Security Affairs

AUGUST 20, 2021

Web infrastructure and website security company Cloudflare announced to have mitigated the largest ever volumetric DDoS attack to date. Cloudflare, the web infrastructure and website security company, announced that it has mitigated the largest ever volumetric distributed denial of service (DDoS) attack to date.

DDOS 120

DDOS Telecommunications Internet Internet 120

Security Affairs

MARCH 7, 2021

The REvil ransomware operators are using DDoS attacks and voice calls to journalists and victim’s business partners to force victims to pay the ransom. Malware #Ransomware #REvil REvil Ransomware launched a service for contact to news media, companies for the best pressure at no cost, and DDoS (L3, L7) as a paid service.

DDOS 134

DDOS Ransomware Media Malware 134

Centraleyes

NOVEMBER 1, 2023

To build a robust information security strategy, one must understand and apply the core principles of information security. This blog post will delve into the fundamental principles underpinning effective information security principles and practices. Is The Demise of the CIA Triad Imminent?

Information Security 52

Information Security Encryption Risk Authentication 52

Security Affairs

APRIL 28, 2022

Cloudflare has mitigated a distributed denial-of-service (DDoS) attack that peaked at 15.3 Cloudflare announced to have mitigated a distributed denial-of-service (DDoS) attack that peaked at 15.3 million request-per-second (RPS), which is one of the largest HTTPS DDoS attacks blocked by the company.

DDOS 84

DDOS Encryption Hacking Cybersecurity 84

Security Affairs

JUNE 14, 2021

I’m working to get more information from @lumaenergypr which hasn’t released any details, yet. pic.twitter.com/3ejpfBIH89 — David Begnaud (@DavidBegnaud) June 10, 2021. ———— pic.twitter.com/MM3ZSHsKwt — LUMA Puerto Rico (@lumaenergypr) June 10, 2021. Are the DDoS and the fire linked?

DDOS 107

DDOS Mobile Hacking Accountability 107

Security Affairs

JANUARY 26, 2023

Experts warn of a spike in the attacks that between August and October 2022 attempted to exploit a Realtek Jungle SDK RCE (CVE-2021-35394). Palo Alto Networks researchers reported that between August and October 2022 the number of attacks that attempted to exploit a Realtek Jungle SDK RCE ( CVE-2021-35394 ) (CVSS score 9.8)

DDOS 95

DDOS IoT Manufacturing Malware 95

Security Affairs

DECEMBER 8, 2021

The Mirai -based Moobot botnet is rapidly spreading by exploiting a critical command injection flaw, tracked as CVE-2021-36260 , in the webserver of several Hikvision products. The Moobot was first documented by Palo Alto Unit 42 researchers in February 2021, the recent attacks demonstrated that its authors are enhancing their malware.

Firmware 124

Firmware DDOS Malware IoT 124

Security Affairs

NOVEMBER 10, 2023

After ChatGPT, Anonymous Sudan took down the Cloudflare website with a distributed denial-of-service (DDoS) attack. The hacktivist group Anonymous Sudan claimed responsibility for the massive distributed denial-of-service (DDoS) attack that took down the website of Cloudflare. “ To be clear, there was no Cloudflare breach.

DDOS 130

DDOS Cryptocurrency Accountability Media 130

Security Affairs

MARCH 10, 2022

Threat actors are spreading password-stealing malware disguised as a security tool to target Ukraine’s IT Army. Cisco Talos researchers have uncovered a malware campaign targeting Ukraine’s IT Army , threat actors are using infostealer malware mimicking a DDoS tool called the “Liberator.” 35) on port 6666.

DDOS 88

DDOS Digital transformation Malware Advertising 88

Security Affairs

JUNE 22, 2021

DirtyMoe is a Windows botnet that is rapidly growing, it passed from 10,000 infected systems in 2020 to more than 100,000 in the first half of 2021. The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. Pierluigi Paganini.

DNS 131

DNS Cryptocurrency Internet Internet 131

Security Affairs

AUGUST 4, 2022

Major Taiwan government websites were temporarily forced offline by distributed denial of service (DDoS) attacks attacks during the visit to Taipei of US House Speaker Nancy Pelosi. The campaign was launched by the APT10 group in November 2021, but it hit a peak between February 10 and 13 2022, Taiwanese cybersecurity firm CyCraft reported.

DDOS 87

DDOS Government Cyber Attacks Hacking 87

Security Affairs

OCTOBER 30, 2021

INTERPOL published the African Cyberthreat Assessment Report 2021, a report that analyzes evolution of cybercrime in Africa. A new report published by INTERPOL, titled the African Cyberthreat Assessment Report 2021 , sheds the light on cybercrime in Africa. SecurityAffairs – hacking, African Cyberthreat Assessment Report 2021).

