Security Affairs

JANUARY 6, 2021

Threat actors are attempting to hack Zyxel devices exploiting the recently disclosed vulnerability CVE-2020-29583, security researchers warn. The Taiwanese vendor Zyxel has recently addressed a critical vulnerability in its firmware, tracked as CVE-2020-29583 , related to the presence of a hardcoded undocumented secret account.

Firmware 111

Firmware Passwords Accountability VPN 111

SecureList

FEBRUARY 15, 2021

In 2020: The share of spam in email traffic amounted to 50.37%, down by 6.14 Contact us to lose your money or account! In 2020, Bitcoin blackmailers stuck to their old scheme, demanding that their victims transfer money to a certain account and threatening adversity for failure to meet their demands. Figures of the year.

Phishing 143

Phishing Malware Scams Accountability 143

SecureList

MARCH 1, 2021

In 2020, Kaspersky mobile products and technologies detected: 5,683,694 malicious installation packages, 156,710 new mobile banking Trojans, 20,708 new mobile ransomware Trojans. It just so happened that the year 2020 gave hackers a large number of powerful news topics, with the COVID-19 pandemic as the biggest of these.

Mobile 141

Mobile Malware Adware Banking 141

Hot for Security

MARCH 23, 2021

Despite newly created opportunities for fraudsters to rip-off unsuspecting citizens during the ongoing pandemic, tech support scams inflicted nearly $150 million in reported losses in 2020.

Scams 111

Scams Internet Internet Banking 111

Hot for Security

APRIL 5, 2021

Bitdefender this week has published its annual Consumer Threat Landscape Report for 2020 underscoring some of the most prevalent cyber threats targeting regular users today. A key stat: cybercrime in 2020 was marked by a visible and aggressive targeting of the human layer. Aligned efforts to capitalize on COVID-19.

Cybercrime 116

Cybercrime Ransomware Cyber threats Surveillance 116

Hot for Security

MARCH 24, 2021

Fraud losses climbed to $56 billion in 2020 and identity fraud scams accounted for a staggering $43 billion of that cost, according to a new report. As consumers relied increasingly on digital payment products during 2020, identity fraud scams kept pace with this shift in behavior, the report reveals.

Scams 122

Scams Accountability Authentication Internet 122

SecureList

AUGUST 23, 2021

billion USD in 2021, which is slightly less than the total revenue in 2020 but still significantly above the pre-pandemic figures. Analysts predict that mobile gaming will account for $90.7 Most of the statistics presented in the report were collected between July 1, 2020 and June 30, 2021.

Adware 127

Adware Mobile Phishing Malware 127

SecureWorld News

MARCH 22, 2021

The FBI just released its annual Internet Crime Report, and it is truly a sign of the times. The FBI notes that the Internet Crime Complaint Center (IC3) has been key to its mission to track cybercrimes. The IC3 received 791,790 complaints from the American public in 2020, the most ever in one year, with reported losses exceeding $4.1

Cybercrime 54

Cybercrime Scams Banking Accountability 54

SiteLock

AUGUST 27, 2021

Data breaches stole numerous headlines this year, including the notable Capital One breach that exposed more than 100 million customers’ accounts. According to SiteLock researchers and cybersecurity experts, the threat landscape will only continue to grow in 2020 and will likely bring even more new challenges with it.

Cybersecurity 98

Cybersecurity Phishing Data breaches IoT 98

Hacker Combat

SEPTEMBER 6, 2021

Hackers took advantage of the mishap to gain unauthorized access to email accounts and lots of customer’s data was exposed. SEC insisted Cetera was responsible for exposing the personal data of more than 4,300 clients and customers between 2017 November and 2020 June. A spokesperson representing Cetera did not respond to the ruling. .

Accountability 100

Accountability Hacking Financial Services Data breaches 100

Security Affairs

JUNE 13, 2020

There seems to be a new stealer in town called #TroyStealer , targeting Portuguese internet users EXE: [link] Exfil email address: domionhuby@gmail.com Has anyone seen this threat before? /cc cc @CNCSgovpt @sirpedrotavares pic.twitter.com/1bDK3BtYeE — abuse.ch (@abuse_ch) June 12, 2020. The binary file.

Internet 110

Internet Internet Malware Banking 110

Krebs on Security

FEBRUARY 26, 2023

But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee. GoDaddy described the incident at the time in general terms as a social engineering attack, but one of its customers affected by that March 2020 breach actually spoke to one of the hackers involved.

