SecureList

FEBRUARY 26, 2021

The state of stalkerware in 2020 (PDF). Kaspersky’s data shows that the scale of the stalkerware issue has not improved much in 2020 compared to the last year: The number of people affected is still high. In total, 53,870 of our mobile users were affected globally by stalkerware in 2020. between 2015 and 2020.

Mobile 132

Mobile Surveillance Software Passwords 132

Krebs on Security

JUNE 1, 2023

Megatraffer explained that malware purveyors need a certificate because many antivirus products will be far more interested in unsigned software, and because signed files downloaded from the Internet don’t tend to get blocked by security features built into modern web browsers. “Antivirus software trusts signed programs more.

Malware 314

Malware Cybercrime Software Accountability 314

Security Affairs

JULY 22, 2021

Cybersecurity and Infrastructure Security Agency (CISA) published a security alert related to the discovery of 13 malware samples on compromised Pulse Secure devices, many of which were undetected by antivirus products. If these services are required, use strong passwords or Active Directory authentication.

Malware 141

Malware Antivirus Passwords Firewall 141

Security Affairs

JUNE 22, 2021

DirtyMoe is a Windows botnet that is rapidly growing, it passed from 10,000 infected systems in 2020 to more than 100,000 in the first half of 2021. “Recently, a new infection vector that cracks Windows machines through SMB password brute force is on the rise” reads the analysis published by AVAST.

DNS 145

DNS Internet Cryptocurrency Malware 145

Adam Levin

NOVEMBER 17, 2020

And like everything else in 2020, these next few weeks promise to be a disaster. Make sure your smartphone, tablet and laptop are password-protected, particularly if you’re in the habit of carrying them around wherever you go. Leverage antivirus software. Create long and strong passwords. Change passwords repeatedly.

Scams 243

Scams Retail Banking Passwords 243

Security Affairs

JULY 9, 2020

More than 15 billion username and passwords are available on cybercrime marketplaces, including over 5 billion unique credentials, states the experts. According to the company, most of the username and password combinations are available for free, and 5 billion of the above credentials are “unique.”

Cybercrime 145

Cybercrime Antivirus Marketing Accountability 145

Security Affairs

JANUARY 8, 2021

Upon executing the code, it will ask the user the path for the payload to be encrypted and the password to be used for AES encryption to hide the malware within the loader. In case, the password is not provided, the tool generates one. Experts noticed that the group also used the Ezuri loader that is similar to the original one. .

Malware 145

Malware Encryption Antivirus Passwords 145

Security Affairs

OCTOBER 6, 2020

The alert published by CISA was based on data provided by the Multi-State Information Sharing & Analysis Center (MS-ISAC) and the CISA itself since July 2020. Emotet joined the password-protected attachment bandwagon with a campaign starting Friday. This increase has rendered Emotet one of the most prevalent ongoing threats.”

Government 143

Government Banking Advertising Malware 143

Krebs on Security

FEBRUARY 9, 2023

Initially a stealthy trojan horse program delivered via email and used to steal passwords, Trickbot evolved into “a highly modular malware suite that provides the Trickbot Group with the ability to conduct a variety of illegal cyber activities, including ransomware attacks,” the Treasury Department said. Image: Microsoft.

Hacking 250

Hacking Cybercrime Ransomware Government 250

Security Affairs

SEPTEMBER 22, 2020

US Cybersecurity and Infrastructure Security Agency (CISA) is warning of a notable increase in the use of LokiBot malware by threat actors since July 2020. “CISA has observed a notable increase in the use of LokiBot malware by malicious cyber actors since July 2020. See Supplementing Passwords for more information.

Malware 105

Malware Passwords Advertising Antivirus 105

Security Boulevard

JUNE 14, 2021

rar " is downloaded, which you need to unzip with the password "NFT", as we can observe from Cloudy Night's tweet. While you could upload the original RAR file; the attacker has password-protected it and VirusTotal will be unable to scan it properly. After clicking the "Download Now" button, a file named " SkylumLuminar (NFT Beta).rar

Antivirus 142

Antivirus Accountability Malware Passwords 142

SecureList

NOVEMBER 6, 2024

This is quite an old driver, vulnerable to CVE-2020-14979 and CVE-2021-41285 , and allowing the actor to elevate privileges to NTSYSTEM as soon as the direct unchecked communication with the driver is allowed and the attacker controls input forwarded to the driver. After that, it performs an important task: creating a service with a WinRing0.sys

Software 124

Software Cryptocurrency Malware DNS 124

Security Affairs

FEBRUARY 14, 2020

#HappyValentines @CISAgov @DHS @US_CYBERCOM — USCYBERCOM Malware Alert (@CNMF_VirusAlert) February 14, 2020. CISA reports provide the following recommendations to users and administrators to strengthen the security posture of their organization’s systems: • Maintain up-to-date antivirus signatures and engines.