Cybercrime 77

Cybercrime Scams DDOS Banking 77

Krebs on Security

MARCH 7, 2022

In 2020, researchers from Athens University School of Information Sciences and Technology in Greece showed (PDF) how ransomware-as-a-service offerings might one day be executed through smart contracts. Before that, Jeffrey Ladish , an information security consultant based in Oakland, Calif., We release ddos.

Ransomware 223

Ransomware Cryptocurrency DDOS Scams 223

Security Affairs

OCTOBER 9, 2023

The HelloKitty gang has been active since January 2021. In November 2021, the US FBI has published a flash alert warning private organizations of the evolution of the HelloKitty ransomware (aka FiveHands). The ransomware gang targets their victims’ websites with DDoS attacks if they refuse to pay the ransom.

Cybercrime 121

Cybercrime Ransomware DDOS Encryption 121

Security Affairs

JUNE 2, 2021

Group-IB discovered a database allegedly belonging to a bulletproof hosting provider DDoS-Guard posted for sale on a cybercrime forum. The database supposedly contains information about DDoS-Guard’s customers, including their names, IP-addresses, and payment information. The seller registered this account on exploit[.]in

DDOS 106

DDOS Cybercrime Authentication Accountability 106

Security Affairs

APRIL 3, 2023

FortiGuard Labs researchers observed an ongoing hacking campaign targeting Cacti ( CVE-2022-46169 ) and Realtek ( CVE-2021-35394 ) vulnerabilities to spread ShellBot and Moobot malware. The ShellBot , also known as PerlBot, is a Perl-based DDoS bot that uses IRC protocol for C2 communications. also support backdoor capabilities.

DDOS 86

DDOS Malware Hacking Education 86

Krebs on Security

MAY 22, 2023

Shortly after that, those same servers came under a sustained distributed denial-of-service (DDoS) attack. Chaput said whoever was behind the DDoS was definitely not using point-and-click DDoS tools, like a booter or stresser service. I waited until it expired and forgot to buy it. “My friends do not belong to this field.

Scams 249

Scams DDOS Cryptocurrency Accountability 249

Security Affairs

MAY 18, 2021

Uptycs’ threat research team discovered a new botnet, tracked as Simps botnet, attributed to Keksec group, which is focused on DDOS activities. Uptycs’ threat research team has discovered a new Botnet named ‘Simps’ attributed to Keksec group primarily focussed on DDOS activities. Discovery of Simps Botnet. see Figure 7).

DDOS 128

DDOS Malware Architecture IoT 128

Security Affairs

MAY 30, 2022

The botnet was first discovered by Fortinet in March, the DDoS botnet targeted several routers and web servers by exploiting known vulnerabilities. The researchers attribute the botnet to the cybercrime group Keksec which focuses on DDoS-based extortion. The botnet targets multiple architectures, including arm, bsd, x64, and x86.

Malware 142

Malware DDOS IoT Cybercrime 142

Security Affairs

JANUARY 27, 2022

According to Senate President José Luis Dalmau, there is no evidence that threat actors were able to access sensitive information belonging to employees, contractors or consultants. In March 2021, Puerto Rico Electric Power Authority (PREPA) power utility confirmed early this week that it has been hacked over the weekend.

Energy and Utilities 102

Energy and Utilities DDOS Internet Internet 102

Security Affairs

JUNE 25, 2023

Someone is sending mysterious smartwatches to the US Military personnel CISA orders govt agencies to fix recently disclosed flaws in Apple devices VMware fixed five memory corruption issues in vCenter Server Fortinet fixes critical FortiNAC RCE, install updates asap More than a million GitHub repositories potentially vulnerable to RepoJacking New Mirai (..)

DDOS 91

DDOS Cybercrime Spyware Malware 91

Security Affairs

APRIL 2, 2022

Operators behind the Mirai-based distributed denial-of-service (DDoS) botnet Beastmode (aka B3astmode) added exploits for Totolink routers. The Mirai -based distributed denial-of-service (DDoS) botnet Beastmode (aka B3astmode) now includes exploits for Totolink routers. CVE-2017-17215 targets Huawei HG532 routers.

DDOS 89

DDOS Firmware Surveillance IoT 89

Security Affairs

SEPTEMBER 7, 2022

The Mirai -based Moobot botnet was first documented by Palo Alto Unit 42 researchers in February 2021, in November 2021, it started exploiting a critical command injection flaw ( CVE-2021-36260 ) in the webserver of several Hikvision products. ” At the time of the analysis, the C2 server was offline. Pierluigi Paganini.

DDOS 103

DDOS Encryption Passwords Hacking 103

Security Affairs

OCTOBER 12, 2021

The POC exploit code for this vulnerability is publicly available since July 2021. The botnet appeared on the threat landscape in November 2020, the attacks aimed at compromising the target systems to create an IRC botnet, which can later be used to conduct several malicious activities, including DDoS attacks and crypto-mining campaigns.

