Remove Accountability Remove Antivirus Remove Cryptocurrency Remove Passwords
article thumbnail

Chinese Antivirus Firm Was Part of APT41 ‘Supply Chain’ Attack

Krebs on Security

One of the alleged hackers was first profiled here in 2012 as the owner of a Chinese antivirus firm. ” Once inside of a target organization, the hackers stole source code, software code signing certificates, customer account data and other information they could use or resell. Image: FBI. Security analysts and U.S.

Antivirus 356
article thumbnail

Calendar Meeting Links Used to Spread Mac Malware

Krebs on Security

Malicious hackers are targeting people in the cryptocurrency space in attacks that start with a link added to the target’s calendar at Calendly , a popular application for scheduling appointments and meetings. The attackers impersonate established cryptocurrency investors and ask to schedule a video conference call.

Malware 269
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

New Windows Meduza Stealer targets tens of crypto wallets and password managers

Security Affairs

The malware also targets crypto wallet extensions, password managers, and 2FA extensions. “What’s more concerning is that a large portion of antivirus software has proven ineffective against the Meduza stealer binary, either failing to detect it statically or dynamically” reads the analysis published by Uptycs.

article thumbnail

Satacom delivers browser extension that steals cryptocurrency

SecureList

The main purpose of the malware that is dropped by the Satacom downloader is to steal BTC from the victim’s account by performing web injections into targeted cryptocurrency websites. For example, it has the ability to retrieve the victims’ addresses, obtain account information, bypass 2FA, and much more.

article thumbnail

GUEST ESSAY: These advanced phishing tactics should put all businesses on high alert

The Last Watchdog

According to a new study, phishing attacks rose 61 percent in 2022, with cryptocurrency fraud increasing 257 percent year-over-year. Business impersonation is increasing exponentially with hackers gaining access to company email accounts. Implement a policy to update passwords every 90 days.

Phishing 124
article thumbnail

ViperSoftX uses more sophisticated encryption and anti-analysis techniques

Security Affairs

ViperSoftX is a JavaScript-based Remote Access Trojan (RAT) and cryptocurrency stealer that was first analyzed by Fortinet in February 2020. ViperSoftX also checks for active antivirus products running on the machine. ” reads the analysis published by Trend Micro. ” concludes the report.

article thumbnail

Discover 2022’s Nastiest Malware

Webroot

Since the mainstreaming of ransomware payloads and the adoption of cryptocurrencies that facilitate untraceable payments, malicious actors have been innovating new methods and tactics to evade the latest defenses. In other words, 2022 has been an eventful year in the threat landscape, with malware continuing to take center stage.

Malware 61