Advertising and Information Security - Cyber Security Informer

Web Hacking Service ‘Araneida’ Tied to Turkish IT Firm

Krebs on Security

DECEMBER 19, 2024

The makers of Acunetix, Texas-based application security vendor Invicti Security , confirmed Silent Push’s findings, saying someone had figured out how to crack the free trial version of the software so that it runs without a valid license key. ” Orn advertising Araneida Scanner in Feb. 2023 on the forum Cracked. .”

Hacking

Hacking Cybercrime Advertising Data breaches

FBI warns of malicious free online document converters spreading malware

Security Affairs

MARCH 24, 2025

” Fake file converters and download tools may perform advertised tasks but can provide resulting files containing hidden malware, giving criminals access to victims’ devices. They can also steal personal data, banking details, cryptocurrency info, emails, and passwords by scraping the files the users upload.

Malware

Malware Scams Identity Theft Antivirus

Banshee macOS stealer supports new evasion mechanisms

Security Affairs

JANUARY 10, 2025

In August 2024, Russian crooks advertised a macOS malware called BANSHEE Stealer that can target both x86_64 and ARM64 architectures. The malicious code was advertised on cybercrime forums for $3,000 per month. The malware can collect cookies, logins and browsing history, but from Safari only cookies can be collected.

Malware

Malware Advertising Antivirus Cybercrime

DoJ seized credit card marketplace PopeyeTools and charges its administrators

Security Affairs

NOVEMBER 24, 2024

To advertise the marketplace, PopeyeTools allegedly promised to refund or replace purchased credit cards that were no longer valid at the time of sale. seized $283,000 in cryptocurrency from an account linked to Sami as part of actions against the illicit activities of PopeyeTools.

Cybercrime

Cybercrime Cryptocurrency Banking Accountability

BadBox 2.0 botnet infects millions of IoT devices worldwide, FBI warns

Security Affairs

JUNE 9, 2025

Indicators of BADBOX 2.0 To reduce exposure to unauthorized residential proxy networks, monitor home network traffic, check IoT devices for suspicious activity, avoid unofficial app stores, and keep all systems updated, especially by patching known and internet-facing vulnerabilities promptly.

IoT

IoT Internet Internet Advertising

Phishing-as-a-Service Rockstar 2FA continues to be prevalent

Security Affairs

NOVEMBER 29, 2024

Authors advertise Rockstar 2FA as a phishing-as-a-service toolkit that bypasses 2FA, harvests cookies, and features FUD links, antibot tools, and custom themes. .” reads the report published by Trustwave. The subscription fee for the PhaaS is $200 for two weeks, $350 for a month, US$180 for a two-week API renewal service.

Phishing

Phishing Accountability Authentication Advertising

15 SpyLoan Android apps found on Google Play had over 8 million installs

Security Affairs

NOVEMBER 30, 2024

Some of the malicious apps were promoted through deceptive advertising on social media. SpyLoan apps exploit social engineering to gain sensitive user data and excessive permissions, leading to extortion, harassment, and financial loss. Some apps were suspended by Google from Google Play while others were updated by the developers.

Social Engineering

Social Engineering Media Mobile Scams

Law enforcement seized the domains of HeartSender cybercrime marketplaces

Security Affairs

FEBRUARY 2, 2025

The Saim Raza group run multiple marketplaces that advertised and facilitated the sale of hacking and fraud tools, including malware, phishing kits and email extractors. The HeartSender group advertised its tools as fully undetectable by antispam software. These tools are essential components to build and run fraud operations.

Cybercrime

Cybercrime Advertising Phishing Hacking

Dutch police dismantled dual dark web market ‘Bohemia/Cannabia’

Security Affairs

OCTOBER 14, 2024

Some sellers on Bohemia advertised they were shipping the products from the Netherlands. At the time of its shut down, Bohemia hosted 82,000 daily ads and handled around 67,000 transactions monthly, with a turnover of €12 million in September 2023 alone. million euros.

Marketing

Marketing Cybercrime DDOS Cryptocurrency

DNA testing company vanishes along with its customers’ genetic data

Malwarebytes

NOVEMBER 12, 2024

So, even if a company has good intentions, there is still a risk of your genetic data being linked to your personally identifiable information (PII). This makes the information a treasure trove for advertisers, insurance companies, and Big Pharma.

