Security Affairs

MAY 2, 2021

The bold author of a new cryptocurrency stealer, dubbed WeSteal, is promising its customers a leading way to make money in 2021. According to Palo Alto Networks, the author of WeSteal, that goes online as “ComplexCodes,” started advertising the cryptocurrency stealer on underground forums in mid-February 2021.

Cryptocurrency 106

Cryptocurrency Malware Advertising System Administration 106

Security Affairs

NOVEMBER 6, 2021

Threat actors have stolen $55 million worth of cryptocurrency from the bZx decentralized finance (DeFi) platform. The decentralized finance (DeFi) platforms allow users to borrow/loan and speculate on cryptocurrency price variations. The company pointed out that the incident was not a protocol hack. Pierluigi Paganini.

Cryptocurrency 112

Cryptocurrency Phishing Hacking Accountability 112

Security Affairs

MARCH 8, 2021

Experts warn of ongoing attacks targeting QNAP network-attached storage (NAS) devices to abuse them in cryptocurrency mining. Researchers at 360Netlab are warning of a cryptocurrency malware campaign targeting unpatched QNAP network-attached storage (NAS) devices. Unity is an XMRig cryptocurrency miner. and Quick.tar.gz.

Cryptocurrency 106

Cryptocurrency Firmware Malware Threat Detection 106

Security Affairs

DECEMBER 6, 2021

Threat actors stole more than $150 million in various cryptocurrencies from the cryptocurrency trading platform BitMart. Cryptocurrency trading platform BitMart has disclosed a security breach, threat actors stole than $150 million in various cryptocurrencies. — Sheldon Xia (@sheldonbitmart) December 6, 2021.

Cryptocurrency 87

Cryptocurrency Hacking Cybercrime Information Security 87

Security Affairs

JANUARY 3, 2022

Which are the cyber attacks of 2021 that had the major impact on organizations worldwide in terms of financial losses and disruption of the operations? The US Cybersecurity and Infrastructure Security Agency (CISA) also issued the Emergency Directive 21-02 in response to the disclosure of zero-day vulnerabilities in Microsoft Exchange.

Cyber Attacks 110

Cyber Attacks Ransomware Insurance Hacking 110

Security Affairs

SEPTEMBER 30, 2021

Threat actors are actively exploiting the recently disclosed CVE-2021-26084 RCE vulnerability in Atlassian Confluence deployments. At the end of August, Atlassian released security patches to address the critical CVE-2021-26084 flaw that affects the Confluence enterprise collaboration product. link] — U.S.

Cryptocurrency 92

Cryptocurrency Authentication Malware Marketing 92

Security Affairs

DECEMBER 20, 2023

The Kingdom Market was established in March 2021, the offer of the dark web marketplace included drugs, malware, stolen data, and forged documents. “To pay, users of the darknet marketplace used the cryptocurrencies Bitcoin, Litecoin, Monero and Zcash. ” reads a press release published by BKA.

Marketing 105

Marketing Cryptocurrency Accountability Banking 105

Security Affairs

MAY 2, 2024

In November 2021, the US Department of Justice charged Vasinskyi, REvil ransomware affiliate, for orchestrating the ransomware attacks on Kaseya MSP platform that took place on July 4, 2021. Pierluigi Paganini Follow me on Twitter: @securityaffairs and Facebook and Mastodon ( SecurityAffairs – hacking, ransomware)

Ransomware 87

Ransomware Cryptocurrency Cybercrime Encryption 87

Security Affairs

JUNE 22, 2021

DirtyMoe is a Windows botnet that is rapidly growing, it passed from 10,000 infected systems in 2020 to more than 100,000 in the first half of 2021. The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. SecurityAffairs – hacking, botnet).

DNS 126

DNS Cryptocurrency Internet Internet 126

Security Affairs

NOVEMBER 19, 2021

North Korea-linked TA406 APT group has intensified its attacks in 2021, particularly credential harvesting campaigns. A report published by Proofpoint revealed that the North Korea-linked TA406 APT group ( Kimsuky , Thallium , and Konni , Black Banshee, Velvet Chollima) has intensified its operations in 2021. ” reads the report.

Cryptocurrency 84

Cryptocurrency Malware Government Education 84

Security Affairs

JANUARY 30, 2022

A report from the US Federal Trade Commission (FTC) revealed that in 2021 Americans lost $770 million from social media frauds. The US Federal Trade Commission (FTC) revealed that in 2021 Americans lost $770 million from social media frauds. Scammers tricked people into sending money, often cryptocurrency, on promises of huge returns.

Media 86

Media Scams Cryptocurrency Marketing 86

Security Affairs

SEPTEMBER 3, 2021

USCYBERCOM is urging organizations to patch a critical CVE-2021-26084 flaw in Atlassian Confluence Server and Data Center, ahead of the Labor Day weekend. . US Cyber Command (USCYBERCOM) has issued an alert to warn US organizations to address Atlassian Confluence CVE-2021-26084 vulnerability immediately, ahead of the Labor Day weekend.

