Security Affairs

MARCH 4, 2023

stolen credit/debit cards Pegasus spyware used to spy on a Polish mayor Hundreds of thousands of websites hacked as part of redirection campaign MQsTTang, a new backdoor used by Mustang Panda APT against European entities Trusted Platform Module (TPM) 2.0 FiXS, a new ATM malware that is targeting Mexican banks BidenCash leaks 2.1M

Spyware 83

Spyware Data breaches Retail Ransomware 83

Security Affairs

MAY 21, 2021

CyberNews researchers found that crooks could abuse cryptocurrency exchange API keys and steal cryptocurrencies. CyberNews researchers found that cybercriminals are able to abuse cryptocurrency exchange API keys and steal cryptocurrencies from their victims’ accounts without being granted withdrawal rights.

Cryptocurrency 78

Cryptocurrency Accountability Marketing Passwords 78

Security Affairs

JANUARY 23, 2022

SecurityAffairs – hacking, newsletter). from the Lympo NTF platform. from the Lympo NTF platform. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. The post Security Affairs newsletter Round 350 appeared first on Security Affairs.

VPN 79

VPN Ransomware Spyware DDOS 79

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 94

Data breaches Malware Mobile Spyware 94

Security Affairs

FEBRUARY 13, 2022

SecurityAffairs – hacking, newsletter). US seizes $3.6 US seizes $3.6 Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. The post Security Affairs newsletter Round 353 appeared first on Security Affairs.

Spyware 72

Spyware Surveillance Ransomware Hacking 72

SecureList

MAY 27, 2022

In January, we reported a malicious campaign targeting companies that work with cryptocurrencies, smart contracts, decentralized finance and blockchain technology: the attackers are interested in fintech in general. The campaign has two goals: gathering information and stealing cryptocurrency. Other malware.

Phishing 103

Phishing Spyware Firmware Malware 103

Security Affairs

APRIL 26, 2020

SecurityAffairs – newsletter, hacking). Are Maze operators behind the attack on the IT services giant Cognizant? Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Spyware 95

Spyware Hacking Advertising Antivirus 95

Security Affairs

JUNE 30, 2019

Hundreds of million computers potentially exposed to hack due to a flaw in PC-Doctor component. NASA hacked! SocialEngineered forum hacked and data leaked online. European law enforcement agencies arrested 6 individuals involved in $27M cryptocurrency theft. Crooks stole millions from Bitrue Cryptocurrency Exchange.

B2B 63

B2B Cryptocurrency Spyware Hacking 63

SecureList

MARCH 7, 2024

To get access to the content (or contest), phishing sites prompted the victim to sign in to one of their gaming accounts. If the victim entered their credentials on the phishing form, the account was hijacked. The information could later be used to steal both funds from victims’ accounts and their identities.

Phishing 95

Phishing Scams Cryptocurrency Accountability 95

SecureList

NOVEMBER 22, 2022

Unlike common stealers, this malware gathered data that can be used to identify the victims, such as browsing histories, social networking account IDs and Wi-Fi networks. Cryptocurrency targeted attacks. More cryptocurrency-related threats: fake hardware wallets, smart contract attacks, DeFi hacks, and more.

Cryptocurrency 87

Cryptocurrency Mobile Ransomware Banking 87

Security Affairs

MARCH 11, 2019

Experts observed the STOP ransomware installing the Azorult password-stealing Trojan to steal account credentials, cryptocurrency wallets, and more. In July, the experts discovered a new sophisticated version of the AZORult Spyware that was involved in a large email campaign on July 18. ” concludes BleepingComputer.

Encryption 84

Encryption Ransomware Cryptocurrency Passwords 84

eSecurity Planet

JUNE 16, 2022

There are many types of cyberattacks , with top trends for 2022 including mobile attacks, ransomware, COVID-related scams and hacks, zero-click attacks , malicious QR codes , phishing , cryptojacking , and IoT malware attacks, among others. Restoration is offered in exchange for a ransom, usually in cryptocurrencies. Ransomware.

Backups 141

Backups Ransomware Firewall Malware 141

Security Affairs

JULY 16, 2020

The malware targets 226 applications to steal account credentials, including Gmail, Google Play services, Uber, Amazon, Netflix and Outlook. The list of targeted apps includes cryptocurrency wallet applications (i.e. SecurityAffairs – hacking, BlackRock malware). Coinbase, BitPay, and Coinbase), and banks (i.e.

