Security Affairs

JANUARY 14, 2024

million) worth of cryptocurrencies via mining activities. million) in cryptocurrencies.” million) in cryptocurrencies.” In cryptojacking scheme, threat actors gain unauthorized access to a cloud environment and abuse its computational power to mine cryptocurrencies. ” continues the press release.

Cryptocurrency 104

Cryptocurrency Cybercrime Accountability Authentication 104

Krebs on Security

JANUARY 30, 2024

authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. stole at least $800,000 from at least five victims between August 2022 and March 2023. 9, 2024, U.S. technology companies during the summer of 2022.

Social Engineering 326

Social Engineering Mobile Cybercrime Passwords 326

SecureList

NOVEMBER 22, 2022

A look back on the year 2022 and what to expect in 2023. This report assesses how accurately we predicted the developments in the financial threats landscape in 2022 and ponder at what to expect in 2023. Cryptocurrency targeted attacks. These are attractive aspects that cybercrime groups will be unable to resist.

Cryptocurrency 96

Cryptocurrency Mobile Ransomware Banking 96

Krebs on Security

AUGUST 25, 2023

Security consulting giant Kroll disclosed today that a SIM-swapping attack against one of its employees led to the theft of user information for multiple cryptocurrency platforms that are relying on Kroll services in their ongoing bankruptcy proceedings. ” T-Mobile has not yet responded to requests for comment. Why do I suggest this?

Mobile 207

Mobile Cyber Risk Cryptocurrency Data breaches 207

SecureWorld News

JUNE 27, 2023

In a significant victory against cybercrime, Joseph James O'Connor, a U.K. citizen known by the moniker "PlugwalkJoe," has been sentenced to five years in prison for his involvement in a wide range of cybercrimes. Attorney's Office in the Southern District of New York divided the charges against O'Connor into two separate cases.

Hacking 71

Hacking Cybercrime Cryptocurrency Accountability 71

Security Affairs

JANUARY 13, 2024

Akira ransomware targets Finnish organizations GitLab fixed a critical zero-click account hijacking flaw Juniper Networks fixed a critical RCE bug in its firewalls and switches Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467 Team Liquid’s wiki leak exposes (..)

VPN 108

VPN Cybercrime Ransomware Hacking 108

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. The messages said recipients had earned an investment credit at a cryptocurrency trading platform called moonxtrade[.]com. A DIRECT QUOT The domain quot[.]pw

Scams 251

Scams DDOS Cryptocurrency Accountability 251

Security Affairs

DECEMBER 20, 2023

Kingdom Market boasted tens of thousands of customer accounts and several hundred registered sellers, featuring a listing that comprised 42,000 items. Tens of thousands of customers and several hundred seller accounts were registered on the marketplace.” Kingdom Market allowed payments with Bitcoin, Litecoin, Monero, and Zcash.

Marketing 108

Marketing Cryptocurrency Accountability Banking 108

Krebs on Security

AUGUST 29, 2023

government today announced a coordinated crackdown against QakBot , a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. Reliaquest says QakBot infections accounted for nearly one-third of all loaders observed in the wild during the first six months of this year.

Hacking 262

Hacking Malware Ransomware Government 262

Security Affairs

SEPTEMBER 5, 2023

Researchers reported abnormally large withdrawals made from the crypto gambling site Stake to an account with no previous activity, a circumstance that suggests that threat actors have hacked the platform and stolen crypto assets, including Tether and Ether. Once the attackers drained the funds, they distributed them to multiple accounts.

Cryptocurrency 108

Cryptocurrency Accountability Hacking Cybercrime 108

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 79

Malware Cybercrime Cryptocurrency Social Engineering 79

Krebs on Security

FEBRUARY 20, 2024

In May 2023, U.S. In January 2022, KrebsOnSecurity published Who is the Network Access Broker ‘Wazawaka,’ which followed clues from Wazawaka’s many pseudonyms and contact details on the Russian-language cybercrime forums back to a 31-year-old Mikhail Matveev from Abaza, RU. An FBI wanted poster for Matveev.

Ransomware 282

Ransomware Cybercrime Encryption Insurance 282

Krebs on Security

NOVEMBER 2, 2023

One of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. Among the most common ways that thieves extract cash from stolen credit card accounts is through purchasing pricey consumer goods online and reselling them on the black market.

