Security Affairs

NOVEMBER 13, 2023

The APT group’s campaigns focus on cryptocurrency exchanges, venture capital firms, and banks. Microsoft researchers warn of a new social engineering campaign aimed at IT job seekers that relied on a new cluster of bogus skills assessment portals. ” warns Microsoft through a series of posts on X.

Social Engineering 121

Social Engineering Cryptocurrency Engineering Malware 121

SecureList

JANUARY 13, 2022

BlueNoroff is the name of an APT group coined by Kaspersky researchers while investigating the notorious attack on Bangladesh’s Central Bank back in 2016. See our earlier publication about BlueNoroff attacks on the banking sector. Also, we have previously reported on cryptocurrency-focused BlueNoroff attacks.

Cryptocurrency 127

Cryptocurrency Malware Accountability Banking 127

Security Affairs

NOVEMBER 8, 2023

The APT group’s campaigns focus on cryptocurrency exchanges, venture capital firms, and banks. blog, which was chosen by the attackers in an attempt to appear as the legitimate cryptocurrency exchange swissborg.com. The executable had a zero detection rate on VirusTotal at the time of its discovery.

Malware 110

Malware Cryptocurrency Social Engineering Engineering 110

Hacker Combat

AUGUST 8, 2022

North Korean hackers use phoney Coinbase job offers to target cryptocurrency professionals. The renowned North Korean hacking outfit Lazarus has uncovered a new social engineering scheme in which the hackers pose as Coinbase to lure workers into the fintech sector. Lazarus hackers go after cryptocurrency.

Social Engineering 93

Social Engineering Cryptocurrency Engineering Malware 93

CyberSecurity Insiders

AUGUST 17, 2022

The aim behind the said social engineering attack is simple, one to trap employees with fake job offers and second to lure customers in signing up the page and then steal their currency. But now have spread malware in disguise of a PDF file to employees in reputable positions at Coinbase.

Social Engineering 117

Social Engineering Cryptocurrency Education Cybercrime 117

Security Affairs

JUNE 11, 2023

Gox exchange and operating BTC-e Japanese Pharmaceutical giant Eisai hit by a ransomware attack Clop ransomware gang was testing MOVEit Transfer bug since 2021 Stealth Soldier backdoor used is targeted espionage attacks in Libya Researchers published PoC exploit code for actively exploited Windows elevation of privilege issue Experts detail a new Kimsuky (..)

Social Engineering 91

Social Engineering Data breaches Ransomware Cybercrime 91

Malwarebytes

MARCH 1, 2024

Cybercriminals are targeting Mac users interested in cryptocurrency opportunities with fake calendar invites. Scammers, impersonating cryptocurrency investors, are active on Telegram channels to get interested people to attend a meeting about a future partnership. Topics are cryptocurrency investment opportunities.

Cryptocurrency 104

Cryptocurrency Malware Authentication Banking 104

Security Affairs

MAY 18, 2022

Microsoft researchers warn of the rising threat of cryware targeting non-custodial cryptocurrency wallets, also known as hot wallets. Microsoft warns of the rise of cryware, malicious software used to steal info an dfunds from non-custodial cryptocurrency wallets, also known as hot wallets. Ransomware. Password and info stealers.

Cryptocurrency 94

Cryptocurrency Social Engineering Malware Cybercrime 94

SecureList

NOVEMBER 23, 2021

We should expect more fraud, targeting mostly BTC , because this cryptocurrency is the most popular. In fact, from January through the end of October, Kaspersky detected more than 2,300 fraudulent global resources aimed at 85,000 potential crypto investors or users who are interested in cryptocurrency mining. Extortion on the rise.

Cryptocurrency 104

Cryptocurrency Banking Cybercrime Ransomware 104

Security Affairs

JANUARY 3, 2024

Resecurity has uncovered a cybercriminal faction known as “ GXC Team “, who specializes in crafting tools for online banking theft, ecommerce deception, and internet scams. Upon detection, it alters the banking information of the intended recipient (like the victim’s supplier) to details specified by the perpetrator.

Artificial Intelligence 120

Artificial Intelligence Banking Scams Cybercrime 120

Malwarebytes

AUGUST 13, 2021

A fair few cryptocurrency scams have been doing the rounds across 2021. Fake Elon Musk cryptocurrency scams. Another social media shenanigan involving cryptocurrency? The FTC estimates at least $2 million has been stolen from cryptocurrency investors. Recovery code theft. It’s not pocket change, either.