Malware 89

Malware Banking Mobile Spyware 89

Security Affairs

JULY 13, 2019

Hackers compromised a Canonical GitHub account, Ubuntu source code was not impacted. Experts uncovered a new Magecart campaign that hacked over 960 stores. Severe vulnerabilities allow hacking older GE anesthesia machines. New FinFisher spyware used to spy on iOS and Android users in 20 countries.

Data breaches 51

Data breaches Spyware Advertising Government 51

Security Affairs

AUGUST 25, 2019

5 Ways to Protect Yourself from IP Address Hacking. Twitter bans 936 accounts that attempted to sow political discord in Hong Kong. App tainted with Ahmyst Open-source spyware appeared on Google Play Store twice. Employees abused systems at Ukrainian nuclear power plant to mine cryptocurrency. Texas attackers demand $2.5

Small Business 50

Small Business Spyware Data breaches Advertising 50

Security Boulevard

JANUARY 25, 2022

Dancho Danchev’s “A Qualitative and Technical Collection OSINT-Enriched Analysis of the Iranian Hacking Scene Through the Prism of the Infamous Ashiyane Digital Security Team” Report – [PDF]. Dancho Danchev’s Primary Contact Points for this Project – Email/XMPP/Jabber/OMEMO and PGP Key Accounts.

Cybercrime 96

Cybercrime Hacking Scams Ransomware 96

SecureList

FEBRUARY 16, 2023

These sites referenced public figures and humanitarian groups, offering to accept cash in cryptocurrency, something that should have raised a red flag in itself. For example, one website offered users to obtain a COVID vaccination certificate by entering their British National Health Service (NHS) account credentials.

Phishing 90

Phishing Scams Accountability Energy and Utilities 90

SecureList

NOVEMBER 14, 2023

Mail servers become priority targets In June, Recorded Future warned that BlueDelta (aka Sofacy, APT28, Fancy Bear and Sednit) exploited vulnerabilities in Roundcube Webmail to hack multiple organizations including government institutions and military entities involved in aviation infrastructure. Drone hacking!

Hacking 102

Hacking Energy and Utilities Media Malware 102

Security Affairs

MAY 8, 2020

H2 2019 has proved the tendency of past several years: mail remains the main method of delivering ransomware, spyware, backdoors and other malware, being used by cyber crooks in 94 percent of cases. They, in turn, let spyware and backdoors move ahead and become the second most popular malware with a 35-percent share.

Phishing 56

Phishing Spyware Banking Malware 56

SecureList

NOVEMBER 18, 2022

We believe DeathStalker to be a group of mercenaries, offering hack-for-hire services, or acting as an information broker to support competitive and financial intelligence efforts. VileRAT is a Python implant, part of an evasive and highly intricate attack campaign against foreign exchange and cryptocurrency trading companies.

Malware 100

Malware Computers and Electronics Adware Cryptocurrency 100

Security Affairs

MARCH 19, 2019

We expect that that other APTs like Silence , MoneyTaker , and Cobalt will stage multiple attacks on cryptocurrency exchanges in the near future,” – says Dmitry Volkov. Users’ accounts from government resources are either sold on underground forums or used in targeted attacks on government agencies for the purpose of espionage or sabotage.

Banking 79

Banking Government Passwords Marketing 79

Spinone

NOVEMBER 1, 2019

Spyware – malware that spies on the computer to collect the information about a product, a company, a person. The most widespread spyware are keyloggers and trojans. Hacking and Social Engineering Attack vector – a specific method used by a hacker to accomplish his malicious goal.

Passwords 40

Passwords Social Engineering Malware Encryption 40

Security Affairs

MARCH 27, 2023

The threat actor abused Bitly shortener and an ad hoc BlogSpot account to protect the malicious code, lastly stored in an encrypted zip archive hosted on Mega.nz. Lower.exe, a sample of “GCleaner” spyware, historically, this piece of malware was initially faking CCleaner to drop additional malware ( link ).

Malware 83

Malware Social Engineering Encryption Marketing 83