Security Affairs

APRIL 21, 2024

The cybersecurity researchers observed threat actors obtaining initial access to organizations through a virtual private network (VPN) service without multifactor authentication (MFA) configured. The attackers mostly used Cisco vulnerabilities CVE-2020-3259 and CVE-2023-20269.

Ransomware 108

Ransomware Encryption Antivirus VPN 108

Security Affairs

NOVEMBER 4, 2020

3 (@pancak3lullz) October 15, 2020. KPOT Stealer is a “stealer” malware that focuses on exfiltrating account information and other data from web browsers, instant messengers, email, VPN, RDP, FTP, cryptocurrency, and gaming software. #KPOT source code up for sale! pic.twitter.com/fJ3BwlaHsR — ??????3

Ransomware 137

Ransomware Malware Advertising Cybercrime 137

Security Affairs

MARCH 16, 2022

The new vulnerabilities added to the catalog include one SonicWall SonicOS issue, tracked as CVE-2020-5135 , and 14 Microsoft Windows flaws addressed between 2016 and 2019. The CVE-2020-5135 is a stack-based buffer overflow that affects the SonicWall Network Security Appliance (NSA).

VPN 90

VPN Network Security Hacking Cybersecurity 90

Security Affairs

AUGUST 21, 2020

Hackers aim at collecting login credentials for networks of the target organizations, then they attempt to monetize their efforts by selling access to corporate resources in the cybercrime underground. “The actors then convinced the targeted employee that a new VPN link would be sent and required their login, including any 2FA or OTP.”

Social Engineering 120

Social Engineering VPN Phishing Authentication 120

Security Affairs

MARCH 21, 2020

.” Experts from cyber-security firm Bad Packets speculate attackers might have exploited the CVE-2019-11510 vulnerability to compromise unpatched Pulse Secure VPN servers at the Fintech firm. . link] pic.twitter.com/JrdDojlTuF — Bad Packets Report (@bad_packets) March 20, 2020. Travelex deja vu?

Cyber Attacks 115

Cyber Attacks Data breaches Advertising Ransomware 115

Security Affairs

AUGUST 26, 2021

Threat actors are targeting Pulse Connect Secure VPN devices exploiting multiple flaws, including CVE-2021-22893 and CVE-2021-22937. CVE-2021-22893 is a buffer overflow issue in Pulse Connect Secure Collaboration Suite prior b9.1R11.4 Ivanti fixed this critical code execution issue in Pulse Connect Secure VPN early this month.

Malware 131

Malware VPN Authentication Hacking 131

Security Affairs

JANUARY 19, 2020

January 2020 Adobe Patch Tuesday updates fix issues in Illustrator, Experience Manager. Microsoft addresses CVE-2020-0601 flaw, the first issue ever reported by NSA. Two PoC exploits for CVE-2020-0601 NSACrypto flaw released. Chinese police arrested the operator of unauthorized VPN service that made $1.6

Data breaches 55

Data breaches Advertising VPN Cybercrime 55

Security Affairs

DECEMBER 22, 2022

includes several new flaws, including: Vulnerability Affected software CVE-2017-17105 Zivif PR115-204-P-RS CVE-2019-10655 Grandstream CVE-2020-25223 WebAdmin of Sophos SG UTM CVE-2021-42013 Apache CVE-2022-31137 Roxy-WI CVE-2022-33891 Apache Spark ZSL-2022-5717 MiniDVBLinux. “Since the release of Zerobot 1.1,

IoT 117

IoT DDOS Malware Firmware 117

Security Affairs

DECEMBER 31, 2021

The RedLine malware allows operators to steal several information, including credentials, credit card data, cookies, autocomplete information stored in browsers, cryptocurrency wallets, credentials stored in VPN clients and FTP clients. The malicious code can also act as a first-stage malware.

Accountability 133

Accountability Malware Data breaches Passwords 133

Security Affairs

NOVEMBER 29, 2020

A cyberattack crippled the IT infrastructure of the City of Saint John Hundreds of female sports stars and celebrities have their naked photos and videos leaked online Romanians arrested for running underground malware services Threat actor shared a list of 49,577 IPs vulnerable Fortinet VPNs Computer Security and Data Privacy, the perfect alliance (..)

