Threatpost

DECEMBER 30, 2019

Cybercrime increasingly went mobile in 2019, with everything from Apple iPhone jailbreaks and rogue Android apps to 5G and mobile-first phishing dominating the news coverage. Here are Threatpost's Top 10 mobile security stories of 2019.

Mobile 63

Mobile Cybercrime Phishing IoT 63

Security Affairs

FEBRUARY 24, 2020

Raccoon Malware is a recently discovered infostealer that can extract sensitive data from about 60 applications on a targeted system. Racoon malware , Legion, Mohazo, and Racealer, is an infostealer that recently appeared in the threat landscape that is advertised in hacking forums. ” reads the report published by CyberArk.

Cybercrime 92

Cybercrime Malware Cryptocurrency Advertising 92

Security Affairs

OCTOBER 28, 2021

AbstractEmu is a new Android malware that can root infected devices to take complete control and evade detection with different tricks. Security researchers at the Lookout Threat Labs have discovered a new Android malware, dubbed AbstractEmu , with rooting capabilities that is distributed on Google Play and prominent third-party stores (i.e.

Malware 101

Malware Cybercrime Mobile Banking 101

Security Affairs

JUNE 17, 2021

UNC2465 cybercrime group that is affiliated with the Darkside ransomware gang has infected with malware the website of a CCTV camera vendor. ” The SMOKEDHAM backdoor was associated by FireEye to the activity of the UNC2465 group that dates back to at least April 2019 and is considered a DARKSIDE RaaS affiliate.

Cybercrime 105

Cybercrime Ransomware Antivirus Software 105

SecureList

OCTOBER 20, 2021

Having been in the field for so long, we have witnessed some major changes in the cybercrime world’s modus operandi. This report shares our insights into the Russian-speaking cybercrime world and the changes in how it operates that have happened in the past five years. Client-side attacks on the wane.

Cybercrime 136

Cybercrime Banking Malware Ransomware 136

Security Affairs

DECEMBER 30, 2022

A new Linux malware has been exploiting 30 vulnerabilities in outdated WordPress plugins and themes to deploy malicious JavaScripts. Doctor Web researchers discovered a Linux malware, tracked as Linux.BackDoor.WordPressExploit.1, WordPress Ultimate FAQ (vulnerabilities CVE-2019-17232 and CVE-2019-17233). WP Live Chat.

Malware 91

Malware Hacking Accountability Phishing 91

Security Affairs

SEPTEMBER 18, 2020

Web-phishing targeting various online services almost doubled during the COVID-19 pandemic , it accounted for 46 percent of the total number of fake web pages. Downloaders , intended for the installation of additional malware,and backdoors , granting cybercriminals remote access to victims’ computers, also made it to top-3.

Phishing 106

Phishing Ransomware Spyware Banking 106

Security Boulevard

APRIL 23, 2021

Phishing is today’s most dangerous cyberattack. Google noted a more than 600% spike in phishing attacks in 2020 compared to 2019 with a total of 2,145,013 phishing sites registered as of January 17, 2021, up from 1,690,000 on Jan 19, 2020. Phishing doesn’t discriminate. What is the Most Common Form of Phishing?

Phishing 101

Phishing Scams Media Backups 101

Security Affairs

JANUARY 2, 2020

Crooks are exploiting the popularity of the Star Wars saga to monetize their efforts, experts warn of online streaming sites delivering malware. Cybercriminals leverage popular movies like Star Wars to lure users into downloading malware to watch exclusive scenes or the full movie. Pierluigi Paganini.

Phishing 88

Phishing Malware Advertising Media 88

Security Affairs

SEPTEMBER 20, 2019

Cofense researchers spotted a phishing campaign that is targeting taxpayers in the United States to infect them with the Amadey malware. Security experts at Cofense uncovered a phishing campaign that is targeting taxpayers in the United States attempting to infect them with a new piece of malware named Amadey.

Phishing 86

Phishing Social Engineering Malware Advertising 86

Security Affairs

MARCH 6, 2023

German police announced to have dismantled an international cybercrime gang behind the DoppelPaymer ransomware operation. DoppelPaymer ransomware has been active since June 2019 , in November 2020 Microsoft Security Response Center (MSRC) warned customers of the DoppelPaymer ransomware and provided useful information on the threat.

Ransomware 83

Ransomware Cybercrime Malware Phishing 83

Security Affairs

JUNE 20, 2022

The developers behind the BRATA Android malware have implemented additional features to avoid detection. The operators behind the BRATA Android malware have implemented more features to make their attacks stealthy. “TAs are modifying their code in order to tailor their malware on specific banking institutions.

Malware 105

Malware Banking Antivirus Phishing 105

Security Affairs

NOVEMBER 26, 2019

A group under the Magecart umbrella adopted a new tactic that leverages on MiTM and phishing attacks to target sites using external payment processors. The Full ( z) House group started using a hybrid technique in August-September of 2019. The Full ( z) House group started using a hybrid technique in August-September of 2019.