Insurance

Insurance Accountability Risk Data breaches

March Madness Meets Cyber Mayhem: How Cybercriminals Are Playing Offense this Season

SecureWorld News

MARCH 20, 2025

[RELATED: 5 Emotions Used in Social Engineering Attacks, with Examples ] The game plan: stay secure while enjoying March Madness So, how can fans and businesses enjoy the all the action without falling victim to cyber schemes? If it sounds too good to be true, it probably is except on the internet, where it always is."

Scams

Scams Social Engineering Phishing Mobile

Dutch Police shut down bulletproof hosting provider Zservers and seized 127 servers

Security Affairs

FEBRUARY 17, 2025

Alexander Igorevich Mishinand Aleksandr Sergeyevich Bolshakovare the two Russian nationals and administrators of Zservers. “ Zservers , headquartered in Barnaul, Russia, has advertised BPH services on known cybercriminal forums to evade law enforcement investigations and takedowns, as well as scrutiny from cybersecurity firms.

Cybercrime

Cybercrime Ransomware Hacking Advertising

Canadian authorities arrested alleged Snowflake hacker

Security Affairs

NOVEMBER 5, 2024

UNC5537 is systematically compromising Snowflake customer instances using stolen customer credentials, advertising victim data for sale on cybercrime forums, and attempting to extort many of the victims.” ” UNC5537 used stolen credentials obtained via infostealer malware.

Unstructured Data

Unstructured Data Cybercrime Hacking Media

Irish Data Protection Commission (DPC) fined Meta €251 million for a 2018 data breach

Security Affairs

DECEMBER 18, 2024

The hackers did not affect Facebook-owned Messenger, Messenger Kids, Instagram, WhatsApp, Oculus, Workplace, Pages, payments, third-party apps or advertising or developer accounts, the company said.

Data breaches

Data breaches Accountability Risk Advertising

Security Affairs newsletter Round 494 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

OCTOBER 20, 2024

CISA adds Fortinet products and Ivanti CSA bugs to its Known Exploited Vulnerabilities catalog Nation-state actor exploited three Ivanti CSA zero-days Dutch police dismantled dual dark web market ‘Bohemia/Cannabia’ macOS HM Surf flaw in TCC allows bypass Safari privacy settings Iran-linked actors target critical infrastructure organizations (..)

Data breaches

Data breaches Cybercrime Cyber Insurance Marketing

Increased GDPR Enforcement Highlights the Need for Data Security

Security Affairs

NOVEMBER 18, 2024

Amazon: €746 Million ($781 Million), 2021 In 2021, Amazon received a hefty fine for failing to secure proper consent for advertising cookies. This massive fine, the largest ever under GDPR, highlights the need for companies to adapt quickly to regulatory changes.

Data privacy

Data privacy Risk Surveillance Government

Crooks target DeepSeek users with fake sponsored Google ads to deliver malware

Security Affairs

MARCH 27, 2025

The researchers recommend avoiding clicking on sponsored search results and always verifying the advertiser by checking the details behind the URL to ensure it’s the legitimate brand owner. Crooks can bypass Google controls that prevent fake ads, outbidding legitimate brands and rank higher in sponsored search results.

Malware

Malware Data collection Advertising Media

86 million AT&T customer records reportedly up for sale on the dark web

Zero Day

JUNE 6, 2025

Trey Ford, Chief Information Security Officer at crowdsourced cybersecurity firm Bugcrowd offers an interesting take. "In 2025, the United States is still relying on a static number (Social Security Number) as the universal secret identity code enabling miscreants to abuse our identity," Ford told ZDNET.

Password Management

Password Management Passwords Identity Theft Software

Medusa ransomware hit over 300 critical infrastructure organizations until February 2025

Security Affairs

MARCH 13, 2025

Medusa operates a.onion data leak site, divulging victims alongside countdowns to the release of information. At this stage, Medusa concurrently advertises sale of the data to interested parties before the countdown timer ends. Ransom demands are posted on the site, with direct hyperlinks to Medusa affiliated cryptocurrency wallets.

Ransomware

Ransomware Encryption Cryptocurrency Insurance

Meta plans to train AI on EU user data from May 27 without consent

Security Affairs

MAY 16, 2025

“The European Court of Justice has already held that Meta cannot claim a ‘legitimate interest’ in targeting users with advertising. Once Metas AI models are released as open-source, they can’t be recalled or updated, further complicating compliance with GDPR obligations.

