Security Affairs

DECEMBER 15, 2023

The Snatch ransomware group announced it had hacked the food giant Kraft Heinz, the company is investigating the claims. The Snatch ransomware group claims to have hacked Kraft Heinz in August and on December 14, it added the company to the list of victims on its leak site.

Hacking 113

Hacking Ransomware Computers and Electronics Marketing 113

Security Affairs

JUNE 17, 2021

UNC2465 cybercrime group that is affiliated with the Darkside ransomware gang has infected with malware the website of a CCTV camera vendor. ” The SMOKEDHAM backdoor was associated by FireEye to the activity of the UNC2465 group that dates back to at least April 2019 and is considered a DARKSIDE RaaS affiliate.

Cybercrime 105

Cybercrime Ransomware Antivirus Software 105

Security Affairs

JUNE 30, 2022

A former Canadian government IT worker admitted to being a high-level member of the Russian cybercrime group NetWalker. to charges related to his involvement with the Russian cybercrime group NetWalker. The group has been active since 2019, the NetWalker ransomware has been offered with the Ransomware-as-a-Service (RaaS) model.

Cybercrime 86

Cybercrime Government Ransomware Cryptocurrency 86

Security Affairs

JUNE 8, 2022

“Between December 2018 and June 2019, SSNDOB sent over $100,000 worth of Bitcoin to Joker’s Stash, suggesting the two markets may have had some relationship to one another, including possibly shared ownership.” Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Cybercrime 92

Cybercrime Cryptocurrency Marketing Advertising 92

Krebs on Security

JANUARY 24, 2023

The plea comes just months after Emelyantsev was extradited from Bulgaria, where he told investigators, “America is looking for me because I have enormous information and they need it.” Denis Kloster, as posted to his Vkontakte page in 2019. “Thanks to you, we are now developing in the field of information security and anonymity!

Cybercrime 217

Cybercrime Advertising IoT Malware 217

Security Affairs

MARCH 30, 2024

AT&T confirmed that a data breach impacted 73 million current and former customers after its data were leaked on a cybercrime forum. In August 2021, the ShinyHunters group claimed to have a database containing private information on roughly 70 million AT&T customers, but the company denied that they had been stolen from its systems.

Data breaches 133

Data breaches Telecommunications Cybercrime Hacking 133

Security Affairs

AUGUST 29, 2022

SecurityAffairs – hacking, Nitrokod ). The post Nitrokod crypto miner infected systems across 11 countries since 2019 appeared first on Security Affairs. Check Point shared Indicators of Compromise (IoCs) for this campaign. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Malware 93

Malware Software Internet Internet 93

Security Affairs

SEPTEMBER 1, 2020

Iran-linked APT group Pioneer Kitten is now trying to monetize its efforts by selling access to some of the networks it has hacked to other hackers. Iran-linked APT group Pioneer Kitten, also known as Fox Kitten or Parisite, is now trying to monetize its efforts by selling access to some of the networks it has hacked to other hackers.

Hacking 90

Hacking VPN Advertising Financial Services 90

Security Affairs

MAY 2, 2024

Vasinskyi is a REvil ransomware affiliate since at least March 1st, 2019. victims, and we are disrupting the broader cybercrime ecosystem.” Pierluigi Paganini Follow me on Twitter: @securityaffairs and Facebook and Mastodon ( SecurityAffairs – hacking, ransomware) Vasinskyi was extradited to the U.S. in March 2022.

Ransomware 89

Ransomware Cryptocurrency Cybercrime Encryption 89

Security Affairs

MARCH 29, 2020

The source code of the infamous Dharma ransomware is now available for sale on two Russian-language hacking forums. The source code of one of the most profitable ransomware families, the Dharma ransomware , is up for sale on two Russian-language hacking forums. ” concluded ZDNet. Pierluigi Paganini.

Ransomware 109

Ransomware Hacking Advertising Malware 109

Security Affairs

OCTOBER 15, 2019

Chinese-speaking cybercrime gang Rocke that carried out several large-scale cryptomining campaigns, has now using news tactics to evade detection. Chinese-speaking cybercrime gang Rocke, that carried out several large-scale cryptomining campaigns in past , has now using news tactics to evade detection. Pierluigi Paganini.

Cybercrime 64

Cybercrime DNS Malware Advertising 64

Security Affairs

DECEMBER 11, 2019

Microsoft’s December 2019 Patch Tuesday updates fix a total of 36 flaws, including CVE-2019-1458 Windows zero-day exploited in North Korea-linked attacks. Microsoft’s December 2019 Patch Tuesday updates address a total of 36 flaws, including a Windows zero-day, tracked as CVE-2019-1458 exploited in attacks linked to North Korea.

