Krebs on Security

JUNE 15, 2024

— and charged him with stealing at least $800,000 from five victims between August 2022 and March 2023. One of the more popular SIM-swapping channels on Telegram maintains a frequently updated leaderboard of the most accomplished SIM-swappers, indexed by their supposed conquests in stealing cryptocurrency. In January 2024, U.S.

Hacking 344

Hacking Cybercrime Phishing Passwords 344

eSecurity Planet

MAY 27, 2025

The FBI has issued a new warning to US law firms about an ongoing and increasingly aggressive phishing campaign orchestrated by the cybercriminal group Luna Moth. The post FBI Warns Law Firms: Hackers Are Calling Offices in Stealth Phishing Scam appeared first on eSecurity Planet. Enable two-factor authentication across all systems.

Phishing 65

Phishing Scams Antivirus Backups 65

Digital Shadows

JANUARY 22, 2025

Phishing Remains Top Tactic, Fueled by Teams Abuse Figure 1: Top attack techniques in true-positive customer incidents for finance & insurance sector, H2 2024 vs H2 2023 Phishing dominated cyber attacks in H2 2024, accounting for over 90% of incidents across industries due to its simplicity and effectiveness.

Insurance 65

Insurance Phishing Social Engineering Engineering 65

SecureList

MAY 6, 2024

A significant share of scam, phishing and malware attacks is about money. Methodology In this report, we present an analysis of financial cyberthreats in 2023, focusing on banking Trojans and phishing pages that target online banking, shopping accounts, cryptocurrency wallets and other financial assets. million in 2022.

Phishing 133

Phishing Banking Mobile Scams 133

Krebs on Security

FEBRUARY 28, 2024

Malicious hackers are targeting people in the cryptocurrency space in attacks that start with a link added to the target’s calendar at Calendly , a popular application for scheduling appointments and meetings. The attackers impersonate established cryptocurrency investors and ask to schedule a video conference call. capital).

Malware 334

Malware Cryptocurrency Software Phishing 334

SecureList

MARCH 25, 2025

Note that for mobile banking malware, we retrospectively revised the 2023 numbers to provide more accurate statistics. Note that for mobile banking malware, we retrospectively revised the 2023 numbers to provide more accurate statistics. Cryptocurrency phishing saw an 83.37% year-over-year increase in 2024, with 10.7

Phishing 77

Phishing Banking Scams Mobile 77

Krebs on Security

JANUARY 30, 2024

authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. stole at least $800,000 from at least five victims between August 2022 and March 2023. 9, 2024, U.S. technology companies during the summer of 2022.

Social Engineering 359

Social Engineering Mobile Cybercrime Passwords 359

SecureList

JULY 5, 2023

The higher the global popularity of cryptocurrencies and the more new ways of storing them, the wider the arsenal of tools used by malicious actors who are after digital money. This story covers two fundamentally different methods of email attacks on the two most popular ways of storing cryptocurrency: hot and cold wallets.

Scams 130

Scams Phishing Cryptocurrency Accountability 130

Security Affairs

NOVEMBER 17, 2024

that reboots locked devices Ymir ransomware, a new stealthy ransomware grow in the wild Amazon discloses employee data breach after May 2023 MOVEit attacks A new fileless variant of Remcos RAT observed in the wild A surge in Pro-Russia cyberattacks after decision to monitor North Korean Troops in Ukraine U.S.

Cryptocurrency 111

Cryptocurrency Hacking Malware Data breaches 111

Krebs on Security

AUGUST 25, 2023

Security consulting giant Kroll disclosed today that a SIM-swapping attack against one of its employees led to the theft of user information for multiple cryptocurrency platforms that are relying on Kroll services in their ongoing bankruptcy proceedings. ” A phishing message targeting FTX users that went out en masse today.

Mobile 244

Mobile Cyber Risk Cryptocurrency Data breaches 244

Krebs on Security

JULY 15, 2024

The Squarespace domain hijacks, which took place between July 9 and July 12, appear to have mostly targeted cryptocurrency businesses, including Celer Network , Compound Finance , Pendle Finance , and Unstoppable Domains. Squarespace has not responded to a request for comment, nor has it issued a statement about the attacks.

Accountability 339

Accountability Cryptocurrency Passwords DNS 339

SecureList

OCTOBER 21, 2024

According to Kaspersky Digital Footprint Intelligence, almost 10 million devices, both personal and corporate, were attacked by information stealers in 2023. Kral In mid-2023, we discovered the Kral downloader which, back then, downloaded the notorious Aurora stealer. You will find a few excerpts from these below.

Passwords 125

Passwords Malware Encryption Cryptocurrency 125

SecureList

NOVEMBER 9, 2022

What cyberthreats for business will be the greatest in 2023? The ongoing geopolitical storm brings not only classical cyberthreats for business, but also unpredictable risks and ‘black swans’ The main problem for 2023 will be supply-chain stability and cybersecurity. Threat modeling approaches will be changed in 2023.

