Krebs on Security

FEBRUARY 28, 2024

Malicious hackers are targeting people in the cryptocurrency space in attacks that start with a link added to the target’s calendar at Calendly , a popular application for scheduling appointments and meetings. The attackers impersonate established cryptocurrency investors and ask to schedule a video conference call.

Malware 332

Malware Cryptocurrency Software Phishing 332

Security Affairs

MAY 2, 2021

The bold author of a new cryptocurrency stealer, dubbed WeSteal, is promising its customers a leading way to make money in 2021. According to Palo Alto Networks, the author of WeSteal, that goes online as “ComplexCodes,” started advertising the cryptocurrency stealer on underground forums in mid-February 2021.

Cryptocurrency 118

Cryptocurrency Malware Advertising System Administration 118

SecureList

APRIL 8, 2025

The infection chain: from searching for office software to downloading an installer The downloaded archive contains another password-protected archive, installer.zip , and a Readme.txt file with the password. The installer files lack an archive password. This file contains the password for the RAR archive.

Passwords 86

Passwords Cryptocurrency Software Antivirus 86

eSecurity Planet

OCTOBER 22, 2024

Matanbuchus and XMRig: Used for cryptocurrency mining, these malware strains can slow down systems while surreptitiously utilizing computing resources. These groups are considered sub-teams of larger cryptocurrency scam networks, highlighting the organized and systematic nature of these phishing attacks.

Scams 123

Scams Malware Phishing Social Engineering 123

Security Affairs

FEBRUARY 16, 2021

Latin American Javali trojan weaponizing Avira antivirus legitimate injector to implant malware. The title of the accessed web-pages are collected and compared with the target organizations and services hardcoded and defined by crooks, generally the name of the banking portals, cryptocurrency portals, and financial firms.

Antivirus 135

Antivirus Malware Banking Internet 135

The Last Watchdog

SEPTEMBER 6, 2023

Over time, Bitcoin has become the most widely used cryptocurrency in the world. Use strong passwords, 2FA. The security of your Bitcoin wallet is mostly dependent on the strength of your passwords. Use uppercase, lowercase, digits, special characters, and a combination of them to create strong, one-of-a-kind passwords.

Cryptocurrency 100

Cryptocurrency Backups Passwords Software 100

Security Affairs

JULY 3, 2023

The malware also targets crypto wallet extensions, password managers, and 2FA extensions. “What’s more concerning is that a large portion of antivirus software has proven ineffective against the Meduza stealer binary, either failing to detect it statically or dynamically” reads the analysis published by Uptycs.

Password Management 98

Password Management Passwords Malware Marketing 98

Krebs on Security

JULY 8, 2019

But GandCrab far eclipsed the success of competing ransomware affiliate programs largely because its authors worked assiduously to update the malware so that it could evade antivirus and other security defenses. Those records show this individual routinely re-used the same password across multiple accounts: 16061991. Vpn-service[.]us

Ransomware 278

Ransomware Accountability Cybercrime Passwords 278

eSecurity Planet

FEBRUARY 17, 2025

Simply put, they are antivirus solutions. In fact, it is one of the most popular antivirus solutions. Per 6sense, McAfee Cloud Security makes up 12.47% of the worldwide antivirus market share. 5 McAfee Total Protection is a set of five consumer security plans, including antivirus, web protection, and safety scores.

Antivirus 67

Antivirus Identity Theft VPN Spyware 67

Security Affairs

JUNE 22, 2021

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. “Recently, a new infection vector that cracks Windows machines through SMB password brute force is on the rise” reads the analysis published by AVAST. ” continues the report.

DNS 145

DNS Internet Malware Internet 145

Security Boulevard

MARCH 24, 2025

Vulnerabilities Apples Passwords app was vulnerable to phishing attacks for nearly three months after launch 9to5Mac Mysk security researchers first discovered this vulnerability after noticing the Passwords app had connected to 130 different domains over regular (unencrypted) HTTP.

Surveillance 75

Surveillance Telecommunications Malware Data breaches 75

SecureList

APRIL 21, 2025

Fake Telegram channels for pirated content and cryptocurrencies. The attackers create Telegram channels with names containing keywords related to cryptocurrencies or pirated content, such as software, movies, etc. When a user searches for such content, the fraudulent channels appear at the top of the search.

Malware 88

Malware Cryptocurrency Software Phishing 88

Security Affairs

SEPTEMBER 14, 2019

Researchers at Z s caler have spotted a new malware dubbed InnfiRAT that infects victims’ systems to steal cryptocurrency wallet data. . Researchers at Z s caler have discovered a new Trojan dubbed InnfiRAT that implements many standard Trojan capabilities along with the ability to steal cryptocurrency wallet data. .

