SecureList

OCTOBER 20, 2021

Having been in the field for so long, we have witnessed some major changes in the cybercrime world’s modus operandi. This report shares our insights into the Russian-speaking cybercrime world and the changes in how it operates that have happened in the past five years.

Cybercrime 137

Cybercrime Banking Malware Ransomware 137

Security Affairs

FEBRUARY 19, 2024

In October 2020, the US Justice Department charged a Ukrainian national, Mark Sokolovsky (28), with computer fraud for allegedly infecting millions of computers with the Raccoon Infostealer. The man was held in the Netherlands, and he was charged for his alleged role in the international cybercrime operation known as Raccoon Infostealer.

Identity Theft 94

Identity Theft Cryptocurrency Cybercrime Hacking 94

Krebs on Security

JANUARY 30, 2024

authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. 12 blog post , the attackers used their access to Mailchimp employee accounts to steal data from 214 customers involved in cryptocurrency and finance. 9, 2024, U.S.

Social Engineering 318

Social Engineering Mobile Cybercrime Passwords 318

Krebs on Security

MARCH 28, 2021

The group looks for attacks on Exchange systems using a combination of active Internet scans and “honeypots” — systems left vulnerable to attack so that defenders can study what attackers are doing to the devices and how. Just my Social Security number. I’d been doxed via DNS.

Hacking 352

Hacking Cybercrime DNS Antivirus 352

SecureList

NOVEMBER 23, 2021

First of all, we are going to analyze the forecasts we made at the end of 2020 and see how accurate they were. The COVID-19 pandemic is likely to cause a massive wave of poverty, and that invariably translates into more people resorting to crime, including cybercrime. Analysis of forecasts for 2021. Definitely yes.

Cryptocurrency 104

Cryptocurrency Banking Cybercrime Ransomware 104

SecureList

AUGUST 23, 2021

billion USD in 2021, which is slightly less than the total revenue in 2020 but still significantly above the pre-pandemic figures. Most of the statistics presented in the report were collected between July 1, 2020 and June 30, 2021. Pandemic-related statistics cover the period of January 2020 through June 2021.

Adware 112

Adware Mobile Phishing Malware 112

Krebs on Security

MARCH 9, 2023

A Croatian national has been arrested for allegedly operating NetWire , a Remote Access Trojan (RAT) marketed on cybercrime forums since 2012 as a stealthy way to spy on infected systems and siphon passwords. In October 2012, the WorldWiredLabs domain moved to another dedicated server at the Internet address 198.91.90.7,

DNS 248

DNS Cybercrime Passwords Accountability 248

Malwarebytes

SEPTEMBER 19, 2023

Since then, cybercrime group specialists from the North Rhine-Westphalia State Criminal Police Office (LKA NRW), together with the Cybercrime Central and Contact Point (ZAC NRW), carried out another targeted strike against people associated with the criminal network. Both of these suspects are currently on EUROPOL's "Most-Wanted" list.

Ransomware 114

Ransomware Backups Cryptocurrency Cybercrime 114

Krebs on Security

MAY 9, 2023

They accept payment via PayPal, Google Wallet, and/or cryptocurrencies, and subscriptions can range in price from just a few dollars to several hundred per month. Booter services are advertised through a variety of methods, including Dark Web forums, chat platforms and even youtube.com.

DDOS 219

DDOS Cybercrime Internet Internet 219

CyberSecurity Insiders

FEBRUARY 8, 2021

Later security firm ENKI said that Lazarus could have carried out the latest file encrypting malware attack by exploiting a zero day vulnerability in Internet Explorer browser of Windows operating system. Note- Lazarus group aka Guardians of Peace is a Cybercrime group that is being funded by North Korean intelligence- as per US Intelligence.

Ransomware 134

Ransomware Social Engineering Cryptocurrency Cybercrime 134

Security Affairs

MAY 26, 2021

Last week, French authorities have seized the dark web marketplace Le Monde Parallèle, it is another success of national police in the fight against cybercrime. French authorities seized the dark web marketplace Le Monde Parallèle, the operation is another success of national police in the fight against cybercrime activity in the dark web.

Cybercrime 142

Cybercrime Cryptocurrency Banking Mobile 142

Security Affairs

NOVEMBER 9, 2021

Threat actors execute malicious scripts to deploy Monero cryptocurrency miners, perform container-to-host escape using well-known techniques, and scan the Internet for exposed ports from other compromised containers. The attack chain starts with the creation of a container on a vulnerable host using an exposed Docker REST API.

Cryptocurrency 100

Cryptocurrency Malware Cybercrime Architecture 100

Security Affairs

FEBRUARY 10, 2022

In 2018, the FBI Internet Crime Complaint Center (IC3) received complaints for 1,611 SIM swapping attacks, while the number of complaints in the period between 2018 e 2002 was 320 causing a total of losses of $12 million. ” reads the Publish Service Announcement published by the IC3.

