Security Affairs

FEBRUARY 6, 2024

A Belarusian and Cypriot national linked with the cryptocurrency exchange BTC-e is facing charges that can lead maximum penalty of 25 years in prison. BTC-e was popular in the cybercrime ecosystem, it was an illegal platform because it was not registered as a money services business with the U.S. million withdrawn.

Cryptocurrency 101

Cryptocurrency Spyware Cybercrime Hacking 101

Security Affairs

JANUARY 14, 2024

million) worth of cryptocurrencies via mining activities. million) in cryptocurrencies.” million) in cryptocurrencies.” In cryptojacking scheme, threat actors gain unauthorized access to a cloud environment and abuse its computational power to mine cryptocurrencies. ” continues the press release.

Cryptocurrency 104

Cryptocurrency Cybercrime Accountability Authentication 104

Security Affairs

MAY 15, 2024

One of the developers of the Tornado Cash cryptocurrency mixer has been sentenced to 64 months in prison. Alexey Pertsev (29), one of the main developers of the Tornado Cash cryptocurrency mixer has been sentenced to 64 months in prison for helping launder more than $2 billion worth of cryptocurrency. billion U.S. billion U.S.

Cryptocurrency 94

Cryptocurrency Hacking Cybercrime Information Security 94

Security Affairs

JANUARY 13, 2024

Akira ransomware targets Finnish organizations GitLab fixed a critical zero-click account hijacking flaw Juniper Networks fixed a critical RCE bug in its firewalls and switches Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467 Team Liquid’s wiki leak exposes (..)

VPN 108

VPN Cybercrime Ransomware Hacking 108

Security Affairs

MAY 2, 2024

” The co-conspirators demanded ransom payments in cryptocurrency and used cryptocurrency exchangers and mixing services to hide their ill-gotten gains. In a related matter, in 2023, the Department concluded the forfeiture of millions of dollars’ worth of ransom payments through two connected civil forfeiture cases.

Ransomware 90

Ransomware Cryptocurrency Cybercrime Encryption 90

Security Affairs

JUNE 11, 2023

Gox exchange and operating BTC-e Japanese Pharmaceutical giant Eisai hit by a ransomware attack Clop ransomware gang was testing MOVEit Transfer bug since 2021 Stealth Soldier backdoor used is targeted espionage attacks in Libya Researchers published PoC exploit code for actively exploited Windows elevation of privilege issue Experts detail a new Kimsuky (..)

Social Engineering 91

Social Engineering Data breaches Ransomware Cybercrime 91

Security Affairs

DECEMBER 14, 2023

“A Russian, suspected of having recovered in cryptocurrencies the money taken from French victims of the powerful Hive ransomware , dismantled in January, was arrested last week, AFP learned on Tuesday December 12 from the judicial police.” anti-cybercrime (Ofac).” anti-cybercrime (Ofac).”

Ransomware 114

Ransomware Cryptocurrency Cybercrime VPN 114

Security Affairs

DECEMBER 17, 2023

CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6 CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Data breaches 82

Data breaches Cybercrime Firewall Artificial Intelligence 82

Security Affairs

DECEMBER 2, 2023

Researchers devised an attack technique to extract ChatGPT training data Fortune-telling website WeMystic exposes 13M+ user records Expert warns of Turtle macOS ransomware US govt sanctioned North Korea-linked APT Kimsuky Black Basta Ransomware gang accumulated at least $107 million in Bitcoin ransom payments since early 2022 Apple addressed 2 new (..)

Ransomware 97

Ransomware Hacking Spyware Cybercrime 97

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. Chaput said that on May 4, 2023, someone unleashed a spam torrent targeting users on these Mastodon communities via “private mentions,” a kind of direct messaging on the platform.

Scams 251

Scams DDOS Cryptocurrency Accountability 251

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 79

Malware Cybercrime Cryptocurrency Social Engineering 79

Security Affairs

DECEMBER 20, 2023

“To pay, users of the darknet marketplace used the cryptocurrencies Bitcoin, Litecoin, Monero and Zcash. “Certain cryptocurrency transactions from a cluster or group of cryptocurrency addresses used by Kingdom were traced to cryptocurrency wallets held in the name of BILL. .”

Marketing 108

Marketing Cryptocurrency Accountability Banking 108

Security Affairs

SEPTEMBER 25, 2023

The company suspended deposits and withdrawals immediately after the discovery of the security breach that took place early in the morning of September 23, 2023. The company is investigating the security breach with the support of the security firm SlowMist. 25, 2023, here are the Top 10 Hacks in 2023.

