Security Affairs

FEBRUARY 10, 2022

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. Do not provide your mobile number account information over the phone to representatives that request your account password or pin. Be aware of any changes in SMS-based connectivity.

Mobile 91

Mobile Cryptocurrency Authentication Accountability 91

Security Affairs

FEBRUARY 10, 2021

Europol investigators revealed that the cybercrime organization stole more than $100 million worth of cryptocurrency using SIM Swapping attacks. “This enabled them to steal money, bitcoin and personal information, including contacts synced with online accounts. . SecurityAffairs – hacking, cybercrime).

Cybercrime 81

Cybercrime Cryptocurrency Accountability Authentication 81

Security Affairs

JULY 2, 2023

WordPress sites using the Ultimate Member plugin are under attack LockBit gang demands a $70 million ransom to the semiconductor manufacturing giant TSMC Avast released a free decryptor for the Windows version of the Akira ransomware Iran-linked Charming Kitten APT enhanced its POWERSTAR Backdoor miniOrange’s WordPress Social Login and Register plugin (..)

Cybercrime 86

Cybercrime Hacking Ransomware Malware 86

Security Affairs

FEBRUARY 25, 2024

Uninstall it immediately Microsoft Exchange flaw CVE-2024-21410 could impact up to 97,000 servers ConnectWise fixed critical flaws in ScreenConnect remote access tool More details about Operation Cronos that disrupted Lockbit operation Cactus ransomware gang claims the theft of 1.5TB of data from Energy management and industrial automation firm Schneider (..)

Spyware 94

Spyware Cyber Insurance Hacking Advertising 94

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 87

Spyware Hacking Malware Social Engineering 87

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 77

Malware Cybercrime Cryptocurrency Social Engineering 77

Security Affairs

OCTOBER 28, 2021

claims to be a trader of cryptocurrencies in social networks. “According to information from Bayerischer Rundfunk and Zeit Online, German investigative authorities have been targeting Nikolay K. That comes from a database of the IT security company Domaintools. SecurityAffairs – hacking, cybercrime).

Cryptocurrency 117

Cryptocurrency Ransomware Cybercrime Accountability 117

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M worth of cryptocurrency. Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M worth of cryptocurrency.

Cryptocurrency 79

Cryptocurrency VPN Manufacturing Firewall 79

Security Affairs

JANUARY 9, 2023

The crypto-miner Kinsing was first spotted by security firm Aqua Security in April 2020, at the time the experts spotted threat actors scanning the Internet for Docker servers running API ports exposed without a password. The Kinsing malware abuses the resources of the Docker installations to mine cryptocurrency.

Malware 91

Malware Authentication Cryptocurrency Internet 91

Security Affairs

APRIL 4, 2022

During the weekend, multiple owners of Trezor hardware cryptocurrency wallets reported having received fake data breach notifications from Trezor, BleepingComputer first reported. We also recommend two-factor authentication and other account security measures for our users as added measures to keep accounts and passwords secure.”

Phishing 115

Phishing Data breaches Cryptocurrency Social Engineering 115

Security Affairs

MARCH 23, 2023

“Nexus provides all the main features to perform ATO attacks (Account Takeover) against banking portals and cryptocurrency services, such as credentials stealing and SMS interception. The Nexus Trojan can target multiple banking and cryptocurrency in an attempt to take over customers’ accounts.

Banking 79

Banking Cryptocurrency Malware Advertising 79

Security Affairs

MARCH 26, 2020

that is hosting various cybercrime products and services were being sold. companies for customers’ personal information.” platform, an automated set-up wizard allowed the owner to upload the products and services offered through the shop and configure the payment process via cryptocurrency wallets. Pierluigi Paganini.

Cybercrime 113

Cybercrime Advertising Hacking Accountability 113

Security Affairs

APRIL 5, 2023

The discovery of STYX coincides with Resecurity financial crime risk analysts observing a significant increase in threat actors offering money-laundering services that exploit digital banking and cryptocurrency accounts. The discovery of STYX also highlights the need for international cooperation in combating cybercrime.

Banking 79

Banking Cybercrime Accountability Risk 79

Security Affairs

JANUARY 3, 2024

Besides Artificial Intelligence to scale operations, in a novel approach to circumvent two-factor authentication (2FA), the perpetrators crafted malicious Android code that mimics official mobile banking applications. This approach was used to deceive individuals into sharing sensitive information with malicious actors.

