The Hacker News

JANUARY 10, 2022

New research into the infrastructure behind an emerging DDoS botnet named Abcbot has uncovered links with a cryptocurrency-mining botnet attack that came to light in December 2020.

DDOS 130

DDOS Cryptocurrency Malware 130

Security Affairs

MARCH 10, 2022

Cisco Talos researchers have uncovered a malware campaign targeting Ukraine’s IT Army , threat actors are using infostealer malware mimicking a DDoS tool called the “Liberator.” Liberator is advertised as a DDoS tool to launch attacks against “Russian propaganda websites.” 35) on port 6666. Pierluigi Paganini.

DDOS 102

DDOS Malware Digital transformation Advertising 102

Security Affairs

NOVEMBER 10, 2023

After ChatGPT, Anonymous Sudan took down the Cloudflare website with a distributed denial-of-service (DDoS) attack. The hacktivist group Anonymous Sudan claimed responsibility for the massive distributed denial-of-service (DDoS) attack that took down the website of Cloudflare. “ To be clear, there was no Cloudflare breach.

DDOS 142

DDOS Cryptocurrency Accountability Media 142

SecureList

MAY 12, 2021

Finally, negotiations with the victims may be handled by yet another team and when the ransom is paid out, a whole new set of skills is needed to launder the cryptocurrency obtained. They interact with each other through internet handles, paying for services with cryptocurrency. Monero (XMR) cryptocurrency is used for payment.

Ransomware 145

Ransomware Encryption Malware Cybercrime 145

SecureList

MAY 31, 2021

According to Kaspersky Security Network, in Q1 2021: Kaspersky solutions blocked 2,023,556,082 attacks launched from online resources across the globe. At the end of last year, the number of users attacked by malware designed to steal money from bank accounts gradually decreased, a trend that continued in Q1 2021. Quarterly figures.

Mobile 111

Mobile Adware Ransomware Malware 111

CyberSecurity Insiders

MARCH 25, 2021

On the security front, a research carried out by Cybersecurity Ventures has predicted that the cyber attacks on online business will bring an estimated loss of $6 trillion to companies operating across the globe by 2021 and the gaming industry is said to be impacted the most.

Cyber Attacks 120

Cyber Attacks Data breaches DDOS Cyber Risk 120

SecureList

OCTOBER 20, 2021

We investigated 200 cases for clients in Russia in 2020, and already over 300 in the first nine months of 2021. In 2021, browsers are much safer, with some of them updating automatically, without any user participation, while browser developers continually invest in vulnerabilities assessment.

Cybercrime 145

Cybercrime Banking Malware Ransomware 145

Malwarebytes

JANUARY 18, 2022

According to Elliptic , a company that offers risk solutions for cryptoassets, the unknown UniCC administrators have made an estimated $358M USD in cryptocurrency for selling stolen credit card details. The underground market accepts cryptocurrency payments of Bitcoin, Litecoin, Ether, and Dash. A little bit about UniCC.

Marketing 133

Marketing Cryptocurrency Identity Theft DDOS 133

Security Affairs

JANUARY 19, 2021

The attacks aimed at compromising the tarted systems to create an IRC botnet, which can later be used to conduct several malicious activities, including DDoS attacks and crypto-mining campaign. CVE-2021-3007 – deserialization flaw that affects the Zend Framework (disclosed on January 3, 2021).

DDOS 144

DDOS DNS Malware Internet 144

Security Affairs

FEBRUARY 2, 2024

” In June 2021, researchers from Avast warned of the rapid growth of the DirtyMoe botnet ( PurpleFox , Perkiler , and NuggetPhantom ), which passed from 10,000 infected systems in 2020 to more than 100,000 in the first half of 2021. Experts defined DirtyMoe as a complex malware that has been designed as a modular system.

Malware 137

Malware Internet Internet DDOS 137

Security Affairs

MARCH 23, 2024

The law enforcement confiscated about 94,000 euros worth of cryptocurrencies. The Nemesis Market has been active since 2021, its offerings included illegal drugs and narcotics, stolen data and credit cards, as well as a selection of cybercrime services such as ransomware , phishing or DDoS attacks.

Marketing 132

Marketing Cybercrime DDOS Internet 132

Security Affairs

JANUARY 5, 2022

“Microsoft has observed rapid uptake of the vulnerability into existing botnets like Mirai, existing campaigns previously targeting vulnerable Elasticsearch systems to deploy cryptocurrency miners, and activity deploying the Tsunami backdoor to Linux systems. ” continues Microsoft.

Malware 130

Malware DNS DDOS Cryptocurrency 130

Security Affairs

MAY 9, 2021

Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager UNC2529, a new sophisticated cybercrime gang that targets U.S.

