Security Affairs

SEPTEMBER 25, 2020

The threat actors initially leveraged compromised credentials for Microsoft Office 365 (O365) accounts, domain administrator accounts, and credentials for the agency’s Pulse Secure VPN server. “First the threat actor logged into a user’s O365 account from Internet Protocol (IP) address 91.219.236[.]166

VPN 97

VPN Malware Cyber threats Accountability 97

Security Affairs

JULY 9, 2020

The credentials are sold for an average of $15.43, the most expensive pairs relate to banking and financial services accounts, with an average price of nearly $71. “Account accesses for antivirus programs garner the second-highest prices: around $21.67. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Cybercrime 119

Cybercrime Antivirus Marketing Accountability 119

Security Affairs

APRIL 2, 2020

Microsoft is sending notifications to dozens of hospitals about vulnerable VPN devices and gateways exposed online in their network. Microsoft is warning dozens of hospitals of the risks of ransomware attacks due to insecure VPN devices and gateways exposed online. ” reads the post published by Microsoft. Pierluigi Paganini.

Ransomware 107

Ransomware VPN Healthcare Cyber Attacks 107

Security Affairs

SEPTEMBER 22, 2020

.” According to the 2017 indictment , Wyatt used email and telephone accounts to send messages used to threaten the hacked companies of releasing their information. “a. WYATT registered a telephone account (Account B) used in the course of the conspiracy to send threatening and extortionate text messages to victims.“.

Identity Theft 112

Identity Theft Accountability Hacking Advertising 112

Security Affairs

MARCH 19, 2022

AvosLocker operators already advertised in the past a Linux variant, dubbed AvosLinux, of their malware claiming it was able to support Linux and ESXi servers. Review domain controllers, servers, workstations, and active directories for new or unrecognized user accounts. Avoid reusing passwords for multiple accounts.

Ransomware 100

Ransomware DDOS Passwords Backups 100

Security Affairs

NOVEMBER 4, 2020

KPOT Stealer is a “stealer” malware that focuses on exfiltrating account information and other data from web browsers, instant messengers, email, VPN, RDP, FTP, cryptocurrency, and gaming software. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. pic.twitter.com/fJ3BwlaHsR — ??????3

Ransomware 137

Ransomware Malware Advertising Cybercrime 137

Security Affairs

AUGUST 21, 2020

The campaign is worrisome due to the ongoing COVID-19 pandemic that caused the spike in the number of employees working from home and the increase in the use of corporate VPN and elimination of in-person verification. Restrict VPN access hours, where applicable, to mitigate access outside of allowed times. Pierluigi Paganini.

Social Engineering 120

Social Engineering VPN Phishing Authentication 120

Security Affairs

MARCH 28, 2020

The two critical remote command injection vulnerabilities tracked as CVE-2020-8515 affect DrayTek Vigor network devices, including enterprise switches, routers, load-balancers, and VPN gateway. If you have not updated the firmware yet, disable remote access (admin) and SSL VPN. ” reads the report published by Qihoo 360.

Firmware 85

Firmware VPN Accountability Advertising 85

Security Affairs

MARCH 20, 2020

The attackers connects to a dedicated commercially-shared VPN server using OpenVPN and then uses compromised email credentials to send out credential spam via a commercial email service provider. It is unclear why APT28 is using compromised email accounts of (mostly) defense companies in the Middle East. Pierluigi Paganini.

Phishing 136

Phishing Accountability Advertising DNS 136

SecureList

DECEMBER 12, 2023

” In the course of this research, we found out that the prevalent posts revolved around the sale of compromised accounts, internal databases, and documents, along with access to corporate infrastructures. Some of them are repeated advertisements on the same leakage.

Data breaches 81

Data breaches Accountability Telecommunications Malware 81

Security Affairs

OCTOBER 15, 2020

A series of messages published on Barnes & Noble’s Nook social media accounts state that it had suffered a system failure and is working to restore operations by restoring their server backups. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” states GoodReader. Pierluigi Paganini.

Cyber Attacks 113

Cyber Attacks VPN Backups Ransomware 113

Security Affairs

OCTOBER 3, 2019

With this resource, it was possible to buy activated accounts in large numbers to various mail resources, social networks, payment systems and more. At the same time, verified accounts were also sold, the cost of which was much higher.” Crooks were preserving their anonymity using VPN and TOR services. Pierluigi Paganini.

