Security Affairs

OCTOBER 10, 2020

Microsoft has uncovered Zerologon attacks that were allegedly conducted by the infamous TA505 Russia-linked cybercrime group. Microsoft spotted a series of Zerologon attacks allegedly launched by the Russian cybercrime group tracked as TA505 , CHIMBORAZO and Evil Corp. states Microsoft. We strongly recommend patching.

Cybercrime 119

Cybercrime Security Intelligence Authentication Banking 119

Security Affairs

JANUARY 3, 2021

Data from major cyber security firms revealed that tens of billion records have been exposed in data breaches exposed in 2020. Below a list of top incidents: There were a number of major data breaches that took place in 2020, in many cases stolen records flooded the cybercrime underground and were used credential stuffing attacks.

Data breaches 131

Data breaches Cybercrime Hacking Passwords 131

Krebs on Security

JANUARY 30, 2024

In each attack, the victims saw their email and financial accounts compromised after suffering an unauthorized SIM-swap, wherein attackers transferred each victim’s mobile phone number to a new device that they controlled. Prosecutors say Noah Michael Urban of Palm Coast, Fla., Twilio disclosed in Aug. According to an Aug.

Social Engineering 318

Social Engineering Mobile Cybercrime Passwords 318

SiteLock

AUGUST 27, 2021

Data breaches stole numerous headlines this year, including the notable Capital One breach that exposed more than 100 million customers’ accounts. According to SiteLock researchers and cybersecurity experts, the threat landscape will only continue to grow in 2020 and will likely bring even more new challenges with it.

Cybersecurity 98

Cybersecurity Phishing Data breaches IoT 98

Krebs on Security

MARCH 9, 2023

A Croatian national has been arrested for allegedly operating NetWire , a Remote Access Trojan (RAT) marketed on cybercrime forums since 2012 as a stealthy way to spy on infected systems and siphon passwords. Constella also shows the email address zankomario@gmail.com used the password “dugidox2407.”

DNS 248

DNS Cybercrime Passwords Accountability 248

Krebs on Security

JANUARY 8, 2024

In 2020, the United States brought charges against four men accused of building a bulletproof hosting empire that once dominated the Russian cybercrime industry and supported multiple organized cybercrime groups. From January 2005 to April 2013, there were two primary administrators of the cybercrime forum Spamdot (a.k.a

Cybercrime 209

Cybercrime Banking Computers and Electronics DDOS 209

Krebs on Security

APRIL 30, 2024

On October 21, 2020, the Vastaamo Psychotherapy Center in Finland became the target of blackmail when a tormentor identified as “ransom_man” demanded payment of 40 bitcoins (~450,000 euros at the time) in return for a promise not to publish highly sensitive therapy session notes Vastaamo had exposed online.

DDOS 238

DDOS Cybercrime Hacking Passwords 238

Krebs on Security

JUNE 1, 2023

One of Megatraffer’s ads on an English-language cybercrime forum. Megatraffer has continued to offer their code-signing services across more than a half-dozen other Russian-language cybercrime forums, mostly in the form of sporadically available EV and non-EV code-signing certificates from major vendors like Thawte and Comodo.

Malware 242

Malware Cybercrime Software Antivirus 242

Security Affairs

DECEMBER 18, 2023

This data may include usernames, passwords, credit card numbers, social security numbers, and other sensitive information. Bank logs : These are sets of data containing sensitive information about a bank account. Cashout : The term “cashout” refers to the process of extracting money from compromised bank accounts.

Banking 116

Banking Cybercrime Malware Accountability 116

Security Affairs

DECEMBER 31, 2021

The Have I Been Pwned data breach notification service now includes credentials for 441K accounts that were stolen by RedLine malware. The service now includes credentials for 441K accounts stolen by the popular info-stealer. RS is the key source of identity data sold on online criminal forums since its initial release in early 2020.

Accountability 132

Accountability Malware Data breaches Passwords 132

Krebs on Security

DECEMBER 3, 2021

More commonly, that access is purchased from a cybercriminal broker who specializes in acquiring remote access credentials — such as usernames and passwords needed to remotely connect to the target’s network. The username associated with that account was “ bo3dom.” com back in 2011, and sanjulianhotels[.]com

Ransomware 296

Ransomware Passwords Accountability Cybercrime 296

Security Affairs

JUNE 13, 2023

million Zacks Investment Research users was leaked on a cybercrime forum. According to HIBP, the records in the database contain names, addresses, phone numbers, email addresses, usernames, and passwords stored as unsalted SHA-256 hashes. HIBP pointed out that the most recent record in the leaked database is dated May 2020.

