Security Affairs

OCTOBER 22, 2020

According to the ENISA Threat Landscape Report 2020, cyberattacks are becoming more sophisticated, targeted, and in many cases undetected. I’m proud to present the ENISA Threat Landscape Report 2020 , the annual report published by the ENISA that provides insights on the evolution of cyber threats for the period January 2019-April 2020.

Cyber threats 100

Cyber threats Digital transformation Advertising IoT 100

Security Affairs

NOVEMBER 25, 2020

Group-IB , a global threat hunting and intelligence company, has presented its annual Hi-Tech Crime Trends 2020/2021 report. In the report, the company examines key shifts in the cybercrime world internationally between H2 2019 and H1 2020 and gives forecasts for the coming year. In June 2020, REvil started auctioning stolen data.

Banking 125

Banking Ransomware Phishing Marketing 125

Approachable Cyber Threats

SEPTEMBER 14, 2021

When we thought about 2020, it felt like hackers and ransomware should have been at the top (these fall under system intrusion). Our Analysis Perceptions of Data Breach Causes We were interested in comparing what DBIR, Google, news outlets, and academia reported as the causes of data breaches in 2020. Let's use that as our baseline.

Data breaches 98

Data breaches Social Engineering Engineering Phishing 98

Daniel Miessler

MAY 19, 2020

TOPIC: In this episode, Daniel takes a look at the 2020 Verizon Data Breach Investigations Report. 22% involved phishing. Phishing is usually going after credentials, but stealing money is continues to rise in popularity. The top 2 incident threat actions were DoS, and Phishing. Email security (because phishing).

Data breaches 130

Data breaches Phishing Malware Hacking 130

Security Affairs

OCTOBER 24, 2021

Microsoft uncovered an extensive series of credential phishing campaigns that employed a custom phishing kit tracked as TodayZoo. Microsoft researchers uncovered a custom phishing kit, dubbed TodayZoo, that was used in an extensive series of credential phishing campaigns. com domain to send the phishing messages.

Phishing 109

Phishing Passwords Hacking Accountability 109

Security Affairs

DECEMBER 20, 2020

This post includes the details of the COVID-19 themed attacks launched from December 6 – December 19, 2020. Russia-link cyberespionage APT28 leverages COVID19 as phishing lures to deliver the Go version of their Zebrocy (or Zekapab) malware. December 6 – Drug dealers are selling Pfizer COVID-19 vaccines on the darkweb.

Malware 106

Malware Phishing Hacking Information Security 106

Security Affairs

MARCH 18, 2021

The FBI’s Internet Crime Complaint Center has released its annual report, the 2020 Internet Crime Report , which includes data from 791,790 complaints of suspected cybercrimes. Data that emerged from the report are worrisome, in 2020 the reported losses exceeded $4.2 ” reads 2020 Internet Crime Report. billion in losses.

Internet 102

Internet Internet Scams Identity Theft 102

Security Affairs

APRIL 19, 2020

This post includes the details of the Coronavirus-themed attacks launched from April 12 to April 18, 2020. PaloAlto Networks experts warn of malicious Coronavirus themed phishing campaigns targeting government and medical organizations. Coronavirus-themed attacks April 05 – April 11, 2020. adrotate banner=”9″].

Scams 101

Scams Malware Phishing Surveillance 101

Security Affairs

MARCH 22, 2021

The Kaspersky ICS CERT published a report that provided details about the threat landscape for computers in the ICS engineering and integration sector in 2020. Kaspersky ICS CERT published a report that provided details about the threat landscape for ICS engineering and integration sector in 2020. In H2 2020, 39.3%

Engineering 127

Engineering VPN Accountability Software 127

Security Affairs

APRIL 5, 2020

In this post, I decided to share the details of the Coronavirus-themed attacks launched from March 29 to April 04, 2020. March 30, 2020 – Your colleague was infected with COVID19, this is the latest phishing lure. Coronavirus-themed attacks March 15 – March 21, 2020. Below a list of attacks detected this week.

Advertising 91

Advertising Phishing Malware Cybercrime 91

Security Affairs

MARCH 22, 2020

In this post, I decided to share the details of the Coronavirus-themed attacks launched from March 15 to March 21, 2020. March 21, 2020 – New Coronavirus-themed attack uses fake WHO chief emails. Day after day the number of COVID19-themed attacks increases, fraudsters have launched a phishing campaign to deliver on users’ PC.

Advertising 96

Advertising Cybercrime Scams Phishing 96

Security Affairs

FEBRUARY 25, 2022

The CERT of Ukraine (CERT-UA) warned of a spear-phishing campaign targeting Ukrainian armed forces personnel. The Computer Emergency Response Team of Ukraine (CERT-UA) is warning of an ongoing spear-phishing campaign targeting private email accounts belonging to Ukrainian armed forces personnel. reads a translation of the message.

