Security Affairs

JANUARY 14, 2022

Ukrainian police arrested members of a ransomware gang that targeted at least 50 companies in the U.S. Ukrainian police arrested members of a ransomware affiliate group that is responsible for attacking at least 50 companies in the U.S. The gang was distributing the LockerGoga and MegaCortex ransomware families. and Europe.

Ransomware 114

Ransomware DDOS Telecommunications Malware 114

Security Affairs

JUNE 25, 2023

Someone is sending mysterious smartwatches to the US Military personnel CISA orders govt agencies to fix recently disclosed flaws in Apple devices VMware fixed five memory corruption issues in vCenter Server Fortinet fixes critical FortiNAC RCE, install updates asap More than a million GitHub repositories potentially vulnerable to RepoJacking New Mirai (..)

DDOS 90

DDOS Cybercrime Spyware Malware 90

Security Affairs

DECEMBER 15, 2021

While investigating a data breach suffered by a healthcare organization, FBI accidentally revealed that it believes that the HelloKitty ransomware gang operates out of Ukraine. ” The HelloKitty gang has been active since January 2021 and it is still active. SecurityAffairs – hacking, HelloKitty ransomware).

Ransomware 91

Ransomware Data breaches DDOS Healthcare 91

Security Affairs

OCTOBER 16, 2021

TrickBot operators are back and expand the distribution channels with partnership with cybercrime affiliates. The operators behind the infamous TrickBot (ITG23 and Wizard Spider) malware have resurfaced with new distribution channels to deliver malicious payloads, such as Conti ransomware. ” concludes the report.

Malware 104

Malware Cybercrime DDOS Social Engineering 104

Security Affairs

MARCH 22, 2023

The report covers incidents in aviation, maritime, railway, and road transport industries between January 2021 and October 2022. During the reporting period, ransomware was the most prominent threat against the sector in 2022. The researchers pointed out that the ransomware attacks doubled compared to the previous year.

Ransomware 85

Ransomware DDOS Cyber threats Phishing 85

Malwarebytes

MAY 11, 2021

Both the Australian Cyber Security Centre (ACSC) and the US Federal Bureau of Investigation (FBI) have issued warnings about an ongoing cybercrime campaign that is using Avaddon ransomware. In a separate advisory (pdf) , the ACSC says it is also aware of an ongoing ransomware campaign using the Avaddon Ransomware malware.

Ransomware 109

Ransomware VPN Encryption Cybercrime 109

Security Affairs

MARCH 19, 2022

The Federal Bureau of Investigation (FBI) reported that AvosLocker ransomware is being used in attacks targeting US critical infrastructure. The Federal Bureau of Investigation (FBI) published a joint cybersecurity advisory warning of AvosLocker ransomware attacks targeting multiple US critical infrastructure. Pierluigi Paganini.

Ransomware 99

Ransomware DDOS Passwords Backups 99

Security Affairs

APRIL 3, 2021

The Avaddon ransomware operators updated their malware after security researchers released a public decryptor in February 2021. The Avaddon ransomware family first appeared in the threat landscape in February 2020, and its authors started offering it with a Ransomware-as-a-Service (RaaS) model in June, 2020.

Ransomware 96

Ransomware Encryption Malware Cybercrime 96

SecureList

NOVEMBER 23, 2021

Then we will go through the key events of 2021 relating to attacks on financial organizations. Analysis of forecasts for 2021. The COVID-19 pandemic is likely to cause a massive wave of poverty, and that invariably translates into more people resorting to crime, including cybercrime.

Cryptocurrency 106

Cryptocurrency Banking Cybercrime Ransomware 106

BH Consulting

DECEMBER 14, 2021

Digital takeup drives accelerated cybercrime activity: IOCTA. Growing use of digital technologies, accelerated by the Covid-19 pandemic, has led to a sharp increase in cybercrime. The report listed ransomware affiliate programmes as a major risk. The post Security Roundup December 2021 appeared first on BH Consulting.

Cybercrime 59

Cybercrime Mobile DDOS CISO 59

Security Affairs

APRIL 19, 2022

Kaspersky discovered a flaw in the encryption process of the Yanluowang ransomware that allows victims to recover their files for free. Researchers from Kaspersky discovered a vulnerability in the encryption process of the Yanluowang ransomware that can be exploited to recover the files encrypted by the malware without paying the ransom.