Phishing 100

Phishing Cybercrime Advertising Software 100

Security Affairs

APRIL 3, 2024

Once executed, the malware enables the framework to load various plugins, which conduct additional malicious activities on the target. It employs the.NET (de)serialization feature to interact with a core JavaScript module running on the victim’s machine.

Banking 105

Banking Financial Services Malware Phishing 105

Security Affairs

FEBRUARY 9, 2021

An international operation conducted by Ukraine’s police, along with the US and Australia peers, shut down the world’s largest phishing Service U-Admin. The phishing service was involved in attacks aimed at financial institutions in 11 countries (Australia, Spain, the U.S., and caused tens of millions of dollars in losses.

Phishing 91

Phishing Scams Mobile Authentication 91

Security Affairs

NOVEMBER 25, 2020

Group-IB supported an INTERPOL-led operation Falcon targeting business email compromise cybercrime gang from Nigeria, dubbed TMT. Group-IB , a global threat hunting and intelligence company, supported an INTERPOL-led operation Falcon targeting business email compromise (BEC) cybercrime gang from Nigeria, dubbed TMT by Group-IB.

Cybercrime 127

Cybercrime Phishing Social Engineering Spyware 127

Security Affairs

SEPTEMBER 6, 2022

Researchers discovered a previously undocumented software control panel, named TeslaGun, used by a cybercrime gang known as TA505. Researchers from cybersecurity firm PRODAFT have discovered a previously undocumented software control panel, tracked as TeslaGun, used by a cybercrime group known as TA505.

Cybercrime 96

Cybercrime Banking Malware Retail 96

SecureList

FEBRUARY 23, 2022

SpyEye, developed in 2009 and described as a “bank Trojan with a form grabbing capability”, surged from the eighth most common banking malware tool with a 3.4% Emotet (9.3%), described by Europol as “the world’s most dangerous malware”, underwent a drop of five percentage points between 2020 and 2021.This

Banking 93

Banking Phishing Cryptocurrency Malware 93

Security Affairs

NOVEMBER 2, 2022

The apps are infected with the Android/Trojan.HiddenAds.BTGTHB malware, the apps totaled at least one million downloads. Some of the sites employed in the campaign host phishing pages. “After the initial delay, the malicious app opens phishing sites in Chrome. 1,000+ downloads. ” continues the report.

Adware 110

Adware Phishing Mobile Malware 110

Krebs on Security

SEPTEMBER 6, 2021

In May 2015, KrebsOnSecurity briefly profiled “ The Manipulaters ,” the name chosen by a prolific cybercrime group based in Pakistan that was very publicly selling spam tools and a range of services for crafting, hosting and deploying malicious email. One of several current Fudtools sites run by The Manipulaters.

Software 235

Software Phishing Cybercrime Accountability 235

Webroot

SEPTEMBER 7, 2023

Cybercrime is on the rise. The number of ransomware attacks has increased by 18% , while the worldwide volume of phishing attacks doubled to 500 million in 2022. Depending on the size of the business, one-third to two-thirds of businesses suffer malware attacks in any given year. billion to data breaches and cybercrime.

Encryption 88

Encryption Cyber Insurance Cybercrime Phishing 88

Security Affairs

APRIL 8, 2022

A Ukrainian man was sentenced in the US to 5 years in prison for his criminal activity in the cybercrime group FIN7. for high-level hacking activity in the cybercrime group FIN7 (aka Carbanak Group and the Navigator Group). The man was arrested in Bangkok, Thailand in November 2019 at the request of U.S. in May 2020. Polite, Jr.

Cybercrime 113

Cybercrime Hacking Software Phishing 113

Hot for Security

APRIL 5, 2021

But regular consumers are equally affected by cybercrime, directly or indirectly. A key stat: cybercrime in 2020 was marked by a visible and aggressive targeting of the human layer. A key stat: cybercrime in 2020 was marked by a visible and aggressive targeting of the human layer. Android malware.

Cybercrime 116

Cybercrime Ransomware Cyber threats Surveillance 116

SiteLock

AUGUST 27, 2021

In fact, the World Economic Forum (WEF) projects that by 2021: Global cybercrime costs could total approximately $6 trillion in the US. If cybercrime were a country, it would have the third largest economy in the world. Clearly, cybercrime is big business, and it operates like one. How big is the impact of cybercrime?

Cybersecurity 98

Cybersecurity Cybercrime DDOS Malware 98

Security Affairs

OCTOBER 18, 2020

Researchers from FireEye’s Mandiant observed FIN11 hackers using spear-phishing messages distributing a malware downloader dubbed FRIENDSPEAK. ” The attack chain starts when the victims enable the macro embedded in an Excel spreadsheet that came with the phishing e-mails. . ” reads the analysis published by FireEye.

