Krebs on Security

MARCH 26, 2024

Assuming the user manages not to fat-finger the wrong button on the umpteenth password reset request, the scammers will then call the victim while spoofing Apple support in the caller ID, saying the user’s account is under attack and that Apple support needs to “verify” a one-time code. ” Ken said.

Passwords 344

Passwords Accountability Engineering Phishing 344

Security Affairs

MARCH 30, 2019

A new cyber heist made the headlines, the victim is Bithumb, the South Korea-based cryptocurrency exchange and hackers stole $19 Million. Hackers have stolen nearly $19 million worth of cryptocurrency from Bithumb, the South Korea-based cryptocurrency exchange. BREAKING Bithumb is being hacked, at its EOS cold storage level!!!

Cryptocurrency 95

Cryptocurrency Hacking Advertising Accountability 95

Security Affairs

OCTOBER 20, 2021

Financially motivated threat actors are using Cookie Theft malware in phishing attacks against YouTube creators since late 2019. According to Google’s Threat Analysis Group (TAG) researchers, who spotted the campaign, the attacks were launched by multiple hack-for-hire actors recruited on Russian-speaking forums.

Accountability 131

Accountability Malware Phishing Social Engineering 131

Security Affairs

MARCH 3, 2020

The Department of Justice has charged the two Chinese nationals for laundering cryptocurrency for North Korea-linked APT groups. for helping North Korea-linked hackers in laundering cryptocurrency. The cryptocurrency have been stolen by the APT groups from two cryptocurrency exchanges. and Li Jiadong (???),

Cryptocurrency 102

Cryptocurrency Banking Hacking Accountability 102

Security Affairs

JULY 7, 2019

Yesterday, July 6, 2019, hackers breached the GitHub account of Canonical Ltd., On July 6, 2019, hackers have breached the GitHub account of Canonical Ltd., Hackers at least created 11 new GitHub repositories in compromised Canonical account. SecurityAffairs – hacking, Ubuntu). Pierluigi Paganini.

Accountability 108

Accountability Advertising Cryptocurrency Hacking 108

Security Affairs

JUNE 27, 2019

Another cryptocurrency exchange announced to have suffered a theft, this time is the victim is the Singapore-based Bitrue. It has happened again, crooks stole funds from another cryptocurrency exchange, this time the victim is the Singapore-based Bitrue. — Bitrue (@BitrueOfficial) June 27, 2019. Pierluigi Paganini.

Cryptocurrency 71

Cryptocurrency Advertising Insurance Hacking 71

Security Affairs

DECEMBER 6, 2022

DoJ announced that Nicholas Truglia (25) was sentenced to 18 months in prison for the theft of over $20 million worth of cryptocurrency through SIM swapping attacks. Nicholas Truglia and his associates stole a staggering amount of cryptocurrency from the victim through a complex SIM swap scheme.” In May 2019, Terpin won $75.8

Cryptocurrency 95

Cryptocurrency Accountability Mobile Hacking 95

Security Affairs

AUGUST 30, 2020

US DoJ filed a civil forfeiture complaint to seize 280 Bitcoin (BTC) and Ethereum (ETH) accounts containing funds allegedly stolen by North Korea-linked hackers. The complaint did not name the hacked exchanges, it only reports two attacks that took place in July 1, 2019, and September 25, 2019.

Cryptocurrency 116

Cryptocurrency Hacking Advertising Accountability 116

Security Affairs

FEBRUARY 19, 2024

The Raccoon stealer was first spotted in April 2019, it was designed to steal victims’ credit card data, email credentials, cryptocurrency wallets, and other sensitive data. The Raccoon stealer is written in C++ by Russian-speaking developers who initially promoted it exclusively on Russian-speaking hacking forums.

Identity Theft 98

Identity Theft Cryptocurrency Cybercrime Hacking 98

Krebs on Security

JULY 26, 2021

02, 2020, pitching him as a trustworthy cryptocurrency expert and advisor. One day after last summer’s mass-hack of Twitter , KrebsOnSecurity wrote that 22-year-old British citizen Joseph “PlugwalkJoe” O’Connor appeared to have been involved in the incident. law enforcement officer ,” the footnote reads.

Media 314

Media Hacking Accountability Scams 314

Security Affairs

JANUARY 2, 2022

The cyberattacks against the cryptocurrency industry are a profitable business for threat actors, according to the experts, $12.1 billion worth of cryptocurrencies have been stolen in the last decade. “Cryptocurrency crime stands in direct proportion to the size of the cryptocurrency market. Threat actors stole $3.18

Cryptocurrency 107

Cryptocurrency Scams Marketing Hacking 107

Security Boulevard

AUGUST 2, 2022

Current threat actor activity is incentivized by a broad attack surface represented through high volumes of users and systems, and high potential profits represented through the variety of cryptocurrency offerings. It is easy to detect and block things like malicious cryptocurrency apps or crypto-phishing websites.

