Security Affairs

JUNE 17, 2021

UNC2465 cybercrime group that is affiliated with the Darkside ransomware gang has infected with malware the website of a CCTV camera vendor. ” The SMOKEDHAM backdoor was associated by FireEye to the activity of the UNC2465 group that dates back to at least April 2019 and is considered a DARKSIDE RaaS affiliate.

Cybercrime 106

Cybercrime Ransomware Antivirus Software 106

Security Affairs

APRIL 15, 2020

The report focuses on phishing kits – the driving force of the phishing industry, which is hard to detect but extremely valuable in terms of fight against phishing. The growing demand for phishing kits is also reflected in its price that skyrocketed last year by 149 percent and exceeded $300 per item.

Phishing 103

Phishing Marketing Advertising Cyber threats 103

SecureList

OCTOBER 20, 2021

Having been in the field for so long, we have witnessed some major changes in the cybercrime world’s modus operandi. This report shares our insights into the Russian-speaking cybercrime world and the changes in how it operates that have happened in the past five years. The year 2016 saw banks in Russia hacked one after another.

Cybercrime 136

Cybercrime Banking Malware Ransomware 136

Krebs on Security

FEBRUARY 10, 2020

Justice Department today unsealed indictments against four Chinese officers of the People’s Liberation Army (PLA) accused of perpetrating the 2017 hack against consumer credit bureau Equifax that led to the theft of personal data on nearly 150 million Americans. in 2019 , according to data from S&P Global Market Intelligence.

Hacking 241

Hacking Identity Theft Government Phishing 241

Security Boulevard

APRIL 23, 2021

Phishing is today’s most dangerous cyberattack. Google noted a more than 600% spike in phishing attacks in 2020 compared to 2019 with a total of 2,145,013 phishing sites registered as of January 17, 2021, up from 1,690,000 on Jan 19, 2020. Phishing doesn’t discriminate. So did the 2020 Twitter hack.

Phishing 101

Phishing Scams Media Backups 101

Security Affairs

SEPTEMBER 18, 2020

Web-phishing targeting various online services almost doubled during the COVID-19 pandemic , it accounted for 46 percent of the total number of fake web pages. Secure web- phishing. In the first six months of 2020, CERT-GIB blocked a total of 9 304 phishing web resources, which is an increase of 9 percent compared to the previous year.

Phishing 106

Phishing Ransomware Spyware Banking 106

Security Affairs

AUGUST 5, 2019

A crook involved in a spear phishing scheme and that was in Kenya is facing up to 20 years in the US federal prison for stealing thousands of dollars from US universities. Amil Hassan Raage, 48, pleaded guilty last week in a southern California court to fraudulently receiving almost $750,000 as part of a spear phishing scheme.

Phishing 103

Phishing Banking Advertising Accountability 103

Security Affairs

FEBRUARY 9, 2021

An international operation conducted by Ukraine’s police, along with the US and Australia peers, shut down the world’s largest phishing Service U-Admin. The phishing service was involved in attacks aimed at financial institutions in 11 countries (Australia, Spain, the U.S., and caused tens of millions of dollars in losses.

Phishing 91

Phishing Scams Mobile Authentication 91

Security Affairs

APRIL 8, 2022

A Ukrainian man was sentenced in the US to 5 years in prison for his criminal activity in the cybercrime group FIN7. for high-level hacking activity in the cybercrime group FIN7 (aka Carbanak Group and the Navigator Group). The man was arrested in Bangkok, Thailand in November 2019 at the request of U.S. in May 2020.

Cybercrime 113

Cybercrime Hacking Software Phishing 113

Security Affairs

NOVEMBER 26, 2019

A group under the Magecart umbrella adopted a new tactic that leverages on MiTM and phishing attacks to target sites using external payment processors. The Full ( z) House group started using a hybrid technique in August-September of 2019. The Full ( z) House group started using a hybrid technique in August-September of 2019.

Phishing 100

Phishing Cybercrime Advertising Software 100

Security Affairs

FEBRUARY 24, 2020

Racoon malware , Legion, Mohazo, and Racealer, is an infostealer that recently appeared in the threat landscape that is advertised in hacking forums. The Raccoon stealer was first spotted in April 2019, it was designed to steal victims’ credit card data, email credentials, cryptocurrency wallets, and other sensitive data.

Cybercrime 93

Cybercrime Malware Cryptocurrency Advertising 93

Security Affairs

MARCH 6, 2023

German police announced to have dismantled an international cybercrime gang behind the DoppelPaymer ransomware operation. DoppelPaymer ransomware has been active since June 2019 , in November 2020 Microsoft Security Response Center (MSRC) warned customers of the DoppelPaymer ransomware and provided useful information on the threat.