Data breaches 85

Data breaches Passwords Cybercrime Encryption 85

Krebs on Security

JUNE 29, 2023

Kislitsin is accused of hacking into the now-defunct social networking site Formspring in 2012, and conspiring with another Russian man convicted of stealing tens of millions of usernames and passwords from LinkedIn and Dropbox that same year. Nikulin is currently serving a seven-year sentence in the U.S. prison system.

Cybersecurity 249

Cybersecurity Cybercrime Hacking Technology 249

SecureList

AUGUST 23, 2021

billion USD in 2021, which is slightly less than the total revenue in 2020 but still significantly above the pre-pandemic figures. Analysts predict that mobile gaming will account for $90.7 Most of the statistics presented in the report were collected between July 1, 2020 and June 30, 2021.

Adware 112

Adware Mobile Phishing Malware 112

Herjavec Group

NOVEMBER 16, 2020

You got it – in 2020, your employees will be using corporate devices on home networks to shop the best deals of the holiday season. Even amateur hackers can snoop on public Wi-Fi and pick up your email and other account login IDs and passwords. Change all of your passwords. Black Friday and Cyber Monday are approaching.

Cybercrime 76

Cybercrime Cybersecurity Passwords Scams 76

Malwarebytes

JULY 25, 2022

Word is spreading of a compromise claimed to have accessed around 69 million user accounts. Back in 2014, “tens of millions” of Neopets accounts were said to have been traded on underground forums. In 2020, there were claims of ways to potentially gain access to user accounts. Neopets also addressed this.

Data breaches 75

Data breaches Accountability Passwords Password Management 75

Krebs on Security

FEBRUARY 9, 2023

Authorities in the United States and United Kingdom today levied financial sanctions against seven men accused of operating “ Trickbot ,” a cybercrime-as-a-service platform based in Russia that has enabled countless ransomware attacks and bank account takeovers since its debut in 2016. companies and government entities.

Hacking 193

Hacking Cybercrime Ransomware Government 193

Krebs on Security

MARCH 15, 2021

com , a wildly popular service that sold access to more than 12 billion usernames and passwords stolen from thousands of hacked websites. In an ironic turn of events, a lapsed domain registration tied to WeLeakInfo let someone plunder and publish account data on 24,000 customers who paid to access the service with a credit card.

Passwords 294

Passwords Accountability Hacking Data breaches 294

Krebs on Security

NOVEMBER 3, 2022

On October 21, 2020, Vastaamo became the target of blackmail when a tormentor identified as “ ransom_man ” demanded payment of 40 bitcoins (~450,000 euros at the time) in return for a promise not to publish highly sensitive therapy session notes Vastaamo had exposed online. The extortion message targeted Vastaamo patients.

Data breaches 196

Data breaches Cybercrime Telecommunications Accountability 196

Krebs on Security

JANUARY 10, 2024

Dellone says the crooks then used his phone number to break into his account at Coinbase and siphon roughly $100,000 worth of cryptocurrencies. 2023 story here about how experts now believe it’s likely hackers are cracking open some of the password vaults stolen in the 2022 data breach at LastPass. federal court.”

Cryptocurrency 277

Cryptocurrency Government Cybercrime Accountability 277

Krebs on Security

AUGUST 19, 2021

“According to this actor, he had originally intended to send his targets—all senior-level executives—phishing emails to compromise their accounts, but after that was unsuccessful, he pivoted to this ransomware pretext,” Hassold wrote. billion in 2020. Image: FBI. Open our letter at your email. ” Image: Sophos.

Ransomware 359

Ransomware Social Engineering Cybercrime Scams 359

Security Affairs

APRIL 24, 2020

Nintendo has disconnected the NNID legacy login system from main Nintendo profiles after it has discovered a massive account hijacking campaign. The gaming giant Nintendo announced that hackers gained accessed at least 160,000 user accounts as part of an account hijacking campaign since early April. ” reported ZDNet.

Accountability 99

Accountability Passwords Data breaches Advertising 99

Security Boulevard

JUNE 7, 2022

As people conduct more and more business online — both in their personal and professional lives — cybercrime has become big business, more organized and well-funded than ever. With the acceleration in digital spending, there’s been an increase in related cyberthreats, like account takeover. billion in 2021 when compared with 2020.

Accountability 64

Accountability Artificial Intelligence Risk Big data 64

Malwarebytes

MARCH 17, 2021

The so-called “mastermind” behind the 2020 Twitter hack that compromised the accounts of several celebrities and public figures—including President Barack Obama, Bill Gates, and Elon Musk—pleaded guilty to several charges on Tuesday in a Florida court. He will also earn credit for the 229 days that he has already spent in jail.

Hacking 82

Hacking Social Engineering Scams Accountability 82

Krebs on Security

FEBRUARY 1, 2021

.” The proprietors of the phishing service were variously known on cybercrime forums under handles such as SMSBandits, “ Gmuni ,” “ Bamit9 ,” and “ Uncle Munis.” One of SMS Bandits’ key offerings: An “auto-shop” web panel for selling stolen account credentials.