DDOS 98

DDOS Surveillance Hacking Internet 98

Security Affairs

JUNE 15, 2022

Privacy Affairs published the Dark Web Index, an analysis of prices for illegal services/products available in the black marketplaces and related to the period between February 2021 and June 2022. The document updates the information provided in the Dark Web Index 2022 report. verified account goes for $170 ($710 in 2021).

Identity Theft 95

Identity Theft Accountability DDOS Cybercrime 95

Security Affairs

DECEMBER 15, 2021

.” The HelloKitty gang has been active since January 2021 and it is still active. According to the alert, the ransomware gang is launching distributed denial-of-service (DDoS) attacks as part of its extortion activities. The ransomware gang targets their victims’ websites with DDoS attacks if they refuse to pay the ransom.

Ransomware 92

Ransomware Data breaches DDOS Healthcare 92

SecureList

NOVEMBER 8, 2021

Q3 2021 brought two new DDoS attack vectors, potentially posing a serious threat, including for major web resources. ris , a new botnet capable of carrying out powerful DDoS attacks. For instance, a DDoS attack on a Cloudflare customer (attributed to M?ris) We won't let our #DDoS stop us doing what we love!

DDOS 122

DDOS Marketing Cryptocurrency IoT 122

Security Affairs

MARCH 23, 2024

The Nemesis Market has been active since 2021, its offerings included illegal drugs and narcotics, stolen data and credit cards, as well as a selection of cybercrime services such as ransomware , phishing or DDoS attacks. The law enforcement confiscated about 94,000 euros worth of cryptocurrencies.

Marketing 101

Marketing Cybercrime DDOS Internet 101

Security Affairs

DECEMBER 22, 2022

com) with links to the bot was among the 48 domains associated with DDoS-for-hire services seized by the FBI in December. The Go-based botnet spreads by exploiting two dozen security vulnerabilities in the internet of things (IoT) devices and other applications. The IT giant is tracking this cluster of threat activity as DEV-1061.

IoT 115

IoT DDOS Malware Firmware 115

Security Affairs

FEBRUARY 24, 2022

This follows the DDoS attacks against several Ukrainian websites earlier today 1/n — ESET research (@ESETresearch) February 23, 2022. According to the security firm, the infections followed the DDoS attacks against several Ukrainian websites, including Ministry of Foreign Affairs, Cabinet of Ministers, and Rada.

Malware 115

Malware DDOS Banking Government 115

Security Affairs

FEBRUARY 2, 2024

” In June 2021, researchers from Avast warned of the rapid growth of the DirtyMoe botnet ( PurpleFox , Perkiler , and NuggetPhantom ), which passed from 10,000 infected systems in 2020 to more than 100,000 in the first half of 2021. Experts defined DirtyMoe as a complex malware that has been designed as a modular system.

Malware 100

Malware Internet Internet DDOS 100

Security Affairs

MAY 1, 2022

TB of Russian data Apr 17 – Apr 23 Ukraine – Russia the silent cyber conflict. TB of Russian data Apr 17 – Apr 23 Ukraine – Russia the silent cyber conflict. TB of Russian data Apr 17 – Apr 23 Ukraine – Russia the silent cyber conflict.

DDOS 72

DDOS Surveillance Hacking Ransomware 72

Security Affairs

JANUARY 14, 2022

The group was also carrying out DDoS attacks to paralyze the networks of the victims and force them to pay the ransom. The gang was targeting organizations via spam campaigns to spread ransomware, however, the police did not disclose the malware family used by the group in its attacks.

Ransomware 115

Ransomware DDOS Telecommunications Malware 115

Security Affairs

NOVEMBER 30, 2021

Researchers have identified 3 versions of the malware, the bot was mainly used to launch DDoS attacks ad to establish a backdoor on infected devices to gather sensitive information, such as call logs. ” reads the analysis published by Qihoo 360.

DDOS 136

DDOS Backups Engineering Encryption 136

Security Affairs

FEBRUARY 27, 2022

February 19 – White House and UK Gov attribute DDoS attacks on Ukraine to Russia’s GRU. The White House has linked the recent DDoS attacks against Ukraine ‘s banks and defense agencies to Russia’s GRU. Ukraine ‘s defense agencies and two state-owned banks were hit by Distributed Denial-of-Service (DDoS) attacks.

DDOS 91

DDOS Banking Phishing Ransomware 91

Security Affairs

MAY 23, 2022

Fronton is a distributed denial-of-service (DDoS) botnet that was used by Russia-linked threat actors for coordinated disinformation campaigns. This release noted that DDoS “is only one of the many capabilities of the system.” “Nisos research focused on the distribution of the numerous content types.

DDOS 115

DDOS Media Hacking Engineering 115

Security Affairs

AUGUST 23, 2022

Security researchers from CYFIRMA have discovered over 80,000 Hikvision cameras affected by a critical command injection vulnerability tracked as CVE-2021-36260. The Chinese vendor addressed the issue in September 2021, but tens of thousands of devices are yet to be patched. wrote the expert. “.

Hacking 114

Hacking Firmware Internet Internet 114