly selling spam tools and a range of services for crafting, hosting and deploying malicious email. One of several current Fudtools sites run by The Manipulaters.

Software 230

Software Phishing Cybercrime Accountability 230

Krebs on Security

JULY 25, 2018

The upshot of this weakness is that cyber criminals could harvest the data and use it in targeted phishing campaigns that spoof LifeLock’s brand. According to LifeLock’s marketing literature as of January 2017, the company has more than 4.5 That’s a pretty sharp spear for my spear phishing right there.

Identity Theft 193

Identity Theft Consumer Protection Phishing Marketing 193

Security Affairs

JANUARY 7, 2023

Cyber researchers warn of a modified Zoom app that was used by threat actors in a phishing campaign to deliver the IcedID Malware. Cyble researchers recently uncovered a phishing campaign targeting users of the popular video conferencing and online meeting platform Zoom to deliver the IcedID malware. ” concludes the report.

Malware 92

Malware Phishing Banking Hacking 92

Security Affairs

AUGUST 3, 2018

Industrial sector hit by a surgical spear-phishing campaign aimed at installing legitimate remote administration software on victims’ machines. Attackers personalized the content of each phishing email reflecting the activity of the target organization and the type of work performed by the employee to whom the email is sent.

Phishing 46

Phishing VPN Passwords Software 46

Security Affairs

JUNE 24, 2020

. “While the group’s key infiltration vector to the exchange is usually through spear-phishing against the corporate network, the executives’ personal email accounts are the first to be targeted.” Online cryptocurrency exchanges are a privileged target for cybercrime groups and nation-state actors.

Cryptocurrency 103

Cryptocurrency Phishing Accountability Passwords 103

Heimadal Security

JUNE 25, 2021

The financial cybercrime world is facing new threats. A 2017 IBM-X-Force Research pointed out a fresh new malware entering the final security domain: the IcedID Banking Trojan. As hackers become more creative day by day, they are also cunning and determined to become pros.

Banking 55

Banking Cybercrime Mobile Malware 55

Krebs on Security

APRIL 15, 2020

. “The group is also using its web of contacts in internet infrastructure providers to squash garden-variety phishing attacks and another financial crime that is using the fear of COVID-19 or the desire for information on it to trick regular internet users,” wrote Reuters’ Joe Menn. ” SURVIVING THE PANDEMIC.

Cybersecurity 295

Cybersecurity Cyber threats Government Phishing 295

The Last Watchdog

SEPTEMBER 7, 2022

They could be on the other side of the globe, part of a cybercrime regime that will never be discovered, much less brought to justice. Likewise, lookalike and spoofed web domains and well-crafted phishing emails now easily trick employees into thinking they’re dealing with trustworthy sources. But the situation isn’t hopeless.

Ransomware 124

Ransomware Education Financial Services Phishing 124

Security Affairs

MARCH 17, 2020

FireEye compiled the report using data from dozens of ransomware infections that it has investigated from 2017 to 2019. Experts also analyzed initial infection vectors across multiple ransomware incidents, including RDP, phishing attacks, and drive-by-download of malware. SecurityAffairs – ransomware attacks, cybercrime).

Ransomware 115

Ransomware Advertising Malware Cybercrime 115

Security Affairs

APRIL 20, 2023

The researchers from Google TAG are warning of Russia-linked threat actors targeting Ukraine with phishing campaigns. Russia-linked threat actors launched large-volume phishing campaigns against hundreds of users in Ukraine to gather intelligence and aimed at spreading disinformation, states Google’s Threat Analysis Group (TAG).

Phishing 91

Phishing Education Accountability Telecommunications 91

SecureWorld News

OCTOBER 19, 2021

TAG reported that Iranian-government-backed actors, known as APT35 and by the aliases Rocket Kitten and Charming Kitten, are quickly picking up speed, especially when it comes to implementing slick phishing attacks. Developing advanced phishing techniques to lure victims. Rocket Kitten successfully attacks university website.

Phishing 70

Phishing Authentication Social Engineering Government 70

Krebs on Security

AUGUST 12, 2018

” Organized cybercrime gangs that coordinate unlimited attacks typically do so by hacking or phishing their way into a bank or payment card processor. million from accounts at the National Bank of Blacksburg in two separate ATM cashouts between May 2016 and January 2017.

