Security Affairs

NOVEMBER 7, 2024

CVE-2019-16278 – is a directory traversal issue in the function http_verify in nostromo nhttpd through 1.9.6 Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, CISA ) Versions up to 2.3.6 and unpatched 2.3.7

Firewall 129

Firewall Authentication Accountability Risk 129

Security Affairs

MAY 13, 2025

DoppelPaymer ransomware has been active since June 2019 ; in November 2020, Microsoft Security Response Center (MSRC) warned customers of the DoppelPaymerransomwareand provided useful information on the threat. The Europol states that in the US, victims payed at least 40 million euros between May 2019 and March 2021.

Ransomware 110

Ransomware Cybercrime Malware Banking 110

Security Affairs

DECEMBER 18, 2024

The APT group targeted an organization in Latin America in 2019 and 2022. While investigating the 2022 attack, the researchers noticed that the victim organization had also suffered a 2019 attack using “Careto2” and “Goreto” frameworks. ” reads the analysis published by Kaspersky.

Cyber Attacks 117

Cyber Attacks Hacking Government Malware 117

Security Affairs

DECEMBER 6, 2024

Atrium Health launched an investigation into the security breach and discovered that from January 2015 to July 2019, certain online tracking technologies were active on its MyAtriumHealth (formerly MyCarolinas) Patient Portal, accessible via web and mobile. The company notified the US Department of Health and Human Services (HHS).

Data breaches 114

Data breaches Identity Theft Accountability Technology 114

Security Affairs

DECEMBER 3, 2024

The news of the hack was reported by the Gazeta Wyborcza daily, and unfortunately, it isn’t the first time that the Pegasus spyware was used in the country. In 2021, the University of Toronto-based Citizen Lab Internet reported that a Polish opposition duo was hacked with NSO spyware.

Spyware 121

Spyware Government Surveillance Hacking 121

Security Affairs

NOVEMBER 19, 2024

Evgenii Ptitsyn and others allegedly ran an international hacking scheme since November 2020, deploying Phobos ransomware to extort victims. If convicted, the man could face up to 20 years in prison for each wire fraud count, 10 years for each computer hacking charge, and 5 years for conspiracy to commit computer fraud and abuse.

Cybercrime 118

Cybercrime Ransomware Healthcare Education 118

Security Affairs

SEPTEMBER 30, 2024

The Department of Justice charged a British national for hacking into the systems of five U.S. The Department of Justice charged the British national Robert Westbrook (39) for hacking into the systems of five U.S. From January 2019 to May 2020, the man carried out a hack-to-trade scheme, earning over $3 million in profits.

Hacking 139

Hacking Accountability Passwords Cybercrime 139

The Last Watchdog

JUNE 21, 2020

In many cases, the crooks hack managed service providers (MSPs) first and then use this access to compromise the partnering organizations. In November 2019, the criminals behind a ransomware species called Maze started a new trend that is currently gaining momentum on the dark web.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

APRIL 3, 2021

On April 3, a user has leaked the phone numbers and personal data of 533 million Facebook users in a hacking forum for free online. Bad news for Facebook, a user in a hacking forum has published the phone numbers and personal data of 533 million Facebook users. SecurityAffairs – hacking, data leak). Pierluigi Paganini.

Hacking 145

Hacking Accountability Passwords Data breaches 145

Security Affairs

JUNE 15, 2021

The source code for the Paradise Ransomware has been released on a hacking forum allowing threat actors to develop their customized variant. The source code for the Paradise Ransomware has been released on the hacking forum XSS allowing threat actors to develop their own customized ransomware operation. Pierluigi Paganini.

Ransomware 144

Ransomware Hacking Encryption Malware 144

Security Affairs

FEBRUARY 9, 2024

Black Basta ransomware gang claims the hack of the car maker Hyundai Motor Europe and the theft of three terabytes of their data. In December 2019, German media reported that hackers suspected to be members of the Vietnam-linked APT Ocean Lotus ( APT32 ) group breached the networks of the car manufacturers BMW and Hyundai.

Hacking 144

Hacking Ransomware Data breaches Manufacturing 144

Security Affairs

DECEMBER 14, 2021

The DHS has launched a new bug bounty program dubbed ‘Hack DHS’ to discover security vulnerabilities in external DHS systems. As the federal government’s cybersecurity quarterback, DHS must lead by example and constantly seek to strengthen the security of our own systems,” said Secretary Alejandro N. Mayorkas. “The

Hacking 134

Hacking Government Cybersecurity Technology 134

Security Affairs

MARCH 20, 2021

Acer is the world’s 6th-largest PC vendor by unit sales as of January 2021, it has more than 7,000 employees (2019) and in 2019 declared 234.29 financial spreadsheets, bank documents and communications) as proof of the hack. Acer is currently investigating the security breach. SecurityAffairs – hacking, ransoware).

