SecureList

NOVEMBER 22, 2022

A look back on the year 2022 and what to expect in 2023. This report assesses how accurately we predicted the developments in the financial threats landscape in 2022 and ponder at what to expect in 2023. Cryptocurrency targeted attacks. These are attractive aspects that cybercrime groups will be unable to resist.

Cryptocurrency 96

Cryptocurrency Mobile Ransomware Banking 96

Krebs on Security

JANUARY 30, 2024

authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. Sources close to the investigation tell KrebsOnSecurity the accused was a key member of a criminal hacking group blamed for a string of cyber intrusions at major U.S.

Social Engineering 326

Social Engineering Mobile Cybercrime Passwords 326

Security Affairs

MARCH 23, 2024

An operation conducted by the Federal Criminal Police Office in Germany (BKA) and the Frankfurt cybercrime combating unit (ZIT) led to the seizure of the infrastructure of the darknet marketplace Nemesis Market in Germany and Lithuania. The law enforcement confiscated about 94,000 euros worth of cryptocurrencies.

Marketing 100

Marketing Cybercrime DDOS Internet 100

Security Affairs

MAY 15, 2024

One of the developers of the Tornado Cash cryptocurrency mixer has been sentenced to 64 months in prison. Alexey Pertsev (29), one of the main developers of the Tornado Cash cryptocurrency mixer has been sentenced to 64 months in prison for helping launder more than $2 billion worth of cryptocurrency. billion U.S. billion U.S.

Cryptocurrency 94

Cryptocurrency Hacking Cybercrime Information Security 94

Security Affairs

JANUARY 13, 2024

Akira ransomware targets Finnish organizations GitLab fixed a critical zero-click account hijacking flaw Juniper Networks fixed a critical RCE bug in its firewalls and switches Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467 Team Liquid’s wiki leak exposes (..)

VPN 108

VPN Cybercrime Ransomware Hacking 108

Security Affairs

OCTOBER 8, 2023

North Korea-linked APT group Lazarus has laundered $900 million worth of cryptocurrency, Elliptic researchers reported. North Korea-linked Lazarus Group laundered $900 Million in cryptocurrency between July 2022 and July 2023. ” reads the report published by Elliptic. ” reads the report published by Elliptic.

Cryptocurrency 120

Cryptocurrency Cybercrime Scams Hacking 120

Security Affairs

FEBRUARY 6, 2024

A Belarusian and Cypriot national linked with the cryptocurrency exchange BTC-e is facing charges that can lead maximum penalty of 25 years in prison. BTC-e was popular in the cybercrime ecosystem, it was an illegal platform because it was not registered as a money services business with the U.S. million withdrawn.

Cryptocurrency 101

Cryptocurrency Spyware Cybercrime Hacking 101

Security Affairs

MARCH 15, 2023

CrowdStrike researchers discovered the first-ever cryptocurrency mining campaign aimed at Dero mining since February 2023. It claims to offer improved privacy, anonymity and higher monetary rewards compared to other cryptocurrencies. The campaign started in February 2023 and originated from three servers based in the U.S.

Cryptocurrency 72

Cryptocurrency Internet Internet Hacking 72

Security Affairs

JANUARY 14, 2024

million) worth of cryptocurrencies via mining activities. million) in cryptocurrencies.” million) in cryptocurrencies.” In cryptojacking scheme, threat actors gain unauthorized access to a cloud environment and abuse its computational power to mine cryptocurrencies. ” continues the press release.

Cryptocurrency 104

Cryptocurrency Cybercrime Accountability Authentication 104

Security Affairs

JUNE 11, 2023

Experts found new MOVEit Transfer SQL Injection flaws The University of Manchester suffered a cyber attack and suspects a data breach Russians charged with hacking Mt. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Social Engineering 91

Social Engineering Data breaches Ransomware Cybercrime 91

Security Affairs

DECEMBER 2, 2023

Researchers devised an attack technique to extract ChatGPT training data Fortune-telling website WeMystic exposes 13M+ user records Expert warns of Turtle macOS ransomware US govt sanctioned North Korea-linked APT Kimsuky Black Basta Ransomware gang accumulated at least $107 million in Bitcoin ransom payments since early 2022 Apple addressed 2 new (..)

Ransomware 97

Ransomware Hacking Spyware Cybercrime 97

SecureWorld News

AUGUST 24, 2023

Federal Bureau of Investigation (FBI) has raised some serious concerns about the possibility of a massive $40 million cryptocurrency heist orchestrated by malicious actors linked to North Korea, specifically the Lazarus Group. This cryptocurrency, derived from multiple heists, is currently stored in six different Bitcoin wallets.

