Krebs on Security

MAY 14, 2021

The crime gang announced it was closing up shop after its servers were seized and someone drained the cryptocurrency from an account the group uses to pay affiliates. The new restrictions came as some Russian cybercrime forums began distancing themselves from ransomware operations altogether. ”

Ransomware 364

Ransomware Cryptocurrency Cybercrime Healthcare 364

Security Affairs

JUNE 8, 2022

“The SSNDOB administrators created advertisements on darkweb criminal forums for the Marketplace’s services, provided customer support functions, and regularly monitored the activities of the sites, including monitoring when purchasers deposited money into their accounts.” ” reads the press release published by DoJ.

Cybercrime 91

Cybercrime Cryptocurrency Marketing Advertising 91

Krebs on Security

MAY 4, 2023

government this week put a $10 million bounty on the head of a Russian man who for the past 18 years operated Try2Check , one of the cybercrime underground’s most trusted services for checking the validity of stolen credit card data. was used to register an account with the username “Nordex” at bankir[.]com

Marketing 235

Marketing Cybercrime Accountability Cryptocurrency 235

Security Affairs

JUNE 9, 2023

Two Russian nationals have been charged with the hack of the cryptocurrency exchange Mt. Russian nationals Alexey Bilyuchenko (43) and Aleksandr Verner (29) have been charged with the hack of the cryptocurrency exchange Mt. Gox in 2011 and the operation of the illicit cryptocurrency exchange BTC-e. ” reads the DoJ.

Hacking 85

Hacking Cryptocurrency Advertising Banking 85

Krebs on Security

OCTOBER 31, 2022

A 26-year-old Ukrainian man is awaiting extradition from The Netherlands to the United States on charges that he acted as a core developer for Raccoon , a popular “malware-as-a-service” offering that helped paying customers steal passwords and financial data from millions of cybercrime victims. According to the U.S. Image: USDOJ.

Malware 292

Malware Identity Theft Cybercrime Accountability 292

Security Affairs

APRIL 14, 2024

The RAT allowed customers to access and control their victims’ computers remotely, its author advertised its stealing capabilities. He is accused of advertising and selling the Hive remote access trojan (RAT) on the “Hack Forums” website. . ” reported the DoJ. ” continues DoJ. . ” continues DoJ.

Computers and Electronics 107

Computers and Electronics Advertising Cryptocurrency Malware 107

Security Affairs

NOVEMBER 8, 2021

The FBI warns of an increase of fraudulent schemes leveraging cryptocurrency ATMs and QR Codes to facilitate payment. The FBI Internet Crime Complaint Center (IC3) published an alert to warn the public of fraudulent schemes leveraging cryptocurrency ATMs and Quick Response (QR) codes to complete payment transactions.

Cryptocurrency 79

Cryptocurrency Scams Accountability Government 79

SecureWorld News

AUGUST 19, 2021

Department of Justice (DOJ) announced that an Ohio resident, Larry Dean Harmon, pleaded guilty to money laundering through the use of Helix, a Dark Web cryptocurrency laundering service. He would advertise Helix on the Dark Web in an attempt to conceal his transactions from law enforcement. He then hid those funds from the government.

Cryptocurrency 97

Cryptocurrency Marketing Advertising Engineering 97

Security Affairs

NOVEMBER 15, 2019

On Thursday, US authorities arrested two crooks charging them with stealing $550,000 in cryptocurrency from at least 10 victims using SIM swapping. American law enforcement has declared war to sim swapping scammers and announced the arrest of two individuals for stealing $550,000 in Cryptocurrency. In May, the U.S.

Cryptocurrency 80

Cryptocurrency Identity Theft Accountability Media 80

Krebs on Security

NOVEMBER 2, 2023

One of the largest cybercrime services for laundering stolen merchandise was hacked recently, exposing its internal operations, finances and organizational structure. Among the most common ways that thieves extract cash from stolen credit card accounts is through purchasing pricey consumer goods online and reselling them on the black market.

Cybercrime 271

Cybercrime Marketing Scams Retail 271

Krebs on Security

JANUARY 28, 2022

“ BlackCat “), considered to be the first professional cybercrime group to create and use a ransomware strain written in the Rust programming language. On the cybercrime forum RAMP , the user Binrs says they are a Rust developer who’s been coding for 6 years. I AM DUCKERMAN. Sergey DuckerMan’s GitHub profile.

Ransomware 270

Ransomware Accountability Cybercrime Malware 270

Krebs on Security

DECEMBER 8, 2021

There is a now-dormant Myspace account for a Matthew Philbert from Orleans, a suburb of Ottawa, Ontario. The information tied to the Myspace account matches the age and town of the defendant. The Myspace account was registered under the nickname “ Darkcloudowner ,” and to the email address dark_cl0ud6@hotmail.com.

