Security Boulevard

AUGUST 2, 2022

Widespread implementation of decentralized finance (DeFi) systems since 2020 has created new fertile ground for a variety of threat actors to shift the development of cyberattack tactics, techniques, and procedures (TTPs). It is easy to detect and block things like malicious cryptocurrency apps or crypto-phishing websites.

Cryptocurrency 98

Cryptocurrency Ransomware Government Risk 98

SecureList

AUGUST 23, 2021

billion USD in 2021, which is slightly less than the total revenue in 2020 but still significantly above the pre-pandemic figures. In this report, we cover PC and mobile threats as well as various phishing schemes that capitalize on popular games. Pandemic-related statistics cover the period of January 2020 through June 2021.

Adware 112

Adware Mobile Phishing Malware 112

SecureList

OCTOBER 20, 2021

Having been in the field for so long, we have witnessed some major changes in the cybercrime world’s modus operandi. This report shares our insights into the Russian-speaking cybercrime world and the changes in how it operates that have happened in the past five years.

Cybercrime 137

Cybercrime Banking Malware Ransomware 137

SecureList

FEBRUARY 23, 2022

share in 2020 to the second most common in 2021 with 12.2%. Emotet (9.3%), described by Europol as “the world’s most dangerous malware”, underwent a drop of five percentage points between 2020 and 2021.This The mass change in cybercriminals’ objectives and methods seen in 2020 continued in 2021.

Banking 94

Banking Phishing Cryptocurrency Malware 94

Malwarebytes

APRIL 19, 2022

A new advisory issued by the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the US Treasury Department (Treasury), highlights the cyberthreats associated with cryptocurrency thefts and tactics used by a North Korean state-sponsored advanced persistent threat (APT) group since at least 2020.

Social Engineering 115

Social Engineering Cryptocurrency Computers and Electronics Engineering 115

SecureList

NOVEMBER 23, 2021

First of all, we are going to analyze the forecasts we made at the end of 2020 and see how accurate they were. The COVID-19 pandemic is likely to cause a massive wave of poverty, and that invariably translates into more people resorting to crime, including cybercrime. Analysis of forecasts for 2021. Definitely yes.

Cryptocurrency 104

Cryptocurrency Banking Cybercrime Ransomware 104

SecureList

MARCH 29, 2023

However, traditional financial threats – such as banking malware and financial phishing, continue to take up a significant share of such financially-motivated cyberattacks. Meanwhile, cryptocurrency became a prominent target for those seeking monetary gain. In addition to financial malware, we also examined phishing activities.

Banking 71

Banking Phishing Cryptocurrency Mobile 71

SC Magazine

APRIL 8, 2021

And yet, it’s become such a hot trend that scammers have taken notice and are attempting to lure current and prospective traders onto NFT-themed phishing and fraud websites. billion in 2020. “We For example, “Scammers could build fake NFT user interfaces that steal cryptocurrency without providing the value they claim,” said Spiro.

Scams 137

Scams Cryptocurrency Phishing Marketing 137

Webroot

APRIL 7, 2021

With investors currently bullish on Bitcoin, is its high value is driving cybercriminals to pursue crypto-generating forms of cybercrime like ransomware and illicit miners? A study by Palo Alto Networks charted a growth rate of 171 percent in ransoms paid between 2019 and 2020, with the average cost now over $312 thousand. An iron law?

Ransomware 85

Ransomware Cryptocurrency Marketing Cybercrime 85

Security Affairs

DECEMBER 1, 2020

Microsoft warns of Vietnam-linked Bismuth group that is deploying cryptocurrency miner while continues its cyberespionage campaigns. Researchers from Microsoft reported that the Vietnam-linked Bismuth group, aka OceanLotus , Cobalt Kitty , or APT32 , is deploying cryptocurrency miners while continues its cyberespionage campaigns.

Cryptocurrency 96

Cryptocurrency Antivirus Manufacturing Government 96

SecureList

NOVEMBER 22, 2022

Cryptocurrency targeted attacks. The cryptocurrency business continues to grow, and people continue to invest their money in this market because it’s a digital asset and all transactions occur online. These are attractive aspects that cybercrime groups will be unable to resist. It also offers anonymity to users.

Cryptocurrency 87

Cryptocurrency Mobile Ransomware Banking 87

Security Affairs

MAY 27, 2022

The source code of Cerberus was released in September 2020 on underground hacking forums after its operators failed an auction. is able to steal credentials for financial and cryptocurrency apps included in the list of targeted apps that are sent by the C2. The researchers also shared indicators of compromise (IoCs) for this version.

Banking 143

Banking Malware Cybercrime Phishing 143

Identity IQ

APRIL 2, 2021

The recent Federal Bureau of Investigations Internet Crime Report shows that cybercrime has spiked, leaving hundreds of thousands of victims and costing more than $4 billion. billion in 2020. Phishing Scams. Phishing scams accounted for 241,342 complaints in the report, generating $54 million in total damages.

