Krebs on Security

JUNE 6, 2023

In May, KrebsOnSecurity interviewed a Russian spammer named “ Quotpw “ who was mass-registering accounts on the social media network Mastodon in order to conduct a series of huge spam campaigns advertising scam cryptocurrency investment platforms. com site,” the Trend researchers wrote. Image: Trend Micro.

Accountability 221

Accountability Scams Cryptocurrency Advertising 221

Krebs on Security

DECEMBER 29, 2022

Here’s a look at some of the more notable cybercrime stories from the past year, as covered by KrebsOnSecurity and elsewhere. Super Bowl Sunday watchers are treated to no fewer than a half-dozen commercials for cryptocurrency investing. I will also continue to post on LinkedIn about new stories in 2023. agencies]. .”

Cryptocurrency 240

Cryptocurrency Cybercrime Computers and Electronics Scams 240

Security Affairs

DECEMBER 29, 2023

One of the key significant improvements are support of more software clients (including browser-based cryptocurrency wallets), upgraded credit card (CC) grabber, and additional advanced mechanisms for password storage dump on various platforms to extract credentials and tokens.

Password Management 123

Password Management Cryptocurrency Passwords Authentication 123

SecureList

MAY 6, 2024

Methodology In this report, we present an analysis of financial cyberthreats in 2023, focusing on banking Trojans and phishing pages that target online banking, shopping accounts, cryptocurrency wallets and other financial assets. Cryptocurrency phishing saw a 16% year-on-year increase in 2023, with 5.84 million in 2022.

Phishing 101

Phishing Banking Mobile Scams 101

Malwarebytes

APRIL 19, 2022

A new advisory issued by the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the US Treasury Department (Treasury), highlights the cyberthreats associated with cryptocurrency thefts and tactics used by a North Korean state-sponsored advanced persistent threat (APT) group since at least 2020.

Social Engineering 120

Social Engineering Cryptocurrency Computers and Electronics Engineering 120

Security Affairs

MAY 18, 2022

Microsoft researchers warn of the rising threat of cryware targeting non-custodial cryptocurrency wallets, also known as hot wallets. Microsoft warns of the rise of cryware, malicious software used to steal info an dfunds from non-custodial cryptocurrency wallets, also known as hot wallets. Ransomware. Password and info stealers.

Cryptocurrency 91

Cryptocurrency Social Engineering Malware Cybercrime 91

Krebs on Security

DECEMBER 14, 2023

That reporting was based on clues from an early Russian cybercrime forum in which a hacker named Rescator — using the same profile image that Rescator was known to use on other forums — claimed to have originally been known as “Helkern,” the nickname chosen by the administrator of a cybercrime forum called Darklife.

Cybercrime 233

Cybercrime Accountability Advertising Computers and Electronics 233

Security Affairs

AUGUST 27, 2023

million in critical infrastructure cyber projects via new program Ivanti Ships Urgent Patch for API Authentication Bypass Vulnerability Defense contractor Belcan leaks admin password with a list of flaws Leaseweb is restoring ‘critical’ systems after security breach Microsoft is now a cybersecurity titan.

Cybercrime 78

Cybercrime Hacking Cryptocurrency Ransomware 78

Troy Hunt

JUNE 11, 2018

I was contacted by the Cybercrime Bureau of the Estonian Central Criminal Police who were after some assistance notifying individuals impacted by a number of different breaches. Definitely do that if you find yourself in this breach, but equally do it now if you're not already following these fundamental principles.

Cryptocurrency 128

Cryptocurrency Cybercrime Data breaches Passwords 128

Security Affairs

JANUARY 13, 2024

Akira ransomware targets Finnish organizations GitLab fixed a critical zero-click account hijacking flaw Juniper Networks fixed a critical RCE bug in its firewalls and switches Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467 Team Liquid’s wiki leak exposes (..)

VPN 104

VPN Cybercrime Ransomware Hacking 104

The Last Watchdog

DECEMBER 16, 2021

I expect a new wave of ransomware operators that use cryptocurrency to avoid tracking, remotely-located operations to avoid extradition and arrest, and the hardening of operational security to avoid infrastructure take down. Reconstituted hacker rings. There will be new methods of operation to avoid arrest and infrastructure takedown.

CISO 262

CISO Ransomware Risk Authentication 262

Security Affairs

FEBRUARY 10, 2022

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. Use strong multi-factor authentication methods such as biometrics, physical security tokens, or standalone authentication applications to access online accounts.