Cybercrime 275

Cybercrime Ransomware Accountability Advertising 275

Hot for Security

MARCH 1, 2021

UK’s national reporting center for fraud and cybercrime (Action Fraud) is warning citizens to watch out for travel-related fraud following the government’s announcement last week that it would lift travel restrictions.

Scams 98

Scams Cybercrime Advertising Cryptocurrency 98

Security Affairs

MAY 2, 2023

“Web resources offered users anonymous exchange of cryptocurrencies. Exchange services were advertised on closed hacker forums.” ” Many of these services are advertised on cybercrime forums, the services were offering support in both Russian and English. . authorities.”

Cybercrime 88

Cybercrime Cryptocurrency Advertising Education 88

Security Boulevard

AUGUST 2, 2022

Current threat actor activity is incentivized by a broad attack surface represented through high volumes of users and systems, and high potential profits represented through the variety of cryptocurrency offerings. It is easy to detect and block things like malicious cryptocurrency apps or crypto-phishing websites.

Cryptocurrency 98

Cryptocurrency Ransomware Government Risk 98

Security Affairs

FEBRUARY 10, 2022

Spanish National Police has arrested eight alleged members of a crime organization who were able to steal money from the bank accounts of the victims through SIM swapping attacks. Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts.

Banking 105

Banking Accountability Mobile Cryptocurrency 105

Security Affairs

FEBRUARY 16, 2020

IOTA Foundation behind the IOTA cryptocurrency was forced to shut down its entire network following a cyber attack that resulted in the theft of funds. In response to the incident, the IOTA Foundation, the nonprofit organization behind the IOTA cryptocurrency , has decided to take down its entire network. Pierluigi Paganini.

Cryptocurrency 106

Cryptocurrency Advertising Accountability Cyber Attacks 106

Security Affairs

OCTOBER 18, 2020

. “Comprised of several layers of members mainly from Latvia, Georgia, Bulgaria, Romania, and Belgium, the QQAAZZ network opened and maintained hundreds of corporate and personal bank accounts at financial institutions throughout the world to receive money from cybercriminals who stole it from accounts of victims.”

Malware 106

Malware Banking Cryptocurrency Cybercrime 106

Security Affairs

DECEMBER 8, 2023

Anatoly Legkodymov, the founder of the Bitzlato cryptocurrency exchange has pleaded in a money-laundering scheme. Anatoly Legkodymov (41) (aka Anatolii Legkodymov, Gandalf, and Tolik), the Russian founder of the unlicensed Bitzlato cryptocurrency exchange, has pleaded guilty in a money-laundering scheme.

Cryptocurrency 93

Cryptocurrency Marketing Advertising Hacking 93

Security Affairs

AUGUST 18, 2020

Ukrainian authorities arrested the members of a cybercrime gang who ran 20 cryptocurrency exchanges involved in money laundering. Police in Ukraine announced the arrest of the members of a cybercrime gang composed of three individuals who ran 20 cryptocurrency exchanges used in money laundering activities.

Cryptocurrency 104

Cryptocurrency Computers and Electronics Cybercrime Digital transformation 104

Security Affairs

SEPTEMBER 20, 2018

billion yen ($60 million) worth of cryptocurrencies from the Japanese digital currency exchange Zaif exchange. a Japanese cryptocurrency firm, hackers have compromised its Zaif exchange and have stolen 6.7 billion yen ($60 million) worth of cryptocurrencies, including Bitcoin, Monacoin, and Bitcoin Cash. Pierluigi Paganini.

Cryptocurrency 83

Cryptocurrency Hacking Financial Services Advertising 83

Security Affairs

JUNE 7, 2019

million Ripple coins (XRP), worth nearly $10 million, from the users of the GateHub cryptocurrency wallet service. million Ripple coins (XRP), worth nearly $10 million, from the users of the GateHub cryptocurrency wallet service. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. reads the report.

Cryptocurrency 82

Cryptocurrency Accountability Advertising Encryption 82

Security Boulevard

MAY 27, 2022

The Exfiltration Phase of The Kill Chain of a Cryptocurrency-Based Attack Provides the Greatest Opportunity to Identify Cybercriminals. Cryptocurrency gained through illicit means is less useable than other assets due to the way cryptocurrency systems currently do not fully protect owner identity and allow for only limited liquidity.

Cryptocurrency 59

Cryptocurrency Risk Marketing Architecture 59

Security Affairs

MARCH 26, 2020

that is hosting various cybercrime products and services were being sold. which is a Shopify-like platform that has been hosting hundreds of online shops used for the sale of hacked accounts and stolen user data. The Russian man also advertised the platform on other hacking forums. SecurityAffairs – cybercrime, DEER.IO).

Cybercrime 113

Cybercrime Advertising Hacking Accountability 113

Security Affairs

FEBRUARY 10, 2022

. “The Federal Bureau of Investigation is issuing this announcement to inform mobile carriers and the public of the increasing use of Subscriber Identity Module (SIM) swapping by criminals to steal money from fiat and virtual currency accounts.” Use a variation of unique passwords to access online accounts.

