Security Affairs

MARCH 19, 2019

Security experts at Group-IB presented at Money2020 Asia the results of an interesting analysis of hi-tech crime landscape in Asia in 2018. The number of leaked cards increased in 2018 by 56%. The total underground market value of Singaporean banks’ cards compromised in 2018 is estimated at nearly $640 000.

Banking 79

Banking Government Passwords Marketing 79

Security Affairs

AUGUST 7, 2018

Group-IB researchers have investigated user data leaks from cryptocurrency exchanges and has analyzed the nature of these incidents. In 2017, when cryptocurrencies were gaining momentum, their record-breaking capitalization and a spike in Bitcoin’s exchange rate led to dozens of attacks on cryptocurrency services.

Cryptocurrency 48

Cryptocurrency Passwords Authentication Accountability 48

Security Affairs

NOVEMBER 6, 2018

Group-IB and Swiss insurance broker ASPIS that owns CryptoIns project, have developed the world’s first scoring model for assessing cryptocurrency exchanges. Based on the risk score, CryptoIns experts have calculated insurance rates for cryptocurrency exchange users who can now insure their accounts against cyber threats.

Insurance 62

Insurance Cryptocurrency Cyber threats Marketing 62

Security Affairs

FEBRUARY 10, 2022

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. The FBI reported that US citizens have lost more than $68 million to SIM swapping attacks in 2021, the number of complaints since 2018 and associated losses have increased almost fivefold.

Banking 106

Banking Accountability Mobile Cryptocurrency 106

Security Affairs

MAY 20, 2020

The man is known in the cybercrime underground for selling billions of stolen credentials. Early last year, it caught the attention of global cybersecurity experts by posting on one of the forums the sale of a database with 773 million e-mail addresses and 21 million unique passwords.”

Cybercrime 60

Cybercrime Passwords Advertising Hacking 60

SiteLock

AUGUST 27, 2021

In it, we identified the trends, threats, and innovations in cybercrime that small businesses need to know about in order to keep their websites secure. The Biggest Cybersecurity Trends of 2018. Throughout 2018, per-day website attack attempts increased by just about 60%, peaking at 80 attacks and averaging at 62 attacks.

Cybersecurity 98

Cybersecurity Engineering Firewall Malware 98

Security Affairs

JANUARY 21, 2019

The attackers coul d exploit the flaw to steal cryptocurrency wallets and SSH keys , According to the researchers Willem de Groot , the cybercrime gang known as Magecart exploited the flaw to inject into shopping sites software skimmer in the October 2018 attacks. was released in June, 2018 and appears safe. Adminer 4.6.3

Passwords 96

Passwords Advertising Cryptocurrency Cybercrime 96

Security Affairs

MAY 6, 2020

Europol announced another success in the fight against cybercrime, today it has arrested five Polish hackers who were members of the Infinity Black hacking group. The crime gang was formed in 2018, it was involved in distributing stolen user credentials, developing and distributing malware and hacking tools, and fraud. .

Computers and Electronics 73

Computers and Electronics Hacking Cryptocurrency Accountability 73

SecureList

FEBRUARY 23, 2022

The research in this report is a continuation of our previous annual financial threat reports ( 2018 , 2019 and 2020 ), providing an overview of the latest trends and key events across the threat landscape. Phishing is one of the most prevalent forms of cybercrime due to minimal effort required and the fact that it really works.

Banking 93

Banking Phishing Cryptocurrency Malware 93

SecureList

SEPTEMBER 28, 2023

Last month we covered a wide range of cybercrime topics. But there’s more going on in the cybercrime landscape, so we also published reports on new versions of the Lumma stealer and Zanubis Android banking trojan. It has been known as Vidar, Oski, Mars and now Lumma, which has a 46% overlap with Arkei.

Banking 90

Banking Malware Cybercrime Encryption 90

Security Affairs

NOVEMBER 19, 2019

The second half of 2018 saw a drop in the number of malicious programs downloaded via browsers reaching its minimum at less than 5%, while in the first half of 2019 only every 19 th download was initiated via means other than email. In 2017, password-protected archives accounted for only 0.08% of all malicious objects.

Ransomware 71

Ransomware Antivirus Malware Banking 71

Security Affairs

NOVEMBER 1, 2018

Crooks use email addresses and cracked passwords obtained through phishing attacks and data breaches to send out scam emails to potential victims pretending to be in possession of videos showing them while watching explicit videos. The scammer demands a payment in cryptocurrency for not sharing the video. 30, 2018 through Oct.

Scams 82

Scams Data breaches Education Advertising 82

SecureList

MARCH 29, 2023

Meanwhile, cryptocurrency became a prominent target for those seeking monetary gain. The amount of cryptocurrency-related phishing grew significantly in 2022, and with an endless array of new coins, NFT and other DeFi projects, scammers are continuously duping users. Now we see that APT actors have also switched to crypto.

Banking 71

Banking Phishing Cryptocurrency Mobile 71

Security Affairs

JUNE 8, 2021

The goal of the new platform was to target global organised crime, drug trafficking, and money laundering organisations, regardless of where they operated, and offer an encrypted device with features sought by the organised crime networks, such as remote wipe and duress passwords, to persuade criminal networks to pivot to the device. .

Encryption 124

Encryption Cryptocurrency Cybercrime Advertising 124

Krebs on Security

JULY 8, 2019

In the 15-month span of the GandCrab affiliate enterprise beginning in January 2018 , its curators shipped five major revisions to the code, each corresponding with sneaky new features and bug fixes aimed at thwarting the efforts of computer security firms to stymie the spread of the malware. The GandCrab identity on Exploit[.]in

Ransomware 254

Ransomware Accountability Cybercrime Passwords 254

Krebs on Security

AUGUST 19, 2020

Time is of the essence in these attacks because many companies that rely on VPNs for remote employee access also require employees to supply some type of multi-factor authentication in addition to a username and password — such as a one-time numeric code generated by a mobile app or text message.