Mobile 90

Mobile Cryptocurrency Authentication Accountability 90

Security Affairs

FEBRUARY 10, 2021

Europol investigators revealed that the cybercrime organization stole more than $100 million worth of cryptocurrency using SIM Swapping attacks. ” Crooks conducted SIM swapping attacks to steal money, cryptocurrencies and personal information, including contacts synced with online accounts. Pierluigi Paganini.

Cybercrime 79

Cybercrime Cryptocurrency Accountability Authentication 79

Security Affairs

JULY 2, 2023

WordPress sites using the Ultimate Member plugin are under attack LockBit gang demands a $70 million ransom to the semiconductor manufacturing giant TSMC Avast released a free decryptor for the Windows version of the Akira ransomware Iran-linked Charming Kitten APT enhanced its POWERSTAR Backdoor miniOrange’s WordPress Social Login and Register plugin (..)

Cybercrime 85

Cybercrime Hacking Ransomware Malware 85

Security Affairs

AUGUST 7, 2018

Group-IB researchers have investigated user data leaks from cryptocurrency exchanges and has analyzed the nature of these incidents. In 2017, when cryptocurrencies were gaining momentum, their record-breaking capitalization and a spike in Bitcoin’s exchange rate led to dozens of attacks on cryptocurrency services.

Cryptocurrency 48

Cryptocurrency Passwords Authentication Accountability 48

Security Affairs

FEBRUARY 4, 2024

Ransomware Revenue Down As More Victims Refuse to Pay Energy giant Schneider Electric hit by Cactus ransomware attack Hundreds Of Network Operators’ Credentials Found Circulating In Dark Web Fla.

Identity Theft 103

Identity Theft VPN Malware Ransomware 103

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 86

Spyware Hacking Malware Social Engineering 86

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 76

Malware Cybercrime Cryptocurrency Social Engineering 76

Security Affairs

FEBRUARY 25, 2024

Uninstall it immediately Microsoft Exchange flaw CVE-2024-21410 could impact up to 97,000 servers ConnectWise fixed critical flaws in ScreenConnect remote access tool More details about Operation Cronos that disrupted Lockbit operation Cactus ransomware gang claims the theft of 1.5TB of data from Energy management and industrial automation firm Schneider (..)

Spyware 92

Spyware Cyber Insurance Hacking Advertising 92

Security Affairs

OCTOBER 28, 2021

claims to be a trader of cryptocurrencies in social networks. for months. . “More than 60 websites were registered with this, some with authentic contact information, such as cell phone numbers. One of these cell phone numbers is linked to a Telegram account that supposedly specializes in trading cryptocurrencies.

Cryptocurrency 114

Cryptocurrency Ransomware Cybercrime Accountability 114

SecureWorld News

AUGUST 29, 2023

An advisory from the company states that a "highly sophisticated" SIM swapping attack targeted one of Kroll's employees, resulting in unauthorized access to personal information related to bankruptcy claimants associated with cryptocurrency firms FTX, BlockFi, and Genesis.

Cryptocurrency 83

Cryptocurrency Phishing Social Engineering Accountability 83

Krebs on Security

JANUARY 18, 2021

The announcement came on the heels of a turbulent year for the major cybercrime store, and just weeks after U.S. Like many other top cybercrime bazaars, Joker’s Stash was a frequent target of phishers looking to rip off unwary or unsophisticated thieves. and European authorities seized a number of its servers.

Marketing 250

Marketing Cybercrime Accountability Cryptocurrency 250

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M worth of cryptocurrency. Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M worth of cryptocurrency. Attackers also stole funds in other cryptocurrencies.

Cryptocurrency 78

Cryptocurrency VPN Manufacturing Firewall 78

SecureList

JANUARY 17, 2024

Notable among these was BunnyLoader , inexpensive and feature-rich malware capable of stealing sensitive data and cryptocurrency. Moreover, the rise in the popularity of other cryptocurrencies with enhanced privacy features might also influence the Bitcoin mixer market.

Marketing 112

Marketing Cryptocurrency Malware Ransomware 112

Krebs on Security

NOVEMBER 6, 2018

that has been tracking down individuals engaged in unauthorized “SIM swaps” — a complex form of mobile phone fraud that is often used to steal large amounts of cryptocurrencies and other items of value from victims. Samy Tarazi is a sergeant with the Santa Clara County Sheriff’s office and a REACT supervisor.