Advertising 60

Advertising Cybercrime Hacking Accountability 60

Krebs on Security

JUNE 22, 2022

last week said they dismantled the “ RSOCKS ” botnet, a collection of millions of hacked devices that were sold as “proxies” to cybercriminals looking for ways to route their malicious traffic through someone else’s computer. A copy of the passport for Denis Kloster, as posted to his Vkontakte page in 2019.

Advertising 262

Advertising Cybercrime System Administration Hacking 262

Security Affairs

FEBRUARY 24, 2020

Racoon malware , Legion, Mohazo, and Racealer, is an infostealer that recently appeared in the threat landscape that is advertised in hacking forums. The Raccoon stealer was first spotted in April 2019, it was designed to steal victims’ credit card data, email credentials, cryptocurrency wallets, and other sensitive data.

Cybercrime 90

Cybercrime Malware Cryptocurrency Advertising 90

Security Affairs

OCTOBER 27, 2021

Grief ransomware operators announced to have hacked US National Rifle Association (NRA) and threaten to leak the stolen data. The NRA was added to the list of compromised organizations on the leak site of the group, that gang also published a set of documents as proof of the hack. In 2019, the U.S. Pierluigi Paganini.

Ransomware 119

Ransomware Banking Cybercrime Hacking 119

Krebs on Security

SEPTEMBER 24, 2022

.” A copy of the passport for Denis Kloster, as posted to his Vkontakte page in 2019. Denis Emelyantsev , as the apparent owner of RSOCKS, a collection of millions of hacked devices that were sold as “proxies” to cybercriminals looking for ways to route their malicious traffic through someone else’s computer.

Cybercrime 202

Cybercrime Data breaches Malware Ransomware 202

Security Affairs

FEBRUARY 19, 2024

The man was held in the Netherlands, and he was charged for his alleged role in the international cybercrime operation known as Raccoon Infostealer. The Raccoon stealer was first spotted in April 2019, it was designed to steal victims’ credit card data, email credentials, cryptocurrency wallets, and other sensitive data.

Identity Theft 93

Identity Theft Cryptocurrency Cybercrime Hacking 93

Security Affairs

FEBRUARY 17, 2024

On October 2022, Swiss police arrested Penchukov in Geneva, also known as Tank, which is one of the leaders of the JabberZeus cybercrime group. In 2012, the Ukrainian national Vyacheslav Igorevich Penchukov was accused of being a member of a cybercrime gang known as JabberZeus crew.

Malware 92

Malware Cybercrime Banking Hacking 92

Security Affairs

APRIL 8, 2022

A Ukrainian man was sentenced in the US to 5 years in prison for his criminal activity in the cybercrime group FIN7. for high-level hacking activity in the cybercrime group FIN7 (aka Carbanak Group and the Navigator Group). The man was arrested in Bangkok, Thailand in November 2019 at the request of U.S. in May 2020.

Cybercrime 105

Cybercrime Hacking Software Phishing 105

Security Affairs

OCTOBER 21, 2021

Evil Corp cybercrime gang is using a new ransomware called Macaw Locker to evade US sanctions that prevent victims from paying the ransom. The Evil Corp cybercrime group (aka the Dridex gang Indrik Spider , the Dridex gang, and TA505 ) has been active in cybercrime activities since 2007. In 2019, the U.S.

Ransomware 116

Ransomware Cybercrime Banking Encryption 116

Security Affairs

OCTOBER 19, 2023

This is an important achievement in the fight against cybercrime. The ransomware operation has been active since late December 2019, the FBI published two flash alert to warn of the operation of the group. The police on Thursday seized the Tor negotiation and data leak sites. Both FBI and Europol declined to comment on the events.

Ransomware 105

Ransomware Financial Services Cybercrime Manufacturing 105

Security Affairs

FEBRUARY 12, 2024

Meli allegedly provided cybercriminals with malware products and services via online hacking forums. Meli offered malware products and services for sale to cybercriminals through online computer-hacking forums. The two individuals are charged with selling and supporting the Warzone RAT and other malware.

Malware 99

Malware Hacking Cybercrime Advertising 99

The Last Watchdog

JUNE 21, 2020

In many cases, the crooks hack managed service providers (MSPs) first and then use this access to compromise the partnering organizations. In November 2019, the criminals behind a ransomware species called Maze started a new trend that is currently gaining momentum on the dark web. pharma giant ExecuPharm.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

MARCH 18, 2020

While we do not store credit card information on our website, it appears that the unauthorized person gained access to the website and could have accessed the data of consumers who made payment card purchases while that data was being entered, between August 3, 2019 and January 14, 2020.” SecurityAffairs – TrueFire, cybercrime).

Hacking 100

Hacking Data breaches Advertising Accountability 100

Security Affairs

OCTOBER 25, 2021

Travnichek accessed the computer systems of the Public Water System on about March 27, 2019, without authorization. According to the indictment, the man hacked the system with the intent to harm the Ellsworth Rural Water District No. SecurityAffairs – hacking, cyber security). 1, aka Post Rock Rural Water District.

