Security Affairs

MAY 4, 2022

Pro-Ukraine hackers are using Docker images to launch distributed denial-of-service (DDoS) attacks against a dozen Russian and Belarusian websites. The DDoS attacks also targeted three Lithuanian media websites. “Container and cloud-based resources are being abused to deploy disruptive tools. .” Pierluigi Paganini.

DDOS 129

DDOS Government Media Engineering 129

Security Affairs

FEBRUARY 14, 2023

Cloudflare mitigated a record distributed denial-of-service (DDoS) that reached 71 Million requests per second. Cloudflare announced it has mitigated a record hyper-volumetric distributed denial-of-service (DDoS) attack that peaked at over 71 million requests per second (RPS). “This was a weekend of record-breaking DDoS attacks.

DDOS 98

DDOS Threat Reports Healthcare Cryptocurrency 98

Security Affairs

JUNE 17, 2023

Polish police, as part of the international law enforcement operation PowerOFF, dismantled a DDoS-for-hire service that has been active since at least 2013. An international operation codenamed PowerOff led to the shutdown of a DDoS-for-hire service that has been active since at least 2013. Viewer discretion is advised.

DDOS 98

DDOS Computers and Electronics Cybercrime Cryptocurrency 98

SecureList

MAY 27, 2022

IT threat evolution in Q1 2022. IT threat evolution in Q1 2022. IT threat evolution in Q1 2022. In January, we reported a malicious campaign targeting companies that work with cryptocurrencies, smart contracts, decentralized finance and blockchain technology: the attackers are interested in fintech in general.

Phishing 134

Phishing Spyware Firmware Malware 134

eSecurity Planet

JANUARY 6, 2022

About the only consensus on cybersecurity in 2022 is that things will get uglier, but in what ways? Here are some of the more interesting predictions for 2022 we’ve seen from cybersecurity researchers. Here are some of the more interesting predictions for 2022 we’ve seen from cybersecurity researchers.

Ransomware 136

Ransomware Cybersecurity Artificial Intelligence CISO 136

SecureList

JULY 28, 2022

This is our latest installment, focusing on activities that we observed during Q2 2022. We discovered a highly active campaign, starting in March 2022, targeting stock and cryptocurrency investors in South Korea. The actor used cryptocurrency-related contents or complaints from law enforcement as lure themes.

Malware 145

Malware Firmware Phishing Cryptocurrency 145

Malwarebytes

MARCH 17, 2022

Cryptocurrency wallet attacks. People new to cryptocurrency often gravitate to services which take the hassle out of setting everything up. Some folks may feel the above process isn’t as secure as storing their cryptocurrency on standalone devices. The post Clouding the issue: what cloud threats lie in wait in 2022?

Cryptocurrency 132

Cryptocurrency Backups Phishing Password Management 132

SecureList

DECEMBER 16, 2024

In general, the number of unique threads discussing drainers on underground markets increased from 55 in 2022 to 129 in 2024, which is remarkable. Stealers and drainers to see a rise in their promotion as services on the dark web Cryptocurrencies have been a prime target for cybercriminals for years.

Marketing 105

Marketing Data breaches Cryptocurrency Malware 105

Webroot

OCTOBER 14, 2022

In other words, 2022 has been an eventful year in the threat landscape, with malware continuing to take center stage. The 6 Nastiest Malware of 2022. 2022 was no different. 2022 was no different. With that, here are the 6 Nastiest Malware of 2022. Here are this year’s wicked winners.

Malware 89

Malware Antivirus DDOS Cyber Insurance 89

Webroot

JANUARY 7, 2022

In particular, we witnessed an increase in distributed denial of service (DDoS) attacks and a surge in the usage of the internet of things (IoT). Cryptocurrency. There was no shortage of discussion surrounding cryptocurrency and its security flaws. What to expect in 2022? Malware made leaps and bounds in 2021.

Cybercrime 116

Cybercrime Ransomware Phishing Cryptocurrency 116

Security Affairs

JUNE 15, 2022

PrivacyAffairs released the Dark Web Index 2022, the document provides the prices for illegal services/products available in the black marketplaces. The document updates the information provided in the Dark Web Index 2022 report. The document updates the information provided in the Dark Web Index 2022 report.

Accountability 98

Accountability Identity Theft DDOS Cybercrime 98

Security Affairs

FEBRUARY 14, 2023

The threat actors behind a massive AdSense fraud campaign infected 10,890 WordPress sites since September 2022. In November 2022, researchers from security firm Sucuri reported to have tracked a surge in WordPress malware redirecting website visitors to fake Q&A sites via ois[.]is. All these domains can now be found on IP 190[.]115[.]26.9.

