Security Affairs

MARCH 10, 2022

Cisco Talos researchers have uncovered a malware campaign targeting Ukraine’s IT Army , threat actors are using infostealer malware mimicking a DDoS tool called the “Liberator.” Liberator is advertised as a DDoS tool to launch attacks against “Russian propaganda websites.” 35) on port 6666. Pierluigi Paganini.

DDOS 83

DDOS Digital transformation Malware Advertising 83

SecureList

NOVEMBER 23, 2021

Then we will go through the key events of 2021 relating to attacks on financial organizations. Analysis of forecasts for 2021. The COVID-19 pandemic is likely to cause a massive wave of poverty, and that invariably translates into more people resorting to crime, including cybercrime. MageCart attacks moving to the server side.

Cryptocurrency 106

Cryptocurrency Banking Cybercrime Ransomware 106

Security Affairs

JUNE 15, 2022

Privacy Affairs published the Dark Web Index, an analysis of prices for illegal services/products available in the black marketplaces and related to the period between February 2021 and June 2022. The information for a cloned Mastercard (pin included) is passed from $25 (2021) to $20. verified account goes for $170 ($710 in 2021).

Identity Theft 92

Identity Theft Accountability DDOS Cybercrime 92

Security Affairs

MAY 9, 2021

Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager UNC2529, a new sophisticated cybercrime gang that targets U.S.

Data breaches 87

Data breaches DDOS VPN Hacking 87

Security Affairs

NOVEMBER 20, 2021

Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, newsletter). The post Security Affairs newsletter Round 341 appeared first on Security Affairs.

Banking 68

Banking Small Business Data breaches Firmware 68

SecureList

NOVEMBER 9, 2022

We can therefore expect that cybercrime groups from either block will feel safe to attack companies from the opposing side. In 2023, we might see a slight decline in ransomware attacks, reflecting the slowdown of the cryptocurrency markets. I believe cybercrime is the biggest threat to end-users, but mainly in an indirect fashion.

Cybersecurity 122

Cybersecurity Cyber Insurance Cybercrime IoT 122

SecureList

JULY 28, 2021

In terms of big news, Q2 2021 was relatively calm, but not completely eventless. For example, April saw the active distribution of a new DDoS botnet called Simps — the name under which it introduced itself to owners of infected devices. Another new DDoS vector has yet to be harnessed by cybercriminals.

DDOS 131

DDOS DNS IoT Marketing 131

SecureList

MAY 10, 2021

Q1 2021 saw the appearance of two new botnets. Cybercriminals exploited several critical vulnerabilities in programs installed on victim devices, including the newly discovered CVE-2021-3007. Botnet operators use infected devices to carry out DDoS attacks or mine cryptocurrency. News overview.

DDOS 97

DDOS Cryptocurrency Media Marketing 97

SecureList

NOVEMBER 8, 2021

Q3 2021 brought two new DDoS attack vectors, potentially posing a serious threat, including for major web resources. ris , a new botnet capable of carrying out powerful DDoS attacks. For instance, a DDoS attack on a Cloudflare customer (attributed to M?ris) We won't let our #DDoS stop us doing what we love!

DDOS 109

DDOS Marketing Cryptocurrency IoT 109

SecureList

FEBRUARY 10, 2022

Q4 2021 saw the appearance of several new DDoS botnets. In October, the botnet was upgraded with DDoS functionality. This is further evidence that the same botnets are often used for mining and DDoS. A bug designated as CVE-2021-36260 was found in some Hikvision camera models and patched in September 2021.

DDOS 104

DDOS Cryptocurrency Marketing Accountability 104

Malwarebytes

MARCH 17, 2022

Cryptocurrency wallet attacks. People new to cryptocurrency often gravitate to services which take the hassle out of setting everything up. Some folks may feel the above process isn’t as secure as storing their cryptocurrency on standalone devices. Below, we dig into a few of those. Ransomware supply chain triple-threat.

