SecureWorld News

JANUARY 20, 2022

The most recent win for the good guys fighting ransomware threat actors comes from Europol, who successfully took out a VPN service, known as VPNLab.net, that was used by criminals to distribute ransomware, malware, and other types of cyberattacks. At the same time, investigators found the service advertised on the dark web itself.".

VPN 89

VPN Ransomware Cybercrime Data breaches 89

Security Affairs

JULY 9, 2020

More than 15 billion username and passwords are available on cybercrime marketplaces, including over 5 billion unique credentials, states the experts. Experts reported that brute-force cracking tools and account checkers are available on cybercrime marketplaces and forums for an average of $4. ” continues the report.

Cybercrime 118

Cybercrime Antivirus Marketing Accountability 118

Malwarebytes

MARCH 29, 2021

In addition, we speak to Malwarebytes senior security researcher JP Taggart about the importance of trusting your VPN. But obscuring your Internet activity—including the websites you visit, the searches you make, the files you download—doesn’t mean that a VPN magically disappears those things. Source: ComputerWeekly).

VPN 75

VPN Internet Internet Manufacturing 75

Security Affairs

JULY 31, 2023

Threat actors behind the campaign aimed at building a botnet to use for a range of criminal activities from password spraying to digital advertising fraud. The AVrecon malware was written in C to ensure portability and designed to target ARM-embedded devices. The popular investigator Brian Krebs and Spur.us “ SocksEscort[.]com

Malware 91

Malware Small Business Advertising Passwords 91

Security Affairs

FEBRUARY 10, 2023

A recently discovered threat actor, tracked as TA886 by security firm Proofpoint, is targeting organizations in the United States and Germany with new malware dubbed Screenshotter. The attack chain starts with an phishing emails containing a malicious URL or malicious attachment that lead to deployment of WasabiSeed and Screenshotter malware.

Malware 82

Malware Phishing Spyware Cybercrime 82

Security Affairs

NOVEMBER 4, 2020

KPOT Stealer is a “stealer” malware that focuses on exfiltrating account information and other data from web browsers, instant messengers, email, VPN, RDP, FTP, cryptocurrency, and gaming software. The KPOT Stealer was written in C/C++, it was offered in the cybercrime underground as a Malware-as-a-Service (MaaS).

Ransomware 136

Ransomware Malware Advertising Cybercrime 136

Security Affairs

JULY 14, 2023

A new malware dubbed AVrecon targets small office/home office (SOHO) routers, it infected over 70,000 devices from 20 countries. Lumen Black Lotus Labs uncovered a long-running hacking campaign targeting SOHO routers with a strain of malware dubbed AVrecon. ” concludes the report. ” concludes the report.

Malware 81

Malware Advertising Cybercrime Passwords 81

Security Affairs

APRIL 21, 2024

Automotive Industry Chinese Organized Crime’s Latest U.S.

Data breaches 98

Data breaches Phishing Ransomware Malware 98

Krebs on Security

MAY 22, 2023

Since then, the same spammers have used this method to advertise more than 100 different crypto investment-themed domains. That user advertised a service called “ Quot Project ” which said they could be hired to write programming scripts in Python and C++. A DIRECT QUOT The domain quot[.]pw pw was their domain.

Scams 243

Scams DDOS Cryptocurrency Accountability 243

Malwarebytes

JANUARY 19, 2022

VPNLab.net was a virtual private network provider that mostly advertised its services on the criminal side of the Dark Web, and provided services for various cybercriminals, including ransomware gangs. What is double VPN? Double VPN is basically what the name suggests. Double VPN is not a common feature, because it is very slow.

VPN 70

VPN Encryption Cybercrime Technology 70

Webroot

FEBRUARY 26, 2024

Cybercrime isn’t just a futuristic Hollywood plotline, it’s a real threat that targets everyone—from wide-eyed kids to seasoned adults and wise grandparents. Keep your devices updated Newsflash: Cybercriminals love exploiting vulnerabilities in outdated software like it’s Black Friday at the cybercrime emporium.

Scams 99

Scams VPN Passwords Phishing 99

Security Affairs

APRIL 2, 2020

Microsoft is sending notifications to dozens of hospitals about vulnerable VPN devices and gateways exposed online in their network. Microsoft is warning dozens of hospitals of the risks of ransomware attacks due to insecure VPN devices and gateways exposed online. ” reads the post published by Microsoft.