Cryptocurrency 98

Cryptocurrency Ransomware Government Risk 98

Krebs on Security

NOVEMBER 3, 2020

Two young men from the eastern United States have been hit with identity theft and conspiracy charges for allegedly stealing bitcoin and social media accounts by tricking employees at wireless phone companies into giving away credentials needed to remotely access and modify customer account information. Prosecutors say Jordan K.

Scams 299

Scams Wireless Identity Theft Mobile 299

Security Boulevard

FEBRUARY 12, 2021

A SIM, or Subscriber Identity Module, is the little chip that goes inside a phone and ties that phone to a particular account at a particular mobile provider. If the phone provider believes you have a new phone, they can tell their system, this is the new SIM number that should be linked to your account. Sorry, couldn't resist!)

Cryptocurrency 119

Cryptocurrency Accountability Scams Social Engineering 119

Security Affairs

DECEMBER 29, 2023

One of the key significant improvements are support of more software clients (including browser-based cryptocurrency wallets), upgraded credit card (CC) grabber, and additional advanced mechanisms for password storage dump on various platforms to extract credentials and tokens.

Password Management 130

Password Management Cryptocurrency Passwords Authentication 130

Security Boulevard

MAY 27, 2022

The Exfiltration Phase of The Kill Chain of a Cryptocurrency-Based Attack Provides the Greatest Opportunity to Identify Cybercriminals. Cryptocurrency gained through illicit means is less useable than other assets due to the way cryptocurrency systems currently do not fully protect owner identity and allow for only limited liquidity.

Cryptocurrency 59

Cryptocurrency Risk Marketing Architecture 59

Security Affairs

JUNE 1, 2019

As with all cryptocurrency miners, it uses the resources of the host system to mine cryptocurrency (Monero in this instance) without the owner’s knowledge.” The same threat actors used also another Docker Hub repository, associated with the ‘ marumira ‘ account, in previous attacks. We can shut it down.

Hacking 95

Hacking Cryptocurrency Advertising Accountability 95

Krebs on Security

MAY 19, 2020

In January 2019, dozens of media outlets raised the alarm about a new “megabreach” involving the release of some 773 million stolen usernames and passwords that was breathlessly labeled “the largest collection of stolen data in history.” For more on this dynamic, please see The Value of a Hacked Email Account.

Passwords 340

Passwords Accountability Hacking Password Management 340

Security Affairs

JUNE 23, 2021

According to the indictment , the expert earned millions in income from promoting cryptocurrencies, consulting work, speaking engagements, and selling the rights to his life story for a documentary. The investigators suppose that the income was directed into bank accounts and cryptocurrency exchange accounts in the names of nominees.

Cryptocurrency 136

Cryptocurrency Banking Accountability Antivirus 136

SecureWorld News

OCTOBER 7, 2022

The hacker behind the 2019 Capital One data breach has been sentenced to time served and five years probation by the U.S. District Court in Seattle for several federal crimes related to a sophisticated hacking scheme. Department of Justice says that Thompson built a tool to scan Amazon Web Service accounts to find misconfigured ones.

Data breaches 79

Data breaches Hacking Cybercrime Accountability 79

Security Affairs

AUGUST 18, 2020

Ukrainian authorities arrested the members of a cybercrime gang who ran 20 cryptocurrency exchanges involved in money laundering. Police in Ukraine announced the arrest of the members of a cybercrime gang composed of three individuals who ran 20 cryptocurrency exchanges used in money laundering activities. Pierluigi Paganini.

Cryptocurrency 107

Cryptocurrency Computers and Electronics Cybercrime Digital transformation 107

Security Affairs

AUGUST 23, 2023

The duo operated the Tornado Cash cryptocurrency mixer that facilitated more than $1 billion in money laundering transactions and laundered hundreds of millions of dollars for the Lazarus APT group. According to OFAC, Tornado Cash was used to launder more than $7 billion worth of virtual currency since its creation in 2019.

Cryptocurrency 88

Cryptocurrency Cybercrime Hacking Accountability 88

SecureWorld News

MAY 11, 2023

Nearly three years ago, chaos descended upon Twitter when a small group of hackers successfully breached the accounts of some of the platform's most high-profile users. RELATED: Famous Twitter Accounts Hacked: Insider Threat or Social Engineering Attack? Now, the U.S. O'Connor's criminal activities were described by U.S.

Accountability 77

Accountability Social Engineering Media Hacking 77

Security Affairs

MARCH 18, 2021

billion and authorities observed an increase of more than 300,000 complaints from 2019 (+69%). In 2020, the IC3 received 19,369 Business Email Compromise (BEC)/Email Account Compromise (EAC) complaints, these crimes caused $1.8 million in 2019 to over $29.1 SecurityAffairs – hacking, 2020 Internet Crime Report).

Internet 110

Internet Internet Scams Identity Theft 110

Krebs on Security

DECEMBER 8, 2021

There is a now-dormant Myspace account for a Matthew Philbert from Orleans, a suburb of Ottawa, Ontario. The information tied to the Myspace account matches the age and town of the defendant. The Myspace account was registered under the nickname “ Darkcloudowner ,” and to the email address dark_cl0ud6@hotmail.com.