Authentication 96

Authentication Cryptocurrency Hacking Government 96

Security Affairs

DECEMBER 19, 2022

The Glupteba botnet is back, researchers reported a surge in infection worldwide after Google disrupted its operation in 2021. In December 2021, Google announced it has taken down the infrastructure operated by the Glupteba botnet, it also sued Russian nationals Dmitry Starovikov and Alexander Filippov for creating and operating the botnet.

DNS 97

DNS Antivirus Cryptocurrency Software 97

Security Affairs

FEBRUARY 13, 2022

Organizations have paid more than $600 million in cryptocurrency during 2021, nearly one-third to the Conti ransomware gang. and Australia have published a joint advisory warning of an increased globalised threat of ransomware worldwide in 2021. Last week, cybersecurity agencies from the U.K., added the company. .”

Ransomware 88

Ransomware Cryptocurrency Cybercrime Malware 88

Security Affairs

MARCH 15, 2024

Source Hackread.com Diaconu was arrested in May 2021 while attempting to leave the United Kingdom 2021 and was extradited to the United States on October 13, 2023. ” The marketplace allowed buyers to pay using cryptocurrency exchange and online payment system Perfect Money. Diaconu pleaded guilty on December 1, 2023.

Cybercrime 99

Cybercrime Cryptocurrency Advertising Passwords 99

Security Affairs

SEPTEMBER 7, 2021

The development team behind the Jenkins server disclose a security breach, threat actors deployed a cryptocurrency miner on one of its servers. The development team behind the Jenkins Project disclosed a security breach after threat actors compromised one of their internal servers and installed a cryptocurrency miner.

Hacking 91

Hacking Cryptocurrency Authentication Internet 91

Security Affairs

DECEMBER 17, 2021

Experts at Check Point Research have monitored the resurgence of the Phorpiex botnet, an old threat that was involved in sextortion spam campaigns , crypto-jacking, cryptocurrency clipping (substituting the original wallet address saved in the clipboard with the attacker’s wallet address during a transaction) and ransomware attacks in the past.

Cryptocurrency 90

Cryptocurrency Cybercrime Malware Hacking 90

Security Affairs

MAY 13, 2024

In December 2021, experts at Check Point Research observed the resurgence of the Phorpiex botnet. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Phorpiex botnet) The new variant, dubbed “Twizt,” could operate without active C2 servers in peer-to-peer mode.

Phishing 102

Phishing Ransomware Security Awareness Authentication 102

Security Affairs

JUNE 13, 2021

The Anti-Phishing Working Group (APWG) revealed that the number of phishing websites peaked at record levels in the first quarter of 2021. The Anti-Phishing Working Group (APWG) has published its new Phishing Activity Trends Report related to the first quarter of 2021. Reported Phishing Websites for Q1 2021.

Phishing 101

Phishing Advertising Cryptocurrency Encryption 101

Security Affairs

FEBRUARY 10, 2022

The FBI reported that US citizens have lost more than $68 million to SIM swapping attacks in 2021, the number of complaints since 2018 and associated losses have increased almost fivefold. In 2021, IC3 received 1,611 SIM swapping complaints with adjusted losses of more than $68 million.”

Mobile 90

Mobile Cryptocurrency Authentication Accountability 90

Krebs on Security

MARCH 7, 2022

The candid messages revealed how Conti evaded law enforcement and intelligence agencies , what it was like on a typical day at the Conti office , and how Conti secured the digital weaponry used in their attacks. This final post on the Conti conversations explores different schemes that Conti pursued to invest in and steal cryptocurrencies.

Ransomware 217

Ransomware Cryptocurrency DDOS Scams 217

Security Affairs

JANUARY 10, 2024

Raoult and two other co-conspirators were charged with having hacked into protected computers of corporate entities and for the theft of stolen proprietary information. According to the indictment, Raoult was a participant in the notorious hacking group “ShinyHunters.” He sold hacked data. No more hacking.

Identity Theft 103

Identity Theft Hacking Cryptocurrency Advertising 103

Security Affairs

JUNE 3, 2022

The bot focuses on cryptocurrency mining and cryptocurrency theft via clipboard hijacking. Clipminer was first spotted in early 2021, it likely spread via Trojanized downloads of cracked or pirated software. .” Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g.

Cryptocurrency 137

Cryptocurrency Malware Hacking Software 137

Security Affairs

DECEMBER 14, 2023

“A Russian, suspected of having recovered in cryptocurrencies the money taken from French victims of the powerful Hive ransomware , dismantled in January, was arrested last week, AFP learned on Tuesday December 12 from the judicial police.” anti-cybercrime (Ofac).” cybersecurity and intelligence authorities.