Scams 107

Scams Cryptocurrency Social Engineering Media 107

eSecurity Planet

SEPTEMBER 30, 2021

However, researchers at threat intelligence firm Intel 471 in a report this week said they have seen a rise in these services, enabling attackers to target everything from bank accounts to social media platforms. So far, Intel 471 researchers found accounts illegally accessed at eight Canadian-based banks.

Authentication 113

Authentication Social Engineering Phishing Banking 113

SecureList

NOVEMBER 22, 2022

As the financial threat landscape has been dramatically evolving over the past few years, with the expansion of such activities as ransomware or cryptofraud, we believe it is no longer sufficient to look at the threats to traditional financial institutions (like banks), but rather assess financial threats as a whole.

Cryptocurrency 87

Cryptocurrency Mobile Ransomware Banking 87

The Last Watchdog

APRIL 14, 2022

The email specifies that the HR manager should include the codes associated with each card, which the scammer behind the scenes then sells online for cash or cryptocurrency. The attacker then creates a look-alike domain and contacts each customer on the report explaining that all future payments should be sent to a new bank account.

Phishing 247

Phishing Accountability Scams Social Engineering 247

Malwarebytes

JULY 19, 2021

We’ve observed a 419-style scam (also known as an advance fee scam) which combines the promise of cryptocurrency riches with WhatsApp conversation. Folks already involved in cryptocurrency would likely have suspicions raised after reading the below. It’s all about that personal touch in the land of cryptocurrency scams.

Accountability 108

Accountability Scams Cryptocurrency Banking 108

Security Affairs

OCTOBER 20, 2020

Group-IB assisted Paxful, an international peer-to-peer cryptocurrency marketplace, in countering web-bot and social engineering attacks. The combination of advanced anti-fraud technologies and intelligence protects both banking and retail customers. About Group-IB.

Cryptocurrency 59

Cryptocurrency Social Engineering eCommerce Engineering 59

Appknox

JUNE 23, 2022

Thus, these Australian attacks significantly contribute to the rising trend in socially engineered attacks. Cryptocurrency and NFT attacks are rising as decentralized finance, and digital art assets become sophisticated socially engineered threats. Common Trends Among the Australian Mobile Threats.

Social Engineering 92

Social Engineering Mobile Scams Engineering 92

SecureWorld News

AUGUST 2, 2021

Robinhood is an increasingly popular trading app where you can buy and sell stocks, as well as cryptocurrency. Phishing attempts come via email where scammers use different social engineering tactics to pose as a reputable sender like the IRS, your bank or brokerage firm.

Phishing 81

Phishing Social Engineering Scams Identity Theft 81

Malwarebytes

JUNE 23, 2022

This operation also led the Belgian Police (Police Fédérale/Federale Politie) and the Dutch Police (Politie) to nine arrests, 24 house searches, and the seizure of firearms, ammunition, jewelry, electronic devices, cash, and cryptocurrency. Once recipients opened the link, they would be directed to a bogus bank website.

Phishing 105

Phishing Banking Cryptocurrency Scams 105

Security Affairs

FEBRUARY 6, 2022

LockBit ransomware gang claims to have stolen data from PayBito crypto exchange FBI issued a flash alert on Lockbit ransomware operation CISA orders federal agencies to fix actively exploited CVE-2022-21882 Windows flaw Over 500,000 people were impacted by a ransomware attack that hit Morley Ransomware attack hit Swissport International causing delays (..)

Social Engineering 81

Social Engineering Cryptocurrency Small Business Ransomware 81

Security Affairs

DECEMBER 17, 2023

CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6 CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Data breaches 83

Data breaches Cybercrime Firewall Artificial Intelligence 83

SC Magazine

MAY 12, 2021

Researchers found 167 counterfeit Android and iOS apps that attackers used to steal money from victims who believed they installed a financial trading, banking or cryptocurrency app. Photo by Justin Sullivan/Getty Images). If targets later tried to withdraw funds or close the account, the attackers would block access.

Scams 62

Scams Cryptocurrency Social Engineering Banking 62

Krebs on Security

AUGUST 19, 2020

Allen said a typical voice phishing or “vishing” attack by this group involves at least two perpetrators: One who is social engineering the target over the phone, and another co-conspirator who takes any credentials entered at the phishing page and quickly uses them to log in to the target company’s VPN platform in real-time.

Phishing 354

Phishing VPN Social Engineering Media 354

Krebs on Security

APRIL 20, 2023

which owns LinkedIn, said in September 2022 that it had detected a wide range of social engineering campaigns using a proliferation of phony LinkedIn accounts. The malware was found inside of a document that offered an employment contract at the multinational bank HSBC. Microsoft Corp.