Ransomware 89

Ransomware Encryption DDOS Malware 89

Security Affairs

MAY 21, 2023

X Master Password Dumper (CVE-2023-32784) Malware RapperBot DDoS Botnet Expands into Cryptojacking Newly identified RA Group compromises companies in U.S. X Master Password Dumper (CVE-2023-32784) Malware RapperBot DDoS Botnet Expands into Cryptojacking Newly identified RA Group compromises companies in U.S.

Data breaches 89

Data breaches Cybercrime Ransomware Passwords 89

SecureList

NOVEMBER 26, 2021

IT threat evolution Q3 2021. IT threat evolution in Q3 2021. IT threat evolution in Q3 2021. While tracking this threat actor in spring 2021, we discovered a newer version. Targeted attacks exploiting CVE-2021-40444. PC statistics. Mobile statistics. Targeted attacks. WildPressure targets macOS. Other malware.

Malware 87

Malware Banking Energy and Utilities Accountability 87

SecureList

NOVEMBER 9, 2022

Supply-chain will become more of a sweet spot for targeted ransomware and state-sponsored espionage campaigns. Businesses will still be mostly concerned with ransomware. We can therefore expect that cybercrime groups from either block will feel safe to attack companies from the opposing side.

Cybersecurity 123

Cybersecurity Cyber Insurance Cybercrime IoT 123

Security Affairs

MAY 9, 2021

Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager UNC2529, a new sophisticated cybercrime gang that targets U.S. Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager UNC2529, a new sophisticated cybercrime gang that targets U.S.

Data breaches 90

Data breaches DDOS VPN Hacking 90

SecureList

DECEMBER 14, 2022

On the very first day of the conflict (February 24, 2022), a massive wave of indiscriminate pseudo-ransomware and wiper attacks hit Ukrainian entities. The volume of wiper and ransomware attacks quickly subsided after the initial wave, but a limited number of notable incidents were still reported.

DDOS 132

DDOS Ransomware Government Energy and Utilities 132

Security Affairs

FEBRUARY 27, 2022

While Ukraine calls for hacker underground to defend against Russia, ransomware gangs make their moves. February 24 – Data wiper attacks on Ukraine were planned at least in November and used ransomware as decoy. February 19 – White House and UK Gov attribute DDoS attacks on Ukraine to Russia’s GRU.

DDOS 90

DDOS Banking Phishing Ransomware 90

Threatpost

NOVEMBER 30, 2020

Ransomware gangs with zero-days and more players overall will characterize financially motivated cyberattacks next year.

Ransomware 113

Ransomware DDOS Cybercrime Malware 113

Security Affairs

JUNE 20, 2021

Are the DDoS and the fire linked? Are the DDoS and the fire linked?

Data breaches 100

Data breaches DDOS Small Business Ransomware 100

Security Affairs

NOVEMBER 20, 2021

Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, newsletter). The post Security Affairs newsletter Round 341 appeared first on Security Affairs.

Banking 66

Banking Small Business Data breaches Firmware 66

SecureList

JULY 28, 2021

In terms of big news, Q2 2021 was relatively calm, but not completely eventless. For example, April saw the active distribution of a new DDoS botnet called Simps — the name under which it introduced itself to owners of infected devices. Another new DDoS vector has yet to be harnessed by cybercriminals.

DDOS 132

DDOS DNS IoT Marketing 132

Security Affairs

AUGUST 22, 2021

million customers Adobe addresses two critical vulnerabilities in Photoshop Hamburg’s data protection agency (DPA) states that using Zoom violates GDPR Kalay cloud platform flaw exposes millions of IoT devices to hack Fortinet FortiWeb OS Command Injection allows takeover servers remotely 1.9

Data breaches 100

Data breaches Mobile Ransomware DNS 100

Security Boulevard

NOVEMBER 24, 2022

Threat Actor Update: IRIDUIM Attributed to Prestige Ransomware Campaign. A ransomware campaign targeting transportation and logistics organizations in Ukraine and Poland has been attributed to a group called IRIDIUM. The Ukraine war continues to highlight the increased use of ransomware for non-financial means.

Ransomware 52

Ransomware Government DDOS Cyber Risk 52

SecureList

MAY 10, 2021

Q1 2021 saw the appearance of two new botnets. Cybercriminals exploited several critical vulnerabilities in programs installed on victim devices, including the newly discovered CVE-2021-3007. Botnet operators use infected devices to carry out DDoS attacks or mine cryptocurrency. News overview.

