Security Affairs

APRIL 21, 2024

PoC publicly available Linux variant of Cerber ransomware targets Atlassian servers Ivanti fixed two critical flaws in its Avalanche MDM Researchers released exploit code for actively exploited Palo Alto PAN-OS bug Cisco warns of large-scale brute-force attacks against VPN and SSH services PuTTY SSH Client flaw allows of private keys recovery A renewed (..)

Data breaches 98

Data breaches Phishing Ransomware Malware 98

Security Affairs

APRIL 2, 2020

Microsoft is sending notifications to dozens of hospitals about vulnerable VPN devices and gateways exposed online in their network. Microsoft is warning dozens of hospitals of the risks of ransomware attacks due to insecure VPN devices and gateways exposed online. ” reads the post published by Microsoft.

Ransomware 106

Ransomware VPN Healthcare Cyber Attacks 106

Security Affairs

NOVEMBER 4, 2020

KPOT Stealer is a “stealer” malware that focuses on exfiltrating account information and other data from web browsers, instant messengers, email, VPN, RDP, FTP, cryptocurrency, and gaming software. The KPOT Stealer was written in C/C++, it was offered in the cybercrime underground as a Malware-as-a-Service (MaaS).

Ransomware 136

Ransomware Malware Advertising Cybercrime 136

Security Affairs

SEPTEMBER 1, 2020

The Iranian hacker group has been attacking corporate VPNs over the past months, they have been hacking VPN servers to plant backdoors in companies around the world targeting Pulse Secure , Fortinet , Palo Alto Networks , and Citrix VPNs. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Hacking 91

Hacking VPN Advertising Financial Services 91

Security Affairs

JULY 11, 2020

A jury found Russian hacker Yevgeniy Nikulin guilty for the hack of LinkedIn, Dropbox, and Formspring back in 2012 and for the sale of the stolen data on cybercrime black marketplaces. The data stolen by Nikulin were available on the cybercrime underground between 2015 and 2016, they were offered for sale by multiple traders.

Hacking 79

Hacking Cybercrime Data breaches Advertising 79

Security Affairs

JULY 14, 2023

Threat actors behind the campaign aimed at building a botnet to use for a range of criminal activities from password spraying to digital advertising fraud. .”” reads the analysis published by Lumen. The AVrecon malware was written in C to ensure portability and designed to target ARM-embedded devices. ” concludes the report.

Malware 81

Malware Advertising Cybercrime Passwords 81

Security Affairs

OCTOBER 3, 2019

Cybercrime is a prolific business, criminal organizations continues to make profits with illegal activities in the cyberspace, but police are ready to contrast them. Crooks were preserving their anonymity using VPN and TOR services. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. “Cyber ??

Cybercrime 89

Cybercrime VPN Advertising Accountability 89

Security Affairs

AUGUST 21, 2020

Hackers aim at collecting login credentials for networks of the target organizations, then they attempt to monetize their efforts by selling access to corporate resources in the cybercrime underground. “The actors then convinced the targeted employee that a new VPN link would be sent and required their login, including any 2FA or OTP.”

Social Engineering 119

Social Engineering VPN Phishing Authentication 119

Security Affairs

MARCH 21, 2020

.” Experts from cyber-security firm Bad Packets speculate attackers might have exploited the CVE-2019-11510 vulnerability to compromise unpatched Pulse Secure VPN servers at the Fintech firm. . Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. SecurityAffairs – Finastra, cybercrime).

Cyber Attacks 114

Cyber Attacks Data breaches Advertising Ransomware 114

Security Affairs

MAY 17, 2022

He has also advertised Jigsaw ransomware and collaborated with multiple actors selling compromised RDP and VPN access to various networks including drumrlu as confirmed by Resecurity and KELA. ” Zagala designed multiple ransomware and sold or rented them in the cybercrime ecosystem. .

Ransomware 87

Ransomware Cybercrime VPN Malware 87

Security Affairs

AUGUST 4, 2020

NetWalker ransomware operators continue to be very active, according to McAfee the cybercrime gang has earned more than $25 million since March 2020. The affiliates used to deliver the threat via brute-forcing attacks on RDP servers or exploiting known vulnerabilities in VPN servers and firewalls. continues the alert.