Mobile 90

Mobile Cryptocurrency Authentication Accountability 90

Security Affairs

MARCH 28, 2019

Security experts at Group-IB have detected the activity of Gustuff a mobile Android Trojan, which includes potential targets of customers in leading international banks, users of cryptocurrency services, popular ecommerce websites and marketplaces. Gustuff has previously never been reported.

Banking 88

Banking Cryptocurrency Mobile Advertising 88

Security Affairs

NOVEMBER 16, 2018

According to Group-IB’s report findings, Asia is one of the most actively attacked regions in the world, the company presented latest cybercrime trends. In 2017-2018 hackers’ interest in cryptocurrency exchanges ramped up. Thus, 60% of the total amount was stolen from Coincheck , a Japanese cryptocurrency exchange.

Cybercrime 83

Cybercrime Hacking Banking Phishing 83

Security Affairs

NOVEMBER 6, 2018

Group-IB and Swiss insurance broker ASPIS that owns CryptoIns project, have developed the world’s first scoring model for assessing cryptocurrency exchanges. Based on the risk score, CryptoIns experts have calculated insurance rates for cryptocurrency exchange users who can now insure their accounts against cyber threats.

Insurance 61

Insurance Cryptocurrency Cyber threats Marketing 61

Malwarebytes

SEPTEMBER 11, 2023

A cybercriminal who goes by the handle RastaFarEye has been advertising DarkGate Loader on cybercrime forums since June 16, 2023. Once active, the malware can be used for several malicious activities like remote access, cryptocurrency mining, keylogging, clipboard stealing, and information stealing.

Malware 116

Malware Social Engineering Cryptocurrency Cybercrime 116

Security Affairs

MARCH 13, 2020

European authorities dismantled two cybercrime organizations responsible for stealing millions through SIM hijacking. European authorities managed to dismantle the operations of two cybercrime gangs responsible for stealing millions through SIM hijacking. The authorities arrested tens of individuals in Spain and Romania. .

Banking 113

Banking Cybercrime Mobile Accountability 113

Security Affairs

NOVEMBER 4, 2020

KPOT Stealer is a “stealer” malware that focuses on exfiltrating account information and other data from web browsers, instant messengers, email, VPN, RDP, FTP, cryptocurrency, and gaming software. The KPOT Stealer was written in C/C++, it was offered in the cybercrime underground as a Malware-as-a-Service (MaaS).

Ransomware 136

Ransomware Malware Advertising Cybercrime 136

SecureWorld News

APRIL 5, 2022

Hydra accounted for 80% of all darknet market-related cryptocurrency transactions in 2021, according to the U.S. billion in cryptocurrency. It also says Hydra had approximately 17 million customers, with more than 19,000 seller accounts registered on the marketplace. Department of Justice (DOJ). What is the Hydra Market?

Cryptocurrency 98

Cryptocurrency Marketing Accountability Advertising 98

Security Affairs

APRIL 14, 2019

They also activated files that forced infected computers to register email accounts with AOL.” “The defendants registered more than 100,000 email accounts using this method. The defendants would then steal account credentials. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Cryptocurrency 89

Cryptocurrency Identity Theft Advertising Accountability 89

Security Affairs

JULY 15, 2022

Threat actors behind the campaign used multiple accounts across several social media platforms to advertise password-cracking software for Programmable Logic Controller (PLC), Human-Machine Interface (HMI), and project files. The Sality P2P botnet is known to be involved in password cracking and cryptocurrency mining activities.

Passwords 111

Passwords Software Firmware Malware 111

Security Affairs

AUGUST 7, 2018

Group-IB researchers have investigated user data leaks from cryptocurrency exchanges and has analyzed the nature of these incidents. In 2017, when cryptocurrencies were gaining momentum, their record-breaking capitalization and a spike in Bitcoin’s exchange rate led to dozens of attacks on cryptocurrency services.

Cryptocurrency 48

Cryptocurrency Passwords Authentication Accountability 48

Security Affairs

MARCH 23, 2023

Nexus is available via a Malware-as-a-Service (MaaS) subscription and is advertised on underground forums or through private channels (e.g., However, Cleafy’s Threat Intelligence & Response Team reported having detected the first Nexus infections in June 2022, months before the MaaS was publicly advertised.

Banking 78

Banking Cryptocurrency Malware Advertising 78

Security Affairs

DECEMBER 7, 2021

The botnet was involved in stealing users’ credentials and data, mining cryptocurrencies abusing victims’ resources, and setting up proxies to funnel other people’s internet traffic through infected machines and routers. Google revealed that Starovikov and Filippov also operated several online websites to advertise the botnet.

Backups 110

Backups Advertising Accountability Malware 110