Security Affairs

DECEMBER 30, 2020

.” T-Mobile said that threat actors did not access names on the account, physical or email addresses, financial data, credit card information, social security numbers, tax ID, passwords, or PINs. The company reported the incident to the authorities and is investigating the incident with the heal of a cybersecurity firm.

Data breaches 133

Data breaches Mobile Telecommunications Wireless 133

SecureList

OCTOBER 7, 2022

Using LOLBINS, common legitimate pentesting tools, and fileless malware; misleading security researchers by placing false flags—these and other anti-forensic tricks often make threat attribution a matter of luck. The malware spreads through spear-phishing emails with a malicious Microsoft Office document as attachment.

Malware 144

Malware Computers and Electronics Telecommunications Encryption 144

SecureList

MARCH 29, 2023

However, traditional financial threats – such as banking malware and financial phishing, continue to take up a significant share of such financially-motivated cyberattacks. For instance, malicious spam campaigns targeting organizations grew 10-fold in April 2022, spreading Qbot and Emotet malware. of all phishing attacks in 2022.

Banking 81

Banking Phishing Cryptocurrency Mobile 81

Krebs on Security

JULY 18, 2022

re network uses at least two free VPN services to lure its users to install a malware-like software that achieves persistence on the user’s computer,” the researchers wrote. The Exe Clean service made malware look like goodware to antivirus products. su between 2016 and 2019. “The 911[.]re

VPN 312

VPN Computers and Electronics Antivirus Software 312

Krebs on Security

MAY 2, 2023

.” US JOB SERVICES KrebsOnSecurity was alerted to the data exposure by Patrick Barry , chief information officer at Charlotte, NC based Rebyc Security. Mirza shows up in more than a year’s worth of “bot logs” created by a malware infection from the Redline infostealer.

Marketing 273

Marketing Advertising Scams Telecommunications 273

SecureList

MARCH 13, 2024

Not unlike malware, stalkerware apps are much less frequent on iPhones than on Android devices due to the proprietary and closed nature of iOS. Global detection figures: affected users Using global and regional statistics, Kaspersky has been able to compare data collected in 2023 with the previous four years.

Mobile 91

Mobile Passwords Surveillance Technology 91

Security Affairs

MARCH 14, 2019

The malicious code was detected in early March 2019. In the course of further research it was revealed that GMO JS Sniffer has presumably been collecting customer payment data since November 2018. We dubbed this JS Sniffer family GMO because the malware uses gmo[.]li According to Alexa.com, the number of fila.co [.]uk

eCommerce 86

eCommerce Marketing Data breaches Advertising 86

Malwarebytes

JUNE 30, 2022

The popular malware Raccoon stealer, which suspended operations after a developer allegedly died in the Ukraine invasion, has returned. Raccoon stealer is malware as a service, with the developers selling it to would-be users. If files end up on malware scanning services, the malware authors know exactly who the leak has come from.

Cryptocurrency 78

Cryptocurrency Malware Data collection Passwords 78

Krebs on Security

DECEMBER 29, 2022

This bold about-face dumbfounded many longtime Norton users because antivirus firms had spent years broadly classifying all cryptomining programs as malware. DigitalOcean severs ties with Mailchimp after that incident , which briefly prevented the hosting firm from communicating with its customers or processing password reset requests.

Cryptocurrency 238

Cryptocurrency Cybercrime Computers and Electronics Scams 238

Security Affairs

NOVEMBER 28, 2020

Experts from threat intelligence firm KELA , speculate the threat actor could have obtained the credentials buying “Azor logs,” which are lots of data stolen from computers infected with the AzorUlt info-stealer trojan.

Accountability 105

Accountability Cybercrime Hacking Retail 105

eSecurity Planet

JANUARY 28, 2021

Bitglass secured Series D funding of $70 million in August 2019 bringing its total venture capital funding to $150 million. Morgan Asset Management, Andreessen Horowitz, General Catalyst, Formation 8, BlackRock Funds, Accel Partners, and Data Collective, as well as individual investors such as Microsoft Chairman John W.

Cybersecurity 113

Cybersecurity Artificial Intelligence Threat Detection Marketing 113

Krebs on Security

JANUARY 11, 2022

Wazawaka used multiple email addresses and nicknames on several Russian crime forums, but data collected by cybersecurity firm Constella Intelligence show that Wazawaka’s alter egos always used one of three fairly unique passwords: 2k3x8x57 , 2k3X8X57 , and 00virtual.

DDOS 271

DDOS Accountability Cybercrime Ransomware 271

Security Affairs

JULY 21, 2019

SAP Patch Day – July 2019 addresses a critical flaw in Diagnostics Agent. CVE-2019-6342 flaw allows hackers to fully compromise Drupal 8.7.4 Israel surveillance firm NSO group can mine data from major social media. Poland and Lithuania fear that data collected via FaceApp could be misused. Paper Copy.

Small Business 55

Small Business Media Spyware DNS 55