Artificial Intelligence 117

Artificial Intelligence Banking Scams Cybercrime 117

Security Affairs

MAY 9, 2021

Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager UNC2529, a new sophisticated cybercrime gang that targets U.S.

Data breaches 88

Data breaches DDOS VPN Hacking 88

Security Affairs

MARCH 13, 2020

European authorities dismantled two cybercrime organizations responsible for stealing millions through SIM hijacking. European authorities managed to dismantle the operations of two cybercrime gangs responsible for stealing millions through SIM hijacking. SecurityAffairs – SIM Hijacking, cybercrime). Pierluigi Paganini.

Banking 114

Banking Cybercrime Mobile Accountability 114

Security Affairs

JANUARY 23, 2022

The FBI announcement includes tips to protect people from such kind of attacks; feds recommend checking the URL obtained by scanning a QR code to make sure it is the intended site and looks authentic. Double-check any site navigated to from a QR code before providing login, personal, or financial information.

Cryptocurrency 98

Cryptocurrency Social Engineering Malware Scams 98

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 94

Data breaches Malware Mobile Spyware 94

Security Affairs

SEPTEMBER 27, 2022

Threat actors behind the new ‘Erbium’ information-stealing malware are distributing it as fake cracks and cheats for popular video games to steal victims’ credentials and cryptocurrency wallets. Ability to obtain information from various installed applications.

Malware 82

Malware Password Management Authentication Passwords 82

Security Affairs

SEPTEMBER 11, 2022

IHG suffered a cyberattack that severely impacted its booking process China-Linked BRONZE PRESIDENT APT targets Government officials worldwide Scammers live-streamed on YouTube a fake Apple crypto event US Treasury sanctioned Iran ’s Ministry of Intelligence over Albania cyberattack $30 Million worth of cryptocurrency stolen by Lazarus from Axie Infinity (..)

Data breaches 95

Data breaches Ransomware Malware Phishing 95

Security Affairs

FEBRUARY 10, 2022

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. Do not provide your mobile number account information over the phone to representatives that request your account password or pin. Be aware of any changes in SMS-based connectivity.

Banking 106

Banking Accountability Mobile Cryptocurrency 106

Security Affairs

SEPTEMBER 30, 2021

At the end of August, Atlassian released security patches to address the critical CVE-2021-26084 flaw that affects the Confluence enterprise collaboration product. The flaw is an OGNL injection issue that can be exploited by an authenticated attacker to execute arbitrary code on affected Confluence Server and Data Center instances. “An

Cryptocurrency 94

Cryptocurrency Authentication Malware Marketing 94

Security Affairs

SEPTEMBER 7, 2021

The development team behind the Jenkins server disclose a security breach, threat actors deployed a cryptocurrency miner on one of its servers. The development team behind the Jenkins Project disclosed a security breach after threat actors compromised one of their internal servers and installed a cryptocurrency miner.

Hacking 93

Hacking Cryptocurrency Authentication Internet 93

Security Affairs

AUGUST 10, 2023

Zscaler ThreatLabz researchers discovered a new information stealer malware, called Statc Stealer, that can steal a broad range of info from Windows devices. The malware can steal sensitive information from various web browsers, including login data, cookies, web data, and preferences.

Malware 86

Malware Encryption Advertising Cryptocurrency 86

Security Affairs

NOVEMBER 14, 2022

Akamai Security Research discovered a new evasive Golang-based malware, tracked as KmsdBot, that infects systems via an SSH connection that uses weak login credentials. The malware was employed in cryptocurrency mining campaigns and to launch denial-of-service (DDoS) attacks. Use public key authentication for your SSH connections.

DDOS 91

DDOS Malware Cryptocurrency Architecture 91

Security Affairs

DECEMBER 26, 2022

The advertisements impersonate websites of financial organizations and cryptocurrency exchange platforms. The landing websites were designed to prompt users to enter login credentials and financial information. A malicious domain name may be similar to the intended URL but with typos or a misplaced letter.