Ransomware 145

Ransomware Hacking Computers and Electronics Malware 145

Security Affairs

FEBRUARY 10, 2025

The group was also observed exploiting vulnerabilities in Telerik UI such as CVE-2017-9248 and CVE-2019-18935. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, newsletter)

Manufacturing 113

Manufacturing Cybercrime Passwords Authentication 113

Krebs on Security

FEBRUARY 22, 2024

A new data leak that appears to have come from one of China’s top private cybersecurity firms provides a rare glimpse into the commercial side of China’s many state-sponsored hacking groups. In 2021, the Sichuan provincial government named i-SOON as one of “the top 30 information security companies.”

Government 331

Government Hacking Cyber threats Mobile 331

Security Affairs

OCTOBER 31, 2022

The Snatch ransomware group claims to have hacked HENSOLDT France, a company specializing in military and defense electronics. The Snatch ransomware group claims to have hacked the French company HENSOLDT France. The group has published a sample of the stolen data (94 MB) as proof of the hack. Pierluigi Paganini.

Computers and Electronics 123

Computers and Electronics Hacking Ransomware Data breaches 123

Krebs on Security

JUNE 22, 2022

last week said they dismantled the “ RSOCKS ” botnet, a collection of millions of hacked devices that were sold as “proxies” to cybercriminals looking for ways to route their malicious traffic through someone else’s computer. A copy of the passport for Denis Kloster, as posted to his Vkontakte page in 2019.

Advertising 317

Advertising Cybercrime System Administration Hacking 317

Security Affairs

DECEMBER 15, 2023

The Snatch ransomware group announced it had hacked the food giant Kraft Heinz, the company is investigating the claims. The Snatch ransomware group claims to have hacked Kraft Heinz in August and on December 14, it added the company to the list of victims on its leak site.

Hacking 137

Hacking Ransomware Computers and Electronics Marketing 137

Security Affairs

MAY 27, 2021

In April, the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) previously warned of attacks carried out by APT groups targeting Fortinet FortiOS servers using multiple exploits. The threat actors are actively exploiting the following vulnerabilities in Fortinet FortiOS: CVE-2018-13379 ; CVE-2020-12812 ; CVE-2019-5591.

VPN 138

VPN Government Hacking Accountability 138

Security Affairs

JANUARY 21, 2025

In May 2019, Security researchers with Tencent Security Keen Lab identified five vulnerabilities , tracked as CVE-2021-23906, CVE-2021-23907, CVE-2021-23908, CVE-2021-23909, and CVE-2021-23910, in the latest infotainment system in Mercedes-Benz cars.

Software 135

Software Architecture Media Engineering 135

Security Affairs

MAY 13, 2025

Between 2017 and 2019, the APT group mainly used DNS hijacking in its campaigns. The group targets government entities, Kurdish (political) groups like PKK, telecommunication, ISPs, IT-service providers (including security companies), NGO, and Media & Entertainment sectors. .

DNS 88

DNS Telecommunications Architecture Media 88

Security Affairs

DECEMBER 21, 2024

The NetWalker ransomware group has been active since 2019, it was operating using the Ransomware-as-a-Service (RaaS) model. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, ransomware) under the U.S.-Romania Romania extradition treaty. million ransom to recover its files.

Ransomware 110

Ransomware Healthcare Government Cryptocurrency 110

Security Affairs

APRIL 30, 2025

PRODAFT researchers warn of Russia-linked APT group Nebulous Mantis targeting NATO-related defense organizations Nebulous Mantis, a Russian-speaking cyber espionage group (aka Cuba, STORM-0978 , Tropical Scorpius , UNC2596 ), used RomCom RAT and Hancitor since 2019 to target critical infrastructure, governments, and NATO-linked entities.