Mobile 90

Mobile Cryptocurrency Authentication Accountability 90

Security Affairs

SEPTEMBER 19, 2022

AquaSec researchers observed the cybercrime gang TeamTNT hijacking servers to run Bitcoin solver since early September. In the first week of September, AquaSec researchers identified at least three different attacks targeting their honeypots, the experts associated them with the cybercrime gang TeamTNT. ” continue the experts.

Encryption 94

Encryption Cybercrime Hacking Malware 94

Security Affairs

FEBRUARY 10, 2021

Europol investigators revealed that the cybercrime organization stole more than $100 million worth of cryptocurrency using SIM Swapping attacks. The National Crime Agency revealed that the SIM swapping attacks targeted numerous victims throughout 2020, including well-known influencers, sports stars, musicians, and their families.

Cybercrime 82

Cybercrime Cryptocurrency Accountability Authentication 82

SecureList

FEBRUARY 23, 2022

share in 2020 to the second most common in 2021 with 12.2%. Emotet (9.3%), described by Europol as “the world’s most dangerous malware”, underwent a drop of five percentage points between 2020 and 2021.This The mass change in cybercriminals’ objectives and methods seen in 2020 continued in 2021.

Banking 94

Banking Phishing Cryptocurrency Malware 94

Security Affairs

MAY 26, 2021

. “Most of the compromised nodes were from China and the US identified in the ISP (Internet Service Provider) list, which had Chinese and US-based providers as the highest hits, including some CSPs (Cloud Service Providers).” The malware deploys the XMRig mining tool to mine Monero cryptocurrency. aws/credentials and ~/.aws/config

Cryptocurrency 133

Cryptocurrency Malware Internet Internet 133

Identity IQ

APRIL 2, 2021

The recent Federal Bureau of Investigations Internet Crime Report shows that cybercrime has spiked, leaving hundreds of thousands of victims and costing more than $4 billion. Moreover, losses due to internet crime increased by $700 million, growing from $3.5 billion in 2020. billion in 2020. billion in 2019 to $4.2

Scams 110

Scams Computers and Electronics Phishing Internet 110

Security Affairs

JANUARY 9, 2023

The crypto-miner Kinsing was first spotted by security firm Aqua Security in April 2020, at the time the experts spotted threat actors scanning the Internet for Docker servers running API ports exposed without a password. The Kinsing malware abuses the resources of the Docker installations to mine cryptocurrency.

Malware 91

Malware Authentication Cryptocurrency Internet 91

eSecurity Planet

SEPTEMBER 14, 2022

Cybercrime is a growth industry like no other. According to statistics from the FBI’s 2021 Internet Crime Report , complaints to the Internet Crime Complaint Center (IC3) have been rising since 2017. billion in reported losses, up from 2020’s 791,790 complaints and $4.2 billion in reported losses. Individuals.

Social Engineering 118

Social Engineering Energy and Utilities Phishing Scams 118

SecureList

NOVEMBER 9, 2022

We can therefore expect that cybercrime groups from either block will feel safe to attack companies from the opposing side. In 2023, we might see a slight decline in ransomware attacks, reflecting the slowdown of the cryptocurrency markets. Businesses will still be mostly concerned with ransomware.

Cybersecurity 121

Cybersecurity Cyber Insurance Cybercrime IoT 121

Herjavec Group

OCTOBER 27, 2020

According to Cybersecurity Ventures – cybercrime will cost the world $6 trillion annually by 2021 ! Cybercrime will cost the world $6 trillion annually by 2021 , up from $3 trillion in 2015. Ransomware, the fastest growing type of cybercrime, cost the world $11.5 Los Angeles, Calif. – Cyber Primer for the C-Suite.

Security Awareness 73

Security Awareness Cybersecurity Cybercrime Education 73

Security Boulevard

MARCH 22, 2022

The FBI's Internet Crime Complaint Center (ic3.gov) gov) has released their 2021 Internet Crime Report. The number of complaints increased by 7% to 847,376 from 2020 to 2021, however the reported losses increased by 64% year over year to $6.9 In 2020, the average victim lost $25,272, but in 2021, the average victim lost $39,344.

Scams 98

Scams Artificial Intelligence Identity Theft Data breaches 98

Security Affairs

JUNE 13, 2021

That means these numbers are the floor, and that the situation out on the Internet is worse than the mounting numbers indicate.” . “The APWG’s members are reporting more confirmed phishing attacks,” said Greg Aaron, Senior Research Fellow at the APWG, and the editor of the new report.

Phishing 103

Phishing Advertising Cryptocurrency Encryption 103

Security Affairs

DECEMBER 7, 2021

The botnet was involved in stealing users’ credentials and data, mining cryptocurrencies abusing victims’ resources, and setting up proxies to funnel other people’s internet traffic through infected machines and routers. Botnet operators use to spread the malware via cracked or pirated software and pay-per-install (PPI) schemes.