Cybercrime 90

Cybercrime VPN Advertising Accountability 90

Security Affairs

AUGUST 6, 2020

Netwalker ransomware operators announced the attack with a message posted on their online blog and shared a few screenshots as proof of the security breach. One of the images shared by the group shows a directory containing folders such as Accounts Receivable, Finance, collection letters, Expenses, and Employees. . Pierluigi Paganini.

Ransomware 107

Ransomware VPN Advertising Marketing 107

Security Affairs

JUNE 23, 2020

. “The current data leak includes snapshots of highly sensitive bank-related documents of the company such as account transaction details, vouchers, letters sent to bank managers, and much more.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Hacking 102

Hacking Ransomware Banking Mobile 102

Security Affairs

SEPTEMBER 7, 2020

The attack took place over the weekend, the closure of the BancoEstado breaches was announced by the bank through its Twitter account. The REvil ransomware gang is one of the most active groups, in the past, the operators have targeted Pulse Secure and Citrix VPN and enterprise gateway systems as entry points.

Banking 112

Banking Ransomware Advertising VPN 112

Security Affairs

SEPTEMBER 16, 2020

The Iranian hackers belong to an Iran-based threat actor that was behind attacks exploiting vulnerabilities in Pulse Secure VPN, Citrix Application Delivery Controller (ADC) and Gateway , and F5’s BIG-IP ADC products. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

VPN 93

VPN Passwords Advertising Password Management 93

Security Affairs

APRIL 25, 2022

ALPHV has been advertising the BlackCat Ransomware-as-a-Service (RaaS) on the cybercrime forums XSS and Exploit since early December. The FBI is seeking any information that can be shared related to the operations of the BlackCat ransomware operation. Only use secure networks and avoid using public Wi-Fi networks.

Ransomware 108

Ransomware Antivirus Passwords Malware 108

Security Affairs

MARCH 17, 2020

Last week, security experts from MalwareHunterTeam detected new ransomware dubbed CoronaVirus has been distributed through a malicious web site that was advertising a legitimate system optimization software and utilities from WiseCleaner. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 100

Ransomware Cryptocurrency Advertising Passwords 100

Security Affairs

SEPTEMBER 16, 2022

The RedLine malware allows operators to steal several pieces of information, including credentials, credit card data, cookies, autocomplete information stored in browsers, cryptocurrency wallets, credentials stored in VPN clients and FTP clients. The malicious code can also act as first-stage malware.

Malware 86

Malware Cryptocurrency Hacking Passwords 86

Security Affairs

MARCH 12, 2020

The Zyxel Cloud CNM SecuManager is a comprehensive network management software that provides an integrated console to manage security gateways including the ZyWALL USG and VPN Series. ” Experts also discovered the presence of backdoor accounts in MySQL. “MySQL is pre-configured with several static accounts.

Accountability 84

Accountability Advertising Software Authentication 84

Security Affairs

JUNE 19, 2020

So if our ‘warehouse worker’ or equivalent connects through a properly configured VPN, that person’s access within the corporate network is restricted to what they need— from that particular system and email, for example. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

VPN 97

VPN Advertising Authentication Passwords 97

Security Affairs

AUGUST 20, 2019

Your IP address represents your digital identity online, hacking it not only allows attackers to access your device or your accounts, but it may cause even bigger damage. But in reality, your IP address is as prone to theft as your other information. The only drawback is that many free VPNs are not secure as we think.

Hacking 91

Hacking VPN Internet Internet 91

Security Affairs

OCTOBER 1, 2020

Starting on September 7, the customers of the company were not able to access the services for their accounts. Only use secure networks and avoid using public Wi-Fi networks. Consider installing and using a VPN. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 139

Ransomware Advertising Engineering VPN 139

Security Affairs

DECEMBER 8, 2019

The best news of the week with Security Affairs. Twitter account of Huawei Mobile Brazil hacked. A flaw in Microsoft OAuth authentication could lead Azure account takeover. CVE-2019-14899 flaw allows hijacking VPN connections on Linux, Unix systems. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Advertising 54

Advertising DDOS VPN Authentication 54

Security Affairs

DECEMBER 23, 2019

Attackers use stolen VPN credentials to securely connect the target network. Fox-IT noticed that the APT20 group was able to abuse VPN accounts that were protected by 2FA, the experts believe that the group devised a specific technique to achieve this goal. . Pierluigi Paganini. SecurityAffairs – APT20, hacking).