Malware 144

Malware Passwords Advertising Antivirus 144

CyberSecurity Insiders

APRIL 13, 2021

McAfee released an ‘MVISION’ Cloud User Report on Tuesday stating that the year 2020 witnessed over 3.1 While the ransomware attacks grew by 69 percent from Q3 2020 to Q4 2020, REvil, Thanos, RYUK, Maze and RansomeXX occupied a large share in such attacks. million cyber attacks on cloud user accounts. The post Over 3.1

Cyber Attacks 95

Cyber Attacks Accountability Antivirus Retail 95

Security Affairs

OCTOBER 26, 2021

The gang has been active since at least 2020, threat actors hit organizations from various industries. Below are the recommended mitigations included in the alert: Implement regular backups of all data to be stored as air gapped, password protected copies offline.

Ransomware 144

Ransomware Firmware Antivirus Accountability 144

SC Magazine

JUNE 18, 2021

The Blackbaud data breach was the largest health care-related incident of 2020, impacting an estimated two dozen providers and well over 10 million patients. In February 2020, threat actors hacked into its self-hosted environment, stealing data as they proliferated across the network. Photo captured from Alina Lodge website ).

Data breaches 80

Data breaches Ransomware Encryption Insurance 80

CyberSecurity Insiders

NOVEMBER 14, 2021

According to data, 2020 was a prolific year for cybercriminals who targeted these checks and benefits , hitting vulnerable people and families in their time of need. . 2: Use Strong Passwords. It may seem silly, but even in today’s day and age, the most commonly used password is “123456”. 3: Two-Factor Authentication (2FA).

Identity Theft 122

Identity Theft Passwords Password Management Accountability 122

Security Affairs

APRIL 2, 2021

The threat actors are actively exploiting the following vulnerabilities in Fortinet FortiOS: CVE-2018-13379 ; CVE-2020-12812 ; CVE-2019-5591. The joint alert also states that attackers scanning also enumerated devices for the CVE-2020-12812 and CVE-2019-5591 flaws. Implement the shortest acceptable timeframe for password changes.

Government 105

Government Passwords Accountability Firmware 105

The Last Watchdog

JUNE 21, 2020

The epidemic went truly mainstream with the release of CryptoLocker back in 2013, and it has since transformed into a major dark web economy spawning the likes of Sodinokibi, Ryuk, and Maze lineages that are targeting the enterprise on a huge scale in 2020. In early 2020, several cybercriminals groups followed suit. About the essayist.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Krebs on Security

SEPTEMBER 30, 2023

The government says Snatch used a customized ransomware variant notable for rebooting Microsoft Windows devices into Safe Mode — enabling the ransomware to circumvent detection by antivirus or endpoint protection — and then encrypting files when few services are running. ru using the email address tretyakov-files@yandex.ru.

Ransomware 294

Ransomware Accountability Cybercrime Backups 294

CyberSecurity Insiders

NOVEMBER 7, 2022

Computers are secure than smart phones – If that was the case, then why the former encountered more malware attacks in the year 2020-21 and why is that the latter is not been used for only communications. For instance, the year 2020 revelation of Pegasus malware developed by the NSO Group of Israel.

VPN 115

VPN Mobile Password Management Malware 115

Security Affairs

JUNE 11, 2021

million Windows systems between 2018 and 2020. Most of the stolen files (50%+) were text files, some of them containing software logs, passwords, personal notes, and other sensitive information. Researchers from NordLocker have discovered an unsecured database containing 1.2-terabyte terabyte of stolen data. The database includes 6.6

Malware 131

Malware Computers and Electronics Software Financial Services 131

Security Affairs

MARCH 17, 2021

In March 2020, CERT France cyber-security agency warned about a new wave of ransomware attack that was targeting the networks of local government authorities. Once compromised the target network, attackers attempt to exfiltrate the company’s accounts and passwords database. newversion file extension instead of .

Education 124

Education Ransomware Encryption Antivirus 124

Security Affairs

MAY 22, 2021

The attacks were spotted in 2020, threat actors leveraged spear-phishing attacks, exploitation of vulnerabilities in web applications, hacking the infrastructure of contractors to penetrate the infrastructure of the Russian federal executive authorities. Group to download the collected data.

Computers and Electronics 142

Computers and Electronics Malware Antivirus Government 142

Security Affairs

SEPTEMBER 7, 2020

Some antivirus solutions specifically analyze this section look for malicious VBA code in the Excel docs. The Epic Manchego threat actors stored their malicious code in a custom VBA code format, which was also password-protected to prevent researchers from analyzing it.

