Security Affairs

OCTOBER 26, 2019

Even though encryption should be taken seriously by businesses of all sizes, only a small fraction of the corporate sector puts their back on it. According to Juniper Research , up to 13% of the cybercrime market thrives because of the small business. Why is Encryption a Feasible Option against Digital Threats? Final Thoughts.

Encryption 45

Encryption Cyber threats Ransomware Cybercrime 45

Security Affairs

OCTOBER 31, 2020

The REvil ransomware gang (aka Sodinokibi) claims to have stolen info from the systems at the company before encrypting them. The cybercrime gang published some screenshots showing directories and files from the systems of the breached company. “Absolutely all servers and working computers of the company are hacked and encrypted.

Hacking 126

Hacking Ransomware Advertising Encryption 126

Security Affairs

JANUARY 5, 2020

DeathRansom was considered fake ransomware due to the fact that it did not implement an effective encryption process, but now things are changing. DeathRansom is a ransomware family that was initially classified as a joke because it did not implement an effective encryption scheme. Pierluigi Paganini.

Encryption 63

Encryption Ransomware Malware Scams 63

Security Affairs

JANUARY 11, 2022

AvosLocker is the latest ransomware that implemented the capability to encrypt Linux systems including VMware ESXi servers. AvosLocker expands its targets by implementing the support for encrypting Linux systems, specifically VMware ESXi servers, Bleeping computed reported. ” reported BleepingComputer. Pierluigi Paganini.

Ransomware 121

Ransomware Encryption Advertising Malware 121

Security Affairs

DECEMBER 10, 2021

Another one used to encrypt companies' networks. Unlike other malware, ALPHV (BlackCat) is the first Rust ransomware that was used in attacks in the wild by a cybercrime organization. Filemarker 19 47 B7 4D at EOF and before the encrypted key, which is JSON with some settings. Also look at that UI. Back to '80s?

Ransomware 98

Ransomware Malware Cybercrime Encryption 98

Security Affairs

NOVEMBER 1, 2020

The Maze cybercrime gang is shutting down its operations, it was considered one of the most prominent and active ransomware crew since it began operating in May 2019. The gang was the first to introduce a double-extortion model in the cybercrime landscape at the end of 2019. Pierluigi Paganini. SecurityAffairs – hacking, Maze).

Ransomware 141

Ransomware Cybercrime Advertising Software 141

Security Affairs

JANUARY 18, 2022

Europol this week announced the shutdown of VPNLab, a VPN service that is very popular in the cybercrime ecosystem. An international operation conducted by law enforcement bodies from 10 countries took down VPNLab.net, a VPN service provider that is very popular in the cybercrime ecosystem. ” continues the EUROPOL.

VPN 83

VPN Cybercrime Ransomware Advertising 83

Security Affairs

DECEMBER 2, 2019

The malicious code executes a small program, just before starting the encryption process, to disable security tools running on the infected systems that could detect its operations. The malicious code also targets older computers by uninstalling Microsoft Security Essentials. These are encrypted under the suffix.

Ransomware 115

Ransomware Encryption Advertising Cybercrime 115

Security Affairs

AUGUST 10, 2023

The infection chain starts when victims are tricked into clicking on an ads that appears like an authentic Google advertisement. Below is the attack chain described by the researchers: A user is tricked into clicking on a malicious link somewhere on their Google Chrome browser (typically an advertisement).

Malware 85

Malware Encryption Advertising Cryptocurrency 85

Security Affairs

AUGUST 21, 2020

The university notified appropriate law enforcement entities, and the university’s Information Security Office (ISO) investigated and resolved the incident in consultation with an external firm that specializes in responding to ransomware attacks.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 144

Ransomware Cyber Insurance Insurance Advertising 144

Security Affairs

OCTOBER 11, 2020

The actors behind FONIX RaaS advertised several products on various cybercrime forums. Experts believe that However the FONIX RaaS can quickly become rampant if security firms and authorities underestimate it. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” concludes the report.

Ransomware 89

Ransomware Encryption Advertising DDOS 89

Security Affairs

APRIL 14, 2023

The threat actors also attempted to sell the stolen data on the BreachForums cybercrime forum that was recently shut down by law enforcement. “In the last 24 hours we became aware of a dump of the Kodi user forum (MyBB) software being advertised for sale on internet forums. This post confirms that a breach has taken place.”