Cybersecurity 144

Cybersecurity Cyber Insurance Cybercrime IoT 144

Malwarebytes

MAY 1, 2025

Phishing In phishing scams, cybercriminals trick people and businesses into handing over sensitive information like credit card numbers or login details for vital online accounts. In phishing attacks, there never is a genuine problem with a users account, and there never is a real request for information from the company.

Small Business 86

Small Business Cybersecurity Scams Passwords 86

SecureList

MARCH 3, 2025

Some time later, the user received a phishing link to download malware disguised as a shipment tracking app. The phishing link as seen in the chat with the fraudsters See translation Your order has shipped. The scammers employed phishing websites to spread malicious mods of the legitimate app NFCGate. 1 Trojan.AndroidOS.Triada.ga

Mobile 115

Mobile Malware Adware Banking 115

SecureList

DECEMBER 16, 2024

Verdict: Partially fulfilled Evolution and market dynamics of Bitcoin mixers and cleaning services In 2024, there was no significant increase in the number of services advertising cryptocurrency “cleaning” solutions. We also assisted the joint INTERPOL and AFRIPOL operation combating cybercrime across Africa.

Marketing 104

Marketing Data breaches Cryptocurrency Malware 104

Malwarebytes

DECEMBER 20, 2022

If you’re a user of the Gemini cryptocurrency exchange, it’s time to be on your guard against phishing attacks. Gemini is now offering security advice and tips to guard against phishing attacks for anyone contained in the data. Breaches in cryptocurrency land are always a major issue.

Cryptocurrency 91

Cryptocurrency Phishing Scams Accountability 91

Bleeping Computer

JANUARY 1, 2024

In 2023, we saw numerous law enforcement operations targeting cybercrime operations, including cryptocurrency scams, phishing attacks, credential theft, malware development, and ransomware attacks. [.]

Cybercrime 92

Cybercrime Cryptocurrency Scams Phishing 92

Security Affairs

NOVEMBER 20, 2023

The DarkCasino APT group leveraged a recently disclosed WinRAR zero-day vulnerability tracked as CVE-2023-38831. Researchers at cybersecurity firm NSFOCUS analyzed DarkCasino attack pattern exploiting the WinRAR zero-day vulnerability tracked as CVE-2023-38831. ” reads the report published by NSFOCUS.

Phishing 145

Phishing Financial Services Cryptocurrency Technology 145

Krebs on Security

DECEMBER 29, 2022

I will also continue to post on LinkedIn about new stories in 2023. You just knew 2022 was going to be The Year of Crypto Grift when two of the world’s most popular antivirus makers — Norton and Avira — kicked things off by installing cryptocurrency mining programs on customer computers.

Cryptocurrency 309

Cryptocurrency Cybercrime Computers and Electronics Scams 309

Malwarebytes

FEBRUARY 19, 2025

Some info stealers dont even require an additional stepthey can take cryptocurrency directly from a victims online accounts. That means that, for instance, ransomware that works on a Windows laptop doesnt automatically work on a Mac laptop, and likewise, a phishing app developed for Android devices doesnt work on iPhones.

Malware 125

Malware Software Passwords Cryptocurrency 125

Krebs on Security

AUGUST 29, 2023

QakBot is most commonly delivered via email phishing lures disguised as something legitimate and time-sensitive, such as invoices or work orders. Qakbot/Qbot was once again the top malware loader observed in the wild in the first six months of 2023. Source: Reliaquest.com. ” The DOJ said it also recovered more than 6.5

Hacking 315

Hacking Malware Ransomware Government 315

CyberSecurity Insiders

DECEMBER 18, 2022

A look ahead to 2023 we can expect to see changes in MFA, continued Hactivism from non-state actors, CISOs lean in on more proactive security and crypto-jackers will get more savvy. The hijacking of computer resources to mine cryptocurrencies is one of the fastest growing types of cyber-threats globally.

Cybersecurity 125

Cybersecurity CISO Insurance Ransomware 125

SecureList

NOVEMBER 22, 2022

A look back on the year 2022 and what to expect in 2023. This report assesses how accurately we predicted the developments in the financial threats landscape in 2022 and ponder at what to expect in 2023. Cryptocurrency targeted attacks. Analysis of forecasts for 2022. Rise and consolidation of information stealers.

Cryptocurrency 106

Cryptocurrency Mobile Ransomware Banking 106

SecureList

NOVEMBER 29, 2024

While the modus operandi of the threat actor is reminiscent of the CloudWizard APT that we reported on in 2023, the malware code is completely different. The campaign, which we dubbed EastWind , used phishing emails with malicious shortcuts attached to deliver malware to target computers.