Ransomware 106

Ransomware VPN Healthcare Cyber Attacks 106

Security Affairs

SEPTEMBER 1, 2020

The Iranian hacker group has been attacking corporate VPNs over the past months, they have been hacking VPN servers to plant backdoors in companies around the world targeting Pulse Secure , Fortinet , Palo Alto Networks , and Citrix VPNs. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Hacking 90

Hacking VPN Advertising Financial Services 90

Security Affairs

JULY 11, 2020

A jury found Russian hacker Yevgeniy Nikulin guilty for the hack of LinkedIn, Dropbox, and Formspring back in 2012 and for the sale of the stolen data on cybercrime black marketplaces. The data stolen by Nikulin were available on the cybercrime underground between 2015 and 2016, they were offered for sale by multiple traders.

Hacking 78

Hacking Cybercrime Data breaches Advertising 78

Security Affairs

JULY 28, 2020

The activity of the Lazarus Group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks. The samples have been deployed over the network of the target enterprises brute-forcing the SMB service on every discovered machine and using the MATA malware framework (aka Dacls ).

Ransomware 100

Ransomware Malware Advertising VPN 100

Security Affairs

SEPTEMBER 30, 2020

Nikulin first breached LinkedIn between March 3 and March 4, 2012, the hacker first infected an employee’s laptop with malware then used the employee’s VPN to access LinkedIn’s internal network. The data stolen by Nikulin were available on the cybercrime underground between 2015 and 2016, they were offered for sale by multiple traders.

Identity Theft 105

Identity Theft Cybercrime Advertising Hacking 105

Security Affairs

MAY 17, 2022

Hakbit ransomware) has been developed by Nosophoros (aka Aesculapius, and Nebuchadnezzar), a threat actor offering for sale the malware on several Dark Web communities. ” Zagala designed multiple ransomware and sold or rented them in the cybercrime ecosystem. . ” reads the press release published by DoJ.

Ransomware 88

Ransomware Cybercrime VPN Malware 88

Security Affairs

AUGUST 2, 2020

“Two of the most common vulnerabilities exploited by actors using Netwalker are Pulse Secure VPN (CVE-2019-11510) and Telerik UI (CVE-2019-18935).” “Two of the most common vulnerabilities exploited by actors using Netwalker are Pulse Secure VPN (CVE-2019-11510) and Telerik UI (CVE-2019-18935).”

Ransomware 131

Ransomware VPN Advertising Government 131

Security Affairs

MARCH 10, 2022

Threat actors are spreading password-stealing malware disguised as a security tool to target Ukraine’s IT Army. Cisco Talos researchers have uncovered a malware campaign targeting Ukraine’s IT Army , threat actors are using infostealer malware mimicking a DDoS tool called the “Liberator.” 35) on port 6666.

DDOS 84

DDOS Digital transformation Malware Advertising 84

Malwarebytes

MAY 11, 2021

Both the Australian Cyber Security Centre (ACSC) and the US Federal Bureau of Investigation (FBI) have issued warnings about an ongoing cybercrime campaign that is using Avaddon ransomware. In a separate advisory (pdf) , the ACSC says it is also aware of an ongoing ransomware campaign using the Avaddon Ransomware malware.

Ransomware 103

Ransomware VPN Encryption Cybercrime 103

Security Affairs

APRIL 25, 2022

The BlackCat/ALPHV a Ransomware was first discovered in December by malware researchers from Recorded Future and MalwareHunterTeam. The malware is the first professional ransomware strain that was written in the Rust programming language. Install and regularly update antivirus and anti-malware software on all hosts.

Ransomware 106

Ransomware Antivirus Passwords Malware 106

Security Affairs

JUNE 7, 2023

However, the threat actors involved can easily switch tactics to redirect users to other types of malware, such as banking Trojans to steal credentials and financial information or ransomware.” ” The malware has been able to remain undetected since October 2022. ” reads the report published by Bitdefender.

Adware 87

Adware Mobile Malware Advertising 87

Krebs on Security

JULY 28, 2022

” [Full disclosure: Constella is currently an advertiser on this website]. According to the cyber intelligence company Intel 471 , a user named Acidut with the email address iulyan87_4u@gmail.com had an active presence on almost a dozen shadowy money-making and cybercrime forums from 2010 to 2017, including BlackHatWorld , Carder[.]pro

Advertising 216

Advertising Software Computers and Electronics Internet 216

Security Affairs

SEPTEMBER 27, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

IoT 102

IoT Banking Advertising Ransomware 102

Security Affairs

AUGUST 21, 2020

Hackers aim at collecting login credentials for networks of the target organizations, then they attempt to monetize their efforts by selling access to corporate resources in the cybercrime underground. “The actors then convinced the targeted employee that a new VPN link would be sent and required their login, including any 2FA or OTP.”

