SecureWorld News

MARCH 22, 2021

The FBI notes that the Internet Crime Complaint Center (IC3) has been key to its mission to track cybercrimes. The IC3 "provides the public with a trustworthy source for information on cyber criminal activity," and also is a useful tool for victims to report a cybercrime. The IC3 received 19,369 reports of BEC/EAC scams in 2020. "In

Cybercrime 55

Cybercrime Scams Banking Accountability 55

Security Affairs

MAY 18, 2022

Microsoft researchers warn of the rising threat of cryware targeting non-custodial cryptocurrency wallets, also known as hot wallets. Microsoft warns of the rise of cryware, malicious software used to steal info an dfunds from non-custodial cryptocurrency wallets, also known as hot wallets. Ransomware. Password and info stealers.

Cryptocurrency 92

Cryptocurrency Social Engineering Malware Cybercrime 92

Security Affairs

JANUARY 3, 2024

Resecurity has uncovered a cybercriminal faction known as “ GXC Team “, who specializes in crafting tools for online banking theft, ecommerce deception, and internet scams. Upon detection, it alters the banking information of the intended recipient (like the victim’s supplier) to details specified by the perpetrator.

Artificial Intelligence 118

Artificial Intelligence Banking Scams Cybercrime 118

Security Affairs

DECEMBER 17, 2023

CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6 CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Data breaches 82

Data breaches Cybercrime Firewall Artificial Intelligence 82

Malwarebytes

JUNE 23, 2022

Europol has coordinated a joint operation to arrest members of a cybercrime gang and effectively dismantle their campaigns that netted million in Euros. Once recipients opened the link, they would be directed to a bogus bank website. Here, they were encouraged to enter their banking credentials.

Phishing 100

Phishing Banking Cryptocurrency Scams 100

SecureList

NOVEMBER 22, 2022

As the financial threat landscape has been dramatically evolving over the past few years, with the expansion of such activities as ransomware or cryptofraud, we believe it is no longer sufficient to look at the threats to traditional financial institutions (like banks), but rather assess financial threats as a whole.

Cryptocurrency 87

Cryptocurrency Mobile Ransomware Banking 87

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 77

Malware Cybercrime Cryptocurrency Social Engineering 77

Krebs on Security

AUGUST 19, 2020

Allen said a typical voice phishing or “vishing” attack by this group involves at least two perpetrators: One who is social engineering the target over the phone, and another co-conspirator who takes any credentials entered at the phishing page and quickly uses them to log in to the target company’s VPN platform in real-time.

Phishing 357

Phishing VPN Social Engineering Media 357

eSecurity Planet

SEPTEMBER 14, 2022

Cybercrime is a growth industry like no other. 70% of attacks were on banks. Then, we’ll go over the basic, foundational techniques most scammers find themselves using, such as social engineering and phishing. One particularly potent emergent technology for scammers is blockchain and the related cryptocurrency and NFTs.

Social Engineering 118

Social Engineering Energy and Utilities Phishing Scams 118

Security Affairs

OCTOBER 20, 2020

Group-IB assisted Paxful, an international peer-to-peer cryptocurrency marketplace, in countering web-bot and social engineering attacks. The combination of advanced anti-fraud technologies and intelligence protects both banking and retail customers. About Group-IB.

Cryptocurrency 59

Cryptocurrency Social Engineering eCommerce Engineering 59

Security Affairs

FEBRUARY 6, 2022

LockBit ransomware gang claims to have stolen data from PayBito crypto exchange FBI issued a flash alert on Lockbit ransomware operation CISA orders federal agencies to fix actively exploited CVE-2022-21882 Windows flaw Over 500,000 people were impacted by a ransomware attack that hit Morley Ransomware attack hit Swissport International causing delays (..)

Social Engineering 79

Social Engineering Cryptocurrency Small Business Ransomware 79

SC Magazine

JULY 2, 2021

With that in mind, a newly announced three-year research partnership between the Federal Reserve Bank of Atlanta and Georgia State University’s Evidence-Based Cybersecurity Research Group (EBCS) will examine the tactics and techniques that fraudsters are leveraging to abuse online payments.

Financial Services 71

Financial Services Banking Identity Theft Media 71

Security Affairs

NOVEMBER 26, 2018

“Nicholas Truglia, 21, lifted the $1 million from Ross’ two cryptocurrency accounts, according to a felony complaint filed this month in California state court. Police raided the Truglia’s house under a warrant and able to recover $300,000 worth of cryptocurrency from his hardware wallet. ” reads a CNBC report.

Cryptocurrency 81

Cryptocurrency Identity Theft Social Engineering Advertising 81

Identity IQ

FEBRUARY 8, 2024

But the dark web is also associated with illegal activities including the trafficking of drugs, weapons, and illegal pornography, hacking and cybercrime, terrorism, and the sale of stolen data or personal information. Transactions on the dark web are typically conducted using cryptocurrencies such as Bitcoin to maintain anonymity.

Identity Theft 98

Identity Theft Cryptocurrency Government Engineering 98

Security Affairs

OCTOBER 10, 2018

As stated in Group-IB’s annual report “ Hi-Tech Crime Trends 2018 ” presented at the CyberCrimeCon18 conference, every month, 1-2 banks lose money as a result of cyber attacks, and the damage caused by one successful theft is, on average, $2 million. Considering this, banks need to rethink their approach to protection against cyber threats.

Cyber Attacks 83

Cyber Attacks Banking Cyber threats Phishing 83

Security Affairs

SEPTEMBER 2, 2018

The Loki Bot attacks started in July and aimed at stealing passwords from browsers, messaging applications, mail and FTP clients, and cryptocurrency wallets. Loki Bot operators employ various social engineering technique to trick victims into opening weaponized attachments that would deploy the Loki Bot stealer.