Ransomware 111

Ransomware Cryptocurrency Cybercrime VPN 111

Security Affairs

JANUARY 12, 2022

The RedLine malware allows operators to steal several information, including credentials, credit card data, cookies, autocomplete information stored in browsers, cryptocurrency wallets, credentials stored in VPN clients and FTP clients. 2021-11-26 04:34:54 2021-11-26 10:05:15 149.154.167.91 154.167.91

Malware 131

Malware Manufacturing Cryptocurrency Cybercrime 131

Security Affairs

DECEMBER 6, 2022

DoJ announced that Nicholas Truglia (25) was sentenced to 18 months in prison for the theft of over $20 million worth of cryptocurrency through SIM swapping attacks. Nicholas Truglia and his associates stole a staggering amount of cryptocurrency from the victim through a complex SIM swap scheme.” ” said U.S.

Cryptocurrency 88

Cryptocurrency Accountability Mobile Hacking 88

Security Affairs

AUGUST 31, 2021

Crooks have stolen more than $19 million in cryptocurrency assets from Cream Finance, a decentralized finance (DeFi) platform. Threat actors have stolen more than $19 million in cryptocurrency assets from Cream Finance, a decentralized finance (DeFi) platform. — Cream Finance (@CreamdotFinance) August 30, 2021.

Cryptocurrency 102

Cryptocurrency Hacking Financial Services Marketing 102

Security Affairs

APRIL 15, 2021

Over $760 million worth of Bitcoin that were stolen from cryptocurrency exchange Bitfinex in 2016 were moved to new accounts. More than $760 million worth of Bitcoin, stolen from Asian cryptocurrency exchange Bitfinex in 2016 , were moved on Wednesday to new accounts. SecurityAffairs – hacking, bitcoin). Pierluigi Paganini.

Cryptocurrency 112

Cryptocurrency Hacking Accountability Marketing 112

Security Affairs

JUNE 11, 2023

Experts found new MOVEit Transfer SQL Injection flaws The University of Manchester suffered a cyber attack and suspects a data breach Russians charged with hacking Mt.

Social Engineering 88

Social Engineering Data breaches Ransomware Cybercrime 88

Security Affairs

MARCH 23, 2024

The law enforcement confiscated about 94,000 euros worth of cryptocurrencies. The Nemesis Market has been active since 2021, its offerings included illegal drugs and narcotics, stolen data and credit cards, as well as a selection of cybercrime services such as ransomware , phishing or DDoS attacks.

Marketing 97

Marketing Cybercrime DDOS Internet 97

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. The messages said recipients had earned an investment credit at a cryptocurrency trading platform called moonxtrade[.]com. In May 2020, Zipper told another Lolzteam member that quot[.]pw

Scams 243

Scams DDOS Cryptocurrency Accountability 243

Security Affairs

AUGUST 19, 2021

Japanese cryptocurrency exchange Liquid was hit by a cyber attack, threat actors stole $97 Million worth of crypto-currency assets from the company. Japan-based cryptocurrency exchange Liquid was hit by a cyber attack that resulted in the theft of $97 Million worth of crypto-currency assets from its warm wallets. Pierluigi Paganini.

Cryptocurrency 114

Cryptocurrency Cyber Attacks Hacking Information Security 114

Security Affairs

JULY 23, 2022

“The Justice Department today announced a complaint filed in the District of Kansas to forfeit cryptocurrency paid as ransom to North Korean hackers or otherwise used to launder such ransom payments. ” In May 2021, threat actors infected the servers of the medical center in the District of Kansas. Pierluigi Paganini.

Ransomware 127

Ransomware Healthcare Cryptocurrency Encryption 127

Security Affairs

OCTOBER 16, 2021

FinCEN analyzed a data set composed of 2,184 SARs filed between 1 January 2011 and 30 June 2021 and identified 177 CVC (convertible virtual currency) wallets addresses that were used in ransomware operations associated with the above ransomware variants. SecurityAffairs – hacking, FinCEN). ” reads the report published by FinCEN.

Ransomware 105

Ransomware Cryptocurrency Hacking Cybercrime 105

Security Affairs

FEBRUARY 2, 2024

” In June 2021, researchers from Avast warned of the rapid growth of the DirtyMoe botnet ( PurpleFox , Perkiler , and NuggetPhantom ), which passed from 10,000 infected systems in 2020 to more than 100,000 in the first half of 2021. Experts defined DirtyMoe as a complex malware that has been designed as a modular system.

Malware 97

Malware Internet Internet DDOS 97

Security Affairs

JULY 4, 2023

.” Blockchain security firm PeckShield reported that the attackers have stolen about $42 billion worth of cryptocurrency. peckshield) July 2, 2023 The above estimation is quite different from the figures reported by other blockchain security firms, according to The Record.

Cryptocurrency 92

Cryptocurrency Hacking Cyber Attacks Risk 92

Security Affairs

JUNE 26, 2023

In 2021, law enforcement within the United States placed and received numerous orders for narcotics on the Monopoly Market website from various vendors. “In December 2021, in coordination with foreign law enforcement partners in Germany and Finland, the computer server hosting Monopoly was seized and taken offline.”

Marketing 83

Marketing Computers and Electronics Cryptocurrency Hacking 83