Hacking 275

Hacking Social Engineering Phishing Scams 275

Krebs on Security

APRIL 6, 2021

Facebook says the data was collected before 2020 when it changed things to prevent such information from being scraped from profiles. To my mind, this just reinforces the need to remove mobile phone numbers from all of your online accounts wherever feasible. billion active monthly users. According to a Jan. Image: @UnderTheBreach.

Mobile 341

Mobile Accountability Passwords Authentication 341

Security Affairs

JULY 18, 2020

Hackers have been scanning the Internet for SAP systems affected by RECON vulnerability, researchers from Bad Packets warn. Researchers from Bad Packets reported that threat actors have been scanning the Internet for SAP systems affected by RECON vulnerability , , tracked as CVE-2020-6287.

Internet 78

Internet Internet Advertising Accountability 78

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. Chaput said that at one point last week the volume of bot accounts being registered for the crypto spam campaign started overwhelming the servers that handle new signups at Mastodon.social.

Scams 250

Scams DDOS Cryptocurrency Accountability 250

SecureWorld News

AUGUST 16, 2021

T-Mobile is investigating a post made on an underground forum that claims 100 million user accounts have been compromised in a data breach. According to the culprit, T-Mobile left a Gateway GPRS Support Node, or GGSN, exposed to the internet. GGSNs are critical components that connect mobile devices to the internet.

Data breaches 96

Data breaches Mobile Accountability Wireless 96

SecureList

DECEMBER 15, 2020

The statistics in this report cover the period from November 2019 to October 2020, inclusive. During the year, 10.18% of Internet user computers worldwide experienced at least one Malware-class attack. Millions of Kaspersky users around the globe assist us in this endeavor to collect information about malicious activity.

Banking 65

Banking Internet Internet Malware 65

Security Affairs

JANUARY 18, 2020

Microsoft published a security advisory to warn of an Internet Explorer (IE) zero-day vulnerability (CVE-2020-0674) that is currently being exploited in the wild. The tech giant confirmed that the CVE-2020-0674 zero-day vulnerability has been actively exploited in the wild. SecurityAffairs – CVE-2020-0674 , hacking).

Internet 83

Internet Internet Advertising Engineering 83

SecureWorld News

MARCH 28, 2022

The FBI's Internet Crime Complaint Center (IC3) has released its annual report, providing the public with specific details on how cybercrime has evolved in the last five years, what threats were the most persistent, and what groups were the most targeted, along with a flurry of other information and statistics.

Internet 72

Internet Internet Cybercrime Ransomware 72

Security Affairs

MAY 13, 2020

Below a list of the most severe issues fixed by Microsoft with May 2020 Patch Tuesday security updates: – CVE-2020-1071 – Windows Remote Access Common Dialog Elevation of Privilege Vulnerability – An attacker could exploit the bug in the Remote Access Common Dialog to run arbitrary code with elevated privileges.

Engineering 70

Engineering Internet Internet Media 70

Dark Reading

SEPTEMBER 2, 2020

The Russia-backed Internet Research Agency has returned with new strategies to sway voters ahead of the 2020 presidential election.

Accountability 99

Accountability Internet Internet 99

Security Affairs

JULY 25, 2020

CISA is warning of the active exploitation of the unauthenticated remote code execution CVE-2020-5902 vulnerability affecting F5 Big-IP ADC devices. “This Alert also provides additional detection measures and mitigations for victim organizations to help recover from attacks resulting from CVE-2020-5902.

Advertising 107

Advertising Government Healthcare Education 107

SecureList

FEBRUARY 26, 2021

The state of stalkerware in 2020 (PDF). Kaspersky’s data shows that the scale of the stalkerware issue has not improved much in 2020 compared to the last year: The number of people affected is still high. In total, 53,870 of our mobile users were affected globally by stalkerware in 2020. Main findings.

Mobile 94

Mobile Surveillance Software Passwords 94

Security Affairs

FEBRUARY 12, 2020

Microsoft February 2020 Patch Tuesday updates address a total of 99 new vulnerabilities, including an Internet Explorer zero-day exploited in the wild. In January, Microsoft has published a security advisory ( ADV200001 ) that includes mitigations for the CVE-2020-0674 zero-day remote code execution (RCE) flaw.

Internet 72

Internet Internet Engineering Advertising 72

Security Affairs

FEBRUARY 24, 2020

Slickwraps has disclosed a data breach that impacted over 850,000 user accounts, data were accidentally exposed due to security vulnerabilities. Well that's a big old yikes from @SlickWraps pic.twitter.com/28SOEMIBZ9 — Toneman (@Toneman) February 21, 2020. ” reported Slashgear. . ” reported Slashgear.