Cryptocurrency 111

Cryptocurrency Malware Advertising Antivirus 111

SecureList

DECEMBER 27, 2022

We have published technical details of how this notorious group steals cryptocurrency before. At the time of analysis, this.vhd sample wasn’t detected by any antivirus. This downloader checks for the names of the following antivirus vendors: Sophos, Kaspersky, Avast, Avira, Bitdefender, TrendMicro, and Windows Defender.

Malware 145

Malware Banking Passwords Antivirus 145

Security Affairs

MAY 21, 2021

CyberNews researchers found that crooks could abuse cryptocurrency exchange API keys and steal cryptocurrencies. CyberNews researchers found that cybercriminals are able to abuse cryptocurrency exchange API keys and steal cryptocurrencies from their victims’ accounts without being granted withdrawal rights.

Cryptocurrency 108

Cryptocurrency Accountability Marketing Passwords 108

SecureList

OCTOBER 4, 2024

In a recent campaign starting in 2022, unknown malicious actors have been trying to mine cryptocurrency on victims’ devices without user consent; they’ve used large amounts of resources for distribution, but what’s more, used multiple unusual vectors for defense evasion and persistence.

Scams 145

Scams Cryptocurrency Malware Software 145

Krebs on Security

MAY 13, 2024

used the password 225948. Constella finds the same password tied to webmaster@stairwell.ru (225948) was used by the email address 3k@xakep.ru , which Intel 471 says was registered to more than a dozen NeroWolfe accounts across just as many Russian cybercrime forums between 2011 and 2015. and admin@stairwell.ru

Ransomware 312

Ransomware Cybercrime Accountability Malware 312

Malwarebytes

JUNE 17, 2021

Malwarebytes Browser Guard not only blocks some advertisements and trackers, it also stops in-browser cryptojackers (unwanted cryptocurrency miners), and it also uses an extended version of the Malwarebytes Premium blocklist that will stop malicious sites from loading—including sites that are involved in tech support scams.

Advertising 129

Advertising Antivirus Passwords Malware 129

Security Affairs

NOVEMBER 19, 2019

To bypass antivirus systems, hackers send out malicious emails in non-working hours with delayed activation. The first half of 2019 saw a 10-fold increase in the number of password-protected objects, such as documents and archive files, being used to deliver malware. More than 80% of all malicious files were disguised as .zip

Ransomware 99

Ransomware Antivirus Malware Banking 99

Approachable Cyber Threats

JULY 7, 2022

The booming market on the Dark Web for passwords and other personal information make it a lucrative business for any cybercriminal - and Raccoon Stealer’s Malware-as-a-Service model makes it even easier for anyone to steal your information to make a profit. Wait, what is Malware-as-a-Service?” as they continue to make improvements.

Social Engineering 97

Social Engineering Cryptocurrency Malware Antivirus 97

CyberSecurity Insiders

JUNE 27, 2023

2. Financial Loss: Attackers often demand payment in cryptocurrencies, making it difficult to trace and retrieve the funds. Consider the following preventive measures: 1. Update Software: Keep your smartphone’s operating system, apps, and antivirus soft-ware up to date.

Ransomware 107

Ransomware Antivirus Backups Encryption 107

Security Boulevard

MARCH 30, 2022

Currently, it is in active development and has the following capabilities: Anti-Detection: Once executed, it checks and kills the processes related to antivirus and sandbox as shown in the figure below. BlackGuard detects antivirus processes. This allows it to bypass antivirus and string-based detection.

Malware 98

Malware Hacking Antivirus Passwords 98

Security Affairs

MARCH 29, 2023

A password-protected RAR archive (random password). Upon executing the SFX, the original torbrowser.exe and the RAR extraction tool are launched on the embedded password-protected RAR archive. The archive is password-protected to evade detection. A command-line RAR extraction tool with a randomized name.

Malware 98

Malware Passwords Cryptocurrency Antivirus 98

Security Affairs

AUGUST 20, 2019

It is essential to install firewall and antivirus software on your routers and keep them up-to-date. Use Strong Passwords. Most people are comfortable with the default password of their internet connecting device and assume it to be secure. It is recommended to keep changing your device password every now and then.

Hacking 111

Hacking VPN Internet Internet 111

The Last Watchdog

SEPTEMBER 28, 2022

According to a new study, phishing attacks rose 61 percent in 2022, with cryptocurrency fraud increasing 257 percent year-over-year. Text message phishing — also known as “smishing” — is when scammers send texts to entice people to transmit personal information, such as passwords or credit card numbers.