Data breaches 102

Data breaches DDOS Hacking VPN 102

Security Affairs

JULY 16, 2022

Critical flaw in Netwrix Auditor application allows arbitrary code execution CISA urges to fix multiple critical flaws in Juniper Networks products Threat actors exploit a flaw in Digium Phone Software to target VoIP servers Tainted password-cracking software for industrial systems used to spread P2P Sality bot Experts warn of attacks on sites using (..)

Firmware 119

Firmware Ransomware DDOS Cryptocurrency 119

Security Affairs

JUNE 15, 2022

Privacy Affairs published the Dark Web Index, an analysis of prices for illegal services/products available in the black marketplaces and related to the period between February 2021 and June 2022. The information for a cloned Mastercard (pin included) is passed from $25 (2021) to $20. verified account goes for $170 ($710 in 2021).

Accountability 98

Accountability Identity Theft DDOS Cybercrime 98

Krebs on Security

MARCH 22, 2022

years in a Russian penal colony for convincing one of his top affiliates to launch a distributed denial-of-service (DDoS) attack against a competitor that shut down the ticketing system for the state-owned Aeroflot airline. The latest document in the hacked archive is dated April 2021. In 2013, Vrublevsky was sentenced to 2.5

Banking 243

Banking Marketing DDOS Risk 243

Security Affairs

MARCH 14, 2021

If you want to also receive for free the international press subscribe here.

Surveillance 114

Surveillance DDOS Ransomware Cryptocurrency 114

Webroot

JANUARY 7, 2022

2020 may have been the year of establishing remote connectivity and addressing the cybersecurity skills gap, but 2021 presented security experts, government officials and businesses with a series of unpresented challenges. Threats abound in 2021. Malware made leaps and bounds in 2021. Cryptocurrency. Ransomware.

Cybercrime 116

Cybercrime Ransomware Phishing Cryptocurrency 116

Security Affairs

DECEMBER 21, 2021

Uptycs researchers have observed attacks related to miners, DDOS malware and some variants of ransomware actively leveraging LogforShell flaw in log4j. So far we have observed attacks related to coinminers, DDOS malware and some variants of ransomware actively leveraging this vulnerability. DDoS botnet payloads. Coinminers.

DDOS 112

DDOS Malware Ransomware Cryptocurrency 112

Malwarebytes

MARCH 17, 2022

Cryptocurrency wallet attacks. People new to cryptocurrency often gravitate to services which take the hassle out of setting everything up. Some folks may feel the above process isn’t as secure as storing their cryptocurrency on standalone devices. Below, we dig into a few of those. Ransomware supply chain triple-threat.

Cryptocurrency 132

Cryptocurrency Backups Phishing Password Management 132

Malwarebytes

JANUARY 9, 2023

Digging further into the skimmer's infrastructure on Russian-based hosting provider DDoS-Guard, we came across a digital crime haven for cryptocurrency scams, Bitcoin mixers, malware distribution sites and much more. We should note that the sites we found injected with this skimmer had nothing to do with cryptocurrencies themselves.

DDOS 97

DDOS Scams Cryptocurrency Phishing 97

Hacker Combat

DECEMBER 15, 2021

Many cryptocurrency miners have been susceptible to attacks and some threats were intercepted. The vulnerability was tracked by the formal name, CVE-2021-44228. Many cryptocurrency miners made certain observations about Log 4Shell and how it generally attacks systems. Some botnet DDoS attacks include Mirai and Elknot.

DDOS 52

DDOS Malware Ransomware Cryptocurrency 52

Security Affairs

JANUARY 23, 2022

from the Lympo NTF platform.

VPN 111

VPN Ransomware Spyware Hacking 111

Malwarebytes

MAY 2, 2022

Last week on Malwarebytes Labs: Why MITRE matters to SMBs Apple’s child safety features are coming to a Messages app near you Why software has so many vulnerabilities, with Tanya Janca: Lock and Code S03E09 Watch out for this SMS phish promising a tax refund Rogue ads phishing for cryptocurrency: Are you secure? URGENT BUSINESS PROPOSAL!!!”

Cyber Insurance 79

Cyber Insurance Insurance Cryptocurrency Scams 79

Security Affairs

FEBRUARY 5, 2021

At the end of January, the group has improved its Linux cryptocurrency miner by implementing open-source detection evasion capabilities. The malware deploys the XMRig mining tool to mine Monero cryptocurrency. The TeamTNT botnet is a crypto-mining malware operation that has been active since April 2020 and that targets Docker installs.

