Krebs on Security

OCTOBER 31, 2023

” Infoblox determined that until May 2023, domains ending in.info accounted for the bulk of new registrations tied to the malicious link shortening service, which Infoblox has dubbed “ Prolific Puma.” is overseen by the National Telecommunications and Information Administration (NTIA), an executive branch agency of the U.S.

Phishing 254

Phishing Telecommunications Malware Scams 254

Security Affairs

DECEMBER 24, 2022

The Raspberry Robin worm attacks aimed at telecommunications and government office systems across Latin America, Australia, and Europe. Researchers from Trend Micro have uncovered a Raspberry Robin worm campaign targeting telecommunications and government office systems across Latin America, Australia, and Europe.

Government 97

Government Malware Telecommunications Cybercrime 97

Krebs on Security

NOVEMBER 3, 2022

” Kurittu said he and others who worked on the investigation into Kivimaki’s previous cybercrimes couldn’t shake the suspicion that the infamous cybercriminal was also behind the Vastaamo extortion. “There were also other projects and databases.” ”

Data breaches 187

Data breaches Cybercrime Telecommunications Accountability 187

Security Affairs

JUNE 14, 2021

We call on all states to urgently identify and disrupt ransomware criminal networks operating from within their borders, and hold those networks accountable for their actions,” reads the statement. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, ransomware).

Ransomware 104

Ransomware Cybercrime Telecommunications Accountability 104

Security Affairs

JANUARY 2, 2022

The Lapsus$ ransomware group defaced all the sites publishing a ransom note that claims that they had access to Impresa’s Amazon Web Services account. The gang also targeted the South American telecommunication providers Claro and Embratel. Source TheRecord. At this time the websites of the company are in maintenance mode.

Media 144

Media Ransomware Telecommunications Accountability 144

Security Affairs

FEBRUARY 22, 2022

The cybercrime unit of the Ukrainian police has arrested a group of cybercriminals who managed to steal payment card data from at least 70,000 people by setting up mobile fake top-up services. Once obtained the data, crooks used it to empty their victims’ bank accounts. 190 (Fraud) of the Criminal Code of Ukraine.

Phishing 92

Phishing Banking Mobile Telecommunications 92

Security Affairs

MARCH 18, 2022

Mandiant researchers discovered a new Unix rootkit named Caketap, which is used to steal ATM banking data, while investigating the activity of the LightBasin cybercrime group (aka UNC1945 ). CrowdStrike researchers reported that at least 13 telecommunication companies were compromised by the group since 2019.

Banking 134

Banking Telecommunications System Administration Hacking 134

SecureWorld News

AUGUST 28, 2023

RELATED: Lapsus$ Returns One Week After 7 Teenage Hackers Arrested ] The extent of Kurtaj's involvement in cybercrimes is staggering. This marked a turning point in the battle against cybercrime and served as a stark reminder that even the most skilled threat actors can be brought to justice. and Brazil. and another in Brazil.

Cybercrime 78

Cybercrime Social Engineering Telecommunications Hacking 78

Security Affairs

OCTOBER 5, 2022

Bad news for the Australian telecommunications industry, the largest company in the country Telstra suffered a data breach. Australia’s largest telecommunications company Telstra disclosed a data breach through a third-party supplier. It seems that the security breach also impacted other companies.

Data breaches 95

Data breaches Telecommunications Accountability Information Security 95

SecureWorld News

JANUARY 27, 2023

The United States Department of Justice (DOJ) recently announced that it has successfully taken down the HIVE ransomware network, an international cybercrime ring that had been responsible for stealing and encrypting the data of more than 1,500 companies from 80 different countries. Cybercrime is a constantly evolving threat.

Ransomware 78

Ransomware Cybercrime Cryptocurrency Telecommunications 78

SecureWorld News

NOVEMBER 20, 2023

Federal Communications Commission (FCC) has adopted new rules aimed at enhancing security measures for cell phone accounts. SIM swapping involves the unauthorized transfer of a user's account to a SIM card controlled by malicious actors, achieved by convincing the victim's wireless carrier to make the change.

Mobile 84

Mobile Wireless Artificial Intelligence Accountability 84

Security Affairs

APRIL 19, 2024

The group also relies on valid accounts and leverage strong operational security, which combined, allows for long-term undiscovered persistence. A Chinese Foreign Ministry spokesperson recently stated that the Volt Typhoon activity is not associated with Beijing, but linked it to a cybercrime operation. In fact, the U.S.

Energy and Utilities 107

Energy and Utilities Telecommunications Technology VPN 107

Security Affairs

OCTOBER 6, 2022

.” The arrest is the result of Operation Guardian led by AFP which became aware of a number of text messages demanding some Optus customers transfer $2000 to a bank account or face their personal information being used for financial crimes. The database belonging to the company was leaked on a cybercrime forum.