Scams 110

Scams Computers and Electronics Phishing Internet 110

SecureWorld News

MARCH 28, 2022

While it should come as no surprise that cybercrime broke pretty much every record in 2021, the actual numbers behind the crimes are quite revealing. Cybercrime in the last five years. The first section of the report provides an overview of what cybercrime has looked like in the last five years.

Internet 74

Internet Internet Cybercrime Ransomware 74

Security Affairs

JANUARY 10, 2024

According to DoJ, ShinyHunters posted sales of hacked data from more than 60 companies between April 2020 and July 2021. He stole people’s cryptocurrency. Then they sent phishing emails to company employees that were designed to look like they came from legitimate businesses and included links to the fake login pages.

Identity Theft 105

Identity Theft Hacking Cryptocurrency Advertising 105

eSecurity Planet

SEPTEMBER 14, 2022

Cybercrime is a growth industry like no other. billion in reported losses, up from 2020’s 791,790 complaints and $4.2 Phishing complaints were reported over 300,000 times in 2021 to IC3, the only Internet crime to crack 100,000+ complaints. Phishing attacks made up 40% of all attacks in the sector. Technological tactics.

Social Engineering 118

Social Engineering Energy and Utilities Phishing Scams 118

SecureList

NOVEMBER 9, 2022

Phishing attacks are going to become even more sophisticated, since a lot of basic tactics have already been tried this year, and businesses learned to repel those. We can therefore expect that cybercrime groups from either block will feel safe to attack companies from the opposing side.

Cybersecurity 121

Cybersecurity Cyber Insurance Cybercrime IoT 121

SecureList

JANUARY 30, 2023

Just as any other business, cybercrime needs labor. We reviewed job ads and resumes that were posted on 155 dark web forums from January 2020 through June 2022 and analyzed those containing information about a long-term engagement or a full-time job. The largest number of these, or 41% of the total, were posted in 2020.

Cybercrime 111

Cybercrime Marketing Encryption Risk 111

Webroot

FEBRUARY 11, 2021

An impersonation attack recently made headlines with the 2020 Twitter/Bitcoin scam , in which 130 high-profile Twitter accounts were compromised by outside parties to steal bitcoin. This is a scam that’s been around for years and since no one can reverse a cryptocurrency transaction, it’s very likely here to stay.

Scams 108

Scams Phishing Firewall Social Engineering 108

Security Boulevard

MARCH 22, 2022

The number of complaints increased by 7% to 847,376 from 2020 to 2021, however the reported losses increased by 64% year over year to $6.9 For several years, the #1 Cybercrime type has been Business Email Compromise followed by the #2 of Romance Scam. 2020 Losses. 2020 Victims. Phishing/Vishing/Smishing/Pharming.

Scams 98

Scams Artificial Intelligence Identity Theft Data breaches 98

SecureWorld News

AUGUST 8, 2022

It has been sold on underground hacker forums for stealing browser data, user credentials, and cryptocurrency information. LokiBot LokiBot is a Trojan malware for stealing sensitive information, including user credentials, cryptocurrency wallets, and other credentials. AZORult's developers are constantly updating its capabilities.

Malware 87

Malware Banking Healthcare Penetration Testing 87

Security Affairs

DECEMBER 3, 2021

Threat actors stole $120 million in cryptocurrencies from multiple wallets connected to the decentralized finance platform BadgerDAO. Multi-factor authentication systems protect our accounts against many phishing schemes or bulk credential stuffing attacks. The report states that over $129 million were stolen in DeFi attacks in 2020.

Hacking 97

Hacking Phishing Authentication Cryptocurrency 97

CyberSecurity Insiders

JANUARY 25, 2022

.–( BUSINESS WIRE )– CSC , a world leader in business, legal, tax, and domain security, today announced key findings from its new report, which found that nearly 500,000 web domains were registered since January 2020 containing key COVID-related terms. At CSC, we believe domain security intelligence is power.

Artificial Intelligence 52

Artificial Intelligence Phishing Technology DNS 52

BH Consulting

JUNE 8, 2021

The DBIR (for short) listed those breaches as including phishing, business email compromise, lost or stolen credentials, and misuse or human error. Dark Reading’s writeup drew the natural connection with mass working from home during Covid lockdowns, and a rise in cybercrime activity.

Ransomware 52

Ransomware Data breaches Phishing Cybersecurity 52

SecureList

NOVEMBER 23, 2023

P2E in cybercriminals’ sights The play-to-earn (P2E) gaming sector, which draws millions of players, involves earning real-world values like cryptocurrency through active participation in games. Highly disruptive attacks, such as the 2020 incident at a UAE bank , have underscored the potential of voice deepfakes as a cybercrime tool.