Hacking 87

Hacking Risk Cybercrime Information Security 87

Security Affairs

MARCH 6, 2023

German police announced to have dismantled an international cybercrime gang behind the DoppelPaymer ransomware operation. DoppelPaymer ransomware has been active since June 2019 , in November 2020 Microsoft Security Response Center (MSRC) warned customers of the DoppelPaymer ransomware and provided useful information on the threat.

Ransomware 75

Ransomware Cybercrime Malware Phishing 75

Security Affairs

SEPTEMBER 1, 2021

Securities and Exchange Commission (SEC) announced sanctions against several organizations over email account hacking. Securities and Exchange Commission (SEC) announced sanctions against eight entities belonging to three companies over email account hacking due to cybersecurity failures. Pierluigi Paganini.

Accountability 82

Accountability Hacking Financial Services Cybersecurity 82

Security Affairs

JULY 28, 2019

According to a report published by cyber security firm Sixgill data for over 23 million payment card were on offer in underground forums in the first half of 2019. . A report published by cybersecurity firm Sixgill revealed that data for over 23 million payment card were offered for sale in the cybercrime underground.

eCommerce 95

eCommerce Marketing Advertising Retail 95

Security Affairs

NOVEMBER 1, 2020

The Maze ransomware operators are shutting down their operations for more than one year the appeared on the threat landscape in May 2019. The Maze cybercrime gang is shutting down its operations, it was considered one of the most prominent and active ransomware crew since it began operating in May 2019. Pierluigi Paganini.

Ransomware 141

Ransomware Cybercrime Advertising Software 141

Security Affairs

MARCH 26, 2024

In May 2018, researchers from security firm Qihoo 360 Netlab reported that cybercriminals that targeted the Dasan GPON routers were using another new zero-day flaw affecting the same routers and recruit them in their botnet. “ The report includes Indicators of Compromise (IoCs) associated with this campaign.

IoT 122

IoT Cybercrime Internet Internet 122

Security Affairs

JUNE 7, 2022

Mandiant researchers associate multiple LockBit ransomware attacks with the notorious Evil Corp Cybercrime Group. The researchers also noticed that the group shares numerous overlaps with the cybercrime gang Evil Corp. Treasury in December 2019. SecurityAffairs – hacking, Evil Corp). Pierluigi Paganini.

Ransomware 130

Ransomware Cybercrime Malware Hacking 130

Security Affairs

JULY 11, 2019

The CVE-2019-1132 flaw addressed by Microsoft this month was exploited by Buhtrap threat actor to target a government organization in Eastern Europe. Microsoft Patch Tuesday updates for July 2019 address a total of 77 vulnerabilities, including two privilege escalation flaws actively exploited in the wild. Pierluigi Paganini.

Government 83

Government Advertising Passwords Banking 83

Security Affairs

DECEMBER 22, 2022

The Government of Pyongyang focuses on crypto hacking to fund its military program following harsh U.N. “South Korea’s main spy agency, the National Intelligence Service, said North Korea’s capacity to steal digital assets is considered among the best in the world because of the country’s focus on cybercrimes since U.N.

Cryptocurrency 128

Cryptocurrency Cybercrime Media Government 128

Security Affairs

JANUARY 2, 2022

In a classified report cited by Chosun, the US National Intelligence Service (DNI) found that North Korea was financing its ‘priority policies’, such as nuclear and missile development, through cybercrime. SecurityAffairs – hacking, North Korea-linked threat actors). “Citing the U.S. 380 billion. Pierluigi Paganini.

Cryptocurrency 126

Cryptocurrency Cybercrime Media Government 126

Security Affairs

SEPTEMBER 6, 2022

Researchers discovered a previously undocumented software control panel, named TeslaGun, used by a cybercrime gang known as TA505. Researchers from cybersecurity firm PRODAFT have discovered a previously undocumented software control panel, tracked as TeslaGun, used by a cybercrime group known as TA505. Pierluigi Paganini.

Cybercrime 92

Cybercrime Banking Malware Retail 92

Security Affairs

OCTOBER 24, 2021

Threat actors are offering for sale a database containing 50 million records belonging to Moscow drivers on a hacking forum for $800. Bad news for Russian drivers, threat actors are selling a database containing 50 million records belonging to Moscow drivers on a hacking forum for only $800. SecurityAffairs – hacking, Moscow drivers).

Insurance 98

Insurance Hacking Cybercrime Media 98

Security Affairs

NOVEMBER 8, 2021

Clop ransomware gang has been active since February 2019, it targeted many organizations and universities over the years. SecurityAffairs – hacking, Operation Cyclone). The post Operation Cyclone targets Clop Ransomware affiliates appeared first on Security Affairs. ” reads the press release published by Interpol.

Ransomware 121

Ransomware Cybercrime Malware Hacking 121