Banking 212

Banking Accountability Retail Phishing 212

eSecurity Planet

SEPTEMBER 14, 2022

Cybercrime is a growth industry like no other. According to statistics from the FBI’s 2021 Internet Crime Report , complaints to the Internet Crime Complaint Center (IC3) have been rising since 2017. Phishing complaints were reported over 300,000 times in 2021 to IC3, the only Internet crime to crack 100,000+ complaints.

Social Engineering 118

Social Engineering Energy and Utilities Phishing Scams 118

Security Affairs

JUNE 12, 2019

The last time security experts documented the FIN8’s activities was in 2016 and 2017. FireEye documented obfuscation techniques used by the group in June 2017 and the involvement of PUNCHTRACK POS-scraping malware. “It is believed that the malware was deployed as a result of several phishing attempts.”

Hacking 76

Hacking Malware Advertising Retail 76

Security Affairs

AUGUST 24, 2019

Grant West, aka ‘Courvoisier,’ is a hacker that was arrested by the police on September 2017 as result of a two-year-long investigation code-named ‘Operation Draba.’ He predominately used ‘phishing’ email scams to obtain the financial data of tens of thousands of customers. Pierluigi Paganini.

Cryptocurrency 81

Cryptocurrency Scams Cybercrime Phishing 81

Security Affairs

MAY 26, 2022

phishing scam on its Messenger service that had been doing the rounds since at least 2017. Upon further examination, it turned out that thousands of these phishing links had been distributed, through a devious network sprawling across the back channels of the social media platform.

Scams 123

Scams Phishing Media Passwords 123

Security Affairs

OCTOBER 10, 2018

Security firm Group-IB has estimated that in H2 2017-H1 2018 cyber attacks caused $49.4 Group-IB, an international company that specializes in preventing cyber attacks, has estimated that in H2 2017-H1 2018 cyber attacks caused $49.4 In December 2017, Group-IB published the first report on this group: “MoneyTaker: 1.5

Cyber Attacks 85

Cyber Attacks Banking Cyber threats Phishing 85

SiteLock

AUGUST 27, 2021

In Q3 2017, SiteLock discovered alarming cybercrime trends that will likely affect websites for months to come. That’s not all: cybercriminals attempted to compromise more websites in Q3 2017 than in the previous quarter, increasing their attempted attacks by 16 percent. Backdoor Files.

Malware 52

Malware Engineering Phishing Accountability 52

Security Affairs

NOVEMBER 15, 2018

Of course, the CBR does not have anything to do with the phishing campaign – the hackers faked the sender’s address. A spear-phishing campaign set up to look like it was carried out by the Central Bank is a relatively widespread vector of attack among cyber criminals; it has been used by groups such as Buhtrap, Anunak , Cobalt , and Lurk.

Banking 102

Banking Computers and Electronics Phishing Cybercrime 102

Security Affairs

OCTOBER 15, 2018

Group-IB: The online market for counterfeit goods in Russia has reached $1,5 billion, while the number of phishing attacks has surpassed 1,200 daily. billion in 2017, compared to $1.2 Fraudsters use various ways to deceive users: phishing websites, fake mobile apps, accounts and groups on social media. billion in 2016.

Marketing 80

Marketing Phishing Media Engineering 80

eSecurity Planet

APRIL 23, 2021

Since 2017, host Jack Rhysider has investigated some of the most noteworthy stories related to the darkside of the internet, specifically hacking, data breaches, and cybercrime. Through interviews and research, Ran connects the dots between the early days of cybercrime and today’s stories of data hacks and breaches.

Cybersecurity 130

Cybersecurity InfoSec Cybercrime Hacking 130

IT Security Guru

JUNE 28, 2022

The pandemic has fuelled an increase in cybercrime that shows no signs of abating. Cybercrime operators know that going after large companies is risky and carries greater repercussions from law enforcement. To add insult to injury, WannaCry was initially spread through a phishing campaign.

Cybersecurity 76

Cybersecurity Digital transformation Phishing Cybercrime 76