Social Engineering 54

Social Engineering Cryptocurrency Advertising Malware 54

Webroot

FEBRUARY 11, 2021

As we mentioned in a previous blog , hackers come in many forms, but their methods can generally be classified into three distinct types of cybercriminals: The Impersonator – Hackers that pretend to be others, often using social engineering and human psychology to trick users.

Scams 108

Scams Phishing Firewall Social Engineering 108

Security Affairs

JULY 19, 2019

It allows crooks to generate a malicious payload for social-engineering spam campaigns, the author was offering it as a service for a three-month license of $120. The police also seized around 20,000 Euro (around $22,000) in cryptocurrency such as Bitcoins. . ” reads a post published by McAfee.

Malware 70

Malware Social Engineering Advertising Antivirus 70

Security Affairs

NOVEMBER 19, 2019

The report’s findings reveal that email remains the main method of delivering ransomware, banking Trojans, and backdoors. Cybercriminals use social engineering techniques to convince users to click on malicious links or extract archives. Financial departments at high risk. The revival of ransomware.

Ransomware 71

Ransomware Antivirus Malware Banking 71

Krebs on Security

DECEMBER 29, 2022

Here’s a look at some of the more notable cybercrime stories from the past year, as covered by KrebsOnSecurity and elsewhere. Super Bowl Sunday watchers are treated to no fewer than a half-dozen commercials for cryptocurrency investing. I will also continue to post on LinkedIn about new stories in 2023. agencies]. .”

Cryptocurrency 233

Cryptocurrency Cybercrime Computers and Electronics Scams 233

SecureList

SEPTEMBER 6, 2022

Its main stealer functionality involves extracting data such as passwords, cookies, card details, and autofill data from browsers, cryptocurrency wallet secrets, credentials for VPN services, etc. Once a miner file is launched on an affected computer, it starts using the machine’s energy to mine cryptocurrency.

Mobile 96

Mobile Passwords Software Accountability 96

SecureList

DECEMBER 6, 2022

Phishers primarily seek to extract confidential information from victims, such as credentials or bank card details, while scammers deploy social engineering to persuade targets to transfer money on their own accord. At around the same time, phishers started targeting online payment systems and internet banks.

Scams 93

Scams Phishing Social Engineering Banking 93

Webroot

JANUARY 7, 2022

The cybercrime marketplace also continued to get more robust while the barrier to entry for malicious actors continued to drop. This has created a perfect breeding ground for aspiring cybercriminals and organized cybercrime groups that support newcomers with venture capitalist-style funding. “In Cryptocurrency. Ransomware.

Cybercrime 105

Cybercrime Phishing Ransomware Cryptocurrency 105

Krebs on Security

NOVEMBER 6, 2018

that has been tracking down individuals engaged in unauthorized “SIM swaps” — a complex form of mobile phone fraud that is often used to steal large amounts of cryptocurrencies and other items of value from victims. Samy Tarazi is a sergeant with the Santa Clara County Sheriff’s office and a REACT supervisor.

Mobile 236

Mobile Cryptocurrency Accountability Passwords 236

SecureList

AUGUST 23, 2021

Most threats uncovered on PC and mobile devices were adware, but dangerous malware was also present: from stealers to bankers, often leading to the loss of not just credentials but money, including cryptocurrency. This app operates in a particularly covert way. However, there is another common threat: phishing.

Adware 112

Adware Mobile Phishing Malware 112

SecureList

MAY 27, 2022

In January, we reported a malicious campaign targeting companies that work with cryptocurrencies, smart contracts, decentralized finance and blockchain technology: the attackers are interested in fintech in general. The campaign has two goals: gathering information and stealing cryptocurrency. Lapsus$ group hacks Okta.

Phishing 103

Phishing Spyware Firmware Malware 103

eSecurity Planet

OCTOBER 21, 2022

The method of infection can vary from attack to attack and can include social engineering strategies, such as phishing and email spoofing , or a fraudulent website masquerading as legitimate, among others. This note will provide instructions on how to pay the ransom, usually through difficult-to-trace means like cryptocurrency.

Malware 69

Malware Adware Spyware Antivirus 69

Krebs on Security

FEBRUARY 17, 2021

billion from banks and other victims worldwide. Confirmed thefts attributed to the group include the 2016 hacking of the SWIFT payment system for Bangladesh Bank, which netted thieves $81 million; $6.1 Investigators with the DOJ, U.S. The group is thought to be responsible for the attempted theft of approximately $1.2

Cryptocurrency 273

Cryptocurrency Financial Services Banking Government 273

eSecurity Planet

NOVEMBER 2, 2022

Social engineering attacks soon found use in the digital space. It could install a keylogging program, allowing the hacker to gain access to sensitive information like bank account details, passwords, and physical addresses as long as the victim typed that information into their computer at any point.

Malware 138

Malware Ransomware Antivirus Internet 138

Security Affairs

JUNE 4, 2021

It includes stolen online banking logins (price varies depending on the account’s worth), Walmart credit cards, global credit cards with CVV from the USA, the UK, Australia, Israel, Spain, or Japan. Monero is the cryptocurrency of choice, instead, and all communications must be PGP encrypted. Cryptocurrency trading accounts.

Accountability 113

Accountability Marketing Hacking Cryptocurrency 113

Malwarebytes

MAY 21, 2023

ChatGPT can step in to offer insights on identifying the latest scams, avoiding social engineering pitfalls, and setting stronger passwords in concise, conversational text that may be more effective than a lecture or slide presentation.

Cybersecurity 73

Cybersecurity Artificial Intelligence Social Engineering Engineering 73