Malware 98

Malware DDOS Hacking Cryptocurrency 98

Security Affairs

DECEMBER 1, 2022

Redigo is a new Go-based malware employed in attacks against Redis servers affected by the CVE-2022-0543 vulnerability. Threat actors are exploiting a critical vulnerability, tracked as CVE-2022-0543 , in Redis (Remote Dictionary Server) servers. In March 2022, the U.S.

Malware 145

Malware DDOS Architecture Cryptocurrency 145

Security Affairs

NOVEMBER 27, 2022

Data from 5.4M Data from 5.4M

DDOS 128

DDOS Cybercrime Ransomware Cryptocurrency 128

Security Affairs

DECEMBER 11, 2022

Samsung S22 hacked Sophos fixed a critical flaw in its Sophos Firewall version 19.5 Samsung S22 hacked Sophos fixed a critical flaw in its Sophos Firewall version 19.5

Firewall 100

Firewall Banking Hacking DDOS 100

Security Affairs

SEPTEMBER 25, 2022

builder Over 39K unauthenticated Redis services on the internet targeted in cryptocurrency campaign Hackers stole $160 Million from Crypto market maker Wintermute U.S. gov adds more Chinese Telecom firms to the Covered List Imperva blocked a record DDoS attack with 25.3

Cryptocurrency 100

Cryptocurrency Data breaches DNS DDOS 100

Security Affairs

FEBRUARY 19, 2023

Twitter will allow using the SMS-based two-factor authentication (2FA) only to its Blue subscribers GoDaddy discloses a new data breach Fortinet fixes critical vulnerabilities in FortiNAC and FortiWeb German airport websites hit by DDos attacks once again Cisco fixed critical RCE bug in ClamAV Open-Source Antivirus engine CISA adds Cacti, Office, Windows (..)

DDOS 98

DDOS Data breaches Ransomware Hacking 98

Malwarebytes

JANUARY 9, 2023

Digging further into the skimmer's infrastructure on Russian-based hosting provider DDoS-Guard, we came across a digital crime haven for cryptocurrency scams, Bitcoin mixers, malware distribution sites and much more. We should note that the sites we found injected with this skimmer had nothing to do with cryptocurrencies themselves.

DDOS 97

DDOS Scams Cryptocurrency Phishing 97

SecureList

NOVEMBER 9, 2022

As for KSB 2022, we invited notable experts to share their insights and unbiased opinions on what we should expect from cybersecurity in the following year. In 2023, we might see a slight decline in ransomware attacks, reflecting the slowdown of the cryptocurrency markets. DDOS Botnets. and the E.U.

Cybersecurity 144

Cybersecurity Cyber Insurance Cybercrime IoT 144

Security Affairs

OCTOBER 6, 2022

The Eternity group operates a homonymous malware-as-a-service (MaaS), it is linked to the Russian “Jester Group,” which is active since at least January 2022. According to Cyble, the operators behind the Eternity Project are also developing a DDoS Bot malware borrowing code from the existing Github repository.

Malware 98

Malware DDOS Ransomware Cryptocurrency 98

Security Affairs

MAY 15, 2022

Researchers at cybersecurity firm Cyble analyzed a Tor website named named ‘Eternity Project’ that offers for sale a broad range of malware, including stealers, miners, ransomware, and DDoS Bots. ” concludes Cyble , which also shared Indicators of Compromise (IoCs) for this threat.

Ransomware 98

Ransomware DDOS Cybercrime Malware 98

Security Affairs

AUGUST 28, 2023

KmsdBot is an evasive Golang-based malware that was first detected by Akamai in November 2022, it infects systems via an SSH connection that uses weak login credentials. The malware was employed in cryptocurrency mining campaigns and to launch denial-of-service (DDoS) attacks. ” reads the report published by Akamai.

IoT 98

IoT DDOS Architecture Internet 98

Malwarebytes

MAY 18, 2022

The variant they focused on uses a range of known exploits for vulnerabilities in web apps and databases to install cryptocurrency miners on both Windows and Linux systems. Once it has gained a foothold and the bot malware is running on a compromised system it deploys a Monero cryptocurrency miner. The favorite cryptocurrency.

Cryptocurrency 83

Cryptocurrency IoT Malware DDOS 83

Security Affairs

JANUARY 23, 2022

from the Lympo NTF platform.

VPN 111

VPN Ransomware Spyware Hacking 111

Security Affairs

MAY 8, 2022

Please vote for Security Affairs as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog” and others of your choice.

