Security Affairs

OCTOBER 11, 2020

ransomware displays ransom note in innovative way Carnival confirms data breach as a result of the August ransomware attack Google enhances malware protection for accounts enrolled in Advanced Protection Program (APP) Russian Cybercrime group is exploiting Zerologon flaw, Microsoft warns. SecurityAffairs – hacking, newsletter).

Advertising 86

Advertising Antivirus Data privacy Ransomware 86

Security Affairs

JUNE 12, 2019

The malicious code uses a hacking algorithm for most of its functions, the algorithm is similar to the one implemented for previous ShellTea version. “The hospitality industry, and particularly their POS networks, continues to be one of the industries most targeted by cybercrime groups. SecurityAffairs – FIN8, hacking).

Hacking 77

Hacking Malware Advertising Retail 77

Security Affairs

MARCH 18, 2020

In January, Chinese hackers have exploited another zero-day vulnerability in the Trend Micro OfficeScan antivirus in an attack that hit Mitsubishi Electric. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Authentication 104

Authentication Advertising Antivirus Cybercrime 104

Security Affairs

AUGUST 3, 2020

He had no previous criminal records at the time of the arrest, but it is known to be a member of a cybercrime forum to become an affiliate for the GandCrab ransomware operation. Authorities also added that the man was involved in the distribution of cryptominers and wrote malware for other users on the same hacking forums.

Ransomware 117

Ransomware Advertising Malware Hacking 117

Security Affairs

OCTOBER 13, 2023

AvosLocker operators already advertised in the past a Linux variant, dubbed AvosLinux, of their malware claiming it was able to support Linux and ESXi servers. bat) scripts [T1059.003] for lateral movement, privilege escalation, and disabling antivirus software. Notepad++, RDP Scanner, and 7zip.

Ransomware 117

Ransomware System Administration Antivirus Malware 117

Security Affairs

MAY 19, 2023

The Lemon Group cybercrime ring has reportedly pre-installed malware known as Guerilla on almost 9 million Android devices. A cybercrime group tracked has Lemon Group has reportedly pre-installed malware known as Guerilla on almost 9 million Android devices. The threat actors infected at least 8.9 231 banking malware.

Mobile 85

Mobile Advertising Malware Cybercrime 85

Security Affairs

APRIL 25, 2022

ALPHV has been advertising the BlackCat Ransomware-as-a-Service (RaaS) on the cybercrime forums XSS and Exploit since early December. Review antivirus logs for indications they were unexpectedly turned off. Install and regularly update antivirus and anti-malware software on all hosts. Implement network segmentation.

Ransomware 105

Ransomware Antivirus Passwords Malware 105

Krebs on Security

JULY 28, 2022

” Microleaves has long been classified by antivirus companies as adware or as a “potentially unwanted program” (PUP), the euphemism that antivirus companies use to describe executable files that get installed with ambiguous consent at best, and are often part of a bundle of software tied to some “free” download.

Advertising 216

Advertising Software Computers and Electronics Internet 216

Security Affairs

DECEMBER 29, 2019

Experts uncovered a new tool dubbed BIOLOAD used by the FIN7 cybercrime group used as a dropper for a new variant of the Carbanak backdoor. Experts pointed out that the BIOLOAD’s WinBio.dll is still detected by a limited number of antivirus on VirusTotal scanning platform despite it was compiled nine months ago.

Cybercrime 59

Cybercrime Antivirus Identity Theft Advertising 59

Security Affairs

MAY 2, 2021

A new cryptocurrency stealer dubbed WeSteal is available on the cybercrime underground, unlike other commodity cryptocurrency stealers, its author doesn’t masquerade its purpose and promises “the leading way to make money in 2021.”. SecurityAffairs – hacking, WeSteal). There is the name of the malware itself. Pierluigi Paganini.

Cryptocurrency 107

Cryptocurrency Malware Advertising System Administration 107

Security Affairs

AUGUST 15, 2023

The Uptycs Threat Research team discovered the QwixxRAT (aka Telegram RAT) in early August 2023 while it was advertised through Telegram and Discord platforms. “To avoid detection by antivirus software, the RAT employs command and control functionality through a Telegram bot. .

Malware 91

Malware Antivirus Cryptocurrency Advertising 91

Security Affairs

MARCH 10, 2020

Microsoft is warning of human-operated ransomware, this kind of attack against businesses is becoming popular in the cybercrime ecosystem. Human-operated ransomware is a technique usually employed in nation-state attacks that is becoming very popular in the cybercrime ecosystem. SecurityAffairs – hacking, Human-operated ransomare).

