Krebs on Security

JUNE 22, 2022

.” The DOJ’s statement doesn’t mention that RSOCKS has been in operation since 2014, when access to the web store for the botnet was first advertised on multiple Russian-language cybercrime forums. A copy of the passport for Denis Kloster, as posted to his Vkontakte page in 2019. info , allproxy[.]info

Advertising 263

Advertising Cybercrime System Administration Hacking 263

Security Affairs

APRIL 18, 2021

The Ukrainian national Fedir Hladyr (35), aka “das” or “AronaXus,” was sentenced to 10 years in prison for having served as a manager and systems administrator for the financially motivated group FIN7 , aka Carbanak. companies, predominantly in the restaurant, gambling, and hospitality industries.” ” concludes DoJ.

System Administration 121

System Administration Penetration Testing Malware Banking 121

Security Affairs

MARCH 18, 2022

Mandiant researchers discovered a new Unix rootkit named Caketap, which is used to steal ATM banking data, while investigating the activity of the LightBasin cybercrime group (aka UNC1945 ). CrowdStrike researchers reported that at least 13 telecommunication companies were compromised by the group since 2019.

Banking 133

Banking Telecommunications System Administration Hacking 133

Security Affairs

MARCH 14, 2023

The Makop criminals were recently using version 2.5.3869 of the tool, which dates back to 2019. In fact, Makop criminals are still using tools built back in 2019 and 2020 to compromise small and medium enterprises around the world. Advanced_Port_Scanner_2.5.3869.exe Everything is freeware software maintained by Voidtools.

Ransomware 89

Ransomware Software System Administration Encryption 89

Security Affairs

OCTOBER 3, 2023

Our investigation revealed that this remote endpoint is associated with criminal activities dating back to 2019, indicating that these hosts were likely under the control of the same technical administration. For instance: In September 2019, Cybereason found this hostname in old LockBit 2.0

Scams 128

Scams Ransomware System Administration Malware 128

eSecurity Planet

DECEMBER 3, 2021

Here are the top Twitter accounts to follow for the latest commentary, research, and much-needed humor in the ever-evolving information security space. lazydocker : A simple terminal UI for both docker and docker-compose : [link] pic.twitter.com/HsK17rzg8m — Binni Shah (@binitamshah) July 1, 2019. Denial-of-Suez attack.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139

Security Affairs

MARCH 27, 2023

The Originating Malvertising Campaign According to CTI investigation on the adversary infrastructure, we were able to identify an ongoing campaign luring system administrators to install the malicious code into their machines.

Malware 89

Malware Social Engineering Encryption Marketing 89