SecureList

MAY 27, 2022

The attackers are mainly interested in collecting data on user accounts, IP addresses and session information; and they steal configuration files from programs that work directly with cryptocurrency and may contain account credentials. The campaign has two goals: gathering information and stealing cryptocurrency. zip”).

Phishing 106

Phishing Spyware Firmware Malware 106

Security Affairs

MARCH 27, 2023

Such was related to a worldwide malware operation known as NullMixer, a controversial and widespread malware delivery maneuver based on SEO poisoning and social engineering technique to lure tech-savvy users, including IT personnel.

Malware 83

Malware Social Engineering Encryption Marketing 83

eSecurity Planet

OCTOBER 21, 2022

Malware has been present in the digital space since the 1980s, with early prank malware like the Morris Worm or the (c)Brain. The method of infection can vary from attack to attack and can include social engineering strategies, such as phishing and email spoofing , or a fraudulent website masquerading as legitimate, among others.

Malware 75

Malware Adware Spyware Antivirus 75

SecureList

NOVEMBER 18, 2022

The group delivers its malware using social engineering. Other packages were presented in English, so they could be targeting users from other countries. The attackers distribute this password-stealing Trojan under the guise of game cheats in an attempt to steal accounts, card numbers, crypto-wallets and more.

Malware 103

Malware Computers and Electronics Adware Cryptocurrency 103

ForAllSecure

SEPTEMBER 21, 2021

Lodrina Cherne and Martijn Grooten join the The Hacker Mind podcast to discuss their Black Hat USA 2021 presentation. Some of those who bought the spyware were allegedly able to see live locations of the devices, view the targets emails, photos, web browsing history, text messages, video calls, etc.

Technology 52

Technology Software Surveillance Media 52

SecureList

AUGUST 5, 2021

In Q2 2021, corporate accounts continued to be one of the most tempting targets for cybercriminals. A fake notification about a Microsoft Teams meeting or a request to view an important document traditionally takes the victim to a phishing login page asking for corporate account credentials. Quarterly highlights. The corporate sector.

Phishing 116

Phishing Banking Scams Computers and Electronics 116

SecureList

JULY 27, 2023

Following this, we released the first of a series of additional reports describing the final payload in the infection chain: a highly sophisticated spyware implant that we dubbed “TriangleDB” Operating in memory, this implant periodically communicates with the C2 (command and control) infrastructure to receive commands.

Malware 87

Malware Government Phishing Social Engineering 87

Spinone

MARCH 20, 2019

The best technology cannot account for the actions and specifically the mistakes that humans can make which may totally undermine the solution that technology provides. These can include viruses, trojans, worms, spyware and adware. This is especially true in the world of security.

Security Awareness 70

Security Awareness Wireless Ransomware Passwords 70

SecureList

OCTOBER 26, 2021

The first accounts of its activity date back to March last year, in which archives carrying COVID-related decoy file names that contained a malicious executable were described in a tweet by MalwareHunterTeam. Historically, its Windows implant was represented by a single-stage spyware installer. Final thoughts.

Malware 142

Malware Government Surveillance Spyware 142

Herjavec Group

AUGUST 26, 2021

They hack into their teacher’s account and leave messages making fun of him. Air Force research facility, discover a password “sniffer” has been installed onto their network, compromising more than 100 user accounts. banks using the Zeus Trojan virus to crack open bank accounts and divert money to Eastern Europe.

Cybercrime 135

Cybercrime Computers and Electronics Banking Hacking 135

SecureList

MARCH 7, 2024

To get access to the content (or contest), phishing sites prompted the victim to sign in to one of their gaming accounts. If the victim entered their credentials on the phishing form, the account was hijacked. The information could later be used to steal both funds from victims’ accounts and their identities.

Phishing 98

Phishing Scams Cryptocurrency Accountability 98

SecureList

NOVEMBER 14, 2023

Using a malicious script, the attackers redirected their targets’ incoming email to an email address controlled by the attackers, gathering data from the compromised accounts. This politician became the target of a previously undiscovered “zero-day” attack aimed at infecting his phone with spyware. Drone hacking!

Hacking 105

Hacking Energy and Utilities Media Malware 105