Data breaches 91

Data breaches Backups Passwords Accountability 91

Security Affairs

NOVEMBER 4, 2020

. “On July 28, 2020, Mattel discovered that it was the victim of a ransomware attack on its information technology systems that caused data on a number of systems to be encrypted. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” reads the 10-Q form. Pierluigi Paganini.

Ransomware 112

Ransomware Retail Advertising Malware 112

Security Affairs

APRIL 30, 2023

Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cybercrime 88

Cybercrime Malware Hacking Accountability 88

Security Affairs

SEPTEMBER 2, 2020

Researchers from Malwarebytes reported that Magecart groups are using the encrypted messaging service Telegram to exfiltrate stolen payment details from compromised websites. Attackers encrypt payment data to make identification more difficult before transferring it via Telegram’s API into a chat channel. ” concluded the post.

Encryption 102

Encryption Advertising Cybercrime Marketing 102

Security Affairs

JANUARY 27, 2022

The LockBit operations are advertising a new Linux version that targets VMware ESXi virtual machines since October 2021. was advertising the Linux version in the underground forum “RAMP” since October. The successful encryption by ransomware of ESXi servers could therefore have a large impact on targeted companies.

Ransomware 84

Ransomware Encryption Advertising Hacking 84

Security Affairs

JULY 20, 2022

The Luna ransomware was first spotted in June by the Kaspersky Darknet Threat Intelligence active monitoring system that spotted a new advertisement on a darknet ransomware forum. The encryption scheme is unusual because it combines x25519 and AES. We expect that new variants will support encryption of VMs by default as well.”

Ransomware 134

Ransomware Encryption Malware Advertising 134

Security Affairs

OCTOBER 11, 2022

” The toolkit provides templates for a broad range of targets, including Chinese and Russian organizations, which is quite uncommon in the cybercrime ecosystem. .” ” The toolkit provides templates for a broad range of targets, including Chinese and Russian organizations, which is quite uncommon in the cybercrime ecosystem.

Phishing 90

Phishing Cybercrime Accountability Advertising 90

Security Affairs

JUNE 28, 2020

If you use the legacy email and password login, your passwords are encrypted, but we highly encourage that you change it. We do not store any credit card or payment related information on our servers.” “The reason we are informing you is because we believe it’s the right thing to do and we want to be transparent. .”

Media 142

Media Hacking Passwords Data breaches 142

Security Affairs

APRIL 3, 2021

In February, the Spanish student Javier Yuste released a free decryption tool for the Avaddon ransomware that can be used by the victims to recover their encrypted files for free. Over the months Avaddon ransomware operators continued to promote their services in cybercrime forums to recruit more people to the network of its affiliates.

Ransomware 98

Ransomware Encryption Malware Cybercrime 98

Security Affairs

MAY 27, 2020

pic.twitter.com/Q3BMs7fSvx — Microsoft Security Intelligence (@MsftSecIntel) May 27, 2020. Human-operated ransomware is a technique usually employed in nation-state attacks that is becoming very popular in the cybercrime ecosystem. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 104

Ransomware Security Intelligence Encryption Advertising 104

Security Affairs

JUNE 13, 2021

It is interesting to tone that the phishing attacks against cryptocurrency targets broke 2 per for the first time, a circumstance that demonstrates the growing interest of cybercrime in targeting users attracted by the raise of the value of cryptocurrencies like Bitcoin. said LaCour, According to John LaCour, in Q1 2021, 94.5%

Phishing 104

Phishing Advertising Cryptocurrency Encryption 104

Security Affairs

MAY 22, 2019

Security experts at Emsisoft released a new decrypted in a few days, it could be used for free by victims of the GetCrypt ransomware to decrypt their files encrypted by the malware. The GetCrypt ransomware is served through the RIG exploit kit , it leveragesSalsa20 and RSA-4096 to encrypt the victims’ files.

Ransomware 77

Ransomware Encryption Advertising Cybercrime 77

Security Affairs

MARCH 19, 2020

” According to the experts, the first infections were observed in late 2019, victims reported their files were encrypted by a strain of malware. locked to the filename of the encrypted files. “On one of the compromised information systems, experts found encrypted files with the extension “ newversion.”