Cybercrime 280

Cybercrime Marketing Scams Retail 280

Security Affairs

DECEMBER 2, 2023

Researchers devised an attack technique to extract ChatGPT training data Fortune-telling website WeMystic exposes 13M+ user records Expert warns of Turtle macOS ransomware US govt sanctioned North Korea-linked APT Kimsuky Black Basta Ransomware gang accumulated at least $107 million in Bitcoin ransom payments since early 2022 Apple addressed 2 new (..)

Ransomware 97

Ransomware Hacking Spyware Cybercrime 97

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4

Artificial Intelligence 93

Artificial Intelligence Data breaches Scams Insurance 93

Malwarebytes

SEPTEMBER 11, 2023

A cybercriminal who goes by the handle RastaFarEye has been advertising DarkGate Loader on cybercrime forums since June 16, 2023. Once active, the malware can be used for several malicious activities like remote access, cryptocurrency mining, keylogging, clipboard stealing, and information stealing.

Malware 111

Malware Social Engineering Cryptocurrency Cybercrime 111

Security Affairs

JUNE 17, 2023

The operation was conducted by the Polish Central Bureau for Combating Cybercrime with the support of Europol, the FBI, and law enforcement agencies from the Netherlands, Germany, and Belgium, and the Joint Cybercrime Action Taskforce (J-CAT). user accounts, 76 thousand. zlotys and money in the amount of over 145 thousand.

DDOS 87

DDOS Computers and Electronics Cybercrime Cryptocurrency 87

SecureList

AUGUST 30, 2023

IT threat evolution in Q2 2023 IT threat evolution in Q2 2023. Non-mobile statistics IT threat evolution in Q2 2023. While investigating an infection of a cryptocurrency company in Southeast Asia, we found Gopuram coexisting on target computers with AppleJeus , a backdoor attributed to the Lazarus.

Malware 80

Malware Spyware Cryptocurrency Government 80

Security Affairs

AUGUST 26, 2023

Security consulting firm Kroll revealed that a SIM-swapping attack against one of its employees caused the theft of user information for multiple cryptocurrency platforms. On August 19, 2023, the consulting firm became aware that threat actors targeted the T-Mobile phone number belonging to one of its employees.

Data breaches 91

Data breaches Mobile Accountability Phishing 91

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 95

Data breaches Malware Mobile Spyware 95

Security Affairs

APRIL 5, 2023

The STYX marketplace was launched at the beginning of 2023. The discovery of STYX coincides with Resecurity financial crime risk analysts observing a significant increase in threat actors offering money-laundering services that exploit digital banking and cryptocurrency accounts.

Banking 81

Banking Cybercrime Accountability Risk 81

SecureWorld News

AUGUST 29, 2023

An advisory from the company states that a "highly sophisticated" SIM swapping attack targeted one of Kroll's employees, resulting in unauthorized access to personal information related to bankruptcy claimants associated with cryptocurrency firms FTX, BlockFi, and Genesis.

Cryptocurrency 81

Cryptocurrency Phishing Social Engineering Accountability 81

Security Affairs

NOVEMBER 6, 2018

Group-IB and Swiss insurance broker ASPIS that owns CryptoIns project, have developed the world’s first scoring model for assessing cryptocurrency exchanges. According to CryptoIns analysts, the crypto assets insurance market is expected to reach $7 billion by 2023. The full list of platforms is available on CryptoIns website.

Insurance 62

Insurance Cryptocurrency Cyber threats Marketing 62

Malwarebytes

JUNE 5, 2024

While the above scene is fictional, it’s indicative of what the FBI and Department of Homeland Security agree is the fastest-growing cybercrime of the last three years. Fast forward to June 2023, and 51 percent of Generation Z respondents said they or their friends were catfished in sextortion scams—47 percent in the last three months.

Scams 92

Scams Media Artificial Intelligence Accountability 92

Security Affairs

JANUARY 3, 2024

Around November 11th, 2023, the group’s leader, operating under the alias “ googleXcoder “, made multiple announcements on the Dark Web. For the tool to function, the operator must input a list of compromised email accounts to be scanned.

Artificial Intelligence 118

Artificial Intelligence Banking Scams Cybercrime 118

Security Affairs

NOVEMBER 10, 2023

The collective Anonymous Sudan has been active since January 2023, it claims to target any country that is against Sudan. In July, Anonymous Sudan announced it had stolen credentials for 30 million customer accounts. No protection can stand in our way Attack duration: 1 hour.”