Media

Media Advertising Hacking Artificial Intelligence

Crazy Evil gang runs over 10 highly specialized social media scams

Security Affairs

FEBRUARY 3, 2025

Crazy Evil actively recruits affiliates by advertising its cybercriminal network with specific skill requirements. Crazy Evil has earned over $5 million through phishing scams since 2021. Victim losses range from $0.10 to over $100,000, relying on luck and persistence.

Scams

Scams Media Cryptocurrency Cybercrime

Aquabot variant v3 targets Mitel SIP phones

Security Affairs

JANUARY 29, 2025

The threat actors behind Aquabot have been advertising it as a DDoS-as-a-service on platforms like Telegram under various misleading names, such as Cursinq Firewall and The Eye Botnet. They often claim it is for DDoS mitigation testing, but experts pointed out that it spreads Mirai malware and is used for real attacks.

DDOS

DDOS Firmware Malware Firewall

Qilin ransomware gang claimed responsibility for the Lee Enterprises attack

Security Affairs

MARCH 2, 2025

Headquartered in Davenport, Iowa, and listed on Nasdaq under the ticker LEE, Lee Enterprises describes itself as a leading source of trusted local news and information, with robust digital platforms and innovative advertising solutions.

Ransomware

Ransomware Cybercrime Encryption Healthcare

North Korea-linked APT37 exploited IE zero-day in a recent attack

Security Affairs

OCTOBER 19, 2024

” APT37 compromised the online advertising agency behind the Toast ad program to carry out a supply chain attack. . “Successful exploitation of this vulnerability requires an attacker to first prepare the target so that it uses Edge in Internet Explorer Mode.”

Internet

Internet Internet Engineering Malware

California Privacy Agency Enforcement, CCPA Rulemaking, and CIPA Reform

SecureWorld News

MAY 12, 2025

For a period of time in 2023, consumers who clicked the online link to control their cookie settings, including opt-outs were shown a disappearing banner making it impossible for them to opt out of the sale or sharing of their information.

Retail

Retail Advertising Manufacturing Technology

France’s antitrust authority fines Apple €150M for issues related to its App Tracking Transparency

Security Affairs

APRIL 1, 2025

which requires apps to get user consent to access the Identifier for Advertisers (IDFA) for tracking and targeted ads. The Identifier for Advertisers (IDFA) is a unique, random identifier assigned by Apple to a user’s device. Apple launched ATT with iOS 14.5, Users can reset or disable IDFA through privacy settings.

Advertising

Advertising Data collection Hacking Information Security

Empowering Women in Cybersecurity: Insights from ISC2's Latest Study

SecureWorld News

APRIL 9, 2025

We have been identifying people based on personality and aptitude for decades," said Rick Doten , VP, Information Security, Centene Corporation, who just keynoted on the topic of neurodiversity at SecureWorld Charlotte on April 2nd. " My initial thought is 'how is this new?'

Cybersecurity

Cybersecurity Education InfoSec Government

Microsoft fixes two SharePoint zero-days under attack, but one is still unresolved - how to patch

Zero Day

JULY 23, 2025

Topics Galleries Videos Do Not Sell or Share My Personal Information about ZDNET Meet The Team Sitemap Reprint Policy Join | Log In Newsletters Licensing Accessibility © 2025 ZDNET, A Ziff Davis company. Privacy Policy | | Cookie Settings | Advertise | Terms of Use All rights reserved.

Software

Software Artificial Intelligence Digital transformation Education

South Korea fined Meta $15.67M for illegally collecting and sharing Facebook users

Security Affairs

NOVEMBER 6, 2024

South Korea fined Meta $15.67M for illegally collecting and sharing Facebook users’ sensitive data, including political views and sexual orientation, with advertisers. South Korea’s data privacy watchdog, Personal Information Protection Commission (PIPC), fined Meta 21.62 billion won ($15.67 billion won ($15.67

Advertising

Advertising Passwords Data privacy Encryption

Arizona woman sentenced for aiding North Korea in U.S. IT job fraud scheme

Security Affairs

JULY 26, 2025

He was the administrator of a website called upworksell.com, which was used to advertise these services along with credit card and SIM card rentals. -based freelance IT job platforms and money service transmitters using false identities, including those of U.S. Then the man sold these accounts to overseas IT workers.