Phishing 326

Phishing Telecommunications Mobile Advertising 326

Krebs on Security

JULY 13, 2020

Data Viper , a security startup that provides access to some 15 billion usernames, passwords and other information exposed in more than 8,000 website breaches, has itself been hacked and its user database posted online. The incident also highlights the often murky area between what’s legal and ethical in combating cybercrime.

Hacking 348

Hacking Marketing Cybercrime Accountability 348

Krebs on Security

SEPTEMBER 30, 2023

.” New York City-based cyber intelligence firm Flashpoint said the Snatch ransomware group was created in 2018, based on Truniger’s recruitment both on Russian language cybercrime forums and public Russian programming boards. was also used to register an account at the online game stalker[.]so ru account and posted as him.

Ransomware 218

Ransomware Accountability Cybercrime Backups 218

Krebs on Security

FEBRUARY 14, 2022

In January, KrebsOnSecurity examined clues left behind by “ Wazawaka ,” the hacker handle chosen by a major ransomware criminal in the Russian-speaking cybercrime scene. ” The @fuck_maze account messaged me a few times on Twitter, but largely stayed silent until Jan. This post is an attempt to remedy that.

VPN 201

VPN Ransomware Cybercrime Accountability 201

Krebs on Security

MARCH 1, 2022

A Ukrainian security researcher this week leaked several years of internal chat logs and other sensitive data tied to Conti , an aggressive and ruthless Russian cybercrime group that focuses on deploying its ransomware to companies with more than $100 million in annual revenue. The Contileaks account did not respond to requests for comment.

Ransomware 271

Ransomware Healthcare Cybercrime Government 271

SecureList

FEBRUARY 26, 2021

The state of stalkerware in 2020 (PDF). Kaspersky’s data shows that the scale of the stalkerware issue has not improved much in 2020 compared to the last year: The number of people affected is still high. In total, 53,870 of our mobile users were affected globally by stalkerware in 2020. between 2015 and 2020.

Mobile 80

Mobile Surveillance Software Passwords 80

Security Affairs

MARCH 16, 2020

Last week, Open Exchange Rates disclosed a data breach that exposed the personal information and hashed passwords for customers of its API service. Last week, the currency data provider Open Exchange Rates has disclosed a data breach that exposed the personal information and salted and hashed passwords for customers of its API service.

Data breaches 105

Data breaches Passwords Advertising Accountability 105

SecureWorld News

JANUARY 22, 2024

Microsoft disclosed that it recently fell victim to a cyberattack by Nobelium, the Russian state-sponsored hacking group infamously responsible for the 2020 SolarWinds supply chain attack. The breach, detected on January 12th, allowed the hackers to access email accounts belonging to members of Microsoft's senior leadership team.

Passwords 101

Passwords Accountability Backups Hacking 101

The Last Watchdog

SEPTEMBER 28, 2022

Because the address comes across as an internal team member, people trust them, ultimately exposing themselves to cybercrime. Business impersonation is increasing exponentially with hackers gaining access to company email accounts. A recent survey showed that one-third of all real estate transactions had a wire fraud attempt in 2020.

Phishing 124

Phishing Scams Cybercrime Passwords 124

Security Affairs

FEBRUARY 10, 2022

. “The Federal Bureau of Investigation is issuing this announcement to inform mobile carriers and the public of the increasing use of Subscriber Identity Module (SIM) swapping by criminals to steal money from fiat and virtual currency accounts.” Use a variation of unique passwords to access online accounts.

Mobile 91

Mobile Cryptocurrency Authentication Accountability 91

Security Affairs

OCTOBER 17, 2022

In September 2020, 80% of MyDeal were acquired by Woolworths, anyway Woolworths was not impacted by the security breach. Also, no customer account passwords were accessed. MyDeal does not store payment, drivers licence or passport details and no customer account passwords or payment details have been compromised in this breach.

Retail 115

Retail Data breaches Passwords Accountability 115

The Last Watchdog

DECEMBER 19, 2022

Cybercrime is a big business. Cybersecurity firm Positive Technologies found 88 new IAB sales on dark web marketplaces in the first quarter of 2020, compared to just three in all of 2017. Ransomware is already the fastest-growing type of cybercrime , and IABs make it more accessible to novice criminals.

Cybercrime 124

Cybercrime Digital transformation Ransomware Cybersecurity 124

Security Affairs

JANUARY 30, 2023

Sports fashion retail JD Sports discloses a data breach that explosed data of about 10M customers who placed orders between 2018 and 2020. UK sports fashion chain JD Sports disclosed a data breach that exposed customer data from orders placed between November 2018 and October 2020. The affected JD Sports group brands are JD, Size?,

Data breaches 90

Data breaches Retail Passwords Scams 90