Cryptocurrency 121

Cryptocurrency Backups Phishing Password Management 121

Security Affairs

NOVEMBER 14, 2021

Hundreds of thousands of fake warnings of cyberattacks sent from a hacked FBI email server GravityRAT returns disguised as an end-to-end encrypted chat app Intel and AMD address high severity vulnerabilities in products and drivers New evolving Abcbot DDoS botnet targets Linux systems Retail giant Costco discloses data breach, payment card data exposed (..)

Spyware 54

Spyware Data breaches Ransomware Retail 54

SecureList

FEBRUARY 16, 2021

While the resource was down, cryptocurrency newbies were invited to download a copy of Bitcoin Core via a torrenting service. Cybercriminals used the names of well-known APT groups to intimidate victims, demanded ransoms in cryptocurrency, and carried out demonstration attacks to back up their threats.

DDOS 130

DDOS Cryptocurrency Marketing Internet 130

SiteLock

AUGUST 27, 2021

The problem is so severe and widespread that Cybersecurity Ventures projects that cyberattacks will cost organizations worldwide $6 trillion by 2021. Some criminals use ransomware techniques to exploit business computers for cryptocurrency mining. These kinds of crimes are rampant and target businesses of all sizes.

Data breaches 98

Data breaches DDOS Ransomware Marketing 98

Security Boulevard

NOVEMBER 24, 2022

Cybersecurity and Infrastructure Agency (CISA) exploiting Log4Shell (CVE-2021-44228) for persistence within the U.S. Policy Keynotes: Australia Announces a Task Force to Disrupt and Stop Cybercrime. The United States government launched the Ransomware Task Force (RTF) in April 2021 to address the growing threat ransomware poses to U.S.

Ransomware 52

Ransomware Government DDOS Cyber Risk 52

Security Affairs

JANUARY 23, 2022

from the Lympo NTF platform.

VPN 78

VPN Ransomware Spyware DDOS 78

SecureList

MAY 12, 2021

Finally, negotiations with the victims may be handled by yet another team and when the ransom is paid out, a whole new set of skills is needed to launder the cryptocurrency obtained. They interact with each other through internet handles, paying for services with cryptocurrency. Access sellers. Part II: The darknet shenanigans.

Ransomware 125

Ransomware Encryption Malware Cybercrime 125

Webroot

JANUARY 7, 2022

2020 may have been the year of establishing remote connectivity and addressing the cybersecurity skills gap, but 2021 presented security experts, government officials and businesses with a series of unpresented challenges. Threats abound in 2021. Malware made leaps and bounds in 2021. Cryptocurrency. Ransomware.

Cybercrime 105

Cybercrime Phishing Ransomware Cryptocurrency 105

Krebs on Security

DECEMBER 14, 2023

That reporting was based on clues from an early Russian cybercrime forum in which a hacker named Rescator — using the same profile image that Rescator was known to use on other forums — claimed to have originally been known as “Helkern,” the nickname chosen by the administrator of a cybercrime forum called Darklife.

Cybercrime 225

Cybercrime Accountability Advertising Computers and Electronics 225

Security Affairs

FEBRUARY 5, 2021

At the end of January, the group has improved its Linux cryptocurrency miner by implementing open-source detection evasion capabilities. The malware deploys the XMRig mining tool to mine Monero cryptocurrency. The TeamTNT botnet is a crypto-mining malware operation that has been active since April 2020 and that targets Docker installs.

Malware 111

Malware DNS Cryptocurrency Internet 111

SecureList

APRIL 27, 2022

Subsequently, DDoS attacks hit several government websites. We also identified two samples developed in December 2021 containing test strings and preceding revisions of the ransom note observed in Microsoft’s shared samples. … ?????? ??????!!! zip” (translation: “Virus… extremely dangerous!!! zip”).