Advertising 90

Advertising Engineering Education Internet 90

Security Affairs

SEPTEMBER 3, 2021

At the time of this writing, experts only observed threat actors exploiting the issue to deliver cryptocurrency miners, but attackers could start exploiting them to deliver other malware, including ransomware. reads the advisory published by the company.

Authentication 97

Authentication Cryptocurrency Hacking Government 97

Security Affairs

OCTOBER 31, 2022

In the early afternoon of Friday 12 May 2017, the media broke the news of a global computer security attack carried out through a malicious code capable of encrypting data residing in information systems and demanding a ransom in cryptocurrency to restore them, the Wannacry ransomware. About the author: Salvatore Lombardo.

Malware 97

Malware Computers and Electronics Encryption Ransomware 97

Security Affairs

DECEMBER 3, 2021

Threat actors stole $120 million in cryptocurrencies from multiple wallets connected to the decentralized finance platform BadgerDAO. million in crypto funds, blockchain security firm PeckShield reported. Multi-factor authentication systems protect our accounts against many phishing schemes or bulk credential stuffing attacks.

Hacking 97

Hacking Phishing Authentication Cryptocurrency 97

Security Affairs

OCTOBER 31, 2022

.” The droppers are designed to target include 231 banking and cryptocurrency wallet apps from entities in Italy, the U.K., The apps masqueraded as security authenticators or file recovery tools and deliver a novel variant of Vultur Android Banking malware. Germany, Spain, Poland, Austria, the U.S.,

Banking 83

Banking Cryptocurrency Authentication Malware 83

Security Affairs

JUNE 15, 2022

” The botnet is engaged in cryptomining activity, the malicious code has been designed to hijack the computer’s resources to mine cryptocurrencies. The bot uses “its built-in concurrency features to maximize spreadability and execute malware modules.” “The malware deploys two miners — xmrig and nbhash.

Malware 91

Malware Cryptocurrency Education Engineering 91

Security Affairs

SEPTEMBER 21, 2019

US authorities have indicted two men, Elliot Gunton and Anthony Tyler Nashatka, for hacking the cryptocurrency exchange EtherDelta in 2017. In this way, any incoming calls were silently forwarded to a Google Voice number operated by the two hackers including two-factor authentication (2FA) messages for the EtherDelta account.

Hacking 79

Hacking DNS Cryptocurrency Accountability 79

Security Affairs

SEPTEMBER 5, 2022

The researchers found two SharkbotDopper apps in Google Play Store, “Mister Phone Cleaner” and “Kylhavy Mobile Security,” with 10K and 50K installs respectively. SharkBot is a banking trojan that has been active since October 2021, it allows to steal banking account credentials and bypass multi-factor authentication mechanisms.

Banking 91

Banking Malware Mobile Accountability 91

Security Affairs

AUGUST 16, 2023

The FBI announcement includes tips to protect people from such kind of attacks; feds recommend checking the URL obtained by scanning a QR code to make sure it is the intended site and looks authentic. Double-check any site navigated to from a QR code before providing login, personal, or financial information.

Phishing 86

Phishing Energy and Utilities Insurance Manufacturing 86

Security Affairs

SEPTEMBER 17, 2019

Trend Micro researchers spotted a piece of Linux cryptocurrency miner, dubbed Skidmap that leverages kernel-mode rootkits to evade the detection. It does this by having the binary add the public key of its handlers to the authorized_keys file, which contains keys needed for authentication.” ” continues the report.

Malware 81

Malware Advertising Authentication Passwords 81

Security Affairs

AUGUST 5, 2021

CVE-2017-11610 – A Remote Code Authentication (RCE) vulnerability in the XMLRPC interface in supervisord. With the rise and sky-high valuation of Bitcoin and several other cryptocurrencies, cryptomining-based attacks have continued to dominate the threat landscape. Figure 9: Worm exploiting Path traversal vulnerability.

Malware 105

Malware Architecture Firewall Cryptocurrency 105

Security Affairs

JULY 13, 2021

After Mindaugas reached out to CyberNews, our investigators were able to follow the scam group’s money trail and locate a network of wallets used by the group to store and cash out Mindaugas’ stolen crypto, along with millions in cryptocurrency plundered from thousands of other victims. Falling for the scam.

Scams 98

Scams Cryptocurrency Accountability Authentication 98