Identity Theft

Identity Theft Accountability Technology Government

French Authorities confirm XSS.is admin arrested in Ukraine

Security Affairs

JULY 23, 2025

Services and products advertised by forum members include trading stolen data, malware, zero-day exploits, and hacking tools. . “The authorities suspect this person, who was arrested the day before in Kyiv, of being the forum’s central administrator, under the pseudonym “toha.”” ”” The xss.is

Cybercrime

Cybercrime Hacking Advertising Mobile

Ford seeks patent for conversation-based advertising

Malwarebytes

SEPTEMBER 13, 2024

Car manufacturer Ford Motor Company has filed a patent application for an in-vehicle advertisement presentation system based on information derived from several trip and driver characteristics. Based on this info, the controller can decrease or increase the number of advertisements. What’s next, Ford?

Advertising

Advertising Manufacturing Internet Internet

Ukraine President enforces Information Security Strategy

CyberSecurity Insiders

DECEMBER 29, 2021

Amid extreme concerns related to cyber warfare from Russia, Ukraine’s President Volodymyr Zelensky announced a new information security strategy policy was launched and came into effect early this week. The post Ukraine President enforces Information Security Strategy appeared first on Cybersecurity Insiders.

Information Security

Information Security Cryptocurrency Scams Cyber Attacks

Ragnar Locker ransomware gang advertises Campari hack on Facebook

Security Affairs

NOVEMBER 11, 2020

?Ragnar Locker Ransomware operators have started to run Facebook advertisements to force their victims into paying the ransom. Ragnar Locker Ransomware operators are improving their extortion technique and started running Facebook advertisements to make pressure on their victims and force them to pay the ransom. 9, on Facebook.

Advertising

Advertising Hacking Ransomware Accountability

Cybercrime group FIN7 advertises new EDR bypass tool on hacking forums

Security Affairs

JULY 18, 2024

The cybercrime group FIN7 is advertising a security evasion tool in multiple underground forums, cybersecurity company SentinelOne warns. SentinelOne researchers warn that the financially motivated group FIN7 is using multiple pseudonyms to advertise a security evasion tool in several criminal underground forums.

Advertising

Advertising Cybercrime Hacking Antivirus

FTC charged Avast with selling users’ browsing data to advertising companies

Security Affairs

FEBRUARY 22, 2024

The antivirus firm is accused of selling the data to advertising companies without user consent. According to the complaint, the cybersecurity firm was advertising its products as privacy-friendly. “Respondents sold the browsing information that they purported to protect, in many instances without notice to users.”

Advertising

Advertising Antivirus Data collection Software

BunnyLoader, a new Malware-as-a-Service advertised in cybercrime forums

Security Affairs

OCTOBER 3, 2023

Zscaler ThreatLabz researchers discovered a new malware-as-a-service (MaaS) that is called BunnyLoader, which has been advertised for sale in multiple cybercrime forums since September 4, 2023. Cybersecurity researchers spotted a new malware-as-a-service (MaaS) called BunnyLoader that’s appeared in the threat landscape.

Advertising

Advertising Cybercrime Malware Cryptocurrency

Meet the Administrators of the RSOCKS Proxy Botnet

Krebs on Security

JUNE 22, 2022

” The DOJ’s statement doesn’t mention that RSOCKS has been in operation since 2014, when access to the web store for the botnet was first advertised on multiple Russian-language cybercrime forums. Even today, the RUSdot Mailer is advertised for sale at the top of the RUSdot community forum. ” the post enthuses.

Advertising

Advertising Cybercrime System Administration Hacking

Administrator of RSOCKS Proxy Botnet Pleads Guilty

Krebs on Security

JANUARY 24, 2023

The plea comes just months after Emelyantsev was extradited from Bulgaria, where he told investigators, “America is looking for me because I have enormous information and they need it.” “Thanks to you, we are now developing in the field of information security and anonymity!,” Kloster’s blog enthused. “We

Cybercrime

Cybercrime Advertising IoT Malware

Atomic macOS Stealer is advertised on Telegram for $1,000 per month

Security Affairs

APRIL 29, 2023

Atomic macOS Stealer is a new information stealer targeting macOS that is advertised on Telegram for $1,000 per month. Cyble Research and Intelligence Labs (CRIL) recently discovered a Telegram channel advertising a new information-stealing malware, named Atomic macOS Stealer (AMOS).

Advertising

Advertising Malware Passwords Password Management

‘Land Lordz’ Service Powers Airbnb Scams

Krebs on Security

APRIL 14, 2019

Scammers who make a living swindling Airbnb.com customers have a powerful new tool at their disposal: A software-as-a-service offering called “ Land Lordz ,” which helps automate the creation and management of fake Airbnb Web sites and the sending of messages to advertise the fraudulent listings.