Accountability 92

Accountability Data breaches Passwords Advertising 92

CyberSecurity Insiders

APRIL 12, 2021

In 2020, as the world grappled with a fast-spreading global pandemic, the FBI received more than 2,000 complaints each day, totaling 791,790 for the year. billion in losses, according to data collected by the FBI’s The Internet Complaint Center (IC3). The COVID-19 pandemic played a major role in cybercriminal activities in 2020.

Cybercrime 52

Cybercrime Internet Internet Small Business 52

Security Affairs

JANUARY 19, 2021

The Federal Bureau of Investigation (FBI) has issued a notification warning of ongoing vishing attacks attempting to steal corporate accounts. The threat actors are using Voice over Internet Protocol (VoIP) platforms to obtain employees’ credentials. As a result, network access and privilege escalation may not be fully monitored.

Accountability 101

Accountability VPN Social Engineering Phishing 101

Krebs on Security

JULY 14, 2020

Top of the heap this month in terms of outright scariness is CVE-2020-1350 , which concerns a remotely exploitable bug in more or less all versions of Windows Server that attackers could use to install malicious software simply by sending a specially crafted DNS request. .”

DNS 286

DNS Backups Software System Administration 286

Security Affairs

AUGUST 10, 2020

In March 2020, The Ministry of Telecommunications (MoTC) issued a directive to all operators in Myanmar with a secret list of 230 sites to be blocked due to the nature of the content; adult content and fake news. In April 2020, Telenor complied with the directive and blocked ALL sites on the block list. Blocking without accountability.

Internet 75

Internet Internet Telecommunications DNS 75

CSO Magazine

APRIL 29, 2021

Ransomware, the " perfect crime " of the internet era, is spreading rapidly, growing according to some accounts by 150% or more in 2020. There are no signs of a slow-down in 2021.

Ransomware 138

Ransomware Internet Internet Accountability 138

Security Affairs

SEPTEMBER 18, 2023

Microsoft AI researchers accidentally exposed 38TB of sensitive data via a public GitHub repository since July 2020. ”The access level can be limited to specific files only; however, in this case, the link was configured to share the entire storage account — including another 38TB of private files.” 5, 2021 Oct.

Accountability 128

Accountability Backups Risk Passwords 128

Security Affairs

JUNE 2, 2021

Feedback message data contained Account id, feedback rating given, and users’ email addresses. Player profile data included Player id; username; country; total money spent on the game; and even Facebook, Apple, and Google account data if the user linked either account with their game account. What Data Was Leaked?

Data breaches 108

Data breaches Accountability Mobile Phishing 108

Hot for Security

MARCH 19, 2021

The FBI’s Internet Crime Complaint Center (IC3) is out with its annual Internet Crime Report, revealing that Business Email Compromise (BEC) remains a lucrative affair for cyber crooks – 62 times more lucrative than ransomware. million in 2020. Losses registered in 2020 totaled $4.2 billion.”. “The

Ransomware 87

Ransomware Identity Theft Scams Social Engineering 87

Security Boulevard

NOVEMBER 3, 2023

For several years, Mozi was among the most active botnets on the cyberthreat scene, exploiting flaws in hundreds of thousands of Internet of Things (IoT) devices every year. In a report last year, IBM’s X-Force unit said it saw a 3,000% jumped in Mozi activity between 2019 and 2020, and a year later Mozi accounted.

IoT 67

IoT Internet Internet Accountability 67

Krebs on Security

MAY 11, 2021

On deck this month are patches to quash a wormable flaw, a creepy wireless bug, and yet another reason to call for the death of Microsoft’s Internet Explorer (IE) web browser. ” Another curious bug fixed this month is CVE-2020-24587 , described as a “Windows Wireless Networking Information Disclosure Vulnerability.”

Wireless 282

Wireless Internet Internet Backups 282

Krebs on Security

NOVEMBER 21, 2020

And in May of this year, GoDaddy disclosed that 28,000 of its customers’ web hosting accounts were compromised following a security incident in Oct. 2019 that wasn’t discovered until April 2020. “This gave the actor the ability to change DNS records and in turn, take control of a number of internal email accounts. .

Cryptocurrency 363

Cryptocurrency VPN Scams Social Engineering 363

Security Affairs

JANUARY 7, 2024

Sea Turtle also used code from a publicly accessible GitHub account, which is likely under the control of the threat actor. The researchers also observed the cyber spies compromising cPanel accounts and using SSH to achieve initial access to the environment of a target’s organization.

Media 112

Media Accountability Telecommunications Government 112