Security Affairs

MAY 27, 2022

A new version of the ERMAC Android banking trojan is able to target an increased number of apps. The ERMAC Android banking trojan version 2.0 can target an increasing number of applications, passing from 378 to 467 target applications to steal account credentials and crypto-wallets. IoCs: Distribution: bolt-food[.]site

Banking 142

Banking Malware Cybercrime Phishing 142

The Last Watchdog

SEPTEMBER 28, 2022

Phishing attacks are nothing new, but scammers are getting savvier with their tactics. Other Iranian-based cyberattacks have included hackers targeting Albanian government systems and spear phishing scams. Here are four new phishing trends keeping businesses on their toes. Spear phishing. Phishing via texting.

Phishing 124

Phishing Scams Cybercrime Passwords 124

Malwarebytes

APRIL 28, 2021

This is aided by imitation accounts modelled to look like the genuine organisation’s account. The victim is typically sent to a phishing page where accounts, payment details, identities, or other things can be stolen. The scam isn’t being spread by just one account, nor is there just one bogus support form.

Phishing 120

Phishing Cryptocurrency Accountability Scams 120

Appknox

APRIL 13, 2021

Along with wireless payments like Google or Apple pay (that still require assigning a banking account or card i.e. physical currency), the cryptocurrencies like Bitcoin are getting widely used. No surprise here, that cash payments are becoming a relic of the past.

Cryptocurrency 105

Cryptocurrency Wireless Hacking Banking 105

SecureList

FEBRUARY 16, 2023

Short-lived phishing sites often offered to see the premieres before the eagerly awaited movie or television show was scheduled to hit the screen. Soccer fans chasing merchandise risked compromising their bank cards or just losing some money. Those who just could not wait were in for a disappointment and a waste of cash.

Phishing 90

Phishing Scams Accountability Energy and Utilities 90

Malwarebytes

AUGUST 26, 2021

In August of 2021, a thief stole about $600 million in cryptocurrencies from The Poly Network. Slightly more than one week later, Japanese cryptocurrency exchange Liquid was hacked and lost $97 million worth of digital coins. Bank robbers. They ended up giving it back, but not because they were forced to. I wish I knew.

Cryptocurrency 104

Cryptocurrency Banking Hacking Engineering 104

CyberSecurity Insiders

APRIL 4, 2022

Fresh reports are in that a hacking group possibly funded by North Korea Intelligence has been strategically targeting South Korean citizens through phishing emails urging recipients to book appointments for a newly developed corona vaccine that is countering a novel strain of Coronavirus that has sent almost half of Beijing into a lock-down again.

Phishing 108

Phishing Cryptocurrency Banking Malware 108

Malwarebytes

JULY 19, 2021

We’ve observed a 419-style scam (also known as an advance fee scam) which combines the promise of cryptocurrency riches with WhatsApp conversation. Folks already involved in cryptocurrency would likely have suspicions raised after reading the below. It’s all about that personal touch in the land of cryptocurrency scams.

Accountability 103

Accountability Scams Cryptocurrency Banking 103

SecureList

MARCH 29, 2023

However, traditional financial threats – such as banking malware and financial phishing, continue to take up a significant share of such financially-motivated cyberattacks. The good news is that regardless of these continuous advancements, we’ve witnessed a steady decrease in the number of attacks by banking Trojans.

Banking 71

Banking Phishing Cryptocurrency Mobile 71

Security Affairs

MAY 10, 2022

“Frappo” acts as a Phishing-as-a-Service and enables cybercriminals the ability to host and generate high-quality phishing pages which impersonate major online banking, e-commerce, popular retailers, and online-services to steal customer data. Detailed analysis of the Phishing-As-A-Service Frappo is available here: [link].

Phishing 72

Phishing Banking Retail Financial Services 72

Security Affairs

MARCH 7, 2022

SharkBot banking malware was able to evade Google Play Store security checks masqueraded as an antivirus app. SharkBot is a banking trojan that has been active since October 2021, it allows to steal banking account credentials and bypass multi-factor authentication mechanisms. sellsourcecode.supercleaner).

Banking 79

Banking Antivirus Mobile Malware 79

SecureList

FEBRUARY 23, 2022

Driven by poverty and unemployment, cybercriminals intensified their malicious activity against bank customers and bank infrastructure. SpyEye, developed in 2009 and described as a “bank Trojan with a form grabbing capability”, surged from the eighth most common banking malware tool with a 3.4% Methodology.