Hacking 107

Hacking Cryptocurrency Cybercrime Information Security 107

Security Affairs

SEPTEMBER 5, 2023

Users on Stake.com typically do not deal with traditional currencies, instead they deposit and withdraw cryptocurrencies to and from their betting account. Account balances can be withdrawn in the equivalent value of cryptocurrency and then deposited back into the user’s personal cryptocurrency wallet. User funds are safe.

Cryptocurrency 108

Cryptocurrency Accountability Hacking Cybercrime 108

Security Affairs

JULY 30, 2023

Now Abyss Locker also targets VMware ESXi servers Russian APT BlueBravo targets diplomatic entities with GraphicalProton backdoor CoinsPaid blames North Korea-linked APT Lazarus for theft of $37M worth of cryptocurrency Monitor Insider Threats but Build Trust First Zimbra fixed actively exploited zero-day CVE-2023-38750 in ZCS DepositFiles exposed (..)

Surveillance 79

Surveillance Cryptocurrency Cyber Attacks Hacking 79

Security Affairs

JANUARY 15, 2024

Threat actors exploit a recent Windows SmartScreen bypass flaw CVE-2023-36025 to deliver the Phemedrone info stealer. Trend Micro researchers uncovered a malware campaign exploiting the vulnerability CVE-2023-36025 (CVSS score 8.8) The vulnerability is a Windows SmartScreen Security Feature Bypass issue. Then it calls rundll32.exe

Malware 107

Malware Cryptocurrency Media Phishing 107

Security Affairs

JUNE 17, 2023

The operation was conducted by the Polish Central Bureau for Combating Cybercrime with the support of Europol, the FBI, and law enforcement agencies from the Netherlands, Germany, and Belgium, and the Joint Cybercrime Action Taskforce (J-CAT). The total amount of secured property is almost PLN 260,000.

DDOS 87

DDOS Computers and Electronics Cybercrime Cryptocurrency 87

Security Affairs

JULY 2, 2023

Illicit Telegram Communities Dismantling of an encrypted network sends shockwaves through organised crime groups across Europe TSMC Says Supplier Hacked After Ransomware Group Claims Attack on Chip Giant Malware Trojanized Super Mario Game Installer Spreads SupremeBot Malware Initial research exposing JOKERSPY Who is 8BASE?

Cybercrime 88

Cybercrime Hacking Ransomware Malware 88

Security Affairs

JULY 4, 2023

1/3】 — Poly Network (@PolyNetwork2) July 2, 2023 Please remain calm and trust that we are committed to safeguarding your assets. 【3/3】 3/7】 — Poly Network (@PolyNetwork2) July 2, 2023 Binance CEO Changpeng Zhao promtly declared that the security breach did not affect Binance users.” Stay #SAFU.

Cryptocurrency 94

Cryptocurrency Hacking Cyber Attacks Risk 94

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M worth of cryptocurrency. Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M worth of cryptocurrency.

Cryptocurrency 81

Cryptocurrency VPN Manufacturing Firewall 81

Security Affairs

NOVEMBER 4, 2023

Researchers are cloud security firm Aqua have observed threat actors exploiting the recently disclosed Linux privilege escalation flaw Looney Tunables in attacks against cloud environments. The vulnerability Looney Tunables ( CVE-2023-4911 (CVSS score 7.8)) is a buffer overflow issue that resides in the GNU C Library’s dynamic loader ld.so

Architecture 100

Architecture Cryptocurrency Hacking Cybercrime 100

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4

Artificial Intelligence 93

Artificial Intelligence Data breaches Scams Insurance 93

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 95

Data breaches Malware Mobile Spyware 95

Security Affairs

AUGUST 1, 2023

Researchers spotted a Python variant of the NodeStealer that was designed to take over Facebook business accounts and cryptocurrency wallets. The malicious code was designed to take over Facebook business accounts and steal funds from cryptocurrency wallets. environment. . ” reads the analysis published by Palo Alto Networks.

Accountability 89

Accountability Cryptocurrency Malware Phishing 89

Security Affairs

AUGUST 4, 2023

On July 31, 2023, Phylum researchers observed the publication of ten different “test” packages on the npm package manager that were developed to exfiltrate sensitive developer source code and other confidential information. ” concludes the report.