Phishing 357

Phishing VPN Social Engineering Media 357

Krebs on Security

DECEMBER 14, 2023

That reporting was based on clues from an early Russian cybercrime forum in which a hacker named Rescator — using the same profile image that Rescator was known to use on other forums — claimed to have originally been known as “Helkern,” the nickname chosen by the administrator of a cybercrime forum called Darklife.

Cybercrime 225

Cybercrime Accountability Advertising Computers and Electronics 225

SecureList

AUGUST 30, 2023

While investigating an infection of a cryptocurrency company in Southeast Asia, we found Gopuram coexisting on target computers with AppleJeus , a backdoor attributed to the Lazarus. The threat actor specifically targeted cryptocurrency companies. We observed that they have a specific interest in cryptocurrency companies.

Malware 72

Malware Spyware Cryptocurrency Government 72

Krebs on Security

NOVEMBER 6, 2018

that has been tracking down individuals engaged in unauthorized “SIM swaps” — a complex form of mobile phone fraud that is often used to steal large amounts of cryptocurrencies and other items of value from victims. In early July 2018, Ferri was traveling in Europe when he discovered his T-Mobile phone no longer had service.

Mobile 236

Mobile Cryptocurrency Accountability Passwords 236

Malwarebytes

JUNE 3, 2022

By focusing on this context, we hope that you’ll come away with a stronger understanding about, for instance, why you should use a password manager rather than that you should use a password manager. By selling fake raffle tickets for the promotion, the scammers raked in $438,000 worth of cryptocurrency.

Internet 123

Internet Internet Scams Passwords 123

eSecurity Planet

FEBRUARY 16, 2021

For access to the decryption key, the victim must make prompt payment, often in cryptocurrency shielding the attacker’s identity. Ransomware frequently contains extraction capabilities that can steal critical information like usernames and passwords, so stopping ransomware is serious business.

Ransomware 97

Ransomware Backups Software Encryption 97

Security Affairs

APRIL 28, 2020

The Outlaw Hacking Group was first spotted by TrendMicro in 2018 when the cyber criminal crew targeted automotive and financial industries. Based on our findings, there are some similarities in both techniques and architectures with another cybercrime group, which appeared in the wild around 2012, most probably Romanian.

Architecture 101

Architecture Malware Hacking DDOS 101

Krebs on Security

JULY 22, 2020

The hacked forum database shows a user “tankska” registered on OGUsers back in July 2018, but only made one post asking about the price of an older Twitter account for sale. youth whose mom turned him in to the local police in February 2018 when she overheard him talking on the phone and pretending to be an AT&T employee.

Hacking 292

Hacking Accountability Scams Media 292

Security Affairs

MAY 8, 2020

In H2 2019, as part of its work to detect and prevents threats distributing online, Group-IB’s Computer Emergency Response Team (CERT-GIB) blocked a total of 8, 506 phishing web resources, while in H2 2018, the figure stood at 2,567.This Balance of power. Figure 2 The map of major web phishing-hosting countries.

Phishing 56

Phishing Spyware Banking Malware 56

SecureList

APRIL 27, 2022

We had initially analyzed this Delphi malware in April 2018. This application contains a legitimate program called DeFi Wallet, that saves and manages a cryptocurrency wallet, but also implants a malicious file when executed. We recently discovered a Trojanized DeFi application, compiled in November 2021.

Malware 129

Malware Firmware Government Phishing 129

Spinone

OCTOBER 13, 2020

Ransom payments are generally demanded in the form of untraceable cryptocurrency such as Bitcoin. This is quite a feat as it was only first discovered in mid-august 2018. It has been noted that paying a ransom demand only encourages this type of cybercrime and funds it. Should You Pay the Ransom?

Ransomware 52

Ransomware Backups Data breaches Encryption 52

Adam Levin

DECEMBER 7, 2020

Ransomware was a relatively obscure form of malware until the early 2010s , but it has increased in scope and the amount of damage it has caused year after year, aided by a proliferation of botnets , cryptocurrencies , and sophisticated criminal enterprises. AI makes it possible to identify patterns and correctly guess passwords.

IoT 130

IoT Artificial Intelligence Technology Scams 130

eSecurity Planet

NOVEMBER 2, 2022

The document contained a list of pornographic sites, along with passwords for access to said sites and would then spread itself and its NSFW content by emailing the first 50 people in the victim’s contact list. Petya was initially developed by a group called Janus Cybercrime Solutions as part of its ransomware-as-a-service (RaaS) platform.

Malware 138

Malware Ransomware Antivirus Internet 138

SecureList

JULY 29, 2021

We were able to trace the WebDav-O implant’s activity in our telemetry to at least 2018, indicating government affiliated targets based in Belarus. In recent operations, the group has focused on cryptocurrency businesses. The purpose of the campaign was to steal passwords stored in the password manager.

Malware 139

Malware Phishing Password Management Social Engineering 139

Security Boulevard

JULY 11, 2021

Yes, these organized cybercrime groups have been known to offer 24/7 technical support, subscriptions, quality assurance, affiliate schemes, and online forums just like legitimate SaaS companies. Another employee said Kaseya rarely patched its software or servers and stored customer passwords in clear text?—?meaning

Ransomware 119

Ransomware Software Encryption Risk 119