Security Affairs

APRIL 8, 2019

According to Group-IB’s annual Hi-Tech Crime Trends 2018 report, on average, from June 2017 to August 2018, the details of 1.8 According to Group-IB experts, cybercriminals might have used special spyware to steal user credentials — formgrabbers, keyloggers, such as Pony Formgrabber and AZORult. Map of Middle-Eastern Countries.

Artificial Intelligence 65

Artificial Intelligence Government Banking Advertising 65

Security Affairs

AUGUST 1, 2022

An Australian national has been charged for the creation and sale of the Imminent Monitor (IM) spyware, which was also used for criminal purposes. The 24-year-old Australian national Jacob Wayne John Keen has been charged for his alleged role in the development and sale of spyware known as Imminent Monitor (IM). Pierluigi Paganini.

Spyware 106

Spyware Malware Cybercrime Hacking 106

SecureList

NOVEMBER 17, 2021

Last year, we foresaw the APT and cybercrime worlds becoming more porous on an operational level. The Israeli Defense Forces (IDF) have claimed that threat actors have been using catfishing to lure Israeli soldiers into installing spyware. Let’s start by looking at the predictions we made for 2021.

Mobile 138

Mobile Surveillance Ransomware Government 138

SecureList

NOVEMBER 1, 2022

In June, we identified a previously unknown Android spyware app that targets Persian-speaking individuals. The spyware itself collects various data from the victims’ devices, such as call logs or lists of contacts. Where CVE-2017-0261 was used before, CVE-2017-11228 replaces it. í religion that are banned in Iran.

Malware 143

Malware Ransomware Spyware Encryption 143

Security Affairs

MARCH 19, 2019

Group-IB Threat Intelligence team identified hundreds of compromised credentials from Singaporean government agencies and educational institutions over the course of 2017 and 2018. Cybercriminals steal user accounts’ data using special spyware aimed at obtaining users’ authentication data. Have you been pwned?

Banking 80

Banking Government Passwords Marketing 80

SecureList

AUGUST 30, 2023

CloudWizard reminded us of two campaigns observed in Ukraine and reported publicly: Operation Groundbait (first described by ESET in 2016) and Operation BugDrop (discovered by CyberX in 2017). Using a number of vulnerabilities in iOS, the attachment is executed and installs spyware. The vulnerability was patched on April 4.

Malware 79

Malware Spyware Cryptocurrency Government 79

Security Affairs

APRIL 5, 2019

Ursnif/Gozi is active from over a decade and was one of the most active malware listed in 2017 and 2018. SecurityAffairs – Ursnif Trojan, cybercrime). Today it constantly reaches several organization across Italy presenting itself in several ways, for instance as a malicious document delivered through email. . Pierluigi Paganini.

Banking 86

Banking Malware Cryptocurrency Advertising 86

Krebs on Security

JULY 16, 2019

For at least the past decade, a computer crook variously known as “ Yalishanda ,” “ Downlow ” and “ Stas_vl ” has run one of the most popular “bulletproof” Web hosting services catering to a vast array of phishing sites, cybercrime forums and malware download servers.

Cybercrime 185

Cybercrime Phishing Banking Malware 185

Security Affairs

JULY 7, 2019

ViceLeaker Android spyware targets users in the Middle East. US Cyber Command warns of Iran-linked hackers exploiting CVE-2017-11774 Outlook flaw. Israeli blamed Russia for jamming at Israeli Ben Gurion airport. New variant of Dridex banking Trojan implements polymorphism. Singapore Government will run its third bug bounty program.

Scams 48

Scams Spyware DNS Advertising 48

SecureList

APRIL 27, 2021

Further investigation of the Sunburst backdoor revealed several features that overlap with a previously identified backdoor known as Kazuar , a.NET backdoor first reported in 2017 and tentatively linked to the Turla APT group. webshells and Exaramel implants.

Malware 142

Malware Spyware Government Social Engineering 142

SecureList

JULY 27, 2023

Following this, we released the first of a series of additional reports describing the final payload in the infection chain: a highly sophisticated spyware implant that we dubbed “TriangleDB” Operating in memory, this implant periodically communicates with the C2 (command and control) infrastructure to receive commands.

Malware 89

Malware Government Phishing Social Engineering 89

Security Affairs

APRIL 28, 2024

Hackers may have accessed thousands of accounts on the California state welfare platform Brokewell Android malware supports an extensive set of Device Takeover capabilities Experts warn of an ongoing malware campaign targeting WP-Automatic plugin Cryptocurrencies and cybercrime: A critical intermingling Kaiser Permanente data breach may have impacted (..)

Cybercrime 98

Cybercrime Spyware Data breaches Antivirus 98

Herjavec Group

AUGUST 26, 2021

We can learn a lot from the cybercrime of the past…the history of cybercrime is a glimpse into what we can expect in the future. In the past 18 months, we’ve experienced the beginning of an era that has seen cybersecurity and cybercrime at the center of it all. Dateline Cybercrime . Robert Herjavec.

Cybercrime 135

Cybercrime Computers and Electronics Banking Hacking 135

SecureList

OCTOBER 26, 2021

ShadowPad is a highly sophisticated, modular cyberattack platform that APT groups have used since 2017. Historically, Lazarus used MATA to attack various industries for cybercrime-like intentions: stealing customer databases and spreading ransomware. Historically, its Windows implant was represented by a single-stage spyware installer.

Malware 143

Malware Government Surveillance Spyware 143