Data breaches 87

Data breaches Social Engineering Ransomware Malware 87

Security Affairs

NOVEMBER 15, 2023

VPNs, RDPs) to gain initial access to the target network and maintain persistence. The group relied on compromised credentials to authenticate to internal VPN access points.

Ransomware 118

Ransomware Manufacturing Healthcare Education 118

Security Affairs

SEPTEMBER 7, 2020

Información de Prensa pic.twitter.com/gupHjabSgX — BancoEstado (@BancoEstado) September 6, 2020. Información importante sobre nuestra red de atención pic.twitter.com/CfFeb9tCzK — BancoEstado (@BancoEstado) September 7, 2020. and Elexon electrical middleman.

Banking 112

Banking Ransomware Advertising VPN 112

Security Affairs

SEPTEMBER 10, 2020

The popular cybercrime gang is demanding a $4.5 “Equinix is currently investigating a security incident we detected that involves ransomware on some of our internal systems.” Only use secure networks and avoid using public Wi-Fi networks. Consider installing and using a VPN. ” reads the statement.

Ransomware 108

Ransomware VPN Data breaches Advertising 108

Security Affairs

MARCH 8, 2022

The ransomware operation has been active since late December 2019, this is the second time that the FBI first shares IoC related to RagnarLocker operation, the FBI first became aware of this threat in April 2020. Monitor cyber threat reporting regarding the publication of compromised VPN login credentials and change passwords and settings.

Ransomware 86

Ransomware Financial Services Passwords VPN 86

Security Affairs

SEPTEMBER 27, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

IoT 102

IoT Banking Advertising Ransomware 102

Security Affairs

JANUARY 3, 2021

If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Data breaches 96

Data breaches Mobile VPN Firewall 96

Security Affairs

OCTOBER 12, 2020

US government networks are under attack, threat actors chained VPN and Windows Zerologon flaws to gain unauthorized access to elections support systems. The CVE-2020-1472 flaw is an elevation of privilege that resides in the Netlogon. ” reads the report. ” continues the alert. ” concludes the alert.

VPN 140

VPN Government Authentication Advertising 140

Security Affairs

SEPTEMBER 7, 2021

Federal Bureau of Investigation (FBI) issued a flash alert (MU-000140-MW) to warn private industry partners of an increase of the Ragnar Locker ransomware activity following a confirmed attack from April 2020. Only use secure networks and avoid using public Wi-Fi networks. Consider installing and using a VPN.

Ransomware 90

Ransomware VPN Authentication Passwords 90

SC Magazine

JUNE 24, 2021

It claimed to have accessed the police system using a zero-day vulnerability in a VPN. The operator of Clop ransomware, GOLD TAHOE , did it too in late 2020 and early 2021 when it exploited a vulnerability in the Accellion File Transfer Appliance (FTA) software to exfiltrate data and extort victims without deploying ransomware.

Ransomware 73

Ransomware Encryption VPN Software 73

Malwarebytes

MAY 28, 2021

Wizard Spider is a cybercrime group affiliated with a what is sometimes called the Ransomware Cartel , a collective of underground groups identified by threat intelligence company Analyst1. Two years later, the group moved to using Conti, in May 2020. Only use secure networks and avoid using public Wi-Fi networks.

Healthcare 103

Healthcare Ransomware Encryption Passwords 103

Security Affairs

FEBRUARY 16, 2020

Iranian hackers have been hacking VPN servers to plant backdoors in companies around the world. Iran-linked attackers targeted Pulse Secure, Fortinet, Palo Alto Networks, and Citrix VPNs to hack into large companies as part of the Fox Kitten Campaign. ” reads the report published by ClearSky.

VPN 117

VPN Telecommunications Advertising Hacking 117

Krebs on Security

OCTOBER 8, 2020

There’s an old adage in information security: “Every company gets penetration tested, whether or not they pay someone for the pleasure.” ” Many organizations that do hire professionals to test their network security posture unfortunately tend to focus on fixing vulnerabilities hackers could use to break in.