DDOS 98

DDOS Cryptocurrency Media Marketing 98

Security Affairs

DECEMBER 18, 2022

Samba addressed multiple high-severity vulnerabilities Former Twitter employee sentenced to 3.5 years in jail for spying on behalf of Saudi Arabia Social Blade discloses security breach Data of 5.7M Samba addressed multiple high-severity vulnerabilities Former Twitter employee sentenced to 3.5

Data breaches 94

Data breaches Hacking DDOS VPN 94

SiteLock

AUGUST 27, 2021

In fact, the World Economic Forum (WEF) projects that by 2021: Global cybercrime costs could total approximately $6 trillion in the US. If cybercrime were a country, it would have the third largest economy in the world. Clearly, cybercrime is big business, and it operates like one. How big is the impact of cybercrime?

Cybersecurity 98

Cybersecurity Cybercrime DDOS Malware 98

Security Affairs

JULY 31, 2022

and Blackmatter ransomware U.S. and Blackmatter ransomware U.S. and Blackmatter ransomware U.S. and Blackmatter ransomware U.S. Every week the best security articles from Security Affairs for free in your email box. If you want to also receive for free the newsletter with the international press subscribe here.

Firmware 73

Firmware Surveillance Malware DDOS 73

BH Consulting

JUNE 13, 2023

Ransomware didn’t actually grow year on year; it held steady at 24 per cent of breaches. Security Week’s report focused on the rising cost to recover from a ransomware incident even as ransom amounts themselves are lower. Verizon believes this suggests ransomware victims are a higher proportion of smaller companies than before.

Social Engineering 52

Social Engineering Data breaches Scams DDOS 52

SecureList

NOVEMBER 8, 2021

Q3 2021 brought two new DDoS attack vectors, potentially posing a serious threat, including for major web resources. ris , a new botnet capable of carrying out powerful DDoS attacks. For instance, a DDoS attack on a Cloudflare customer (attributed to M?ris) We won't let our #DDoS stop us doing what we love!

DDOS 109

DDOS Marketing Cryptocurrency IoT 109

Security Affairs

JANUARY 23, 2022

from the Lympo NTF platform. from the Lympo NTF platform. from the Lympo NTF platform. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, newsletter).

VPN 80

VPN Ransomware Spyware DDOS 80

SiteLock

AUGUST 27, 2021

A data breach, ransomware attack or other digital attack that knocks your website offline can cost your business anywhere from thousands to millions of dollars in remediation, lawsuits from customers and fines by regulators. And data isn’t the only business asset that ransomware can target.

Data breaches 98

Data breaches DDOS Ransomware Marketing 98

Security Affairs

NOVEMBER 14, 2021

Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, newsletter). The post Security Affairs newsletter Round 340 appeared first on Security Affairs.

Spyware 53

Spyware Data breaches Ransomware Retail 53

SecureList

FEBRUARY 10, 2022

Q4 2021 saw the appearance of several new DDoS botnets. In October, the botnet was upgraded with DDoS functionality. This is further evidence that the same botnets are often used for mining and DDoS. A bug designated as CVE-2021-36260 was found in some Hikvision camera models and patched in September 2021.

DDOS 104

DDOS Cryptocurrency Marketing Accountability 104

SecureList

MAY 12, 2021

As the world marks the second Anti-Ransomware Day, there’s no way to deny it: ransomware has become the buzzword in the security community. Yet, much of the media attention ransomware gets is focused on chronicling which companies fall prey to it. Part I: Three preconceived ideas about ransomware.

Ransomware 124

Ransomware Encryption Malware Cybercrime 124

Malwarebytes

MARCH 17, 2022

Ransomware supply chain triple-threat. Ransomware will continue to cause problems in supply chains and leverage so-called triple threat attacks. Meanwhile, attacks like BlackCat went all-in on triple-threats towards the end of 2021. This is where multiple forms of pressure are placed upon the victim to convince them to pay up.

Cryptocurrency 121

Cryptocurrency Backups Phishing Password Management 121

Security Affairs

SEPTEMBER 5, 2021

Follow me on Twitter: @securityaffairs and Facebook.

Ransomware 58

Ransomware Hacking DDOS Scams 58

Spinone

OCTOBER 21, 2020

For example, a DDoS attack on a server intrudes in an esports match. That’s why a company’s cybersecurity experts should treat them in the same manner and never overlook the second type. By target: Individual. For example, a phishing email aims to obtain the credit card data of a person to steal money. Organization.

Cybersecurity 52

Cybersecurity Social Engineering Cyber threats Engineering 52