Security Affairs

APRIL 7, 2025

Cybercriminals exploit compromised accounts for EDR-as-a-Service (Emergency Data Requests – EDR), targeting major platforms According to a detailed analysis conducted by Meridian Group, an increasingly complex and structured phenomenon, commonly referred to as EDR-as-a-Service, is taking hold in the cybersecurity landscape.

Cybercrime

Security Affairs

MARCH 10, 2025

The governments latest action officially secures the recovered funds. Bax and Monahan found another common theme with these robberies: They all followed a similar pattern of cashing out, rapidly moving stolen funds to a dizzying number of drop accounts scattered across various cryptocurrency exchanges.” ” However.

Password Management

Krebs on Security

MARCH 11, 2025

Authorities in India today arrested the alleged co-founder of Garantex , a cryptocurrency exchange sanctioned by the U.S. government in 2022 for facilitating tens of billions of dollars in money laundering by transnational criminal and cybercriminal organizations. A “most wanted” notice published by the U.S.

Ransomware

Krebs on Security

NOVEMBER 14, 2024

net that paid people to click on ads for Russian government employment opportunities. Hydra trafficked in illegal drugs and financial services, including cryptocurrency tumbling for money laundering, exchange services between cryptocurrency and Russian rubles, and the sale of falsified documents and hacking services.

Advertising

Security Affairs

OCTOBER 13, 2024

Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Data breaches

The Last Watchdog

DECEMBER 18, 2024

Enterprises must secure AI agents, adopt proactive data governance, and deploy AI-based security platforms. Promoting continuous learning in privacy tech, AI governance, and Zero Trust, alongside partnerships with educational institutions, helps build a skilled workforce to meet evolving regulatory demands.

Risk

Malwarebytes

MAY 1, 2025

Phishing In phishing scams, cybercriminals trick people and businesses into handing over sensitive information like credit card numbers or login details for vital online accounts. Lured in by similar color schemes, company logos, and familiar layouts, victims log in to their account by entering their username and password.

Small Business

Security Affairs

JUNE 6, 2025

The bounty is part of the US DoS’s Rewards for Justice program , which offers payouts for tips on foreign government hackers targeting U.S. Change passwords : After malware removal, update passwords for key accounts (email, banking, work, social media) and enable two-factor authentication. ” reads the U.S. .”

Malware

SecureWorld News

MAY 14, 2025

Top cybercrime categories: Phishing/spoofing: 193,407 complaints Extortion: 86,415 complaints Personal data breaches: 64,882 complaints Cryptocurrency-related scams: Nearly 150,000 complaints involved cryptocurrency, accounting for $9.3 billion in losses. Here are a few more trends from the report. Since 2022, the U.S.

Cybercrime

SecureList

NOVEMBER 29, 2024

Mobile statistics Targeted attacks New APT threat actor targets Russian government entities In May 2024, we discovered a new APT targeting Russian government organizations. Two months later, in July 2024, CloudSorcerer launched further attacks against Russian government organizations and IT companies.

Energy and Utilities

Zero Day

JUNE 17, 2025

PT kontekbrothers/Getty We've probably all received confirmation codes sent via text message when trying to sign into an account. Those codes are supposed to serve as two-factor authentication to confirm our identity and prevent scammers from accessing our accounts through a password alone.

Authentication

Centraleyes

DECEMBER 16, 2024

Verizons Data Breach Investigations Report showed that 74% of security breaches involve a human element, with system administrators and developers accounting for most of these errors. Industries such as finance and government will likely begin exploring post-quantum cryptography to future-proof their systems.

Cybersecurity

SecureWorld News

APRIL 3, 2025

including roles in government and defense contracting. These personas applied for jobs across multiple countries and had accounts on multiple job platforms." Payments were processed via cryptocurrency or third-party services like Payoneer and TransferWise to obscure origins.

CISO

SecureList

OCTOBER 23, 2024

For several months, the attackers were building their social media presence, regularly making posts on X (formerly Twitter) from multiple accounts and promoting their game with content produced by generative AI and graphic designers. Is that really all this game has to offer?

Engineering

Security Affairs

JUNE 22, 2025

CISA adds Apple products, and TP-Link routers flaws to its Known Exploited Vulnerabilities catalog Attackers target Zyxel RCE vulnerability CVE-2023-28771 India-based car-sharing company Zoomcar suffered a data breach impacting 8.4M

Data breaches

Security Affairs

JUNE 9, 2025

The frozen funds include cryptocurrency, NFTs, and other digital assets. District Court for the District of Columbia alleging that North Korean information technology (IT) workers obtained illegal employment and amassed millions in cryptocurrency for the benefit of the North Korean government, all as a means of evading U.S.

Scams

Security Affairs

JANUARY 19, 2025

CISA adds Aviatrix Controllers vulnerability to its Known Exploited Vulnerabilities catalog ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems Russia-linked APT Star Blizzard targets WhatsApp accounts Prominent US law firm Wolf Haldenstein disclosed a data breach Clop Ransomware exploits Cleo File Transfer flaw: dozens (..)

Spyware

SecureList

MARCH 3, 2025

Adware, the most common mobile threat, accounted for 35% of total detections. A similar scheme was later spotted in Russia, where malware masqueraded as banking and e-government apps. The BrowserAd (22.8%), HiddenAd (20.3%) and Adlo (16%) families accounted for the largest number of new installation packages in the former category.

Mobile

SecureList

MAY 28, 2025

2022: From zero to threat Zanubis was first observed in the wild around August 2022, initially targeting financial institutions and cryptocurrency exchange users in Peru. The once-broad range of targets, including cryptocurrency wallets, has been abandoned.

