SecureList

FEBRUARY 16, 2021

While the resource was down, cryptocurrency newbies were invited to download a copy of Bitcoin Core via a torrenting service. Cybercriminals used the names of well-known APT groups to intimidate victims, demanded ransoms in cryptocurrency, and carried out demonstration attacks to back up their threats.

DDOS 128

DDOS Cryptocurrency Marketing Internet 128

SecureList

MAY 10, 2021

Botnet operators use infected devices to carry out DDoS attacks or mine cryptocurrency. In Q1 2021, cybercriminals also found a host of new tools for amplifying DDoS attacks. RDP servers listening on UDP port 3389 were used to amplify DDoS attacks. The vendor released a patch when they learned about the problem.

DDOS 96

DDOS Cryptocurrency Media Marketing 96

SecureList

NOVEMBER 8, 2021

Q3 2021 brought two new DDoS attack vectors, potentially posing a serious threat, including for major web resources. ris , a new botnet capable of carrying out powerful DDoS attacks. For instance, a DDoS attack on a Cloudflare customer (attributed to M?ris) We won't let our #DDoS stop us doing what we love!

DDOS 107

DDOS Marketing Cryptocurrency IoT 107

SiteLock

AUGUST 27, 2021

In our 2019 report covering website security , we analyzed the current online threat landscape to discern how it might change in the future. This makes stealthy attacks incredibly popular in the cybercrime community. Even when a DDoS attack doesn’t take a site completely offline, it usually slows it enough to make it unusable.

Small Business 98

Small Business Cybersecurity Phishing DDOS 98

Krebs on Security

DECEMBER 14, 2023

That reporting was based on clues from an early Russian cybercrime forum in which a hacker named Rescator — using the same profile image that Rescator was known to use on other forums — claimed to have originally been known as “Helkern,” the nickname chosen by the administrator of a cybercrime forum called Darklife.

Cybercrime 223

Cybercrime Accountability Advertising Computers and Electronics 223

SecureList

MAY 12, 2021

Finally, negotiations with the victims may be handled by yet another team and when the ransom is paid out, a whole new set of skills is needed to launder the cryptocurrency obtained. They interact with each other through internet handles, paying for services with cryptocurrency. Monero (XMR) cryptocurrency is used for payment.

Ransomware 123

Ransomware Encryption Malware Cybercrime 123

SecureList

MAY 27, 2022

Late last year, we became aware of a UEFI firmware-level compromise through logs from our firmware scanner (integrated into Kaspersky products at the start of 2019). The campaign has two goals: gathering information and stealing cryptocurrency. Subsequently, DDoS attacks hit some government websites.

Phishing 103

Phishing Spyware Firmware Malware 103

Security Affairs

APRIL 4, 2021

If you want to receive the complete weekly Security Affairs Newsletter for free, including the international press, subscribe here.

Ransomware 72

Ransomware Hacking DDOS Cryptocurrency 72

SecureList

APRIL 27, 2022

Subsequently, DDoS attacks hit several government websites. We named it BlackMoule, as we believe it is an update of BlackMould, a malicious tool that was briefly mentioned by Microsoft in late 2019 as part of GALLIUM activities against telecoms companies (aka Operation SoftCell).

Malware 130

Malware Firmware Government Phishing 130

eSecurity Planet

NOVEMBER 2, 2022

In July 2001, the Code Red Worm attempted to subject the entire Internet to a distributed denial of service (DDoS) attack. Eventually, the infected computers were all directed to attempt a DDoS specifically on whitehouse.gov, though the White House managed to sidestep the assault. Welcome to [link] Hacked By Chinese!”.

Malware 138

Malware Ransomware Antivirus Internet 138

SecureList

JULY 28, 2022

In late 2021, we encountered a malicious DXE driver incorporated into several UEFI firmware images that were flagged by our firmware scanner (integrated into Kaspersky products at the start of 2019). We discovered a highly active campaign, starting in March 2022, targeting stock and cryptocurrency investors in South Korea.

Malware 130

Malware Firmware Phishing Cryptocurrency 130