Cybercrime 270

Cybercrime Ransomware Accountability Advertising 270

Security Affairs

JANUARY 8, 2024

In January 2019, law enforcement agencies in the US and Europe announced the seizure of the popular xDedic marketplace , an underground market offering for sale access to compromised systems and personally identifiable information. DoJ charged 19 individuals worldwide for their role in the operations of the now-defunct xDedic Marketplace.

Cybercrime 106

Cybercrime Identity Theft Government Hacking 106

Security Affairs

OCTOBER 26, 2022

The Raccoon stealer was first spotted in April 2019, it was designed to steal victims’ credit card data, email credentials, cryptocurrency wallets, and other sensitive data. The Raccoon stealer is written in C++ by Russian-speaking developers that initially promoted it exclusively on Russian-speaking hacking forums.

Identity Theft 87

Identity Theft Cryptocurrency Cyber threats Cybercrime 87

Security Affairs

OCTOBER 28, 2021

claims to be a trader of cryptocurrencies in social networks. One of the attacks, against a software developer, took place in 2019. The German police discovered Nikolay’s email address, which was also used to register to over 60 websites, along with his phone number that is associated with a Telegram account. for months.

Cryptocurrency 122

Cryptocurrency Ransomware Cybercrime Accountability 122

Security Affairs

SEPTEMBER 17, 2020

US Department of Justice announced indictments against 5 Chinese nationals alleged members of a state-sponsored hacking group known as APT41. The attacks also aimed at carrying out other criminal activities, such as the deployment of ransomware and cryptocurrency malware. SecurityAffairs – hacking, APT41 ). Pierluigi Paganini.

Identity Theft 104

Identity Theft Advertising Government Technology 104

Security Affairs

JANUARY 2, 2020

The Poloniex cryptocurrency exchange is forcing users to reset their passwords following a data leak. . Another bad news for the community of the virtual currencies communities, the Poloniex cryptocurrency exchange has forced its users to reset their passwords following a data leak. . SecurityAffairs – Poloniex exchange, hacking).

Passwords 62

Passwords Cryptocurrency Data breaches Advertising 62

Security Affairs

APRIL 28, 2023

CryptBot malware is active since at least 2019, it allows operators to steal sensitive data from the Google Chrome of the infected systems. The malware allows operators to steal login credentials from popular services such as social media platforms and cryptocurrency wallets, then stolen data is sold on cybercrime forums by the operators.

Malware 95

Malware Cybercrime Cryptocurrency Media 95

Malwarebytes

JULY 20, 2022

The Justice Department today announced a complaint filed in the District of Kansas to forfeit cryptocurrency paid as ransom to North Korean hackers or otherwise used to launder such ransom payments. The seized funds amounting to half a million US dollars, include ransoms paid by health care providers in Kansas and Colorado. Maui ransomware.

Ransomware 91

Ransomware Cryptocurrency Healthcare Firmware 91

Krebs on Security

APRIL 7, 2022

Security experts say both VPNFilter and Cyclops Blink are the work of a hacking group known as Sandworm or Voodoo Bear , the same Russian team blamed for disrupting Ukraine’s electricity in 2015. SANDWORM AND TRITON. energy facilities. and international companies and entities, including U.S. ” HYDRA. . ” HYDRA. .

Marketing 242

Marketing Energy and Utilities Malware Ransomware 242

Security Affairs

NOVEMBER 15, 2023

The IPStorm botnet was first uncovered in May 2019 while targeting Windows systems, not experts from Intezer reported that the bot evolved to infect other platforms, including Android, Linux, and Mac devices. reads the Intezer’s report. The IPStorm bot also kills a list of processes that could potentially interfere with its operations.

Hacking 95

Hacking Cryptocurrency Cyber Attacks Advertising 95

Security Affairs

FEBRUARY 17, 2021

Department of Justice charged Park over WannaCry and 2014 Sony Pictures Entertainment Hack. billion of money and cryptocurrency from financial institutions and companies, to create and deploy multiple malicious cryptocurrency applications, and to develop and fraudulently market a blockchain platform.” sanctions. .”

Cryptocurrency 75

Cryptocurrency Banking Hacking Ransomware 75

Security Affairs

JUNE 8, 2022

. “The SSNDOB administrators created advertisements on darkweb criminal forums for the Marketplace’s services, provided customer support functions, and regularly monitored the activities of the sites, including monitoring when purchasers deposited money into their accounts.” SecurityAffairs – hacking, SSNDOB Marketplace).

Cybercrime 95

Cybercrime Cryptocurrency Marketing Advertising 95

Security Affairs

NOVEMBER 24, 2020

Crooks were able to hijack traffic and email to various cryptocurrency-related websites as a result of a DNS hijacking attack on domains managed by GoDaddy. “This gave the actor the ability to change DNS records and in turn, take control of a number of internal email accounts. .” SecurityAffairs – hacking, DNS hijacking).

Social Engineering 101

Social Engineering Engineering DNS Data breaches 101