Remove 2019 Remove Adware Remove Cybercrime Remove Phishing
article thumbnail

China-based Fangxiao group behind a long-running phishing campaign

Security Affairs

A China-based financially motivated group, tracked as Fangxiao, is behind a large-scale phishing campaign dating back as far as 2019. Researchers from Cyjax reported that a China-based financially motivated group, dubbed Fangxiao, orchestrated a large-scale phishing campaign since 2017. SecurityAffairs – hacking, phishing).

Phishing 100
article thumbnail

4 Malicious apps on Play Store totaled +1M downloads

Security Affairs

The apps were used as part of an adware campaign redirecting victims to websites under the control of the attackers. Some of the sites employed in the campaign host phishing pages. “After the initial delay, the malicious app opens phishing sites in Chrome. ” reads the post published by Malwarebytes.

Adware 97
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Gaming-related cyberthreats in 2020 and 2021

SecureList

Last year’s lockdowns gave a boost to the mobile market, with users downloading thirty percent more mobile games per week in Q1 2021 than in Q4 2019 globally, reaching over one billion weekly downloads. In this report, we cover PC and mobile threats as well as various phishing schemes that capitalize on popular games.

Adware 118
article thumbnail

Streaming wars continue — what about cyberthreats?

SecureList

With millions of new users on streaming platforms, cyberattackers have recognized this heightened demand and seek to take advantage of it by distributing streaming phishing scams and spreading malware under the guise of users’ favorite shows. An example of a phishing page offering to stream Money Heist. Methodology.

article thumbnail

Cyberthreats to financial organizations in 2022

SecureList

The COVID-19 pandemic is likely to cause a massive wave of poverty, and that invariably translates into more people resorting to crime, including cybercrime. We saw many attacks using N-days, such as the attack that targeted the Brazilian Supreme Court (exploiting vulnerabilities in VMWare ESXI (CVE-2019-5544 and CVE-2020-3992).

article thumbnail

Data Leak Strategy Fueling the Ransomware Economy

SecureWorld News

In 2019, crooks shifted their focus to enterprises and pioneered in stealing data in addition to encrypting it, which turned these raids into an explosive mix of blackmail and breaches. Other cybercriminals can also purchase and use data to orchestrate targeted phishing attacks against a specific business.

article thumbnail

IT threat evolution Q2 2021

SecureList

All of these documents were blank, suggesting the existence of precursor documents – possibly delivered by means of spear-phishing or a previous infection – that trigger the download of the RTF files. Black Kingdom first appeared in 2019; in 2020 the group was observed exploiting vulnerabilities (such as CVE-2019-11510) in its attacks.