VPN 90

VPN Scams Education Internet 90

SiteLock

AUGUST 27, 2021

Maybe one of your employees clicks on a phishing email and accidentally gives away his work email login information. Some criminals use ransomware techniques to exploit business computers for cryptocurrency mining. Cyberattacks disrupt and even destroy businesses. Either way, now your databases haves been encrypted by attackers.

Data breaches 98

Data breaches DDOS Ransomware Marketing 98

Security Affairs

JUNE 30, 2020

Victim’s phone numbers, which in most cases came with names and emails, were contained in personalized URLs used to redirect people to websites posing as local news outlets with fabricated comments of prominent local personalities about cryptocurrency investment platform that “helped them build a fortune”.

Scams 100

Scams Media Cryptocurrency Data breaches 100

Krebs on Security

JULY 29, 2021

TARGETED PHISHING. But the more insidious threat with hacked databases comes not from password re-use but from targeted phishing activity in the early days of a breach, when relatively few ne’er-do-wells have got their hands on a hot new hacked database. The targeted phishing message that went out to classicfootballshirts.co.uk

Passwords 356

Passwords Password Management Phishing Scams 356

SecureList

AUGUST 30, 2023

A DLL with this name was used in recent deployments of a backdoor that we dubbed Gopuram , which we had been tracking since 2020. While investigating an infection of a cryptocurrency company in Southeast Asia, we found Gopuram coexisting on target computers with AppleJeus , a backdoor attributed to the Lazarus.

Malware 73

Malware Spyware Cryptocurrency Government 73

eSecurity Planet

FEBRUARY 16, 2021

For access to the decryption key, the victim must make prompt payment, often in cryptocurrency shielding the attacker’s identity. Just in 2020, the SolarWinds hack could’ve been prevented for organizations that promptly patch software. Ransomware attacks increased by 130% in 2020 ( Beazley Group ). Zero Trust. Statistics.

Ransomware 97

Ransomware Backups Software Encryption 97

Webroot

JANUARY 7, 2022

2020 may have been the year of establishing remote connectivity and addressing the cybersecurity skills gap, but 2021 presented security experts, government officials and businesses with a series of unpresented challenges. Cryptocurrency. There was no shortage of discussion surrounding cryptocurrency and its security flaws.

Cybercrime 105

Cybercrime Phishing Ransomware Cryptocurrency 105

Security Affairs

MAY 8, 2020

Group-IB, a Singapore-based cybersecurity company, observed the growth of the lifespan of phishing attacks in the second half of 2019. Figure 1 The distribution of web-phishing among target categories . CERT-GIB’s findings indicate that phishing attack perpetrators have revised their so-called target pool. Target reshuffle.

Phishing 56

Phishing Spyware Banking Malware 56

SecureList

APRIL 27, 2022

The supporting infrastructure for this operation overlaps with an operation described in a report published by Cisco Talos in September 2021, which discusses a campaign targeting government personnel in India using Netwire and Warzone (aka AveMaria RAT) dating back to the end of 2020. in June 2021.

Malware 130

Malware Firmware Government Phishing 130

SecureList

MAY 12, 2021

Along with the rise of big-game hunting in 2020, we saw the emergence of a number of high-profile groups in the ransomware world. Finally, negotiations with the victims may be handled by yet another team and when the ransom is paid out, a whole new set of skills is needed to launder the cryptocurrency obtained.

Ransomware 123

Ransomware Encryption Malware Cybercrime 123

Krebs on Security

FEBRUARY 17, 2021

Secret Service and Department of Homeland Security told reporters on Wednesday the trio’s activities involved extortion, phishing, direct attacks on financial institutions and ATM networks, as well as malicious applications that masqueraded as software tools to help people manage their cryptocurrency holdings.

Cryptocurrency 273

Cryptocurrency Financial Services Banking Government 273

SecureWorld News

FEBRUARY 18, 2021

And the targets in this case are widespread: banks, ATMs, cryptocurrency exchanges, online casinos, movie studios such as Sony Pictures, and theater chains such as AMC. million from an Indonesian cryptocurrency company in September 2018; and $11.8 million from an Indonesian cryptocurrency company in September 2018; and $11.8

Hacking 99

Hacking Cryptocurrency Computers and Electronics Banking 99

SecureWorld News

FEBRUARY 7, 2022

Cyberattacks targeting cryptocurrency exchanges were on a roll in 2021 and have continued into 2022. The panel also said one cybersecurity firm anonymously reported that North Korean "cyber-actors stole a total of $400 million worth of cryptocurrency through seven intrusions into cryptocurrency exchanges and investment firms.".

Cryptocurrency 76

Cryptocurrency Cybercrime Social Engineering Engineering 76