Banking 94

Banking Phishing Cryptocurrency Malware 94

SecureList

JANUARY 13, 2022

BlueNoroff is the name of an APT group coined by Kaspersky researchers while investigating the notorious attack on Bangladesh’s Central Bank back in 2016. See our earlier publication about BlueNoroff attacks on the banking sector. Also, we have previously reported on cryptocurrency-focused BlueNoroff attacks.

Cryptocurrency 126

Cryptocurrency Malware Accountability Banking 126

Security Affairs

NOVEMBER 15, 2019

On Thursday, US authorities arrested two crooks charging them with stealing $550,000 in cryptocurrency from at least 10 victims using SIM swapping. American law enforcement has declared war to sim swapping scammers and announced the arrest of two individuals for stealing $550,000 in Cryptocurrency. In May, the U.S.

Cryptocurrency 81

Cryptocurrency Identity Theft Accountability Media 81

Digital Shadows

JUNE 7, 2021

It’s been a pretty big year so far for cryptocurrency. Cryptocurrencies’ current total market cap sits just above $1.7 The cryptocurrency exchange Coinbase recently launched an IPO, India has reversed a ban on cryptocurrencies, and ransomware groups continue to demand payment in anonymity-based cryptocurrency.

Cryptocurrency 52

Cryptocurrency Phishing Advertising Antivirus 52

The Last Watchdog

APRIL 14, 2022

This type of targeted phishing or whaling (executive-level) attack tricks email recipients into believing someone they know and trust is asking them to carry out a specific financial task. The CFO commonly carries out such tasks and arranges a wire transfer using the account information provided on the invoice. Scenario 2. Scenario 3.

Phishing 247

Phishing Accountability Scams Social Engineering 247

Krebs on Security

AUGUST 19, 2020

The COVID-19 epidemic has brought a wave of email phishing attacks that try to trick work-at-home employees into giving away credentials needed to remotely access their employers’ networks. The employee phishing page bofaticket[.]com. Image: urlscan.io.

Phishing 357

Phishing VPN Social Engineering Media 357

Security Affairs

JANUARY 3, 2024

Resecurity has uncovered a cybercriminal faction known as “ GXC Team “, who specializes in crafting tools for online banking theft, ecommerce deception, and internet scams. For the tool to function, the operator must input a list of compromised email accounts to be scanned.

Artificial Intelligence 118

Artificial Intelligence Banking Scams Cybercrime 118

Hacker Combat

FEBRUARY 18, 2022

The malware uses phishing attacks and web injections to target 60 large tech companies’ customers by accessing their personal information and login credentials. Together with other simple malware such as Dridex, Agent Tesla, DanaBot, and Zeus, Trickbot started as a non-threatening bank trojan.

Banking 83

Banking Malware Engineering Cryptocurrency 83

Security Affairs

SEPTEMBER 26, 2023

The banking Trojan was used to target 56 European banks and steal sensitive information from the devices of their customers. Xenomorph shares similarities with the Alien banking trojan, but it has functionalities radically different from the Alien’s one. In March, experts warned of a new variant tracked as Xenomorph.C

Malware 111

Malware Banking Phishing Engineering 111

Security Affairs

JANUARY 2, 2024

The attack spotted by the researchers used phishing messages posing as Abu Dhabi National Oil Company (ADNOC). Altogether, Meduza makes a great competitor to Azorult , Redline , Racoon , and Vidar Stealer used by cybercriminals for account takeover (ATO), online-banking theft, and financial fraud. net on 2023-04-30.

Malware 114

Malware Passwords Cryptocurrency Hacking 114

CyberSecurity Insiders

AUGUST 17, 2022

All these days, they were busy launching phishing emails on corporate networks. We already know that North Korea leader Kim Jong Un is fulfilling his nuclear ambitions by stealing currency from banks, stealing cryptocurrency from individual accounts, and raiding crypto exchanges to steal currency.

Social Engineering 117

Social Engineering Cryptocurrency Education Cybercrime 117

SecureList

MARCH 31, 2021

We have dubbed the first four families to have done this ( Guildma, Javali, Melcoz, Grandoreiro ) “the Tétrade” Later on the authors of Guildma also created the new banking malware Ghimob targeting users located in Brazil, Paraguay, Peru, Portugal, Germany, Angola, and Mozambique. Methodology. Key findings. in 2019 to 38.7%

Banking 118

Banking Phishing Malware Mobile 118

SecureWorld News

AUGUST 2, 2021

Robinhood is an increasingly popular trading app where you can buy and sell stocks, as well as cryptocurrency. Earlier this year, Robinhood sent out a message to its users, warning of some phishing emails claiming to be a "Security Alert" with links to fake Robinhood websites. How to spot phishing emails.