Cryptocurrency 85

Cryptocurrency Marketing Encryption Passwords 85

Security Affairs

APRIL 24, 2024

A malware campaign has been exploiting the updating mechanism of the eScan antivirus to distribute backdoors and cryptocurrency miners. eScan acknowledged the flaw and addressed it on July 31, 2023. Puppeteer orchestrates the core functionality of the malware, including the cryptocurrency mining as well as the backdoor deployment.

Antivirus 101

Antivirus Malware DNS Cryptocurrency 101

Security Affairs

MAY 1, 2023

While investigating the malware distribution, the researchers noticed the use of an infrastructure known to belong to cybercrime group TA505. Earlier 2023, Elastic Security Labs observed multiple infections with an interesting attach chain that lead to the execution of the LOBSHOT malware.

Malware 89

Malware Cybercrime Banking Software 89

Security Affairs

AUGUST 26, 2023

Security consulting firm Kroll revealed that a SIM-swapping attack against one of its employees caused the theft of user information for multiple cryptocurrency platforms. On August 19, 2023, the consulting firm became aware that threat actors targeted the T-Mobile phone number belonging to one of its employees.

Data breaches 91

Data breaches Mobile Accountability Phishing 91

Security Affairs

APRIL 5, 2023

The STYX marketplace was launched at the beginning of 2023. This platform is specifically designed to facilitate financial crime, providing cybercriminals with a range of services, including stolen financial data, credit card information, forged documents, money laundering services, victim reconnaissance ‘lookups’, and more.

Banking 81

Banking Cybercrime Accountability Risk 81

Security Affairs

JANUARY 3, 2024

Around November 11th, 2023, the group’s leader, operating under the alias “ googleXcoder “, made multiple announcements on the Dark Web. This approach was used to deceive individuals into sharing sensitive information with malicious actors. More technical details are available in the report published by REsecurty.

Artificial Intelligence 118

Artificial Intelligence Banking Scams Cybercrime 118

Security Affairs

MARCH 19, 2023

Much ado about nothing Cisco fixed CVE-2023-20049 DoS flaw affecting enterprise routers Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter) The post Security Affairs newsletter Round 411 by Pierluigi Paganini appeared first on Security Affairs.

DDOS 82

DDOS Ransomware Phishing Cryptocurrency 82

Security Affairs

JANUARY 10, 2024

Sebastien Raoult (also known as “Seyzo Kaizen”), is a French national that has been extradited from Morocco to the United States in January 2023. Raoult and two other co-conspirators were charged with having hacked into protected computers of corporate entities and for the theft of stolen proprietary information. He sold hacked data.

Identity Theft 106

Identity Theft Hacking Cryptocurrency Advertising 106

Security Affairs

NOVEMBER 10, 2023

The collective Anonymous Sudan has been active since January 2023, it claims to target any country that is against Sudan. However, some security researchers believe that Anonymous Sudan is a sub-group of the pro-Russian threat group Killnet. No protection can stand in our way Attack duration: 1 hour.”

DDOS 130

DDOS Cryptocurrency Accountability Media 130

Security Affairs

MARCH 23, 2023

Telegram) since January 2023. “Nexus provides all the main features to perform ATO attacks (Account Takeover) against banking portals and cryptocurrency services, such as credentials stealing and SMS interception. The Nexus Trojan can target multiple banking and cryptocurrency in an attempt to take over customers’ accounts.

Banking 80

Banking Cryptocurrency Malware Advertising 80

Security Affairs

FEBRUARY 16, 2023

The similarities in code, class name, and registry key strings, led the experts into assessing with high confidence that the MortalKombat ransomware belongs to the Xorist family The malware campaign is targeting individuals, small businesses, and large organizations with the end goal of stealing or demanding ransom payments in cryptocurrency.

Ransomware 82

Ransomware Cryptocurrency Malware Small Business 82

Security Affairs

DECEMBER 20, 2023

The macOS variant of the malware was first spotted in July 2023, it was spreading in the form of installers for pirated legitimate software such as CapCut or AnyConnect. Writing to the clipboard:a common tactic for stealing cryptocurrency funds. Following the discovery, researchers observed dozens of new samples that show the malware.

Malware 112

Malware Passwords Cryptocurrency Software 112

Security Affairs

AUGUST 15, 2023

The Uptycs Threat Research team discovered the QwixxRAT (aka Telegram RAT) in early August 2023 while it was advertised through Telegram and Discord platforms. The malware includes a clipper code to capture data copied to the clipboard, a technique used to extract cryptocurrency wallet information from Monero, Ethereum, and Bitcoin.

Malware 93

Malware Antivirus Cryptocurrency Advertising 93