Backups 112

Backups Advertising Accountability Malware 112

SecureList

MARCH 29, 2023

Meanwhile, cryptocurrency became a prominent target for those seeking monetary gain. The amount of cryptocurrency-related phishing grew significantly in 2022, and with an endless array of new coins, NFT and other DeFi projects, scammers are continuously duping users. Now we see that APT actors have also switched to crypto.

Banking 71

Banking Phishing Cryptocurrency Mobile 71

Security Affairs

SEPTEMBER 27, 2020

fitness chains Town Sports leaked online Group-IB detects a series of ransomware attacks by OldGremlin HOW DO PROVIDERS IMPLEMENT INTERNET BLOCKING IN BELARUS? Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

IoT 102

IoT Banking Advertising Ransomware 102

SecureList

NOVEMBER 23, 2023

Internet segmentation Amid growing geopolitical tensions, some web resources have blocked users from certain countries and regions. Whichever the reason, this leads to the segmentation of the internet, which damages the availability of information. There are two main reasons for that: political pressure and DDoS attacks.

VPN 90

VPN Scams Education Internet 90

SecureList

FEBRUARY 16, 2021

In Q4 2020, Citrix ADC (application delivery controller) devices became one such tool, when perpetrators abused their DTLS interface. While the resource was down, cryptocurrency newbies were invited to download a copy of Bitcoin Core via a torrenting service. Overall, Q4 remained within the parameters of 2020 trends.

DDOS 129

DDOS Cryptocurrency Marketing Internet 129

CyberSecurity Insiders

JANUARY 25, 2022

.–( BUSINESS WIRE )– CSC , a world leader in business, legal, tax, and domain security, today announced key findings from its new report, which found that nearly 500,000 web domains were registered since January 2020 containing key COVID-related terms.

Artificial Intelligence 52

Artificial Intelligence Phishing Technology DNS 52

Security Affairs

NOVEMBER 15, 2023

IPStorm botnet continues to infect systems across the world, its size passed from around 3,000 infected systems in May 2019 to more than 13,500 devices in October 2020. ” The man admitted that he gained at least $550,000 from the fraudulent activity, he will forfeit cryptocurrency wallets used to hold the crime proceeds. .

Hacking 91

Hacking Cryptocurrency Cyber Attacks Advertising 91

Security Affairs

AUGUST 28, 2020

The authors of the Lemon_Duck cryptomining malware have also added a module that exploits the SMBGhost (CVE-2020-0796) Windows SMBv3 Client/Server RCE. Experts noticed that the threat actors exploited the CVE-2020-0796 flaw to collect information on compromised machines instead of running arbitrary code on the vulnerable systems.

Malware 138

Malware Authentication Passwords Internet 138

SecureWorld News

APRIL 29, 2021

Escobar reigned in the 80's when the internet was a just a crazy thought in the back of someone's mind. And with the staggering rise in ransomware attacks in 2020 and 2021, most hackers demand ransom payment to be made in Bitcoin. But a lot of examples of these criminal masterminds are from the past.

Identity Theft 52

Identity Theft Cryptocurrency Advertising Internet 52

eSecurity Planet

FEBRUARY 16, 2021

The internet is fraught with peril these days, but nothing strikes more fear into users and IT security pros than the threat of ransomware. For access to the decryption key, the victim must make prompt payment, often in cryptocurrency shielding the attacker’s identity. Zero Trust. Bring-Your-Own-Device (BYOD)Restrictions.

Ransomware 97

Ransomware Backups Software Encryption 97

Krebs on Security

JUNE 7, 2021

The funds had been sent to DarkSide , a ransomware-as-a-service syndicate that disbanded after a May 14 farewell message to affiliates saying its Internet servers and cryptocurrency stash were seized by unknown law enforcement entities. ” A message from the DarkSide and REvil ransomware-as-a-service cybercrime affiliate programs.

Ransomware 300

Ransomware Cybercrime Cryptocurrency Healthcare 300

Krebs on Security

JULY 29, 2021

One might even say passwords are the fossil fuels powering most IT modernization: They’re ubiquitous because they are cheap and easy to use, but that means they also come with significant trade-offs — such as polluting the Internet with weaponized data when they’re leaked or stolen en masse. TARGETED PHISHING.

Passwords 356

Passwords Password Management Phishing Scams 356

Webroot

JANUARY 7, 2022

2020 may have been the year of establishing remote connectivity and addressing the cybersecurity skills gap, but 2021 presented security experts, government officials and businesses with a series of unpresented challenges. Cryptocurrency. There was no shortage of discussion surrounding cryptocurrency and its security flaws.

Cybercrime 105

Cybercrime Phishing Ransomware Cryptocurrency 105