Cryptocurrency 75

Cryptocurrency Cybercrime Cybersecurity Hacking 75

Security Affairs

MAY 2, 2024

” The co-conspirators demanded ransom payments in cryptocurrency and used cryptocurrency exchangers and mixing services to hide their ill-gotten gains. In a related matter, in 2023, the Department concluded the forfeiture of millions of dollars’ worth of ransom payments through two connected civil forfeiture cases.

Ransomware 90

Ransomware Cryptocurrency Cybercrime Encryption 90

Security Affairs

DECEMBER 17, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Data breaches 82

Data breaches Cybercrime Firewall Artificial Intelligence 82

Security Affairs

SEPTEMBER 25, 2023

The company suspended deposits and withdrawals immediately after the discovery of the security breach that took place early in the morning of September 23, 2023. This incident is the largest crypto hack this year. 25, 2023, here are the Top 10 Hacks in 2023. 25, 2023, here are the Top 10 Hacks in 2023.

Hacking 107

Hacking Cryptocurrency Cybercrime Information Security 107

Security Affairs

DECEMBER 14, 2023

“A Russian, suspected of having recovered in cryptocurrencies the money taken from French victims of the powerful Hive ransomware , dismantled in January, was arrested last week, AFP learned on Tuesday December 12 from the judicial police.” anti-cybercrime (Ofac).” anti-cybercrime (Ofac).”

Ransomware 114

Ransomware Cryptocurrency Cybercrime VPN 114

Security Affairs

DECEMBER 20, 2023

“To pay, users of the darknet marketplace used the cryptocurrencies Bitcoin, Litecoin, Monero and Zcash. “Certain cryptocurrency transactions from a cluster or group of cryptocurrency addresses used by Kingdom were traced to cryptocurrency wallets held in the name of BILL. .”

Marketing 108

Marketing Cryptocurrency Accountability Banking 108

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 79

Malware Cybercrime Cryptocurrency Social Engineering 79

Security Affairs

SEPTEMBER 5, 2023

Researchers reported abnormally large withdrawals made from the crypto gambling site Stake to an account with no previous activity, a circumstance that suggests that threat actors have hacked the platform and stolen crypto assets, including Tether and Ether. It offers video streams with live dealers. User funds are safe.

Cryptocurrency 108

Cryptocurrency Accountability Hacking Cybercrime 108

Security Affairs

JULY 30, 2023

Now Abyss Locker also targets VMware ESXi servers Russian APT BlueBravo targets diplomatic entities with GraphicalProton backdoor CoinsPaid blames North Korea-linked APT Lazarus for theft of $37M worth of cryptocurrency Monitor Insider Threats but Build Trust First Zimbra fixed actively exploited zero-day CVE-2023-38750 in ZCS DepositFiles exposed (..)

Surveillance 79

Surveillance Cryptocurrency Cyber Attacks Hacking 79

Security Affairs

JULY 2, 2023

WordPress sites using the Ultimate Member plugin are under attack LockBit gang demands a $70 million ransom to the semiconductor manufacturing giant TSMC Avast released a free decryptor for the Windows version of the Akira ransomware Iran-linked Charming Kitten APT enhanced its POWERSTAR Backdoor miniOrange’s WordPress Social Login and Register plugin (..)

Cybercrime 88

Cybercrime Hacking Ransomware Malware 88

Security Affairs

JULY 4, 2023

1/3】 — Poly Network (@PolyNetwork2) July 2, 2023 Please remain calm and trust that we are committed to safeguarding your assets. 【3/3】 3/7】 — Poly Network (@PolyNetwork2) July 2, 2023 Binance CEO Changpeng Zhao promtly declared that the security breach did not affect Binance users.” This does not affect @Binance users.

Cryptocurrency 94

Cryptocurrency Hacking Cyber Attacks Risk 94

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. Chaput said that on May 4, 2023, someone unleashed a spam torrent targeting users on these Mastodon communities via “private mentions,” a kind of direct messaging on the platform.

Scams 251

Scams DDOS Cryptocurrency Accountability 251

Krebs on Security

NOVEMBER 2, 2023

One of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. Services like SWAT are known as “Drops for stuff” on cybercrime forums. The login page for the criminal reshipping service SWAT USA Drop. “SwatVerified.”