Mobile 243

Mobile Cryptocurrency Accountability Passwords 243

Security Affairs

JANUARY 9, 2023

The Kinsing malware abuses the resources of the Docker installations to mine cryptocurrency. The first misconfiguration is related to the use of ‘trust authentication’ setting, an attacker can abuse it to connect to the Postgres servers without authentication and potentially achieve code execution.

Malware 91

Malware Authentication Cryptocurrency Internet 91

Security Affairs

MARCH 26, 2020

that is hosting various cybercrime products and services were being sold. platform, an automated set-up wizard allowed the owner to upload the products and services offered through the shop and configure the payment process via cryptocurrency wallets. platform, offered data were authentic according to the feds.

Cybercrime 112

Cybercrime Advertising Hacking Accountability 112

Security Affairs

MARCH 23, 2023

“Nexus provides all the main features to perform ATO attacks (Account Takeover) against banking portals and cryptocurrency services, such as credentials stealing and SMS interception. The Nexus Trojan can target multiple banking and cryptocurrency in an attempt to take over customers’ accounts.

Banking 78

Banking Cryptocurrency Malware Advertising 78

Security Affairs

APRIL 4, 2022

During the weekend, multiple owners of Trezor hardware cryptocurrency wallets reported having received fake data breach notifications from Trezor, BleepingComputer first reported. We also recommend two-factor authentication and other account security measures for our users as added measures to keep accounts and passwords secure.”

Phishing 113

Phishing Data breaches Cryptocurrency Social Engineering 113

Security Affairs

APRIL 5, 2023

The discovery of STYX coincides with Resecurity financial crime risk analysts observing a significant increase in threat actors offering money-laundering services that exploit digital banking and cryptocurrency accounts. The discovery of STYX also highlights the need for international cooperation in combating cybercrime.

Banking 78

Banking Cybercrime Accountability Risk 78

Security Affairs

MAY 9, 2021

Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager UNC2529, a new sophisticated cybercrime gang that targets U.S.

Data breaches 87

Data breaches DDOS VPN Hacking 87

IT Security Guru

SEPTEMBER 1, 2022

That is why it is popular in cryptocurrency systems; in fact, it is vital because there would be no anonymity for crypto users without it. This is vital in cryptocurrency transactions as nobody can alter or delete a transaction once it has been recorded on the block. Authentication of Software Interactions.

Cryptocurrency 98

Cryptocurrency Hacking Authentication Insurance 98

SecureWorld News

NOVEMBER 8, 2022

Microsoft recently released its Digital Defense Report 2022 , examining the current threat landscape, touching on the first "hybrid war" that is the Ukraine-Russia conflict, reviewing the current state of cybercrime, and identifying the characteristics needed to successfully defend against future threats. The key takeaway?

Cyber threats 80

Cyber threats Architecture Authentication Passwords 80

Security Affairs

MARCH 13, 2020

European authorities dismantled two cybercrime organizations responsible for stealing millions through SIM hijacking. European authorities managed to dismantle the operations of two cybercrime gangs responsible for stealing millions through SIM hijacking. SecurityAffairs – SIM Hijacking, cybercrime). Pierluigi Paganini.

Banking 114

Banking Cybercrime Mobile Accountability 114

Security Affairs

JANUARY 3, 2024

Besides Artificial Intelligence to scale operations, in a novel approach to circumvent two-factor authentication (2FA), the perpetrators crafted malicious Android code that mimics official mobile banking applications. The use of Artificial Intelligence in cybercrime is not a completely novel concept.

Artificial Intelligence 115

Artificial Intelligence Banking Scams Cybercrime 115

Webroot

MAY 12, 2021

Since cryptocurrencies were, are and will continue to be impactful technologies, surely NFTs are a topic worth exploring. NFTs use the same blockchain ledger technology to verify uniqueness that cryptocurrencies rely on to prove ownership. NFT theft and a new brand of cybercrime. “What Bitcoin was to 2011, NFTs are to 2021.”.

Cryptocurrency 91

Cryptocurrency Marketing Phishing Authentication 91

Security Affairs

JANUARY 23, 2022

The FBI announcement includes tips to protect people from such kind of attacks; feds recommend checking the URL obtained by scanning a QR code to make sure it is the intended site and looks authentic. Threat actors could use a malicious domain name that is similar to the intended URL but with typos or a misplaced letter.

Cryptocurrency 96

Cryptocurrency Social Engineering Malware Scams 96