Ransomware 114

Ransomware Cybercrime Social Engineering Banking 114

Security Affairs

APRIL 27, 2020

The cybercrime gang also apologized for the damages they have caused their victims. We are also publishing our decryption soft; we also hope that, having the keys, antivirus companies will issue their own more user-friendly decryption tools.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 118

Ransomware Advertising Antivirus Education 118

Security Affairs

SEPTEMBER 22, 2018

The Latvian expert Ruslans Bondars (37), who developed and run the counter antivirus service Scan4You has been sentenced to 14 years in prison. Scan4you is a VirusTotal like online multi-engine antivirus scanning service that could be used by vxers to test evasion abilities of their malware against the major antiviruses.

Malware 91

Malware Antivirus Retail Advertising 91

Webroot

FEBRUARY 26, 2024

Cybercrime isn’t just a futuristic Hollywood plotline, it’s a real threat that targets everyone—from wide-eyed kids to seasoned adults and wise grandparents. Keep your devices updated Newsflash: Cybercriminals love exploiting vulnerabilities in outdated software like it’s Black Friday at the cybercrime emporium.

Scams 99

Scams VPN Passwords Phishing 99

Security Affairs

JANUARY 26, 2020

Jeff Bezos phone was hacked by Saudi crown prince. Chinese hackers exploited a Trend Micro antivirus zero-day used in Mitsubishi Electric hack. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. .

Data breaches 82

Data breaches Advertising Antivirus DDOS 82

Security Affairs

OCTOBER 13, 2022

Mod apps are advertised as unofficial versions of legitimate apps that have features that the official one does not supports. The YoWhatsApp Android app was advertised in the official Snaptube app. SecurityAffairs – hacking, YoWhatsApp). According to Kaspersky, more than 3,600 users have been targeted in the last two months.

Mobile 106

Mobile Accountability Advertising Antivirus 106

Security Affairs

SEPTEMBER 22, 2020

The malicious code was initially advertised on many hacking forums for up to $300, later other threat actors started offering it for less than $80 in the cybercrime underground. Below the list of mitigations: Maintain up-to-date antivirus signatures and engines. SecurityAffairs – hacking, Norway).

Malware 65

Malware Passwords Advertising Antivirus 65

Security Affairs

NOVEMBER 5, 2020

The technique was already employed by other Chinese APT groups since 2013, later it was also adopted by other cybercrime gangs in attacks in the wild. ’ In a first attack scenario, hackers leverage a Microsoft antivirus component to load mpsvc.dll that acts as a loader for Groza_1.dat. SecurityAffairs – hacking, KilllSomeOne).

Encryption 109

Encryption Malware Advertising Antivirus 109

Security Affairs

SEPTEMBER 20, 2019

Experts revealed that the botnet was used by the TA505 cybercrime gang to distribute the FlawedAmmy RAT and some email stealers. The Amedey malware sends back to the server several data, including a unique identifier of the infected system, the malware version, operating system, antivirus software, system name, and username.

Phishing 82

Phishing Social Engineering Malware Advertising 82

Security Affairs

APRIL 14, 2019

The crooks used malicious emails purporting to be legitimate from such entities as Western Union, Norton AntiVirus and the IRS to spread the malware. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Cryptocurrency 90

Cryptocurrency Identity Theft Advertising Accountability 90

Security Affairs

APRIL 21, 2019

Attackers hacked support agent to access Microsoft Outlook email accounts. RCE flaw in Electronic Arts Origin client exposes gamers to hack. Broadcom WiFi Driver bugs expose devices to hack. Operator of Codeshop Cybercrime Marketplace Sentenced to 90 months in prison. The best news of the week with Security Affairs.

Computers and Electronics 63

Computers and Electronics Spyware Data breaches Advertising 63

Security Affairs

APRIL 17, 2019

The malicious code is under continuous enhancement, it is offered for sale on various hacking forums as a keylogger and stealer, it allows to monitor systems and exfiltrate information. The latest variant appeared in the cybercrime underground in December 2018, it was named HawkEye Reborn v9. ” continues the analysis.

Antivirus 82

Antivirus Malware Advertising Passwords 82

Security Affairs

SEPTEMBER 7, 2020

Generally speaking, removal/cleaning by antivirus is not a sufficient guarantee. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. SecurityAffairs – hacking, botnet). Send the samples (.doc Pierluigi Paganini.