Data breaches 81

Data breaches Scams Telecommunications Financial Services 81

Security Affairs

MARCH 10, 2023

CPNI is information related to the telecommunications services purchased by the customers, including the number of lines for each account or the wireless plan to which customers are subscribed. Social Security Number, account passwords). BleepingComputer reported that approximately 9 million wireless accounts were impacted.

Data breaches 96

Data breaches Hacking Wireless Telecommunications 96

The Last Watchdog

OCTOBER 20, 2023

Enterprises in the finance, banking, and telecommunications sectors are the most susceptible to online fraud, but it can happen to any company,” said Vaidotas Sedys , Head of Risk Management at Oxylabs. Sedys concluded, “AI and ML technologies are vital in the fight against cybercrime, helping organizations identify anomalies.

Artificial Intelligence 100

Artificial Intelligence Identity Theft Telecommunications Big data 100

Security Affairs

DECEMBER 24, 2022

The Raspberry Robin worm attacks aimed at telecommunications and government office systems across Latin America, Australia, and Europe. Researchers from Trend Micro have uncovered a Raspberry Robin worm campaign targeting telecommunications and government office systems across Latin America, Australia, and Europe.

Government 52

Government Malware Telecommunications Cybercrime 52

Security Affairs

AUGUST 18, 2021

million current postpaid customer accounts, as well as more than 40 million records of former and prospective customers. Importantly, no phone numbers, account numbers, PINs, passwords, or financial information were compromised in any of these files of customers or prospective customers.” Pierluigi Paganini.

Data breaches 100

Data breaches Mobile Telecommunications Wireless 100

Security Affairs

FEBRUARY 10, 2022

. “The Federal Bureau of Investigation is issuing this announcement to inform mobile carriers and the public of the increasing use of Subscriber Identity Module (SIM) swapping by criminals to steal money from fiat and virtual currency accounts.” Use a variation of unique passwords to access online accounts.

Mobile 98

Mobile Cryptocurrency Authentication Accountability 98

Security Affairs

APRIL 23, 2022

Telecommunication giant T-Mobile confirmed the LAPSUS$ extortion group gained access to its networks in March. The popular investigator and journalist Brian Krebs first surmised that the LAPSUS$ gang has breached T-Mobile after he reviewed a copy of the private chat messages between members of the cybercrime group. ” wrote Krebs.

Mobile 100

Mobile VPN Social Engineering Telecommunications 100

SecureWorld News

JUNE 14, 2021

We call on all states to urgently identify and disrupt ransomware criminal networks operating from within their borders, and hold those networks accountable for their actions.". Supply chain security: "Securing supply chains. Related podcast: should you pay a ransomware demand? Picture credit: Simon Dawson / No 10 Downing Street ].

Telecommunications 52

Telecommunications Cybercrime Ransomware Accountability 52

SecureWorld News

JUNE 14, 2021

We call on all states to urgently identify and disrupt ransomware criminal networks operating from within their borders, and hold those networks accountable for their actions.". Supply chain security: "Securing supply chains. Related podcast: should you pay a ransomware demand? Picture credit: Simon Dawson / No 10 Downing Street ].

Telecommunications 52

Telecommunications Cybercrime Ransomware Accountability 52

Security Affairs

JUNE 29, 2020

According to the experts, the malware was developed by the Russian cybercrime crew known as Evil Corp , which was behind the Dridex Trojan , and multiple ransomware like Locky , Bart, Jaff , and BitPaymer. Most of the victims belong to the manufacturing industry, followed by IT and media and telecommunications sectors.

Ransomware 90

Ransomware Telecommunications Manufacturing Malware 90

Security Affairs

SEPTEMBER 24, 2023

0-days exploited by commercial surveillance vendor in Egypt PREDATOR IN THE WIRES OilRig’s Outer Space and Juicy Mix: Same ol’ rig, new drill pipes Cybersecurity Apple and Google Are Introducing New Ways to Defeat Cell Site Simulators, But Is it Enough?

Cyber Attacks 92

Cyber Attacks Firewall Data breaches Telecommunications 92

Security Affairs

MARCH 16, 2020

Hackers have stolen O2 customers’ data from a database run by Aerial Direct , one of the largest UK partners of the telecommunications services provider. To reassure you, the database did not include any passwords or financial details, such as bank account number or credit card information.” Pierluigi Paganini.

Data breaches 111

Data breaches Telecommunications Passwords Advertising 111

IT Security Guru

DECEMBER 1, 2022

During the last few years, we have all become witnesses to intense cybercrime and sophisticated cyberattacks. As cybercrime continues to increase, the human element can play the most important role in cybersecurity posture and hygiene. This upward trend is further fuelled by a shift in working conditions like working remotely.