Cybercrime 137

Cybercrime Phishing Advertising Antivirus 137

Malwarebytes

APRIL 14, 2022

The primary goal of Zloader was originally financial theft, stealing account login IDs, passwords and other information to take money from people’s accounts. But Zloader also includes a component that disables popular security and antivirus software, thereby preventing victims from detecting the Zloader infection on their systems.

Backups 137

Backups Banking Telecommunications Internet 137

Security Affairs

DECEMBER 18, 2023

This data may include usernames, passwords, credit card numbers, social security numbers, and other sensitive information. They may use various tactics to evade antivirus and other security measures. Ransomware was discovered in late 2020, while info stealer was discovered in June 2021.

Banking 135

Banking Cybercrime Malware Accountability 135

Hot for Security

JUNE 14, 2021

Furthermore, most consumer-oriented threats focus on stealing data (passwords, credit card information, etc). As shown in our 2020 Consumer Threat Landscape Report , the surge in popularity of video conferencing solutions during the pandemic opened an unlikely door for opportunistic threat actors. iPhones are not immune to hacks.

Mobile 132

Mobile Malware Spyware Media 132

Identity IQ

AUGUST 20, 2021

According to BlueVoyant’s Cybersecurity in Higher Education 2021 report , ransomware attacks on colleges increased twofold between 2019 and 2020. Your connected devices should have updated antivirus, operating software and apps. Improve Your Password Security. Do not use the same password for different services.

Identity Theft 98

Identity Theft Passwords Education Banking 98

Malwarebytes

APRIL 23, 2021

CISA found that the attacker(s) had access to the enterprise’s network for nearly a year, between March 2020 and February 2021. CVE-2020-10148. CISA believes that a vulnerability listed as CVE-2020-10148 was used to bypass the authentication to the SolarWinds appliance. Maintain up-to-date antivirus signatures and engines.

Malware 100

Malware VPN Authentication Passwords 100

The Last Watchdog

SEPTEMBER 28, 2022

A recent survey showed that one-third of all real estate transactions had a wire fraud attempt in 2020. Text message phishing — also known as “smishing” — is when scammers send texts to entice people to transmit personal information, such as passwords or credit card numbers. Phishing via texting.

Phishing 124

Phishing Scams Cybercrime Passwords 124

Security Affairs

JANUARY 29, 2021

In mid-2020, ZINC hackers created Twitter profiles for fake security researchers that were used to retweet security content and posting about vulnerability research. . The researchers who visited the post from October 19 to 21, 2020, using the Chrome browser, were infected with a known ZINC malware.

Malware 139

Malware Antivirus Hacking Accountability 139

Malwarebytes

MARCH 17, 2021

However, from the start of 2020 onward, the malicious momentum has been building. In the 2020 State of Malware Report, Malwarebytes researchers found that Mac malware—primarily backdoors, data stealers, and cryptominers—had risen by 61 percent over the previous year. Securing themselves in the foot.

Malware 131

Malware Adware Software Passwords 131

Webroot

OCTOBER 25, 2021

In 2020, phishing scams spiked by 510 percent between January and February alone. They can operate in the background, perhaps collecting data on user’s habits or logging their keystrokes to try to steal passwords or other sensitive information. Check out Webroot® Security for Chromebook here.

Identity Theft 131

Identity Theft Spyware Phishing Antivirus 131

SC Magazine

JANUARY 26, 2021

Cybercriminals have been using a phishing kit featuring fake Office 365 password alerts as a lure to target the credentials of chief executives, business owners and other high-level corporate leaders. Additional information on the malicious operation can be found in this October 2020 Odix report. Mark Wilson/Getty Images).

Phishing 118

Phishing Passwords Security Awareness Social Engineering 118

Hacker Combat

JUNE 2, 2022

In December 2020, the DoppelPaymer extortion gang exposed documents allegedly stolen from some of its databases in the United States. Antivirus software should be active on all devices and regularly update the software while making sure fixes are executed. The ransomware gang demanded over $34 million in bitcoin to be paid as ransom.

Ransomware 132

Ransomware Manufacturing Antivirus Cyber Risk 132

SecureWorld News

JUNE 15, 2023

Cadet Blizzard is believed to have started its operations in 2020, with a primary focus on targeting government services, law enforcement, non-profit organizations, IT service providers, and emergency services in Ukraine. Enable controlled folder access (CFA) to prevent MBR/VBR modification."

Hacking 103

Hacking Authentication Cyber threats Antivirus 103