Encryption 105

Encryption Ransomware Malware Phishing 105

Security Affairs

MARCH 27, 2025

CVE-2019-9874 (CVSS score of 9.8) Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, CISA ) is a Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 is a Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1

Authentication 65

Authentication Hacking Cybersecurity Risk 65

Krebs on Security

JANUARY 24, 2023

The plea comes just months after Emelyantsev was extradited from Bulgaria, where he told investigators, “America is looking for me because I have enormous information and they need it.” Denis Kloster, as posted to his Vkontakte page in 2019. “Thanks to you, we are now developing in the field of information security and anonymity!,”

Cybercrime 291

Cybercrime Advertising IoT Malware 291

Security Affairs

APRIL 28, 2025

.” io_uring is a Linux API for asynchronous I/O that uses shared ring buffers between user and kernel space, letting applications perform actions without system calls, making syscall-based security tools ineffective. in March 2019. The io_uring was introduced in the Linux kernel version 5.1

Risk 89

Risk Hacking Information Security Malware 89

Security Affairs

JANUARY 5, 2024

In August 222, the US Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) published a joint advisory to warn of Zeppelin ransomware attacks. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, ransomware)

Ransomware 135

Ransomware Hacking Encryption Malware 135

Security Affairs

SEPTEMBER 2, 2022

Researchers discovered that the infrastructure used in Cisco hack was the same used to target a Workforce Management Solution firm. Researchers from cybersecurity firm eSentire discovered that the attack infrastructure used in recent Cisco hack was also used to attack a top Workforce Management corporation in in April 2022.

Hacking 114

Hacking VPN Ransomware Passwords 114

Security Affairs

AUGUST 22, 2023

Snatch gang claims the hack of the Department of Defence South Africa and added the military organization to its leak site. In October 2022, the Snatch ransomware group claimed to have hacked the French company HENSOLDT France. The Snatch ransomware group added the Department of Defence South Africa to its data leak site.

Hacking 98

Hacking Computers and Electronics Ransomware Risk 98

Security Affairs

APRIL 21, 2025

“In some systems, initial access was gained through exploiting the RDP vulnerability (BlueKeep, CVE-2019-0708). Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,Kimsuky) Attackers exploited an RDP vulnerability to gain initial access to the target systems.

Phishing 82

Phishing Malware Security Intelligence Hacking 82

Security Affairs

MARCH 2, 2024

In October 2019, WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users. The legal action alleges that the Israeli surveillance firm tried to compromise approximately 1,400 individuals through WhatsApp hacking attempts. from April 29, 2018, to May 10, 2020).

Spyware 144

Spyware Surveillance Software Architecture 144

Security Affairs

JANUARY 12, 2022

Some of the hacking campaigns that were publicly attributed to Russian state-sponsored APT actors by U.S. SecurityAffairs – hacking, Russia-linked threat actors). The post Russia-linked threat actors targets critical infrastructure, US authorities warn appeared first on Security Affairs. Pierluigi Paganini.

Malware 144

Malware Cyber threats Government Hacking 144

Security Affairs

NOVEMBER 18, 2023

The man was arrested in September 2019 while traveling to the U. Azari orchestrated the international hacking-for-hire spearphishing campaign from his home in Israel. “From approximately November 2014 to September 2019, AZARI engaged in an extensive spearphishing campaign that targeted individuals and companies in the U.

Identity Theft 140

Identity Theft Phishing Hacking Accountability 140

Security Affairs

MAY 7, 2021

SecurityAffairs – hacking, APT29). The post Russia-linked APT29 group changes TTPs following April advisories appeared first on Security Affairs. US CISA also published details about Russian SVR activities related to SolarWinds compromise which include mitigation strategies. Follow me on Twitter: @securityaffairs and Facebook.

Cybersecurity 142

Cybersecurity Hacking Government Malware 142

Security Affairs

SEPTEMBER 19, 2021

The trio has worked as hackers-for-hire for the United Arab Emirates cybersecurity company DarkMatter between January 2016 and November 2019. ExpressVPN published an official response that confirmed the accusation of the DoJ but that pointed out that the experts took part to the Project Raven before he joined to the company in 2019.

Surveillance 145

Surveillance VPN Hacking Cybersecurity 145

The Last Watchdog

AUGUST 15, 2019

Meanwhile, the advanced hacking collectives invest in innovation and press forward. In the first four months of 2019 alone, some 22 attacks have been disclosed. days in Q2 2019, as compared to 7.3 days in Q1 2019. 2017: WannaCry – Attackers leverage hacking tools stolen from the NSA. mayors attending the U.S.

Ransomware 196

Ransomware Internet Internet Hacking 196

Security Affairs

MARCH 7, 2025

Garantex has been active since 2019, the service allowed customers to buy and sell virtual currencies using fiat currencies. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,cryptocurrenycy) Secret Service seized the website (“garantex[.]org”)

Banking 71

Banking Marketing Cryptocurrency Hacking 71