Phishing 88

Phishing Social Engineering Scams Identity Theft 88

Krebs on Security

AUGUST 16, 2018

An entrepreneur and virtual currency investor is suing AT&T for $224 million, claiming the wireless provider was negligent when it failed to prevent thieves from hijacking his mobile account and stealing millions of dollars in cryptocurrencies. On June 11, 2017, Terpin’s phone went dead.

Mobile 229

Mobile Cryptocurrency Accountability Authentication 229

eSecurity Planet

SEPTEMBER 30, 2021

Underground services are cropping up that are designed to enable bad actors to intercept one-time passwords (OTPs), which are widely used in two-factor authentication programs whose purpose is to better protect customers’ online accounts. By using the services, cybercriminals can gain access to victims’ accounts to steal money.

Authentication 107

Authentication Social Engineering Phishing Banking 107

Malwarebytes

APRIL 19, 2022

The invasion of Ukraine has been a money making opportunity for scammers since the moment it began: Fake donation sites, bogus Red Cross portals, phishing pages, the works. We reported the account, and it was eventually suspended after having apparently cycled through several different usernames. Faking donations on Twitter.

Scams 103

Scams Accountability Media Phishing 103

CyberSecurity Insiders

APRIL 19, 2023

Trigona was first spotted in October 2022 by MalwareHunterTeam, who analyzed the possibilities and concluded that the malware-spreading gang uses Monero Cryptocurrency from their victims to offer a decryption key in exchange. This includes details such as names, bank account numbers, transaction details of the property, and ID card details.

Ransomware 96

Ransomware Cryptocurrency Banking Cyber Attacks 96

Krebs on Security

AUGUST 29, 2023

Emerging in 2007 as a banking trojan, QakBot (a.k.a. QakBot is most commonly delivered via email phishing lures disguised as something legitimate and time-sensitive, such as invoices or work orders. The DOJ declined to say whether any suspects were questioned or arrested in connection with Qakbot, citing an ongoing investigation.

Hacking 253

Hacking Malware Ransomware Government 253

Hot for Security

MARCH 2, 2021

Although email phishing and fraudulent websites are not a new threat to the digital community, the attack vectors deployed by scammers have become more diverse and sophisticated. While some may be harmless, consisting of ads from retailers, criminals also use emails in mass-market phishing campaigns. IRS and Bank-related scams.

Scams 116

Scams Identity Theft Banking Phishing 116

Krebs on Security

AUGUST 7, 2018

Police in Florida have arrested a 25-year-old man accused of being part of a multi-state cyber fraud ring that hijacked mobile phone numbers in online attacks that siphoned hundreds of thousands of dollars worth of bitcoin and other cryptocurrencies from victims.

Mobile 206

Mobile Cryptocurrency Scams Computers and Electronics 206

SecureList

NOVEMBER 23, 2021

We should expect more fraud, targeting mostly BTC , because this cryptocurrency is the most popular. In fact, from January through the end of October, Kaspersky detected more than 2,300 fraudulent global resources aimed at 85,000 potential crypto investors or users who are interested in cryptocurrency mining. Extortion on the rise.

Cryptocurrency 104

Cryptocurrency Banking Cybercrime Ransomware 104

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 77

Malware Cybercrime Cryptocurrency Social Engineering 77

Security Affairs

MARCH 13, 2020

Attackers obtain victims’ information by launching a phishing campaign, or by purchasing them in the underground market. ” Crooks obtained online banking credentials from the victims using banking Trojans or other techniques, then presented fake documents to the victim’s mobile service provider to receive a duplicate of their SIM card.

Banking 114

Banking Cybercrime Mobile Accountability 114

Identity IQ

APRIL 2, 2021

These criminals have used phishing, spoofing, extortion and various types of Internet-enabled fraud to target the most vulnerable in our society – medical workers searching for personal protective equipment, families looking for information about stimulus checks to help pay bills and many others. Phishing Scams.

Scams 110

Scams Computers and Electronics Phishing Internet 110

Identity IQ

JANUARY 19, 2022

The more digital assets like cryptocurrency and non-fungible tokens (NFTs) gain mainstream appeal and legitimacy, the more cybercriminals are going to seek out vulnerabilities and target them for the attack. Criminals use phishing attempts and create fraudulent organizations to steal money and personal information.

Data breaches 111

Data breaches Scams Cybercrime Phishing 111

Malwarebytes

APRIL 7, 2021

Several users of Trezor, a small hardware device that acts as a cryptocurrency wallet, have been duped by a fake app with the same name. He wanted to check his cryptocurrency balance on his phone and decided to search for and download an app instead of plugging the device into his computer via a USB connection. He lost 17.1

Cryptocurrency 102

Cryptocurrency Scams Engineering Accountability 102