Energy and Utilities 103

Energy and Utilities Ransomware Malware Government 103

SecureWorld News

MAY 14, 2025

billion in reported losses, a 33% increase from 2023, underscoring the escalating threat landscape faced by individuals and organizations alike. Critical infrastructure under siege: The healthcare and public health sector was the most targeted by ransomware attackers in 2023. The report highlights a staggering $16.6 billion in losses.

Cybercrime 71

Cybercrime Scams Internet Internet 71

SecureList

DECEMBER 1, 2023

Analysis of samples exploiting CVE-2023-23397 vulnerability On March 14, Microsoft reported a critical Elevation of Privilege (EoP) vulnerability (CVE-2023-23397) in the Outlook client. This feature bypass vulnerability (CVE-2023-29324) was itself patched in May. The end result is the DarkGate loader.

Malware 137

Malware Ransomware Encryption Energy and Utilities 137

Security Affairs

AUGUST 16, 2023

A phishing campaign employing QR codes targeted a leading energy company in the US, cybersecurity firm Cofense reported. “Beginning in May 2023, Cofense has observed a large phishing campaign utilizing QR codes targeting the Microsoft credentials of users from a wide array of industries.”

Phishing 98

Phishing Energy and Utilities Insurance Manufacturing 98

Security Affairs

APRIL 7, 2025

. “In the Florida case, Urban was accused of stealing at least $800,000 in cryptocurrency from five different victims between August 2022 and March 2023.” Urban admitted to exporting stolen data and helping run sophisticated phishing and fraud operations across multiple states. In January 2024, U.S.

Cybercrime 66

Cybercrime Identity Theft Social Engineering Hacking 66

Security Affairs

JANUARY 11, 2024

Last week, threat actors hacked the X account of cybersecurity firm Mandiant and used it to impersonate the Phantom crypto platform and share a cryptocurrency scam. Multiple threat actors have conducted campaigns since December 2023 that use the CLINKSINK drainer to steal funds and tokens from Solana (SOL) cryptocurrency users.

Accountability 136

Accountability Hacking Cryptocurrency Cybersecurity 136

SecureList

JUNE 7, 2023

IT threat evolution Q1 2023 IT threat evolution Q1 2023. Non-mobile statistics IT threat evolution Q1 2023. Quarterly figures According to Kaspersky Security Network, in Q1 2023: 4,948,522 mobile malware, adware and riskware attacks were blocked. million attacks in Q1 2023. and Trojan.AndroidOS.Adinstall.l.

Mobile 93

Mobile Adware Banking Malware 93

Security Affairs

MARCH 13, 2025

The group’s affiliates gain access to victims using phishing campaigns to steal credentials and exploiting unpatched software vulnerabilities. Notably, they target CVE-2024-1709 (ScreenConnect authentication bypass) and CVE-2023-48788 (Fortinet EMS SQL injection) to infiltrate systems.

Ransomware 70

Ransomware Encryption Cryptocurrency Insurance 70

The Hacker News

JANUARY 15, 2024

The operators behind the now-defunct Inferno Drainer created more than 16,000 unique malicious domains over a span of one year between 2022 and 2023.

Cryptocurrency 103

Cryptocurrency Malware Phishing 103

Security Affairs

JANUARY 2, 2024

Palo Alto Networks’s Unit 42 first observed the malware in November 2023 reporting that it has been advertised on the hacking forum Hackforums since April 30, 2023. The attack spotted by the researchers used phishing messages posing as Abu Dhabi National Oil Company (ADNOC). net on 2023-04-30.

Malware 140

Malware Passwords Cryptocurrency Hacking 140

SecureList

JUNE 7, 2023

Mobile statistics Targeted attacks BlueNoroff introduces new methods bypassing MotW At the close of 2022, we reported the recent activities of BlueNoroff , a financially motivated threat actor known for stealing cryptocurrency. However, in the recent campaign, the attackers used a Trojanized version of the Tor Browser to steal cryptocurrency.

DNS 104

DNS Malware Cryptocurrency Retail 104

Security Affairs

JANUARY 15, 2024

Threat actors exploit a recent Windows SmartScreen bypass flaw CVE-2023-36025 to deliver the Phemedrone info stealer. Trend Micro researchers uncovered a malware campaign exploiting the vulnerability CVE-2023-36025 (CVSS score 8.8) ” The malicious URL files exploiting CVE-2023-36025 reference Discord or other cloud services. .

Malware 139

Malware Cryptocurrency Media Phishing 139

SecureList

FEBRUARY 21, 2025

Angry Likho (referred to as Sticky Werewolf by some vendors) is an APT group we’ve been monitoring since 2023. Technical details Initial attack vector The initial attack vector used by Angry Likho consists of standardized spear-phishing emails with various attachments.

Phishing 85

Phishing Encryption Banking Malware 85