VPN 67

VPN Hacking Software Advertising 67

Security Affairs

AUGUST 22, 2019

If you’re waiting for a flight what better way to pass the time than logging onto your favourite website, checking your bank account or even doing a bit of online shopping? The answer is a virtual private network (VPN) which creates a private tunnel between your device and the internet and encrypts your data. Except there’s a problem.

VPN 85

VPN Encryption Passwords Small Business 85

Security Affairs

SEPTEMBER 5, 2022

Resecurity researchers discovered a new Phishing-as-a-Service (PhaaS) called EvilProxy advertised on the Dark Web. Resecurity has recently identified a new Phishing-as-a-Service (PhaaS) called EvilProxy advertised in the Dark Web. Original post: [link]. Google 2FA. Microsft 2FA.

Phishing 99

Phishing Accountability Hacking Advertising 99

Security Affairs

APRIL 28, 2020

After reviewing the attack logs of the Denial of Service, Qurium could quickly determine that the attacker was using Fineproxy VPN service to build a botnet to flood the website. Some of this threats came from an anonymous account in Facebook and two messages were received by WhatsApp. Pierluigi Paganini.

DDOS 105

DDOS Media VPN Advertising 105

Security Affairs

JULY 11, 2020

Nikulin first breached LinkedIn between March 3 and March 4, 2012, the hacker first infected an employee’s laptop with malware then used employee’s VPN to access the LinkedIn’s internal network. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Hacking 80

Hacking Cybercrime Data breaches Advertising 80

Security Affairs

OCTOBER 7, 2020

Never use them without proper security measures such as using a VPN. A VPN removes all traces leading back to your original IP address and encrypts your connection to allow safe and private browsing. Software updates often come with releases that patch bugs and security vulnerabilities upon discovery. Avoid Public WI-Fi.

Data privacy 104

Data privacy Computers and Electronics Government VPN 104

Security Affairs

FEBRUARY 10, 2023

Rhadamanthys is an info stealing malware that was initially advertised for sale on underground forums since the middle of 2022. It can steal crypto wallets, steam accounts, passwords from browsers, FTP clients, chat clients (e.g. Telegram, Discord), email clients, VPN configurations, cookies, grab files, and more.

Malware 84

Malware Phishing Spyware Cybercrime 84

Security Affairs

APRIL 8, 2020

Court documents revealed that Facebook representatives were interested in effectively monitor mobile devices of users who had already installed Onavo, a VPN product developed by Facebook that analyzed the web traffic of users who downloaded it to monitor other apps installed by the users. ” Who will win? Facebook or NSO Group?

Surveillance 102

Surveillance Spyware Advertising Government 102

Security Affairs

SEPTEMBER 1, 2019

Hi folk, let me inform you that I suspended the newsletter service, anyway I’ll continue to provide you a list of published posts every week through the blog. Bad Packets warns of over 14,500 Pulse secure VPN endpoints vulnerable to CVE-2019-11510. White hat hacker demonstrated how to hack a million Instagram accounts.

eCommerce 49

eCommerce Data breaches Malware Advertising 49

Security Affairs

OCTOBER 30, 2020

How to secure it. Administrators can follow the Container Journal’s advice by configuring their API servers to allow cluster API access only via the internal network or a corporate VPN. Once they’ve implemented that security measure, they can use RBAC authorization to further limit who has access to the cluster. What is it?

Advertising 94

Advertising Internet Internet VPN 94

Security Affairs

NOVEMBER 19, 2019

Ransomware accounted for over half of all malicious mailings in H1 2019, Troldesh aka Shade being the most popular tool among cybercriminals. In 2017, password-protected archives accounted for only 0.08% of all malicious objects. Links account for 29%, while attachments—for 71%. Another trend was disguising malware in emails.

Ransomware 72

Ransomware Antivirus Malware Banking 72

Malwarebytes

MAY 28, 2021

Unlike some other underground cybercriminal gangs, Wizard Spider doesn’t openly advertise on underground forums, perhaps for security reasons. Use strong passwords and regularly change passwords to network systems and accounts, implementing the shortest acceptable timeframe for password changes.

Healthcare 103

Healthcare Ransomware Encryption Passwords 103

Security Affairs

JULY 21, 2020

vpnMentor experts reported that seven Virtual Private Network (VPN) recently left 1.2 Security experts from vpnMentor have discovered a group of seven free VPN (virtual private network) apps that left their server unsecured online exposing private user data for anyone to see. . The server was secured on July 15 th.

VPN 85

VPN Advertising Passwords Internet 85