Security Affairs

NOVEMBER 6, 2021

Threat actors have stolen $55 million worth of cryptocurrency from the bZx decentralized finance (DeFi) platform. The decentralized finance (DeFi) platforms allow users to borrow/loan and speculate on cryptocurrency price variations. We’ll continue to update as more information is discovered. Pierluigi Paganini.

Cryptocurrency 115

Cryptocurrency Phishing Hacking Accountability 115

Security Affairs

FEBRUARY 10, 2022

The FBI reported that US citizens have lost more than $68 million to SIM swapping attacks in 2021, the number of complaints since 2018 and associated losses have increased almost fivefold. In 2021, IC3 received 1,611 SIM swapping complaints with adjusted losses of more than $68 million.”

Mobile 91

Mobile Cryptocurrency Authentication Accountability 91

Security Affairs

JANUARY 3, 2022

Which are the cyber attacks of 2021 that had the major impact on organizations worldwide in terms of financial losses and disruption of the operations? The US Cybersecurity and Infrastructure Security Agency (CISA) also issued the Emergency Directive 21-02 in response to the disclosure of zero-day vulnerabilities in Microsoft Exchange.

Cyber Attacks 112

Cyber Attacks Ransomware Insurance Hacking 112

Security Affairs

FEBRUARY 10, 2022

Spanish National Police has arrested eight alleged members of a crime organization who were able to steal money from the bank accounts of the victims through SIM swapping attacks. Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts.

Banking 106

Banking Accountability Mobile Cryptocurrency 106

Security Affairs

JANUARY 30, 2022

A report from the US Federal Trade Commission (FTC) revealed that in 2021 Americans lost $770 million from social media frauds. The US Federal Trade Commission (FTC) revealed that in 2021 Americans lost $770 million from social media frauds. Scammers tricked people into sending money, often cryptocurrency, on promises of huge returns.

Media 87

Media Scams Cryptocurrency Marketing 87

Security Affairs

FEBRUARY 13, 2022

Organizations have paid more than $600 million in cryptocurrency during 2021, nearly one-third to the Conti ransomware gang. and Australia have published a joint advisory warning of an increased globalised threat of ransomware worldwide in 2021. Last week, cybersecurity agencies from the U.K., added the company. .”

Ransomware 89

Ransomware Cryptocurrency Cybercrime Malware 89

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. The messages said recipients had earned an investment credit at a cryptocurrency trading platform called moonxtrade[.]com. A DIRECT QUOT The domain quot[.]pw

Scams 243

Scams DDOS Cryptocurrency Accountability 243

Security Boulevard

MAY 3, 2021

roundup of UK focused Cyber and Information Security News, Blog Posts, Reports and general Threat Intelligence from the previous calendar month, April 2021. The UK Security Service MI5 said 10,000 staff from every UK government department and from important UK industries have been lured by fake LinkedIn profiles.

Ransomware 124

Ransomware Passwords Scams Government 124

Security Affairs

DECEMBER 6, 2022

DoJ announced that Nicholas Truglia (25) was sentenced to 18 months in prison for the theft of over $20 million worth of cryptocurrency through SIM swapping attacks. Nicholas Truglia and his associates stole a staggering amount of cryptocurrency from the victim through a complex SIM swap scheme.” ” said U.S.

Cryptocurrency 90

Cryptocurrency Accountability Mobile Hacking 90

Security Affairs

MARCH 23, 2024

The law enforcement confiscated about 94,000 euros worth of cryptocurrencies. The Nemesis Market has been active since 2021, its offerings included illegal drugs and narcotics, stolen data and credit cards, as well as a selection of cybercrime services such as ransomware , phishing or DDoS attacks.

Marketing 99

Marketing Cybercrime DDOS Internet 99

Security Affairs

JUNE 15, 2022

Privacy Affairs published the Dark Web Index, an analysis of prices for illegal services/products available in the black marketplaces and related to the period between February 2021 and June 2022. The document updates the information provided in the Dark Web Index 2022 report. verified account goes for $170 ($710 in 2021).

Identity Theft 93

Identity Theft Accountability DDOS Cybercrime 93

Security Affairs

OCTOBER 2, 2021

Threat actors stole funds from the accounts of more than 6,000 users of the crypto exchange Coinbase exploiting a flaw to bypass 2FA authentication. At least 6,000 Coinbase customers had funds removed from their accounts, including you.” Once discovered the campaign, the company updated its SMS Account Recovery protocols.

Cryptocurrency 117

Cryptocurrency Data breaches Authentication Accountability 117

Security Affairs

JULY 23, 2022

“The Justice Department today announced a complaint filed in the District of Kansas to forfeit cryptocurrency paid as ransom to North Korean hackers or otherwise used to launder such ransom payments. ” In May 2021, threat actors infected the servers of the medical center in the District of Kansas.

