Remove Antivirus Remove Cryptocurrency Remove Manufacturing
article thumbnail

Authorities released free decryptor for Phobos and 8base ransomware

Security Affairs

NoMoreRansom warns users to remove the malware first with a reliable antivirus before using the decryptor, or files may be re-encrypted repeatedly. The group has been active since March 2022, it focused on small and medium-sized businesses in multiple industries, including finance, manufacturing, business services, and IT.

article thumbnail

Operation SyncHole: Lazarus APT goes back to the well

SecureList

The campaign, dubbed “Operation SyncHole”, has impacted at least six organizations in South Korea’s software, IT, financial, semiconductor manufacturing, and telecommunications industries, and we are confident that many more companies have actually been compromised. The data is sent and received in JSON format.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Top Cyber Attacker Techniques, August–October 2024

Digital Shadows

The US, manufacturing sector, and professional, scientific, and technical services (PSTS) sector are primary targets amidst an overall increase in ransomware attacks. Little Change in Victimology As we saw in the previous reporting period, ransomware groups continue to heavily target the manufacturing and PSTS sectors.

article thumbnail

Chinese Android Phones Shipped with Fake WhatsApp, Telegram Apps Targeting Crypto Users

The Hacker News

Cheap Android smartphones manufactured by Chinese companies have been observed pre-installed with trojanized apps masquerading as WhatsApp and Telegram that contain cryptocurrency clipper functionality as part of a campaign since June 2024.

article thumbnail

Vietnam-linked Bismuth APT leverages coin miners to stay under the radar

Security Affairs

Microsoft warns of Vietnam-linked Bismuth group that is deploying cryptocurrency miner while continues its cyberespionage campaigns. Researchers from Microsoft reported that the Vietnam-linked Bismuth group, aka OceanLotus , Cobalt Kitty , or APT32 , is deploying cryptocurrency miners while continues its cyberespionage campaigns.

article thumbnail

Microsoft Defender uses Intel TDT technology against crypto-mining malware

Security Affairs

Microsoft announced an improvement of its Defender antivirus that will leverage Intel’s Threat Detection Technology (TDT) to detect processes associated with crypto-miners. Cryptojacking malware allows threat actors to secretly mine for cryptocurrency abusing computational resources of the infected devices.

article thumbnail

Grandoreiro banking malware targets Mexico and Spain

Security Affairs

The campaign began in June 2022 and is still ongoing, the attacks hit organizations in multiple industries, such as Automotive, Chemicals Manufacturing, and others. ” reads the post published by Zscaler. That’s not all. Grandoreiro is a continuously evolving threat that represents a serious threat to organizations worldwide.