Advertising Malware Ransomware 
Krebs on Security
FEBRUARY 28, 2025
Last year, the French security firm Intrinsec detailed Prospero’s connections to bulletproof services advertised on Russian cybercrime forums under the names Securehost and BEARHOST. A fake browser update page pushing mobile malware. A fake browser update page pushing mobile malware. Image: Intrinsec.
Security Affairs
MARCH 24, 2025
The FBI warns of a significant increase in scams involving free online document converters to infect users with malware. The FBI warns that threat actors use malicious online document converters to steal users sensitive information and infect their systems with malware. ” reads the alert. ” continues the alert.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Krebs on Security
NOVEMBER 14, 2024
That investigation detailed how the 38-year-old Shefel adopted the nickname Rescator while working as vice president of payments at ChronoPay , a Russian financial company that paid spammers to advertise fake antivirus scams, male enhancement drugs and knockoff pharmaceuticals. “I’m also godfather of his second son.”
The Hacker News
JULY 16, 2025
Cybersecurity researchers have flagged a new variant of a known malware loader called Matanbuchus that packs in significant features to enhance its stealth and evade detection. First advertised in February 2021 on
Krebs on Security
NOVEMBER 19, 2024
“The threat actor did not deploy malware or tamper with any customer files within the environment,” the notice reads. The original October 31 post from abyss0, where they advertise the sale of data from several large banks that are customers of a large financial software company. 8 post on BreachForums. Image: Ke-la.com.
Digital Shadows
FEBRUARY 17, 2025
Key Findings First observed in March 2024, BlackLock (aka El Dorado or Eldorado) has rapidly emerged as a major player in the ransomware-as-a-service (RaaS) ecosystem. By Q4 2024, it ranked as the 7th most prolific ransomware group on data-leak sites, fueled by a staggering 1,425% increase in activity from Q3.
SecureList
NOVEMBER 29, 2024
More than 90,000 users experienced ransomware attacks. Nearly 18% of all victims published on ransomware gangs’ data leak sites (DLSs) had been hit by RansomHub. According to the UK’s National Crime Agency (NCA), this individual also was behind the infamous Reveton ransomware Trojan spread in 2012 — 2014.
Expert insights. Personalized for you.
287 
Let's personalize your content