Phishing 103

Phishing Social Engineering Government Accountability 103

Security Affairs

MAY 31, 2022

SideWinder, an aggressive APT group, is believed to have carried out over 1,000 attacks since April 2020, Kaspersky reported. The group stands out for the high frequency and persistence of its attacks, researchers believe that the APT group has carried out over 1,000 attacks since April 2020. Pierluigi Paganini.

Encryption 94

Encryption Malware Phishing Hacking 94

Schneier on Security

FEBRUARY 11, 2022

Under-resourced Information Security Managers were not performing their business as usual role (including a NIST-based cybersecurity review of systems) but were working on evaluating security controls for the COVID-19 vaccination system. (The Over 30,000 machines were running Windows 7 (out of support since January 2020).

Antivirus 298

Antivirus Hacking Ransomware CISO 298

Security Affairs

AUGUST 12, 2021

Microsoft warns of a long-running spear-phishing campaign that has targeted Office 365 customers in multiple attacks since July 2020. Microsoft revealed that a year-long spear-phishing campaign has targeted Office 365 customers in multiple attacks starting with July 2020. Pierluigi Paganini.

Phishing 113

Phishing Passwords Encryption Cybercrime 113

Security Affairs

JANUARY 21, 2021

Bad ops of operators of a phishing campaign exposed credentials stolen in attacks and made them publicly available through Google queries. . Check Point Research along with experts from cybersecurity firm Otorio shared details on their investigation into a large-scale phishing campaign that targeted thousands of global organizations.

Phishing 116

Phishing Passwords Manufacturing Healthcare 116

Security Affairs

DECEMBER 13, 2020

Subway UK confirmed the hack of a marketing system that was used to send out phishing messages to deliver malware to the customers. Hackers have compromised a marketing system in Subway UK and used it to send out phishing messages to deliver malware to the customers. The system does not hold any bank or credit card details.”

Marketing 128

Marketing Phishing Hacking Data breaches 128

Security Affairs

MARCH 29, 2020

In this post, I decided to share the details of the Coronavirus-themed attacks launched from March 22 to March 28, 2020. MalwareHunterTeam experts have identified a new Coronavirus phishing campaign that aims at delivering the Netwalker Ransomware. Coronavirus-themed attacks March 15 – March 21, 2020. Pierluigi Paganini.

Scams 102

Scams Mobile Advertising Malware 102

Security Affairs

SEPTEMBER 20, 2021

Security researchers uncovered a large phishing campaign targeting multiple government departments in APAC and EMEA countries. . Researchers from cybersecurity firm Cyjax uncovered a large phishing campaign targeting multiple government departments in APAC and EMEA countries. . SecurityAffairs – hacking, phishing).

Phishing 85

Phishing Government Cybercrime Hacking 85

Security Affairs

MARCH 30, 2020

Security experts uncovered a new Coronavirus-themed phishing campaign, the messages inform recipients that they have been exposed to the virus. Coronavirus-themed attacks March 22 – March 28, 2020. SecurityAffairs – phishing, coronavirus). xlsm ” file and bring it with them to the nearest testing center.

Phishing 134

Phishing Advertising Cryptocurrency Malware 134

Security Affairs

OCTOBER 2, 2022

German police arrested one individual suspected of having stolen €4 million from users via large-scale phishing campaigns. Germany’s Bundeskriminalamt (BKA) arrested an individual (24) suspected of having stolen €4,000,000 from internet users via phishing attacks along with a two accomplices who are suspected. Pierluigi Paganini.

Phishing 86

Phishing Banking DDOS Accountability 86

Security Affairs

JUNE 14, 2020

This post includes the details of the Coronavirus-themed attacks launched from May 31 to June 13, 2020. Below a list of attacks detected between May 31 and June 13, 2020. June 4, 2020 – North Atlantic Council is warning of malicious cyber activities during COVID-19 pandemic. Pierluigi Paganini.

Advertising 79

Advertising Phishing Government Hacking 79

Security Affairs

SEPTEMBER 23, 2021

Microsoft uncovered a large-scale phishing-as-a-service operation, dubbed BulletProofLink, that enabled threat actors to easily carry out malicious campaigns. BulletProofLink service was very cheap and allowed threat actors to arrange phishing campaigns without specific technical capabilities. ” concludes Microsoft.

Phishing 82

Phishing Cybercrime Advertising Hacking 82

Security Affairs

MAY 17, 2020

This post includes the details of the Coronavirus-themed attacks launched from May 10 to May 16, 2020. Microsoft discovered a new phishing campaign using COVID-19 lures to target businesses with the infamous LokiBot information-stealer. Coronavirus-themed attacks April 26 – May 02, 2020. Pierluigi Paganini.