Ransomware 78

Ransomware VPN Cybercrime Advertising 78

Security Affairs

SEPTEMBER 10, 2020

The popular cybercrime gang is demanding a $4.5 “Equinix is currently investigating a security incident we detected that involves ransomware on some of our internal systems.” Only use secure networks and avoid using public Wi-Fi networks. Consider installing and using a VPN. ” reads the statement.

Ransomware 107

Ransomware VPN Data breaches Advertising 107

Security Affairs

APRIL 25, 2022

ALPHV has been advertising the BlackCat Ransomware-as-a-Service (RaaS) on the cybercrime forums XSS and Exploit since early December. Only use secure networks and avoid using public Wi-Fi networks. Consider installing and using a virtual private network (VPN). Disable hyperlinks in received emails.

Ransomware 106

Ransomware Antivirus Passwords Malware 106

Security Affairs

FEBRUARY 10, 2023

.” The threat actor used multiple tools in the delivery stage, including Traffic Distribution System (TDS), malicious, some of which can be purchased from other threat actors in the cybercrime ecosystem. Rhadamanthys is an info stealing malware that was initially advertised for sale on underground forums since the middle of 2022.

Malware 82

Malware Phishing Spyware Cybercrime 82

Security Affairs

JUNE 7, 2023

The adware was distributed through rogue apps mimicking game cracks, games with unlocked features, free VPN, fake videos, Netflix fake tutorials, YouTube/TikTok without ads, cracked utility programs such as weather and pdf viewers, and fake security programs. The advertisement URL can be also loaded as a full-screen WebView ad.

Adware 86

Adware Mobile Malware Advertising 86

Security Affairs

JANUARY 19, 2020

Chinese police arrested the operator of unauthorized VPN service that made $1.6 Cybercrime Statistics in 2019. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. million from his activity. Pierluigi Paganini.

Data breaches 54

Data breaches Advertising VPN Cybercrime 54

Security Affairs

SEPTEMBER 27, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

IoT 102

IoT Banking Advertising Ransomware 102

Security Affairs

MARCH 10, 2022

Once downloaded, these files infect unwitting users rather than delivering the tools originally advertised.” The downloaded file is actually an information stealer that infects the unwitting victim with malware designed to dump credentials and cryptocurrency-related information.” ” continues the report.

DDOS 84

DDOS Digital transformation Malware Advertising 84

Security Affairs

SEPTEMBER 7, 2020

The REvil ransomware gang is one of the most active groups, in the past, the operators have targeted Pulse Secure and Citrix VPN and enterprise gateway systems as entry points. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. and Elexon electrical middleman. Pierluigi Paganini.

Banking 111

Banking Ransomware Advertising VPN 111

Security Affairs

JULY 31, 2023

Threat actors behind the campaign aimed at building a botnet to use for a range of criminal activities from password spraying to digital advertising fraud. The first activity is part of an advertising fraud effort, and the second activity is likely linked to password spraying attacks and/or data exfiltration.

Malware 90

Malware Small Business Advertising Passwords 90

Security Affairs

MARCH 19, 2022

AvosLocker operators already advertised in the past a Linux variant, dubbed AvosLinux, of their malware claiming it was able to support Linux and ESXi servers. Only use secure networks and avoid using public Wi-Fi networks. Consider installing and using a VPN. Focus on cyber security awareness and training.

Ransomware 98

Ransomware DDOS Passwords Backups 98

Security Affairs

JANUARY 27, 2020

This successful operation is just one example of how law enforcement are working with industry partners, adapting and applying new technologies to aid investigations and ultimately reduce the global impact of cybercrime,» concluded Mr Jones.” INTERPOL’s Director of Cybercrime. ” Craig Jones. ” Idam Wasiadi.

Cybercrime 73

Cybercrime Marketing eCommerce Mobile 73

Security Affairs

NOVEMBER 17, 2019

TA505 Cybercrime targets system integrator companies. Tracking Iran-linked APT33 group via its own VPN networks. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Mexican state-owned oil company Pemex hit by ransomware.

DDOS 52

DDOS Spyware Advertising Ransomware 52

Security Affairs

OCTOBER 27, 2019

Hi folk, let me inform you that I suspended the newsletter service, anyway I’ll continue to provide you a list of published posts every week through the blog. TA505 cybercrime group use SDBbot RAT in recent campaigns. NordVPN, TorGuard, and VikingVPN VPN providers disclose security breaches. Pierluigi Paganini.