Government 107

Government Ransomware Encryption Penetration Testing 107

Security Affairs

MARCH 16, 2020

The security breach took place on February 9, 2020, and lasted since March 2, 2020, the company is aware that the unauthorized users might have extracted data from its systems due to a network misconfiguration. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. SecurityAffairs – data breach, cybercrime).

Data breaches 105

Data breaches Passwords Advertising Accountability 105

Security Affairs

JULY 27, 2019

The No More Ransom was launched by the Dutch Police along with security firms Kaspersky, and McAfee, but now has more than 150 partners. The website includes 89 decryptors that could allow decrypting for free files encrypted by 109 pieces of malware. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Advertising 74

Advertising Ransomware Cybercrime Encryption 74

Security Affairs

JANUARY 15, 2020

The cybercrime group behind Satan ransomware and other malware seems to be involved in the development of a new threat named 5ss5c. ru ) to the file name of each encrypted file, for example test.txt becomes [5ss5c@mail.ru ] test. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. dll –TargetIp.

Ransomware 68

Ransomware Cybercrime Architecture Advertising 68

Security Affairs

JUNE 29, 2020

million to cybercriminals to recover data encrypted during a ransomware attack that took place on June 1. While we stopped the attack as it was occurring, the actors launched malware that encrypted a limited number of servers within the School of Medicine, making them temporarily inaccessible,” reads a statement published by the UCSF.

Ransomware 129

Ransomware Encryption Advertising Malware 129

Security Affairs

MARCH 29, 2020

.” reads the post published by “This, in turn, would result in the broader proliferation among multiple cybercrime groups, and an eventual surge in attacks.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 109

Ransomware Hacking Advertising Malware 109

Security Affairs

AUGUST 12, 2019

Researchers discovered a dump containing 6,840,339 records associated with StockX user accounts that surfaced in the cybercrime underground. A threat actor stole details of 6 million users, the stolen data includes user names, email addresses, addresses, shoe size, purchase history, and encrypted passwords (salted MD5).

Accountability 82

Accountability Data breaches Passwords Cybercrime 82

Security Affairs

APRIL 9, 2020

million ransom to decrypt its files after being encrypted by the infamous Sodinokibi ransomware. “As part of this attack, the operators behind the Sodinokibi ransomware told BleepingComputer that they had encrypted the company’s entire network, deleted backup files, and copied more than 5GB of personal data.

Ransomware 115

Ransomware Encryption Advertising Backups 115

Security Affairs

AUGUST 3, 2020

He had no previous criminal records at the time of the arrest, but it is known to be a member of a cybercrime forum to become an affiliate for the GandCrab ransomware operation. ransom amount, individual bots and encryption masks). Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 118

Ransomware Advertising Malware Hacking 118

Security Affairs

MARCH 19, 2022

The AvosLocker ransomware-as-a-service emerged in the threat landscape in September 2021, since January the group expanded its targets by implementing the support for encrypting Linux systems, specifically VMware ESXi servers. Only use secure networks and avoid using public Wi-Fi networks. Consider installing and using a VPN.

Ransomware 99

Ransomware DDOS Passwords Backups 99

Security Affairs

OCTOBER 24, 2020

The ransomware encrypted files and renamed their filenames by adding the “ easy2lock” extension, this extension was previously associated with recent WastedLocker ransomware infections. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 87

Ransomware Telecommunications Banking Advertising 87

Security Affairs

DECEMBER 24, 2019

Feds remind that both ransomware implements a secure encryption algorithm that means it impossible to decrypt the files without paying the ransom. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Ransomware 60

Ransomware Backups Encryption Cyber Attacks 60

Security Affairs

MAY 1, 2020

The hackers claim to have compromised the Banco BCR’s network in August 2019, and had the opportunity to exfiltrate its information before encrypting the files. Please vote Security Affairs for European Cybersecurity Blogger Awards – VOTE FOR YOUR WINNERS [link]. ” reads a post published by Cyble. Pierluigi Paganini.

Ransomware 133

Ransomware Banking Cyber Insurance Advertising 133

Security Affairs

NOVEMBER 6, 2020

Brazilian media outlet CISO Advisor claims it has viewed an internal report on the security breach incident that suggests the threat actor was a cybercrime organization financially motivated. Our report tried to contact the agency’s press office, but the contact information has even disappeared from Google’s cache.”

Ransomware 106

Ransomware CISO Encryption Cyber Attacks 106