Cyber threats 110

Cyber threats Cybersecurity Education Risk 110

Security Affairs

MARCH 26, 2023

NCA infiltrates the cybercriminal underground with fake DDoS-for-hire sites Pwn2Own Vancouver 2023 awarded $1,035,000 and a Tesla for 27 0-days CISA announced the Pre-Ransomware Notifications initiative China-linked hackers target telecommunication providers in the Middle East City of Toronto is one of the victims hacked by Clop gang using GoAnywhere (..)

Data breaches 88

Data breaches DDOS Backups Ransomware 88

Security Affairs

JANUARY 13, 2023

A Pro-Russian cybercrime group named NoName057 (16) (aka 05716nnm or Nnm05716) is behind a wave of DDoS attacks against organizations in Ukraine and NATO countries, SentinelOne researchers reported. GitHub removed the accounts after SentinelOne reported the abuse to the company. The current C2 server is zig35m48zur14nel40[.]myftp.org

DDOS 78

DDOS Telecommunications DNS Education 78

SecureWorld News

AUGUST 10, 2021

Now for access as a service, you're getting a username and password to a database, or to the back end of the administrative account, to a hospital or to a bank. While the highest price was $95,000 for an Asian telecommunications service provider. The price for network access can range quite a bit.

Telecommunications 98

Telecommunications Marketing Ransomware Accountability 98

Krebs on Security

AUGUST 19, 2020

According to interviews with several sources, this hybrid phishing gang has a remarkably high success rate, and operates primarily through paid requests or “bounties,” where customers seeking access to specific companies or accounts can hire them to target employees working remotely at home.

Phishing 353

Phishing VPN Social Engineering Media 353

Security Affairs

APRIL 20, 2023

In Q1 2023, threat actors linked to Russia’s military intelligence service focused their phishing campaigns on Ukraine, with the country accounting for over 60% of observed Russian targeting. On September 2022, the Sandworm group was observed impersonating telecommunication providers to target Ukrainian entities with malware.

Phishing 95

Phishing Education Accountability Telecommunications 95

Security Affairs

JULY 31, 2022

Once obtained the credentials, an attacker can add an administrator account and use it to obtain full access to the device and perform actions such as watching live footage from the camera as shown below. An attacker can conduct this attack by capturing one unencrypted ONVIF request authenticated with the WS-UsernameToken schema.

Surveillance 143

Surveillance Authentication Telecommunications Manufacturing 143

Security Boulevard

JUNE 26, 2023

Mismanagement of user accounts – using admin privileges to upgrade user access may result in a data breach for personal profit or copying files with customer information. A lack of security features to upgrade or downgrade a user may result in mismanagement of user accounts. Health Insurance Portability and Accountability Act (HIPAA).

Data breaches 52

Data breaches Healthcare Telecommunications Financial Services 52

SecureWorld News

NOVEMBER 22, 2021

According to the Federal Bureau of Investigation (FBI), losses due to BEC scams since 2013 total around $28 billion dollars and it is the most profitable cybercrime there is. In the Account Compromise and Data Theft variants, containment should follow existing CIRP procedures. BEC-IRP Section 5: Recovery.

Scams 74

Scams Cybercrime Accountability Banking 74

SecureWorld News

JUNE 18, 2023

According to a recent report , bots accounted for a staggering 47.4% Gaming (58.7%) and telecommunications (47.7%) had the highest bad bot traffic on their websites and applications. Bad bots at work One cyber threat that targets user accounts on digital platforms is a credential stuffing attack. Stats on bots 1.

Passwords 67

Passwords Antivirus Identity Theft Internet 67

Security Affairs

FEBRUARY 4, 2019

. “This activity was typically only within reach of intelligence agencies or surveillance contractors, but now Motherboard has confirmed that this capability is much more widely available in the hands of financially-driven cybercriminal groups, who are using it to empty bank accounts. ” said the Bank spokesman.

Banking 106

Banking Telecommunications Authentication Advertising 106

Security Affairs

JUNE 2, 2019

4 SPTA provides such obligation only for providers of telecommunications services such as Swisscom or UPC.” The popular privacy-focused email service ProtonMail made the headlines because it has been accused of supporting real-time surveillance carried out by law enforcement. ” continues the post.

Government 107

Government Surveillance Telecommunications Advertising 107

Security Affairs

MARCH 23, 2022

Yesterday the cybercrime gang leaked 37GB of source code stolen from Microsoft’s Azure DevOps server. Microsoft has now confirmed that the attackers have compromised the account of one of its employees gaining limited access to source code repositories. No customer code or data was involved in the observed activities.

Accountability 101

Accountability VPN Social Engineering Hacking 101