Malware 112

Malware Advertising Antivirus Banking 112

Security Affairs

NOVEMBER 4, 2018

2 version is being advertised on an underground forum and is available through a ransomware-as-a-service (RaaS) model. Insikt Group experts noticed that RaaS operators don’t allow affiliates to submit Kraken sample files to antivirus services and don’t provides refunds for purchased payloads. The new Kraken v.2

Ransomware 94

Ransomware Advertising Cybercrime Malware 94

Security Affairs

SEPTEMBER 16, 2019

The researchers provided evidence that the threat actors sold the purchased certificates to a cybercrime gang that used them to spread malware. The verification is done using a public antivirus scanning service, then the threat actors use the file scan record as “a clean bill of health” for potential buyers. Pierluigi Paganini.

Adware 80

Adware Advertising Marketing Antivirus 80

Security Affairs

OCTOBER 12, 2019

FireEye Mandiant discovered that the FIN7 hacking group added new tools to its cyber arsenal, including a module to target remote administration software of ATM vendor. ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Identity Theft 76

Identity Theft Hacking Advertising DNS 76

Security Affairs

JUNE 23, 2020

Fxmsp gained worldwide fame in May 2019, after it was reported that the networks belonging to leading antivirus software companies had been compromised. Fxmsp took his first steps in the cybercrime scene in September 2016 when he registered on an underground forum, fuckav[.]ru. Geography and victims. First steps.

Antivirus 83

Antivirus Advertising Hacking Banking 83

Security Affairs

AUGUST 24, 2020

For instance, to disable built-in antivirus software, the attackers used Defender Control and Your Uninstaller. Group-IB’s technological leadership is built on the company’s 17 years of hands-on experience in cybercrime investigations around the world and 60 000 hours of cyber security incident response accumulated in one of ???

Threat Detection 87

Threat Detection Ransomware Advertising Cybercrime 87

Security Affairs

DECEMBER 7, 2019

US DoJ charged two Russian citizens for deploying the Dridex malware and for their involvement in international bank fraud and computer hacking schemes. 32) and Igor Turashev (38) for distributing the infamous Dridex banking Trojan , and for their involvement in international bank fraud and computer hacking schemes. Attorney Brady.

Banking 64

Banking Malware Cybercrime Accountability 64

Security Affairs

MARCH 19, 2020

Operators behind the Pysa ransomware, also employed a version of the PowerShell Empire penetration-testing tool, they were able to stop antivirus products. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Government 106

Government Ransomware Encryption Penetration Testing 106

Security Affairs

MARCH 19, 2022

AvosLocker operators already advertised in the past a Linux variant, dubbed AvosLinux, of their malware claiming it was able to support Linux and ESXi servers. Install and regularly update antivirus software on all hosts, and enable real time detection. SecurityAffairs – hacking, AvosLocker ransomware). Pierluigi Paganini.

Ransomware 97

Ransomware DDOS Passwords Backups 97

Security Affairs

FEBRUARY 17, 2019

620 million accounts stolen from 16 hacked websites available for sale on the dark web. Astaroth Trojan relies on legitimate os and antivirus processes to steal data. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Advertising 70

Advertising Antivirus Malware Backups 70

Security Affairs

MAY 10, 2019

A Russian hacking group Fxmsp is offering for sale the access to the networks of at least three antivirus companies in the US and source code of their software. Fxmsp is a high-profile Russian- and English-speaking hacking group focused on breaching high-profile private corporate and government information.

Antivirus 101

Antivirus Hacking Artificial Intelligence Cybercrime 101

Security Affairs

JULY 27, 2018

“The court today sentenced two men to hack computers and then extort a large group of people. In order to protect your computer from malware: Ensure your system software and antivirus definitions are up-to-date. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” reads the Rechtspraak.

Ransomware 44

Ransomware Advertising Antivirus Cybercrime 44

Security Affairs

AUGUST 28, 2019

Earlier this year, malware researchers from Avast antivirus firm discovered a design flaw in the C&C protocol of the botnet that could have been exploited to remove the malware from infected computers. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. SecurityAffairs – Retadup botn et , hacking).

Malware 85

Malware Advertising Antivirus Cryptocurrency 85

Security Affairs

NOVEMBER 19, 2019

To bypass antivirus systems, hackers send out malicious emails in non-working hours with delayed activation. Another technique used by cybercriminals to bypass antivirus systems is a targeted attack, in which malicious email are delivered outside regular working hours. More than 80% of all malicious files were disguised as .zip

Ransomware 72

Ransomware Antivirus Malware Banking 72