article thumbnail

Cybercrime group FIN7 targets Veeam backup servers

CSO Magazine

Researchers warn that a financially motivated cybercrime group known as FIN7 is compromising Veeam Backup & Replication servers and deploying malware on them.

Backups 116
article thumbnail

2023 Predictions for Storage and Backup Ransomware

CyberSecurity Insiders

Many of these attacks took advantage of known vulnerabilities and security misconfigurations in storage and backup systems. And backup and storage systems are rife with unpatched CVEs. Slow Gains on Storage and Backup Security. Make it extremely difficult to tamper with backups and exfiltrate data.

Backups 136
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Updated Android spyware GravityRAT steals WhatsApp Backups

Security Affairs

An updated version of the Android remote access trojan GravityRAT can steal WhatsApp backup files and can delete files ESET researchers discovered an updated version of Android GravityRAT spyware that steals WhatsApp backup files and can delete files. The malware is distributed as the messaging apps BingeChat and Chatico.

Backups 90
article thumbnail

Europol lifts the lid on cybercrime tactics

Malwarebytes

The report follows the Internet Organized Crime Assessment (IOCTA), Europol’s assessment of the cybercrime landscape and how it has changed over the last 24 months. Create offsite, offline backups. Keep backups offsite and offline, beyond the reach of attackers. Don’t get attacked twice.

article thumbnail

Experts link Raspberry Robin Malware to Evil Corp cybercrime gang

Security Affairs

Researchers attribute the Raspberry Robin malware to the Russian cybercrime group known as Evil Corp group. IBM Security X-Force researchers discovered similarities between a component used in the Raspberry Robin malware and a Dridex malware loader, which was part of the malicious operations of the cybercrime gang Evil Corp.

article thumbnail

GoTo revealed that threat actors stole customers’ backups and encryption key for some of them

Security Affairs

GoTo is notifying customers that its development environment was breached in November 2022, attackers stole customers’ backups and encryption key. We also have evidence that a threat actor exfiltrated an encryption key for a portion of the encrypted backups.” ” reads an update provided by the company.

Backups 89
article thumbnail

FIN7 cybercrime gang creates fake cybersecurity firm to recruit pentesters for ransomware attacks

Security Affairs

FIN7 is a Russian criminal group that has been active since mid-2015, it focuses on restaurants, gambling, and hospitality industries in the US to harvest financial information that was used in attacks or sold in cybercrime marketplaces. At the time of the report, some of the HTTP 404 errors remain unfixed. ” concludes the report.