Malware 120

Malware DNS Cryptocurrency Internet 120

Malwarebytes

JUNE 8, 2022

DDoS attacks from rivals are common, so several domains working together keeps things ticking over. We’ve noted the gradual emergence of Bitcoin ATMs in scams previously; here, cryptocurrency ATMs are more popular as a payment method to SSNDOB than other dubious online services.

DDOS 124

DDOS Cryptocurrency Data breaches Scams 124

Malwarebytes

MAY 18, 2022

The variant they focused on uses a range of known exploits for vulnerabilities in web apps and databases to install cryptocurrency miners on both Windows and Linux systems. Once it has gained a foothold and the bot malware is running on a compromised system it deploys a Monero cryptocurrency miner. The favorite cryptocurrency.

Cryptocurrency 83

Cryptocurrency IoT Malware DDOS 83

SecureList

MAY 27, 2022

In January, we reported a malicious campaign targeting companies that work with cryptocurrencies, smart contracts, decentralized finance and blockchain technology: the attackers are interested in fintech in general. The campaign has two goals: gathering information and stealing cryptocurrency.

Phishing 134

Phishing Spyware Firmware Malware 134

Security Affairs

MARCH 21, 2022

In June 2021, researchers from Avast warned of the rapid growth of the DirtyMoe botnet ( PurpleFox , Perkiler , and NuggetPhantom ), which passed from 10,000 infected systems in 2020 to more than 100,000 in the first half of 2021. Experts defined DirtyMoe as a complex malware that has been designed as a modular system.

Malware 98

Malware DDOS Passwords Internet 98

SecureList

NOVEMBER 9, 2022

In 2023, we might see a slight decline in ransomware attacks, reflecting the slowdown of the cryptocurrency markets. And that (b) we are also likely to see a steep increase in DDoS extortion campaigns as the Cyberwar in Ukraine leads to all-time-high levels of DDoS attacks. DDOS Botnets. Ransomware as a service (RaaS).

Cybersecurity 144

Cybersecurity Cyber Insurance Cybercrime IoT 144

Security Affairs

NOVEMBER 20, 2021

Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, newsletter). The post Security Affairs newsletter Round 341 appeared first on Security Affairs.

Banking 77

Banking Small Business Data breaches Firmware 77

eSecurity Planet

APRIL 21, 2021

From news of a collage selling for almost $70 million at Christie’s auction house to a portrayal of Janet Yellen and Morpheus rapping about cryptocurrency on SNL , the current craze is all about non-fungible tokens (NFTs). Also Read: Application Security Vendor List for 2021. What is a non-fungible token (NFT)? How do NFTs work?

Cryptocurrency 113

Cryptocurrency Marketing Accountability Scams 113

SecureList

JULY 28, 2022

In late 2021, we encountered a malicious DXE driver incorporated into several UEFI firmware images that were flagged by our firmware scanner (integrated into Kaspersky products at the start of 2019). Pangolin is private malware we discovered in 2021, exclusively used by ZexCone, the threat actor behind ExCone and DexCone. Middle East.

Malware 145

Malware Firmware Phishing Cryptocurrency 145

eSecurity Planet

JANUARY 6, 2022

One possible data point in favor of that view comes from Pravin Madhani, CEO and cofounder of K2 Cyber Security, who notes that even though 2021 was the fifth straight record year for vulnerabilities recorded in the US-CERT Vulnerability Database , the number of high-severity vulnerabilities actually declined (image below).

Ransomware 136

Ransomware Cybersecurity Artificial Intelligence CISO 136

SiteLock

AUGUST 27, 2021

The problem is so severe and widespread that Cybersecurity Ventures projects that cyberattacks will cost organizations worldwide $6 trillion by 2021. Some criminals use ransomware techniques to exploit business computers for cryptocurrency mining. These kinds of crimes are rampant and target businesses of all sizes.

Data breaches 98

Data breaches DDOS Ransomware Marketing 98

Security Affairs

NOVEMBER 14, 2021

Hundreds of thousands of fake warnings of cyberattacks sent from a hacked FBI email server GravityRAT returns disguised as an end-to-end encrypted chat app Intel and AMD address high severity vulnerabilities in products and drivers New evolving Abcbot DDoS botnet targets Linux systems Retail giant Costco discloses data breach, payment card data exposed (..)

Spyware 55

Spyware Data breaches Ransomware Hacking 55

Security Boulevard

AUGUST 25, 2022

5] EclecticIQ analysts assess that Bitcoin will remain the most popular currency used by cybercriminals [6] , but that savvy criminals will switch to Monero and other Anonymity Enhanced Cryptocurrency (AEC). Threat Actor Updates: LockBit Accuses Entrust of DDoS Attack; If Proven Would Set a New Precedent. Lockbit: [link] Twitter, Aug.

DDOS 52

DDOS Cryptocurrency Ransomware Technology 52