Phishing 124

Phishing Scams Cybercrime Passwords 124

Security Affairs

AUGUST 27, 2020

Most of us already know the importance of using antivirus , anti-malware, and VPNs to secure our computers, phones, and other devices against potential attacks. Or they can simply use these printers to mine cryptocurrency, ramping up their victims’ electricity bills in the process. Change the default password. Not so much.

Hacking 145

Hacking IoT Firmware Internet 145

Webroot

OCTOBER 14, 2022

Since the mainstreaming of ransomware payloads and the adoption of cryptocurrencies that facilitate untraceable payments, malicious actors have been innovating new methods and tactics to evade the latest defenses. In other words, 2022 has been an eventful year in the threat landscape, with malware continuing to take center stage.

Malware 89

Malware Antivirus DDOS Cyber Insurance 89

Security Affairs

APRIL 29, 2023

ViperSoftX is a JavaScript-based Remote Access Trojan (RAT) and cryptocurrency stealer that was first analyzed by Fortinet in February 2020. ViperSoftX also checks for active antivirus products running on the machine. ” reads the analysis published by Trend Micro. ” concludes the report.

Encryption 98

Encryption Malware Cryptocurrency Software 98

Security Affairs

AUGUST 21, 2022

The scripts will also infect the victim’s computer with the Raccoon Stealer info-stealing trojan which allows operators to steal login credentials, cookies, auto-fill data, and credit cards saved on web browsers, along with cryptocurrency wallets.

DDOS 98

DDOS Malware Antivirus Firewall 98

Webroot

OCTOBER 4, 2024

Keylogger : Records your keystrokes as you type, then sends sensitive information like passwords and credit card numbers to hackers. Cryptojacking : Hides on your device and steals its computing resources to mine cryptocurrencies like Bitcoin. Use antivirus software like Webroot Premium to protect all your devices.

Malware 115

Malware Backups Adware Ransomware 115

SC Magazine

JUNE 25, 2021

Malicious hackers are increasingly mobbing the video game industry, with major companies suffering data breaches, having their source code sold or leaked online and games serving as playgrounds to push malware or mine cryptocurrencies. billion attacks tracked by the company across different countries.

Computers and Electronics 121

Computers and Electronics Media Marketing Cryptocurrency 121

CyberSecurity Insiders

AUGUST 24, 2022

And studies have revealed that the newly developed file-encrypting malware is using an Open-source password management library for encryption and is having capabilities of remaining anonymous, ex-filtrate data, and having abilities to give control to remote servers. The third is something astonishing to read!

Ransomware 107

Ransomware Digital transformation Encryption Social Engineering 107

Security Affairs

JULY 30, 2018

The latest version appears more sophisticated than previous ones, it implements the ability to steal histories from browsers (except IE and Edge), it includes a conditional loader that checks certain parameters before running the malicious code, and includes the support for Exodus, Jaxx, Mist, Ethereum, Electrum, Electrum-LTC cryptocurrency wallets.

Spyware 72

Spyware Cryptocurrency Passwords Malware 72

Security Affairs

AUGUST 19, 2019

People fell prey for these manipulative emails and provide confidential details like passwords and bank information in their negligence. They ask you to make certain changes in your account by entering your login password or ask for some reconfirmation. She is a small business owner, traveler and investor of cryptocurrencies.

Phishing 111

Phishing Accountability Authentication Passwords 111

SecureWorld News

AUGUST 8, 2022

It has been sold on underground hacker forums for stealing browser data, user credentials, and cryptocurrency information. LokiBot LokiBot is a Trojan malware for stealing sensitive information, including user credentials, cryptocurrency wallets, and other credentials. AZORult's developers are constantly updating its capabilities.

Malware 98

Malware Banking Penetration Testing Healthcare 98

SecureList

SEPTEMBER 6, 2022

When downloading the games from untrustworthy sources, players may receive malicious software that can gather sensitive data like login information or passwords from the victim’s device; and in an attempt to download a desired game for free, find a cool mod or cheat, gamers can actually lose their accounts or even money.

Mobile 133

Mobile Passwords Software Accountability 133

Security Boulevard

MARCH 31, 2022

RedLine Password Theft Malware. The RedLine password theft malware is a hot topic this month with Microsoft’s employee compromise. Passwords: An Easy Target. Let’s not mince words: passwords are difficult for most organizations to manage. Let’s not mince words: passwords are difficult for most organizations to manage.

Cybersecurity 98

Cybersecurity Social Engineering Passwords Malware 98