Malware 273

Malware Software Technology Accountability 273

Malwarebytes

APRIL 7, 2021

Several users of Trezor, a small hardware device that acts as a cryptocurrency wallet, have been duped by a fake app with the same name. He wanted to check his cryptocurrency balance on his phone and decided to search for and download an app instead of plugging the device into his computer via a USB connection. He lost 17.1

Cryptocurrency 106

Cryptocurrency Scams Engineering Accountability 106

eSecurity Planet

SEPTEMBER 14, 2022

As a matter of fact, the most-reported crime in the 2021 Internet Crime Report report was phishing , a social engineering scam wherein the victim receives a deceptive message from someone in an attempt to get the victim to reveal personal information or account credentials or to trick them into downloading malware. Social Tactics.

Social Engineering 120

Social Engineering Energy and Utilities Phishing Scams 120

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 79

Malware Cybercrime Cryptocurrency Social Engineering 79

Malwarebytes

APRIL 28, 2021

We first observed the technique used on gamers back in 2014, and it eventually branched out into bank phishing. Trust Wallet is an app used to send, receive, and store Bitcoin along with other cryptocurrencies, including NFTs. And, because of the way that cryptocurrencies work, once the scammers have your wallet, it’s theirs.

Phishing 126

Phishing Cryptocurrency Accountability Scams 126

Malwarebytes

MARCH 1, 2023

Prodaft researchers describe how they noticed RIG EK RIG dropping multiple types of malware, including stealers, Remote Access Trojans (RATs), cryptocurrency miners, and banking malware. RIG EK has also introduced some newer vulnerabilities while Internet Explorer's market share has continued to drop.

Internet 94

Internet Internet Social Engineering Malware 94

Hot for Security

MARCH 2, 2021

By applying high-pressure tactics and the promise of expedited payments, scammers have managed to dupe recipients into providing their personal information and bank account numbers or paying a small “processing fees.” IRS and Bank-related scams. Billions of unsolicited emails are sent to inboxes every day.

Scams 116

Scams Identity Theft Banking Phishing 116

Security Affairs

NOVEMBER 26, 2018

“Nicholas Truglia, 21, lifted the $1 million from Ross’ two cryptocurrency accounts, according to a felony complaint filed this month in California state court. Police raided the Truglia’s house under a warrant and able to recover $300,000 worth of cryptocurrency from his hardware wallet. ” reads a CNBC report.

Cryptocurrency 82

Cryptocurrency Identity Theft Social Engineering Advertising 82

Security Affairs

SEPTEMBER 2, 2018

The Loki Bot attacks started in July and aimed at stealing passwords from browsers, messaging applications, mail and FTP clients, and cryptocurrency wallets. Loki Bot operators employ various social engineering technique to trick victims into opening weaponized attachments that would deploy the Loki Bot stealer.

Social Engineering 56

Social Engineering Cryptocurrency Advertising Malware 56

SecureWorld News

MARCH 22, 2021

This scam is most often used when an attacker compromises legitimate email accounts through social engineering or computer intrusion techniques. In 2020, the IC3 observed an increase in the number of BEC/EAC complaints related to the use of identity theft and funds being converted to cryptocurrency. Visit www.ic3.gov

Cybercrime 54

Cybercrime Scams Banking Accountability 54

Malwarebytes

APRIL 11, 2023

There are crawlers that can search your phone for personally identifiable information (PII), account credentials, banking-related or credit card data in seconds. Instead, hackers know that our mobile devices store a lot of PII, which can be sold on the dark web for profit or re-used in social engineering campaigns.

Mobile 98

Mobile Banking Malware Spyware 98

Security Boulevard

AUGUST 23, 2022

To get to their targets, the attackers used social engineering via LinkedIn “hiding behind the ruse of attractive, but bogus, job offers,” ESET said, adding that it was likely part of the Lazarus campaign for Mac and is similar to research done by ESET in May.

Cyber threats 52

Cyber threats Social Engineering Banking Malware 52

Security Affairs

OCTOBER 10, 2018

As stated in Group-IB’s annual report “ Hi-Tech Crime Trends 2018 ” presented at the CyberCrimeCon18 conference, every month, 1-2 banks lose money as a result of cyber attacks, and the damage caused by one successful theft is, on average, $2 million. Considering this, banks need to rethink their approach to protection against cyber threats.

Cyber Attacks 84

Cyber Attacks Banking Cyber threats Phishing 84

SC Magazine

JULY 2, 2021

With that in mind, a newly announced three-year research partnership between the Federal Reserve Bank of Atlanta and Georgia State University’s Evidence-Based Cybersecurity Research Group (EBCS) will examine the tactics and techniques that fraudsters are leveraging to abuse online payments.

Financial Services 71

Financial Services Banking Identity Theft Media 71