Advertising 68

Advertising Healthcare Phishing Scams 68

Security Affairs

JUNE 13, 2021

The Anti-Phishing Working Group (APWG) revealed that the number of phishing websites peaked at record levels in the first quarter of 2021. The Anti-Phishing Working Group (APWG) has published its new Phishing Activity Trends Report related to the first quarter of 2021. Reported Phishing Websites for Q1 2021.

Phishing 96

Phishing Advertising Cryptocurrency Encryption 96

Security Affairs

NOVEMBER 18, 2020

The Chaes malware was first spotted in the middle to late 2020 by Cybereason researchers, it is a multistage information stealer that focuses on Brazilian customers of MercadoLivre, the largest e-commerce company in Latin America. In 2019, over 320 million users were registered with the MercadoLivre e-commerce platform. .

Phishing 109

Phishing Malware Cryptocurrency Information Security 109

Security Affairs

AUGUST 4, 2020

NetWalker ransomware operators continue to be very active, according to McAfee the cybercrime gang has earned more than $25 million since March 2020. McAfee researchers believe that the NetWalker ransomware operators continue to be very active, the gang is believed to have earned more than $25 million since March 2020. reads the alert.

Ransomware 74

Ransomware VPN Cybercrime Advertising 74

Security Affairs

FEBRUARY 13, 2021

Google revealed that Gmail users from the United States are the most targeted by email-based phishing and malware. billion email-based phishing and malware attacks against Gmail users to determine what are factors influence the risk of attack. If you want to receive the weekly Security Affairs Newsletter for free subscribe here.

Phishing 81

Phishing Malware Accountability Risk 81

Security Affairs

SEPTEMBER 11, 2020

National Counterintelligence and Security Center (NCSC) William Evanina shared information on ongoing operations aimed at influencing the 2020 US election. In recent months, the group carried out brute force attacks and password spray, instead of spear-phishing, likely to automate their operations. Pierluigi Paganini.

Accountability 74

Accountability Advertising Government Hacking 74

Security Affairs

NOVEMBER 26, 2020

Carding Action 2020 targeted crooks selling/purchasing compromised card data on sites selling stolen cred itcard data and darkweb marketplaces. Carding Action 2020 sought to mitigate and prevent losses for financial institutions and cardholders. Pierluigi Paganini. SecurityAffairs – hacking, Carding).

Cybercrime 82

Cybercrime eCommerce Banking Marketing 82

Security Affairs

MAY 17, 2024

The experts speculate the Lunar toolset has been employed since at least 2020. However, evidence suggests possible spear-phishing and exploitation of misconfigured Zabbix network and application monitoring software. The experts also spotted spear-phishing messages, including a weaponized Word document installing a LunarMail backdoor.

Phishing 120

Phishing Software Government Malware 120

Security Affairs

MAY 27, 2020

The updated Grandoreiro Malware equipped with latenbot-C2 features in Q2 2020 now extended to Portuguese banks. Cybercriminals attempt to compromise computers to generate revenue by exfiltrating information from victims’ devices, typically banking-related information. Figure 1: Grandoreiro email template Q2 2020 (Portugal).

Malware 65

Malware Banking Advertising Data collection 65

SecureWorld News

JANUARY 28, 2021

2020 was a wake-up call for more than healthcare pandemic preparedness. It also exposed some huge security and privacy vulnerabilities, which many cybercrooks have exploited thousands of times throughout 2020 for remote workers. Training must be more frequent and go beyond covering phishing and passwords. 15-20 minutes).

IoT 54

IoT Phishing Mobile Passwords 54

Security Affairs

APRIL 9, 2020

Group-IB’s CERT-GIB analyzed hundreds of coronavirus -related phishing emails and discovered top malware strains in COVID-19 campaigns. Group-IB’s Computer Emergency Response Team ( CERT-GIB ) analyzed hundreds of coronavirus-related phishing emails between February 13 and April 1, 2020. Source: CERT-GIB. Source: CERT-GIB.

Phishing 100

Phishing Malware Spyware DDOS 100

Security Affairs

MAY 2, 2021

Threat Report Portugal Q1 2021: Phishing and malware by numbers. The submissions were classified as either phishing or malware. This report provides intelligence and indicators of compromise (IOCs) that organizations can use to fight current attacks, anticipating emerging threats, and manage security awareness in a better way.

Threat Reports 81

Threat Reports Phishing Malware Data collection 81

Security Affairs

JULY 22, 2021

The submissions were classified as either phishing or malware. This report provides intelligence and indicators of compromise (IOCs) that organizations can use to fight current attacks, anticipating emerging threats, and manage security awareness in a better way. Phishing and Malware Q2 2021.

Threat Reports 113

Threat Reports Phishing Malware Banking 113

Security Affairs

FEBRUARY 21, 2024

KillSomeOne was first disclosed by a Sophos report in November 2020. Threat actors conducted spear-phishing attacks, using files related to current events as bait, such as the Taiwanese presidential election that took place in January 2024. ” concludes the report.

Malware 106

Malware Phishing Government Passwords 106