Scams

Scams Advertising Accountability Phishing

Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work

Krebs on Security

OCTOBER 8, 2020

There’s an old adage in information security: “Every company gets penetration tested, whether or not they pay someone for the pleasure.” ” Many organizations that do hire professionals to test their network security posture unfortunately tend to focus on fixing vulnerabilities hackers could use to break in.

Cybercrime

Cybercrime Malware Penetration Testing Ransomware

Google Responds to Warrants for “About” Searches

Schneier on Security

OCTOBER 13, 2020

“We vigorously protect the privacy of our users while supporting the important work of law enforcement,” Google’s director of law enforcement and information security Richard Salgado told us. And it is increasingly apparent that the advertising-supported Internet is heading for a crash.).

Surveillance

Surveillance Wireless Accountability Architecture

USPS Site Exposed Data on 60 Million Users

Krebs on Security

NOVEMBER 21, 2018

The API in question was tied to a Postal Service initiative called “ Informed Visibility ,” which according to the USPS is designed to let businesses, advertisers and other bulk mail senders “make better business decisions by providing them with access to near real-time tracking data” about mail campaigns and packages.

Accountability

Accountability Authentication Identity Theft Advertising

Web Hacking Service ‘Araneida’ Tied to Turkish IT Firm

FBI warns of malicious free online document converters spreading malware

Trending Sources

Banshee macOS stealer supports new evasion mechanisms

DoJ seized credit card marketplace PopeyeTools and charges its administrators

BadBox 2.0 botnet infects millions of IoT devices worldwide, FBI warns

Phishing-as-a-Service Rockstar 2FA continues to be prevalent

15 SpyLoan Android apps found on Google Play had over 8 million installs

Law enforcement seized the domains of HeartSender cybercrime marketplaces

Dutch police dismantled dual dark web market ‘Bohemia/Cannabia’

DNA testing company vanishes along with its customers’ genetic data

March Madness Meets Cyber Mayhem: How Cybercriminals Are Playing Offense this Season

Dutch Police shut down bulletproof hosting provider Zservers and seized 127 servers

Canadian authorities arrested alleged Snowflake hacker

Irish Data Protection Commission (DPC) fined Meta €251 million for a 2018 data breach

Security Affairs newsletter Round 494 by Pierluigi Paganini – INTERNATIONAL EDITION

Increased GDPR Enforcement Highlights the Need for Data Security

Crooks target DeepSeek users with fake sponsored Google ads to deliver malware

86 million AT&T customer records reportedly up for sale on the dark web

Medusa ransomware hit over 300 critical infrastructure organizations until February 2025

Meta plans to train AI on EU user data from May 27 without consent

Crazy Evil gang runs over 10 highly specialized social media scams

Aquabot variant v3 targets Mitel SIP phones

Qilin ransomware gang claimed responsibility for the Lee Enterprises attack

North Korea-linked APT37 exploited IE zero-day in a recent attack

California Privacy Agency Enforcement, CCPA Rulemaking, and CIPA Reform

France’s antitrust authority fines Apple €150M for issues related to its App Tracking Transparency

Empowering Women in Cybersecurity: Insights from ISC2's Latest Study

Microsoft fixes two SharePoint zero-days under attack, but one is still unresolved - how to patch

South Korea fined Meta $15.67M for illegally collecting and sharing Facebook users

Arizona woman sentenced for aiding North Korea in U.S. IT job fraud scheme

French Authorities confirm XSS.is admin arrested in Ukraine

Ford seeks patent for conversation-based advertising

Ukraine President enforces Information Security Strategy

Ragnar Locker ransomware gang advertises Campari hack on Facebook

Cybercrime group FIN7 advertises new EDR bypass tool on hacking forums

FTC charged Avast with selling users’ browsing data to advertising companies

BunnyLoader, a new Malware-as-a-Service advertised in cybercrime forums

Meet the Administrators of the RSOCKS Proxy Botnet

Administrator of RSOCKS Proxy Botnet Pleads Guilty

Atomic macOS Stealer is advertised on Telegram for $1,000 per month

‘Land Lordz’ Service Powers Airbnb Scams

Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work

Google Responds to Warrants for “About” Searches

USPS Site Exposed Data on 60 Million Users

Stay Connected