Social Engineering 118

Social Engineering VPN Phishing Authentication 118

Security Affairs

AUGUST 4, 2020

NetWalker ransomware operators continue to be very active, according to McAfee the cybercrime gang has earned more than $25 million since March 2020. The malware has been active at least since August 2019, over the months the NetWalker ransomware was made available through a ransomware-as-a-service (RaaS) model attracting criminal affiliates.

Ransomware 96

Ransomware VPN Cybercrime Advertising 96

Krebs on Security

SEPTEMBER 20, 2021

Or maybe it isn’t entirely clear who should get the report when remote access to an organization’s internal network is being sold in the cybercrime underground. Having a security.txt file can make it easier for organizations to respond to active security threats.

Retail 307

Retail Healthcare Internet Internet 307

Security Affairs

AUGUST 4, 2020

NetWalker ransomware operators continue to be very active, according to McAfee the cybercrime gang has earned more than $25 million since March 2020. The malware has been active at least since August 2019, over the months the NetWalker ransomware was made available through a ransomware-as-a-service (RaaS) model attracting criminal affiliates.

Ransomware 77

Ransomware VPN Cybercrime Advertising 77

Security Boulevard

JUNE 11, 2021

As a freelancer in any industry, you are likely more susceptible to hackers and cybercrime than many other professions. Not only will taking the proper precautions keep you out of financial trouble, but you could also advertise in your job pitches how secure your business really is. Article by Beau Peters. Start with smart passwords.

Cybersecurity 136

Cybersecurity Scams Backups Passwords 136

Security Affairs

SEPTEMBER 10, 2020

The popular cybercrime gang is demanding a $4.5 Install and regularly update anti-virus or anti-malware software on all hosts. Consider installing and using a VPN. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. .

Ransomware 107

Ransomware VPN Data breaches Advertising 107

Security Affairs

JANUARY 19, 2020

Google removed 1.7K+ Joker Malware infected apps from its Play Store. Chinese police arrested the operator of unauthorized VPN service that made $1.6 Cybercrime Statistics in 2019. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. A new round of the weekly newsletter arrived!

Data breaches 54

Data breaches Advertising VPN Cybercrime 54

Security Affairs

NOVEMBER 17, 2019

TA505 Cybercrime targets system integrator companies. Tracking Iran-linked APT33 group via its own VPN networks. New TA2101 threat actor poses as government agencies to distribute malware. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Mexican state-owned oil company Pemex hit by ransomware.

DDOS 52

DDOS Spyware Advertising Ransomware 52

SecureList

JULY 5, 2021

REvil ransomware has been advertised on underground forums for three years and it is one of the most prolific RaaS operations. Decryption of files affected by this malware is impossible without the cybercriminals’ keys due to the secure cryptographic scheme and implementation used in the malware.

Ransomware 136

Ransomware Encryption VPN Software 136

Security Affairs

MARCH 19, 2022

“As a result, AvosLocker indicators of compromise (IOCs) vary between indicators specific to AvosLocker malware and indicators specific to the individual affiliate responsible for the intrusion.” Consider installing and using a VPN. ” reads the report published by the company. ransomware and phishing scams).

Ransomware 98

Ransomware DDOS Passwords Backups 98

Security Affairs

OCTOBER 27, 2019

TA505 cybercrime group use SDBbot RAT in recent campaigns. malware to control Microsoft SQL Servers. NordVPN, TorGuard, and VikingVPN VPN providers disclose security breaches. Trend Micro Anti-Threat Toolkit could be used to run malware on Win PCs. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Spyware 41

Spyware Advertising Hacking DDOS 41

Vipre

JANUARY 25, 2021

According to the independent institute AV-TEST , the number of total new malware in 2020 increased by 13% compared to the last year, and malware for macOS by 1200% for the same period. An easy way to enhance your online security and privacy is by using a VPN while browsing the internet. Identity Theft Protection Tools.

Identity Theft 40

Identity Theft Backups VPN Antivirus 40

Security Affairs

OCTOBER 16, 2018

One way is that the cybercriminal may direct the user to a malicious website where he or she will be forced to download a malware on their system. How to stay protected with VPN on Public Wi-Fi Networks? The best and the most advanced way to stay protected on these unsafe public Wi-Fi hotspots is to use a decent VPN service.

VPN 94

VPN Encryption Banking Advertising 94