Ransomware 131

Ransomware Malware Telecommunications Advertising 131

Security Affairs

JANUARY 28, 2023

The recent Hive infrastructure takedown as well as other major gangs dissolution such as Conti in 2022, is making room in the cybercrime business The Lockbit locker leaked a few months ago in the underground, is increasing its popularity and adoption among micro-criminal actors.

Penetration Testing 95

Penetration Testing Ransomware Firewall Social Engineering 95

SecureList

MARCH 29, 2023

However, traditional financial threats – such as banking malware and financial phishing, continue to take up a significant share of such financially-motivated cyberattacks. For instance, malicious spam campaigns targeting organizations grew 10-fold in April 2022, spreading Qbot and Emotet malware.

Banking 71

Banking Phishing Cryptocurrency Mobile 71

IT Security Guru

AUGUST 30, 2022

As such, the cost of cybercrime is set to increase with the global cybersecurity market estimated to reach $403.01 This resulted in over 18,000 SolarWinds customers installing the malicious updates, thereby spreading the malware without detection. Global Phishing Attacks. This amounts to 57 times more than in 2015. government.

Cybersecurity 101

Cybersecurity Phishing Ransomware Marketing 101

Cisco Security

AUGUST 12, 2021

For several years, Cisco Secure provided DNS visibility and architecture intelligence with Cisco Umbrella and Cisco Umbrella Investigate ; and automated malware analysis and threat intelligence with Cisco Secure Malware Analytics (Threat Grid) , backed by Cisco Talos Intelligence and Cisco SecureX. CyberCrime Tracker.

DNS 141

DNS Firewall Phishing Mobile 141

Security Affairs

OCTOBER 26, 2022

The man is currently being held in the Netherlands, he was charged for his alleged role the international cybercrime operation known as Raccoon Infostealer. The Raccoon stealer was first spotted in April 2019, it was designed to steal victims’ credit card data, email credentials, cryptocurrency wallets, and other sensitive data.

Identity Theft 90

Identity Theft Cryptocurrency Cyber threats Cybercrime 90

Security Affairs

FEBRUARY 8, 2022

The Roaming Mantis SMS phishing campaign is now targeting Android and iPhone users in Europe with malicious apps and phishing pages. Roaming Mantis is a credential theft and malware campaign that leverages smishing to distribute malicious Android apps in the format of APK files. ” concludes Kaspersky.

Phishing 93

Phishing DNS Malware Hacking 93

Security Affairs

OCTOBER 20, 2019

TA505 cybercrime group that operated the Dridex Trojan and Locky ransomware, has been using a new RAT dubbed SDBbot in recent attacks. Security experts at Proofpoint observed the notorious TA505 cybercrime group that has been using a new RAT dubbed SDBbot in recent attacks. Pierluigi Paganini. SecurityAffairs – SDBbot RAT, TA505).

Cybercrime 45

Cybercrime Advertising Retail Banking 45

Security Affairs

SEPTEMBER 25, 2020

Polish authorities have dismantled a major hacker group that was involved in multiple cybercrime activities, including ransomware attacks, malware distribution, SIM swapping, banking fraud, running rogue online stores, and even making bomb threats at the behest of paying customers.

Cybercrime 86

Cybercrime Banking Malware Mobile 86

Security Affairs

FEBRUARY 28, 2020

An interesting report published by RiskIQ on 2019 Mobile App Threat Landscape, lists the most dangerous mobile app store online. Mobile users downloaded over 200 billion apps in 2019 and the overall expense in app stores worldwide has been estimated in more than $120 billion. ” reads the report published by RiskIQ.

Mobile 114

Mobile Advertising Cybercrime Phishing 114

Adam Levin

NOVEMBER 25, 2020

It’s a good idea to prepare for cybercrime, and whenever possible avoid becoming a victim of it. Additionally, the political season gave rise to phishing campaigns, a phenomenon that is likely to continue through the end of the year. Protecting Against Malware and Scams While Shopping Online During the Holiday Season.

Cybersecurity 191

Cybersecurity Retail Scams Phishing 191

Security Affairs

SEPTEMBER 3, 2022

Google rolled out emergency fixes to address actively exploited Chrome zero-day Samsung discloses a second data breach this year The Prynt Stealer malware contains a secret backdoor. users China-linked APT40 used ScanBox Framework in a long-running espionage campaign Russian streaming platform Start discloses a data breach impacting 7.5M

Data breaches 72

Data breaches Malware Surveillance Ransomware 72

Security Affairs

MARCH 16, 2019

In the wake of the New Zealand mosque shooting, the CISA recommends users to remain vigilant on possible scams and malware attacks. — YouTube (@YouTube) March 15, 2019. Government experts are warning of spam campaigns using messages containing links pointing to malware or using malicious attachments. Pierluigi Paganini.

Scams 87

Scams Malware Advertising Media 87