Ransomware 82

Ransomware Cybercrime Malware Phishing 82

Security Affairs

SEPTEMBER 20, 2019

Cofense researchers spotted a phishing campaign that is targeting taxpayers in the United States to infect them with the Amadey malware. Security experts at Cofense uncovered a phishing campaign that is targeting taxpayers in the United States attempting to infect them with a new piece of malware named Amadey. Pierluigi Paganini.

Phishing 85

Phishing Social Engineering Malware Advertising 85

Threatpost

FEBRUARY 12, 2020

Cybercriminals double down on successful internet scams, with a focus on phishing, BEC and other defrauding schemes that have proven to work.

Scams 107

Scams Phishing Internet Internet 107

Security Affairs

JANUARY 19, 2019

Paying attention to cybersecurity is more important than ever in 2019. But, they also try to gain people’s credentials through phishing attacks, lock down their systems with ransomware or infiltrate poorly secured connected devices to name but a few possibilities. Cybercrime Is Extremely Profitable. trillion annually.

Cybersecurity 91

Cybersecurity Cybercrime Artificial Intelligence Government 91

Security Affairs

NOVEMBER 25, 2020

Group-IB supported an INTERPOL-led operation Falcon targeting business email compromise cybercrime gang from Nigeria, dubbed TMT. Group-IB , a global threat hunting and intelligence company, supported an INTERPOL-led operation Falcon targeting business email compromise (BEC) cybercrime gang from Nigeria, dubbed TMT by Group-IB.

Cybercrime 129

Cybercrime Phishing Social Engineering Spyware 129

SecureWorld News

JULY 9, 2021

REvil, the infamous Russian hacking group that attacked JBS Foods earlier this year, was also behind this recent Kaseya incident. Now, Malwarebytes and Trustwave are reporting that other hackers are taking advantage of the situation by starting a phishing campaign. RELATED: Phishing on Fears: How Low Will Hackers Go? ].

Hacking 80

Hacking Phishing Ransomware Healthcare 80

The Last Watchdog

JUNE 21, 2020

The logic of the raid mainly comes down to using unsecured RDP ports or spear-phishing to infiltrate networks and gain a foothold in them. In many cases, the crooks hack managed service providers (MSPs) first and then use this access to compromise the partnering organizations. They added data theft to the classic encryption scenario.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

SEPTEMBER 6, 2022

Researchers discovered a previously undocumented software control panel, named TeslaGun, used by a cybercrime gang known as TA505. Researchers from cybersecurity firm PRODAFT have discovered a previously undocumented software control panel, tracked as TeslaGun, used by a cybercrime group known as TA505. Pierluigi Paganini.

Cybercrime 96

Cybercrime Banking Malware Retail 96

Security Affairs

APRIL 3, 2024

This malware was first identified in 2019 and was initially attributed to SOLAR SPIDER’s phishing campaigns, which delivered the JSOutProx RAT to financial institutions across Africa, the Middle East, South Asia, and Southeast Asia.

Banking 104

Banking Financial Services Malware Phishing 104

Security Affairs

NOVEMBER 2, 2022

Some of the sites employed in the campaign host phishing pages. “After the initial delay, the malicious app opens phishing sites in Chrome. The content of the phishing sites varies—some are harmless sites used simply to produce pay-per-click, and others are more dangerous phishing sites that attempt to trick unsuspecting users.

Adware 110

Adware Phishing Mobile Malware 110

Security Affairs

MARCH 18, 2021

The FBI’s Internet Crime Complaint Center has released its annual report, the 2020 Internet Crime Report , which includes data from 791,790 complaints of suspected cybercrimes. billion and authorities observed an increase of more than 300,000 complaints from 2019 (+69%). million in 2019 to over $29.1 million last year.

Internet 111

Internet Internet Scams Identity Theft 111

Adam Levin

MARCH 16, 2020

The Federal Bureau of Investigation’s 2019 annual Internet Crime Report included 467,361 complaints about suspected internet crime with losses of $3.5 billion, or roughly half, of the total losses in 2019 were attributed to generic email account compromise (EAC) complaints. So Isn’t BEC Just Another Form of Phishing?

Scams 130

Scams Identity Theft Phishing Accountability 130

Security Affairs

OCTOBER 28, 2021

“AbstractEmu does not exploit zero-click remote exploits, instead it exploits very contemporary vulnerabilities (CVE-2020-0041, CVE-2020-0069, CVE-2019-2215 and CVE-2020-0041 ) from 2019 and 2020 to target the largest number of devices as possible. . SecurityAffairs – hacking, cybercrime). Pierluigi Paganini.

Malware 101

Malware Cybercrime Mobile Banking 101

Security Affairs

JUNE 12, 2019

“During the period of March to May 2019, Morphisec Labs observed a new, highly sophisticated variant of the ShellTea / PunchBuggy backdoor malware that attempted to infiltrate a number of machines within the network of a customer in the hotel-entertainment industry.” SecurityAffairs – FIN8, hacking). Pierluigi Paganini.