Cybercrime 308

Cybercrime VPN Malware Penetration Testing 308

Security Affairs

NOVEMBER 25, 2023

VPNs, RDPs) to gain initial access to the target network and maintain persistence. The group relied on compromised credentials to authenticate to internal VPN access points. According to the advisory, the threat actors have exploited Zerologon ( CVE-2020-1472 ) in Microsoft’s Netlogon Remote Protocol in phishing attempts.

Ransomware 122

Ransomware Hacking Engineering Manufacturing 122

Security Affairs

DECEMBER 26, 2023

VPNs, RDPs) to gain initial access to the target network and maintain persistence. The group relied on compromised credentials to authenticate to internal VPN access points. According to the advisory, the threat actors have exploited Zerologon ( CVE-2020-1472 ) in Microsoft’s Netlogon Remote Protocol in phishing attempts.

Hacking 124

Hacking Ransomware Manufacturing Healthcare 124

Security Affairs

FEBRUARY 12, 2024

VPNs, RDPs) to gain initial access to the target network and maintain persistence. The group relied on compromised credentials to authenticate to internal VPN access points. According to the advisory, the threat actors have exploited Zerologon ( CVE-2020-1472 ) in Microsoft’s Netlogon Remote Protocol in phishing attempts.

Ransomware 117

Ransomware Encryption VPN Manufacturing 117

Security Affairs

NOVEMBER 29, 2023

VPNs, RDPs) to gain initial access to the target network and maintain persistence. The group relied on compromised credentials to authenticate to internal VPN access points. According to the advisory, the threat actors have exploited Zerologon ( CVE-2020-1472 ) in Microsoft’s Netlogon Remote Protocol in phishing attempts.

Ransomware 114

Ransomware Hacking Manufacturing Healthcare 114

Security Affairs

NOVEMBER 20, 2023

VPNs, RDPs) to gain initial access to the target network and maintain persistence. The group relied on compromised credentials to authenticate to internal VPN access points.

Ransomware 117

Ransomware Cyber Attacks Manufacturing Healthcare 117

Security Affairs

NOVEMBER 18, 2022

The group used various attack methods, including malspam campaigns, vulnerable RDP servers, and compromised VPN credentials. The threat actors were observed gaining initial access to victim networks by using single-factor logins via Remote Desktop Protocol (RDP), virtual private networks (VPNs), and other remote network connection protocols.

Ransomware 92

Ransomware VPN Manufacturing Healthcare 92

Security Affairs

MARCH 18, 2023

Promptly install available patches for commercial VPN solutions providing access for remote employees and acting as gateways in your network. The Conti group has been active since 2019, the FBI estimated that between 2020 and 2022 the gang breached hundreds of organizations. Request access to this offer here.

Ransomware 83

Ransomware Malware VPN Passwords 83

SecureList

MAY 12, 2021

Along with the rise of big-game hunting in 2020, we saw the emergence of a number of high-profile groups in the ransomware world. Hackers who are on the lookout for publicly disclosed vulnerabilities (1-days) in internet facing software, such as VPN appliances or email gateways. Part I: Three preconceived ideas about ransomware.

Ransomware 123

Ransomware Encryption Malware Cybercrime 123

Security Affairs

NOVEMBER 25, 2020

Group-IB , a global threat hunting and intelligence company, has presented its annual Hi-Tech Crime Trends 2020/2021 report. In the report, the company examines key shifts in the cybercrime world internationally between H2 2019 and H1 2020 and gives forecasts for the coming year.

Banking 133

Banking Ransomware Phishing Marketing 133

Security Affairs

JUNE 4, 2021

2020 is a case in point. If you must log in to an account of any kind while on public WiFi, use a VPN for encrypting all your internet traffic. They will read your card instead of the ATM and send the information to the hacker. It was one of the worst years (if not the worst) for cyber attacks. Hackers love it.

Accountability 115

Accountability Marketing Hacking Cryptocurrency 115