Ransomware 129

Ransomware Healthcare Cryptocurrency Encryption 129

Security Affairs

AUGUST 31, 2021

Crooks have stolen more than $19 million in cryptocurrency assets from Cream Finance, a decentralized finance (DeFi) platform. Threat actors have stolen more than $19 million in cryptocurrency assets from Cream Finance, a decentralized finance (DeFi) platform. — Cream Finance (@CreamdotFinance) August 30, 2021.

Cryptocurrency 105

Cryptocurrency Hacking Financial Services Marketing 105

Security Affairs

APRIL 15, 2021

Over $760 million worth of Bitcoin that were stolen from cryptocurrency exchange Bitfinex in 2016 were moved to new accounts. More than $760 million worth of Bitcoin, stolen from Asian cryptocurrency exchange Bitfinex in 2016 , were moved on Wednesday to new accounts. billion, and hackers moved $760 million (around 10%).

Cryptocurrency 114

Cryptocurrency Hacking Accountability Marketing 114

Security Affairs

FEBRUARY 10, 2023

. “This advisory highlights TTPs and IOCs DPRK cyber actors used to gain access to and conduct ransomware attacks against Healthcare and Public Health (HPH) Sector organizations and other critical infrastructure sector entities, as well as DPRK cyber actors’ use of cryptocurrency to demand ransoms.” Obfuscate Identity.

Ransomware 80

Ransomware Healthcare Cryptocurrency Government 80

Security Affairs

NOVEMBER 10, 2023

In July, Anonymous Sudan announced it had stolen credentials for 30 million customer accounts. In September, Anonymous Sudan launched a DDoS attack against Telegram after the company suspended the account of the group. Anonymous Sudan claimed responsibility for the DDoS attacks that hit the company’s services.

DDOS 130

DDOS Cryptocurrency Accountability Media 130

Security Affairs

NOVEMBER 9, 2021

Threat actors execute malicious scripts to deploy Monero cryptocurrency miners, perform container-to-host escape using well-known techniques, and scan the Internet for exposed ports from other compromised containers. Then a malicious image is downloaded from Docker Hub accounts under the control of the threat actors.

Cryptocurrency 100

Cryptocurrency Malware Cybercrime Architecture 100

Security Affairs

APRIL 28, 2023

The malware allows operators to steal login credentials from popular services such as social media platforms and cryptocurrency wallets, then stolen data is sold on cybercrime forums by the operators. CryptBot malware is active since at least 2019, it allows operators to steal sensitive data from the Google Chrome of the infected systems.

Malware 92

Malware Cybercrime Cryptocurrency Media 92

Security Affairs

JANUARY 10, 2024

According to DoJ, ShinyHunters posted sales of hacked data from more than 60 companies between April 2020 and July 2021. He stole people’s cryptocurrency. ShinyHunters leaked the stolen data on multiple dark web forums, including RaidForums, EmpireMarket, and Exploit. Raoult’s motive was pure greed. He sold hacked data.

Identity Theft 105

Identity Theft Hacking Cryptocurrency Advertising 105

Security Affairs

MARCH 23, 2023

“Nexus provides all the main features to perform ATO attacks (Account Takeover) against banking portals and cryptocurrency services, such as credentials stealing and SMS interception. The Nexus Trojan can target multiple banking and cryptocurrency in an attempt to take over customers’ accounts.

Banking 78

Banking Cryptocurrency Malware Advertising 78

Security Boulevard

MARCH 17, 2022

The estimated value of greater Decentralized Finance and cryptocurrencies surpassed half a trillion dollars in market capitalization in 2018, and then one trillion for the first time in 2021 ( 1 ). Since then, cryptocurrency values reached new records during the pandemic. Cryptocurrencies Are Established Via Blockchain Security.

Cyber Attacks 98

Cyber Attacks Cryptocurrency Marketing Software 98

Security Affairs

NOVEMBER 16, 2022

According to a joint advisory published by the FBI and CISA, an Iran-linked APT group compromised a Federal Civilian Executive Branch (FCEB) organization using an exploit for the Log4Shell flaw ( CVE-2021-44228 ) and deployed a cryptomining malware. These files have been identified as variants of the XMRIG cryptocurrency mining software.

Government 116

Government Hacking Malware Software 116

Security Affairs

APRIL 6, 2022

Cash App is an app that allows users to easily send money, spend money, save money, and buy cryptocurrency. the “Company”) announced that it recently determined that a former employee downloaded certain reports of its subsidiary Cash App Investing LLC (“Cash App Investing”) on December 10, 2021 that contained some U.S.