IoT 98

IoT DNS Antivirus DDOS 98

Security Affairs

AUGUST 5, 2022

Dark Utilities was launched in early 2022, the platform that provides full-featured C2 capabilities to its users. Dark Utilities is advertised as a platform to enable remote access, command execution, conduct distributed denial-of-service (DDoS) attacks and cryptocurrency mining operations on infected systems.

Architecture 98

Architecture DDOS Internet Internet 98

Security Boulevard

AUGUST 25, 2022

On August 13th, 2022, Monero underwent a hard fork, i.e. a protocol upgrade that introduced several new features to improve user anonymity and performance. [5] Threat Actor Updates: LockBit Accuses Entrust of DDoS Attack; If Proven Would Set a New Precedent. CVE-2022-21971 Microsoft Windows Runtime Remote Code Execution Vulnerability.

DDOS 52

DDOS Cryptocurrency Ransomware Technology 52

Security Boulevard

JULY 5, 2022

On June 23, 2022, Harmony was notified of an attack on its proprietary Horizon Ethereum Bridge. A standard cryptocurrency wallet relies on a public address to receive digital assets, and a private key to authorize transactions. Intense DDoS attacks targeted several companies and institutions in Lithuania.” 28, 2022).

DDOS 52

DDOS Malware Cryptocurrency Cyber Attacks 52

SecureList

NOVEMBER 14, 2023

In June, Microsoft published a report on a threat actor named Cadet Blizzard, responsible for WhisperGate and other wipers targeting Ukrainian government agencies early in 2022. To sum up, although we did not see the same volume as we had in 2022, clearly there were some significant attacks. Verdict: prediction fulfilled ✅ 8.

Hacking 141

Hacking Energy and Utilities Malware Media 141

SecureList

JUNE 5, 2025

According to law enforcement officials, the multinational operation resulted in the seizure of more than 40 assets, including computers, phones, and cryptocurrency wallets. Arrested in Israel last August, the suspect is accused of receiving more than $230,000 in cryptocurrency for his work with the group between June 2022 and February 2024.

Mobile 91

Mobile Adware Ransomware IoT 91

SecureList

AUGUST 3, 2022

Politically-motivated cyberattacks dominated the DDoS landscape in the second quarter of 2022 just as they did in the previous reporting period. The pro-Russian hacktivists Killnet, which first surfaced in January 2022, claimed responsibility for DDoS attacks on the websites of various European organizations from April through June.

DDOS 142

DDOS Government Marketing IoT 142

Security Boulevard

JULY 2, 2024

This blog provides an overview of SmokeLoader’s development from 2015 to 2022, where the malware continued to update its algorithms and improve anti-analysis techniques.2015-2017: BOT_DATAAdditional data sent with the packet.Table 1: SmokeLoader C2 fields present in all versions from 2015-2022.Introduction

Encryption 59

Encryption Malware Passwords DDOS 59

Security Boulevard

NOVEMBER 24, 2022

The ransomware campaign used a previously unidentified ransomware payload called ‘Prestige’ which was observed deployed on October 11th, 2022. IRIDUIM is a Russia-based actor that overlaps with Sandworm and has been consistently active in Ukraine with IRIDIUM being linked to activity in March 2022 ( 1 ).

Ransomware 52

Ransomware Government DDOS Cyber Risk 52

Security Boulevard

MAY 22, 2025

After Russia invaded Ukraine in early 2022, ThreatLabz identified a DanaBot instance that was used to issue commands to infected systems that pushed a distributed denial of service (DDoS) module targeting the Ukrainian Ministry of Defenses webmail server and later an IP address associated with information about Russian prisoners of war (POWs).

Malware 66

Malware Architecture DDOS Encryption 66

Malwarebytes

MAY 21, 2023

Upon its launch in November 2022, tech enthusiasts quickly jumped at the shiny new disruptor, and for good reason: ChatGPT has the potential to democratize AI, personalize and simplify digital research, and assist in both creative problem-solving and tackling “busywork.” Enter: ChatGPT.

Cybersecurity 92

Cybersecurity Artificial Intelligence Social Engineering Engineering 92

SecureList

NOVEMBER 8, 2021

Q3 2021 brought two new DDoS attack vectors, potentially posing a serious threat, including for major web resources. ris , a new botnet capable of carrying out powerful DDoS attacks. For instance, a DDoS attack on a Cloudflare customer (attributed to M?ris) We won't let our #DDoS stop us doing what we love!

DDOS 144

DDOS Marketing Cryptocurrency IoT 144

Security Boulevard

NOVEMBER 8, 2024

The IST attributes the sharp increase in attacks to a shift by ransomware groups to “big game hunting” – going after prominent, large organizations with deep pockets.

Phishing 49

Phishing Cybersecurity Ransomware Cybercrime 49