Spyware 41

Spyware Advertising Hacking DDOS 41

Security Affairs

OCTOBER 12, 2020

US government networks are under attack, threat actors chained VPN and Windows Zerologon flaws to gain unauthorized access to elections support systems. Recently Microsoft observed Iran-linked APT Mercury and the Russian cybercrime gang TA505 exploiting the Zerologon flaw in attacks in the wild. ” concludes the alert.

VPN 139

VPN Government Authentication Advertising 139

Security Affairs

OCTOBER 26, 2019

According to Juniper Research , up to 13% of the cybercrime market thrives because of the small business. Similarly, they should use business VPN services , such as PureVPN , to create a secure channel for their remote employees. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Encryption 45

Encryption Cyber threats Ransomware Cybercrime 45

SC Magazine

JUNE 24, 2021

It claimed to have accessed the police system using a zero-day vulnerability in a VPN. Within weeks of the ban on forum postings about ransomware, the operator behind Avaddon ransomware, one of the most active ransomware gangs at present, was seen advertising on one such forum for pen testers. Many of these changes won’t stick either.

Ransomware 73

Ransomware Encryption VPN Software 73

Malwarebytes

MAY 28, 2021

Wizard Spider is a cybercrime group affiliated with a what is sometimes called the Ransomware Cartel , a collective of underground groups identified by threat intelligence company Analyst1. Unlike some other underground cybercriminal gangs, Wizard Spider doesn’t openly advertise on underground forums, perhaps for security reasons.

Healthcare 105

Healthcare Ransomware Encryption Passwords 105

Security Affairs

FEBRUARY 16, 2020

Iranian hackers have been hacking VPN servers to plant backdoors in companies around the world. Iran-linked attackers targeted Pulse Secure, Fortinet, Palo Alto Networks, and Citrix VPNs to hack into large companies as part of the Fox Kitten Campaign. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

VPN 116

VPN Telecommunications Advertising Hacking 116

Security Affairs

NOVEMBER 19, 2019

The third malware type is Pony Formgrabber designed to steal victim passwords from over 100 applications, including browsers, email clients, messengers, FTP and VPN clients. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Ransomware 72

Ransomware Antivirus Malware Banking 72

Security Affairs

JUNE 30, 2021

Law enforcement has seized the servers of DoubleVPN (doublevpn.com), a Russian-based VPN service that provides double-encryption service widely used by threat actors to anonymize their operation while performing malicious activities. The VPN service was offered for a starting price of €22 ($25). . Pierluigi Paganini.

VPN 131

VPN Cybercrime Encryption Advertising 131

Krebs on Security

OCTOBER 8, 2020

There’s an old adage in information security: “Every company gets penetration tested, whether or not they pay someone for the pleasure.” ” Many organizations that do hire professionals to test their network security posture unfortunately tend to focus on fixing vulnerabilities hackers could use to break in.

Cybercrime 308

Cybercrime VPN Malware Penetration Testing 308

SecureList

MAY 12, 2021

Hackers who are on the lookout for publicly disclosed vulnerabilities (1-days) in internet facing software, such as VPN appliances or email gateways. There is, of course, a documented porosity between the ransomware ecosystem and other cybercrime domains such as carding or point-of-sale (PoS) hacking. Access sellers.

Ransomware 123

Ransomware Encryption Malware Cybercrime 123

Security Affairs

MARCH 27, 2023

NullMixer is maintaining the same lure topic since September 2022, advertising fake software pirate cracks targeting tech-savvy users and potentially even IT personnel and freelancers. The module also exfiltrates 2FA secrets from Twilio’s Authy local storage.

Malware 82

Malware Social Engineering Encryption Marketing 82

Security Affairs

FEBRUARY 9, 2022

Malvertising, also known as malicious advertising, is a type of online advertising used by threat actors to distribute malicious files. It’s also a rapidly growing threat that often includes fraudulent advertising schemes designed to make as much profit as possible from website visitors.

Malware 93

Malware Advertising Education Antivirus 93

Security Affairs

JUNE 4, 2021

They assure their clients that eight out of every ten cards will work fine and have the advertised balance. If you must log in to an account of any kind while on public WiFi, use a VPN for encrypting all your internet traffic. They will read your card instead of the ATM and send the information to the hacker. Hackers love it.

Accountability 114

Accountability Marketing Hacking Cryptocurrency 114