Data breaches 112

Data breaches Cryptocurrency Accountability Banking 112

Security Affairs

JANUARY 14, 2022

The North Korea-linked APT group BlueNoroff has been spotted targeting cryptocurrency startups with fake MetaMask browser extensions. The North Korea-linked APT group BlueNoroff has been spotted targeting cryptocurrency startups with fake MetaMask browser extensions.

Cryptocurrency 94

Cryptocurrency Banking Passwords Malware 94

Security Affairs

JANUARY 9, 2022

million accounts were compromised in the FlexBooker data breach Night Sky, a new ransomware operation in the threat landscape North Korea-linked Konni APT targets Russian diplomatic bodies Threat actors stole 1.1 billion from cryptocurrency exchanges Crypto security breaches cause $4.25 billion losses worth of cryptos in 2021.

Data breaches 66

Data breaches Media Hacking Accountability 66

Security Affairs

DECEMBER 7, 2021

The botnet was involved in stealing users’ credentials and data, mining cryptocurrencies abusing victims’ resources, and setting up proxies to funnel other people’s internet traffic through infected machines and routers. — Shane Huntley (@ShaneHuntley) December 7, 2021. users were warned via Safe Browsing.

Backups 112

Backups Advertising Accountability Malware 112

Security Affairs

DECEMBER 3, 2021

Threat actors stole $120 million in cryptocurrencies from multiple wallets connected to the decentralized finance platform BadgerDAO. million in crypto funds, blockchain security firm PeckShield reported. peckshield) December 2, 2021. peckshield) December 2, 2021. adgerDAO (@BadgerDAO) December 2, 2021.

Hacking 97

Hacking Phishing Authentication Cryptocurrency 97

Security Affairs

APRIL 19, 2021

The new variant also implements new features for data-stealing focused on cryptocurrency apps. XCSSET is a Mac malware that was discovered by Trend Micro in August 2020, it was spreading through Xcode projects and exploits two zero-day vulnerabilities to steal sensitive information from target systems and launch ransomware attacks.

Malware 112

Malware Cryptocurrency Architecture Engineering 112

Security Affairs

MAY 26, 2021

According to a statement published by the Ministry of the Economy, the French authorities arrested two administrators of the platform and seized various computer equipment, false documents, bank cards and prepaid cards, several thousand euros in cryptocurrency. ” reads the statement.

Cybercrime 142

Cybercrime Cryptocurrency Banking Mobile 142

Security Affairs

NOVEMBER 15, 2021

The malware has been active at least since late October 2021, it targeting the mobile users of banks in Italy, the UK, and the US. The trojan allows to hijack users’ mobile devices and steal funds from online banking and cryptocurrency accounts. login credentials, personal information, current balance, etc.). .”

Banking 127

Banking Mobile Social Engineering Malware 127

Security Affairs

APRIL 16, 2022

Axie Infinity disclosed the security breach through the official Discord and Twitter accounts, and by Ronin Network. The amount of stolen funds makes this attack the largest crypto hack in history, passing the $611 million hack of the DeFi protocol Poly Network in August 2021.

Hacking 85

Hacking Cryptocurrency Government Accountability 85

Security Affairs

AUGUST 8, 2022

Experts spotted a new botnet named Orchard using Bitcoin creator Satoshi Nakamoto’s account information to generate malicious domains. The researchers discovered three versions of this botnet since February 2021, they also noticed that its operators switched programming languages during the same period.

Accountability 96

Accountability Cryptocurrency Malware Hacking 96

Security Affairs

NOVEMBER 20, 2021

The post Security Affairs newsletter Round 341 appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, newsletter).

Banking 67

Banking Small Business Data breaches Firmware 67

Security Affairs

SEPTEMBER 5, 2022

The researchers found two SharkbotDopper apps in Google Play Store, “Mister Phone Cleaner” and “Kylhavy Mobile Security,” with 10K and 50K installs respectively. SharkBot is a banking trojan that has been active since October 2021, it allows to steal banking account credentials and bypass multi-factor authentication mechanisms.

Banking 91

Banking Malware Mobile Accountability 91

Security Affairs

JULY 24, 2022

ransom and sued its insurance firm for refusing to cover this payment Crooks stole $375k from Premint NFT, it is one of the biggest NFT hacks ever Google is going to remove App Permissions List from the Play Store Security Affairs newsletter Round 374 by Pierluigi Paganini APT groups target journalists and media organizations since 2021.

Spyware 91

Spyware Surveillance Insurance Malware 91

Security Affairs

JANUARY 20, 2021

The Russian cryptocurrency exchange Livecoin has announced it is terminating its operation following the December cyberattack. The Russian cryptocurrency exchange was hacked on Christmas Eve, it published a message on its website warning customers to stop using its services. We accept claims for payments for the next 2 months.

Cryptocurrency 118

Cryptocurrency Scams Hacking Accountability 118