Banking

Security Boulevard

MARCH 24, 2025

While MFA is primarily a security feature, its primary privacy benefit is adding another layer of security to prevent unauthorized access to information contained in particular important or sensitive accounts. Specifically, it was fetching account icons and defaulted to opening password reset pages over HTTP.

Surveillance

Krebs on Security

NOVEMBER 5, 2024

At the end of 2023, malicious hackers learned that many large companies had uploaded huge volumes of sensitive customer data to Snowflake accounts that were protected with little more than a username and password (no multi-factor authentication required). government agencies and first responders. “The rest is just ransom.”

Cybercrime

SecureWorld News

JULY 27, 2025

Modern darknet markets cloak themselves behind Tor ( The Onion Router , an overlay network popularly used to browse the Dark Web) and accept cryptocurrencies such as Bitcoin and privacy-centric Monero. Government documents such as passports or national ID cards sell for $500–$3,000 depending on issuing country and authenticity guarantees.

Phishing

Security Affairs

MAY 18, 2025

US Government officials targeted with texts and AI-generated deepfake voice messages impersonating senior U.S. Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. officials Shields up US retailers.

Data breaches

Webroot

OCTOBER 31, 2024

infrastructure sectors, including healthcare, government services, financial services, and critical manufacturing. The malware’s capabilities expanded to include stealing not only passwords but also credit card details, cryptocurrency wallets, and browser data.

Malware

Security Affairs

FEBRUARY 12, 2025

Alexander Vinnik , a Russian national, in May 2024 pleaded guilty to conspiracy to commit money laundering for his involvement in operating the cryptocurrency exchange BTC-e from 2011 to 2017. Vinnik set up numerous such shell companies and financial accounts across the globe to allow BTC-e to conduct its business.

Cryptocurrency

Centraleyes

JULY 13, 2025

Document evidence for each requirement, including policies, technical controls, and governance practices. Integrate the Profile into existing enterprise risk management (ERM) and governance structures. The Profile covers the following core functions: Govern: Risk governance, accountability, and oversight.

Financial Services

Security Affairs

AUGUST 3, 2025

customers International Press – Newsletter Cybercrime Cybercriminals Attack Seychelles – Offshore Banking as a Target Allianz Life says ‘majority’ of customers’ personal data stolen in cyberattack United States files a civil complaint in the Northern District of Texas seeking the forfeiture of over $1.7

Data breaches

Security Affairs

MARCH 2, 2025

from Bybit, it is the largest cryptocurrency heist ever International Press Newsletter Cybercrime Mining Company NioCorp Loses $500,000 in BEC Hack Inside Black Bastas Exposed Internal Chat Logs: A Firsthand Look The Bleeding Edge of Phishing: darcula-suite 3.0

Cybercrime

Krebs on Security

FEBRUARY 23, 2025

One month into his second term, President Trump’s actions to shrink the government through mass layoffs, firings and withholding funds allocated by Congress have thrown federal cybersecurity and consumer protection programs into disarray. federal government information systems than China.”

Consumer Protection

Security Affairs

JUNE 21, 2025

While the timing coincides with escalating military conflict and a wave of cyberattacks, there is no evidence linking the internet blackout to a specific technical failure, deliberate government action, or external cyber operation. A cryptocurrency exchange was also hacked, and with all these issues, we decided to restrict the Internet.”

Internet

Krebs on Security

SEPTEMBER 16, 2020

authorities today announced criminal charges and financial sanctions against two Russian men accused of stealing nearly $17 million worth of virtual currencies in a series of phishing attacks throughout 2017 and 2018 that spoofed websites for some of the most popular cryptocurrency exchanges. Separately, the U.S.

Cryptocurrency

Krebs on Security

OCTOBER 20, 2022

On October 10, 2022, there were 576,562 LinkedIn accounts that listed their current employer as Apple Inc. LinkedIn declined to answer questions about the account purges, saying only that the company is constantly working to keep the platform free of fake accounts. The next day, half of those profiles no longer existed.

Accountability

CyberSecurity Insiders

NOVEMBER 26, 2021

Google, the business subsidiary of tech giant Alphabet Inc, has released a report saying that the compromised cloud accounts were leading hackers to mine cryptocurrency that could prove as a double threat to customers. And then use a 2FA to add an extra layer of security protection to safeguard an online account.

Cryptocurrency

Krebs on Security

JANUARY 10, 2024

A California man who lost $100,000 in a 2021 SIM-swapping attack is suing the unknown holder of a cryptocurrency wallet that harbors his stolen funds. Dellone says the crooks then used his phone number to break into his account at Coinbase and siphon roughly $100,000 worth of cryptocurrencies.

Cryptocurrency

Krebs on Security

MAY 14, 2021

The crime gang announced it was closing up shop after its servers were seized and someone drained the cryptocurrency from an account the group uses to pay affiliates. The word ‘ransomware’ has been put on a par with a number of unpleasant phenomena, such as geopolitical tensions, extortion, and government-backed hacks.

Ransomware

Krebs on Security

NOVEMBER 4, 2022

Responding to a recent surge in AI-generated bot accounts, LinkedIn is rolling out new features that it hopes will help users make more informed decisions about with whom they choose to connect. For example, on October 10, 2022, there were 576,562 LinkedIn accounts that listed their current employer as Apple Inc.

Scams

Krebs on Security

DECEMBER 29, 2022

You just knew 2022 was going to be The Year of Crypto Grift when two of the world’s most popular antivirus makers — Norton and Avira — kicked things off by installing cryptocurrency mining programs on customer computers. A single bitcoin is trading at around $45,000.

Cryptocurrency