DDOS 130

DDOS Cryptocurrency Accountability Media 130

Security Affairs

MAY 1, 2023

While investigating the malware distribution, the researchers noticed the use of an infrastructure known to belong to cybercrime group TA505. Earlier 2023, Elastic Security Labs observed multiple infections with an interesting attach chain that lead to the execution of the LOBSHOT malware.

Malware 89

Malware Cybercrime Banking Software 89

Security Affairs

MARCH 23, 2023

Telegram) since January 2023. “Nexus provides all the main features to perform ATO attacks (Account Takeover) against banking portals and cryptocurrency services, such as credentials stealing and SMS interception. The Nexus ransomware was first analyzed in early March by researchers from the threat intelligence firm Cyble.

Banking 80

Banking Cryptocurrency Malware Advertising 80

Security Affairs

JANUARY 10, 2024

Sebastien Raoult (also known as “Seyzo Kaizen”), is a French national that has been extradited from Morocco to the United States in January 2023. He stole people’s cryptocurrency. District Court in Seattle to three years in prison and more than $5 million in restitution for conspiracy to commit wire fraud and aggravated identity theft.

Identity Theft 106

Identity Theft Hacking Cryptocurrency Advertising 106

Security Affairs

MARCH 19, 2023

Much ado about nothing Cisco fixed CVE-2023-20049 DoS flaw affecting enterprise routers Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter) The post Security Affairs newsletter Round 411 by Pierluigi Paganini appeared first on Security Affairs.

DDOS 82

DDOS Ransomware Phishing Cryptocurrency 82

SecureWorld News

MAY 11, 2023

Nearly three years ago, chaos descended upon Twitter when a small group of hackers successfully breached the accounts of some of the platform's most high-profile users. RELATED: Famous Twitter Accounts Hacked: Insider Threat or Social Engineering Attack? O'Connor's criminal activities were described by U.S.

Accountability 76

Accountability Social Engineering Media Hacking 76

Security Affairs

AUGUST 16, 2023

Starting from May 2023, researchers from Cofense discovered a large-scale phishing campaign using QR codes in attacks aimed at stealing the Microsoft credentials of users from multiple industries One of the organizations targeted by hackers is a notable energy company in the US. ” reads Cofense’s report.

Phishing 87

Phishing Energy and Utilities Insurance Manufacturing 87

Security Affairs

FEBRUARY 27, 2023

and over $77 worldwide (2022), with significant rapid growth at the start of Q1 2023. The information about Digital Smoke along with the identities of key actors has been timely shared with the Indian Cybercrime Coordination Center and the U.S. The total damage from investment fraud including ponzi and pyramid schemes exceeds $5.8

Scams 93

Scams Mobile Marketing Banking 93

SecureList

NOVEMBER 23, 2023

In our previous summary of consumer predictions , we delved into tactics that we expected scammers and cybercriminals to use in 2023. Despite the fact that our predictions regarding Metaverse did not fully materialize in 2023, we reiterate what we said earlier, as we consider this a long-term trend.

VPN 105

VPN Scams Education Internet 105

Security Affairs

APRIL 29, 2023

xyz pic.twitter.com/VLhISark8Y — Goldwave (@OGoldwave) March 13, 2023 The variant employed in the campaign supports a more sophisticated encryption method of byte remapping and a monthly rotation of the C2 server. #ViperSoftX is back, doesn't look like much has changed. c2 arrowlchat[.]com ” concludes the report.

Encryption 88

Encryption Malware Cryptocurrency Software 88

Security Affairs

SEPTEMBER 26, 2023

“In addition, the samples identified by ThreatFabric featured configurations with Target lists made of more than 400 banking and financial institutions , including several cryptocurrency wallets , with an increase of more than 6 times with comparison to its previous variants, including financial institutions from all continents.”

Malware 111

Malware Banking Phishing Engineering 111

Security Affairs

JANUARY 11, 2024

The X account of cybersecurity firm Mandiant was likely hacked through a brute-force password attack, the company revealed. Last week, threat actors hacked the X account of cybersecurity firm Mandiant and used it to impersonate the Phantom crypto platform and share a cryptocurrency scam. ” the company said on X.

Accountability 120

Accountability Hacking Cryptocurrency Cybersecurity 120