Hacking 80

Hacking Malware Advertising Retail 80

SecureWorld News

JULY 9, 2021

REvil, the infamous Russian hacking group that attacked JBS Foods earlier this year, was also behind this recent Kaseya incident. Now, Malwarebytes and Trustwave are reporting that other hackers are taking advantage of the situation by starting a phishing campaign. RELATED: Phishing on Fears: How Low Will Hackers Go? ].

Hacking 52

Hacking Phishing Ransomware Healthcare 52

Security Affairs

OCTOBER 20, 2019

TA505 cybercrime group that operated the Dridex Trojan and Locky ransomware, has been using a new RAT dubbed SDBbot in recent attacks. Security experts at Proofpoint observed the notorious TA505 cybercrime group that has been using a new RAT dubbed SDBbot in recent attacks. Pierluigi Paganini. SecurityAffairs – SDBbot RAT, TA505).

Cybercrime 44

Cybercrime Advertising Retail Banking 44

Security Affairs

FEBRUARY 28, 2020

An interesting report published by RiskIQ on 2019 Mobile App Threat Landscape, lists the most dangerous mobile app store online. Mobile users downloaded over 200 billion apps in 2019 and the overall expense in app stores worldwide has been estimated in more than $120 billion. SecurityAffairs – hacking, app stores).

Mobile 114

Mobile Advertising Cybercrime Phishing 114

Security Affairs

OCTOBER 26, 2022

The man is currently being held in the Netherlands, he was charged for his alleged role the international cybercrime operation known as Raccoon Infostealer. The Raccoon stealer was first spotted in April 2019, it was designed to steal victims’ credit card data, email credentials, cryptocurrency wallets, and other sensitive data.

Identity Theft 88

Identity Theft Cryptocurrency Cyber threats Cybercrime 88

Security Affairs

FEBRUARY 8, 2022

The Roaming Mantis SMS phishing campaign is now targeting Android and iPhone users in Europe with malicious apps and phishing pages. Roaming Mantis surfaced in March 2018 when hacked routers in Japan redirecting users to compromised websites. SecurityAffairs – hacking, Roaming Mantis). ” concludes Kaspersky.

Phishing 92

Phishing DNS Malware Hacking 92

Security Affairs

JANUARY 2, 2020

” Crooks set up websites that look like related to the official movie, the websites are designed to deliver the malware or for phishing purposes. 2018 2019 Change Attacks detected 257,580 285,103 +10% Number of unique files 16,395 11,499 -30% Users targeted 50,196 37,772 -25%. SecurityAffairs – Star Wars, hacking).

Phishing 87

Phishing Malware Advertising Media 87

Security Affairs

MARCH 13, 2020

European authorities dismantled two cybercrime organizations responsible for stealing millions through SIM hijacking. European authorities managed to dismantle the operations of two cybercrime gangs responsible for stealing millions through SIM hijacking. SecurityAffairs – SIM Hijacking, cybercrime). million). .

Banking 120

Banking Cybercrime Mobile Accountability 120

Security Affairs

AUGUST 27, 2022

On-demand food delivery service DoorDash disclosed a data breach, the threat actors behind the Twilio hack gained access to the company’s data. “Based on our investigation, we determined the vendor was compromised by a sophisticated phishing attack. SecurityAffairs – hacking, Twilio). Pierluigi Paganini.

Data breaches 92

Data breaches Phishing Hacking Authentication 92

Security Affairs

JANUARY 28, 2023

The recent Hive infrastructure takedown as well as other major gangs dissolution such as Conti in 2022, is making room in the cybercrime business The Lockbit locker leaked a few months ago in the underground, is increasing its popularity and adoption among micro-criminal actors.

Penetration Testing 95

Penetration Testing Ransomware Firewall Social Engineering 95

Security Affairs

OCTOBER 18, 2020

Researchers from FireEye’s Mandiant observed FIN11 hackers using spear-phishing messages distributing a malware downloader dubbed FRIENDSPEAK. ” The attack chain starts when the victims enable the macro embedded in an Excel spreadsheet that came with the phishing e-mails. . SecurityAffairs – hacking, FIN11).

Ransomware 132

Ransomware Malware Telecommunications Advertising 132

Security Affairs

SEPTEMBER 3, 2022

SecurityAffairs – hacking, newsletter). users China-linked APT40 used ScanBox Framework in a long-running espionage campaign Russian streaming platform Start discloses a data breach impacting 7.5M Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Data breaches 71

Data breaches Malware Surveillance Ransomware 71

Security Affairs

SEPTEMBER 25, 2020

Polish authorities have dismantled a major hacker group that was involved in multiple cybercrime activities, including ransomware attacks, malware distribution, SIM swapping, banking fraud, running rogue online stores, and even making bomb threats at the behest of paying customers. SecurityAffairs – hacking, hackers).

Cybercrime 86

Cybercrime Banking Malware Mobile 86