Malware 132

Malware Firmware Government Phishing 132

SecureList

MAY 27, 2022

In January, we reported a malicious campaign targeting companies that work with cryptocurrencies, smart contracts, decentralized finance and blockchain technology: the attackers are interested in fintech in general. The campaign has two goals: gathering information and stealing cryptocurrency.

Phishing 104

Phishing Spyware Firmware Malware 104

SecureList

AUGUST 3, 2022

Politically-motivated cyberattacks dominated the DDoS landscape in the second quarter of 2022 just as they did in the previous reporting period. The pro-Russian hacktivists Killnet, which first surfaced in January 2022, claimed responsibility for DDoS attacks on the websites of various European organizations from April through June.

DDOS 107

DDOS Government Marketing IoT 107

eSecurity Planet

FEBRUARY 16, 2023

Cloudflare mitigated dozens of hyper-volumetric DDoS attacks last weekend, most of them ranging from 50 to 70 million requests per second (RPS) – and the largest one exceeding 71 million RPS. DDoS attacks, on the other hand, don’t require infiltration to be effective and thus are growing in frequency and intensity.

DDOS 101

DDOS Ransomware Backups Cryptocurrency 101

Security Affairs

JUNE 4, 2021

PrivacyAffairs released the Dark Web Index 2021, the document provides the prices for illegal services/products available in the black marketplaces. Cryptocurrencies are represented in hacked accounts to trading sites. And there are even more specialized products such as DDoS attacks, email databases, and malware. DDoS Attacks.

Accountability 113

Accountability Marketing Hacking Cryptocurrency 113

eSecurity Planet

OCTOBER 21, 2022

A report from IBM claims that 21% of all cyber attacks the company remediated in 2021 were ransomware, making it the most common type of attack in the report. This note will provide instructions on how to pay the ransom, usually through difficult-to-trace means like cryptocurrency.

Malware 69

Malware Adware Spyware Antivirus 69

SecureList

JULY 28, 2022

In late 2021, we encountered a malicious DXE driver incorporated into several UEFI firmware images that were flagged by our firmware scanner (integrated into Kaspersky products at the start of 2019). Pangolin is private malware we discovered in 2021, exclusively used by ZexCone, the threat actor behind ExCone and DexCone. Middle East.

Malware 132

Malware Firmware Phishing Cryptocurrency 132

Security Affairs

NOVEMBER 7, 2021

Casinos of tribal communities are losing millions in Ransomware attacks Threat actors stole $55 million worth of cryptocurrency from bZx DeFi platform Philips Tasy EMR healthcare infomatics solution vulnerable to SQL injection White hat hackers earn over $1 Million at Pwn2Own Austin 2021 A drone was modified to disrupt U.S.

Data breaches 82

Data breaches Cryptocurrency Ransomware Hacking 82

eSecurity Planet

NOVEMBER 2, 2022

In July 2001, the Code Red Worm attempted to subject the entire Internet to a distributed denial of service (DDoS) attack. Eventually, the infected computers were all directed to attempt a DDoS specifically on whitehouse.gov, though the White House managed to sidestep the assault. Welcome to [link] Hacked By Chinese!”.

Malware 138

Malware Ransomware Antivirus Internet 138

SecureList

NOVEMBER 14, 2023

The threat actor used news about the Russo-Ukrainian conflict to trick targets into opening harmful emails that exploited the vulnerabilities (CVE-2020-35730, CVE-2020-12641 and CVE-2021-44026). First, they can carry out actual cyberattacks, including DDoS attacks , data theft or destruction, website defacement, and so on.

Hacking 103

Hacking Energy and Utilities Media Malware 103

Malwarebytes

MAY 21, 2023

ChatGPT can be trained to identify and mitigate network security threats like DDoS attacks when used in conjunction with other technologies. ChatGPT can only pull from what’s already in its public database, and it has only been trained on data up until 2021.

Cybersecurity 78

Cybersecurity Artificial Intelligence Social Engineering Engineering 78