Cybercrime 280

Cybercrime Marketing Scams Retail 280

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4

Artificial Intelligence 93

Artificial Intelligence Data breaches Scams Insurance 93

Security Affairs

JANUARY 15, 2024

Threat actors exploit a recent Windows SmartScreen bypass flaw CVE-2023-36025 to deliver the Phemedrone info stealer. Trend Micro researchers uncovered a malware campaign exploiting the vulnerability CVE-2023-36025 (CVSS score 8.8) ” The malicious URL files exploiting CVE-2023-36025 reference Discord or other cloud services. .

Malware 107

Malware Cryptocurrency Media Phishing 107

Security Affairs

JANUARY 10, 2024

Sebastien Raoult (also known as “Seyzo Kaizen”), is a French national that has been extradited from Morocco to the United States in January 2023. Raoult and two other co-conspirators were charged with having hacked into protected computers of corporate entities and for the theft of stolen proprietary information. He sold hacked data.

Identity Theft 106

Identity Theft Hacking Cryptocurrency Advertising 106

Security Affairs

JUNE 17, 2023

The operation was conducted by the Polish Central Bureau for Combating Cybercrime with the support of Europol, the FBI, and law enforcement agencies from the Netherlands, Germany, and Belgium, and the Joint Cybercrime Action Taskforce (J-CAT). zlotys and money in the amount of over 145 thousand. Viewer discretion is advised.

DDOS 87

DDOS Computers and Electronics Cybercrime Cryptocurrency 87

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 95

Data breaches Malware Mobile Spyware 95

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M worth of cryptocurrency. Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M worth of cryptocurrency. Attackers also stole funds in other cryptocurrencies.

Cryptocurrency 81

Cryptocurrency VPN Manufacturing Firewall 81

Security Affairs

NOVEMBER 4, 2023

The vulnerability Looney Tunables ( CVE-2023-4911 (CVSS score 7.8)) is a buffer overflow issue that resides in the GNU C Library’s dynamic loader ld.so The attackers used a rudimentary yet PHPUnit vulnerability exploit, they attempted to manipulate the Looney Tunables vulnerability ( CVE-2023-4911 ). ” continues the analysis.

Architecture 100

Architecture Cryptocurrency Hacking Cybercrime 100

Security Affairs

MAY 1, 2023

While investigating the malware distribution, the researchers noticed the use of an infrastructure known to belong to cybercrime group TA505. Russian TA505 hacking group , aka Evil Corp , has been active since 2014 focusing on Retail and banking sectors. ” reads the report published by Elastic Security Labs.

Malware 89

Malware Cybercrime Banking Software 89

Security Affairs

AUGUST 4, 2023

On July 31, 2023, Phylum researchers observed the publication of ten different “test” packages on the npm package manager that were developed to exfiltrate sensitive developer source code and other confidential information. “This seems to be another highly-targeted attack on developers involved in the cryptocurrency sphere.

Cryptocurrency 85

Cryptocurrency Marketing Encryption Passwords 85

Security Affairs

APRIL 24, 2024

A malware campaign has been exploiting the updating mechanism of the eScan antivirus to distribute backdoors and cryptocurrency miners. eScan acknowledged the flaw and addressed it on July 31, 2023. Puppeteer orchestrates the core functionality of the malware, including the cryptocurrency mining as well as the backdoor deployment.

Antivirus 101

Antivirus Malware DNS Cryptocurrency 101

Security Affairs

AUGUST 1, 2023

Researchers spotted a Python variant of the NodeStealer that was designed to take over Facebook business accounts and cryptocurrency wallets. The malicious code was designed to take over Facebook business accounts and steal funds from cryptocurrency wallets. environment. . ” reads the analysis published by Palo Alto Networks.

Accountability 89

Accountability Cryptocurrency Malware Phishing 89

Security Affairs

MARCH 19, 2023

Much ado about nothing Cisco fixed CVE-2023-20049 DoS flaw affecting enterprise routers Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter) The post Security Affairs newsletter Round 411 by Pierluigi Paganini appeared first on Security Affairs.

DDOS 82

DDOS Ransomware Phishing Cryptocurrency 82

Security Affairs

AUGUST 26, 2023

Security consulting firm Kroll revealed that a SIM-swapping attack against one of its employees caused the theft of user information for multiple cryptocurrency platforms. On August 19, 2023, the consulting firm became aware that threat actors targeted the T-Mobile phone number belonging to one of its employees.

Data breaches 91

Data breaches Mobile Accountability Phishing 91