Banking and Information Security - Cyber Security Informer

New version of Android malware FakeCall redirects bank calls to scammers

Security Affairs

OCTOBER 30, 2024

The latest FakeCall malware version for Android intercepts outgoing bank calls, redirecting them to attackers to steal sensitive info and bank funds. The malware allows operators to steal bank users’ sensitive information and money from their bank accounts. ” reads the report published by Zimperium.

Banking

Banking Malware Accountability Phishing

Hackers stole millions of dollars from Uganda Central Bank

Security Affairs

NOVEMBER 30, 2024

Financially-motivated threat actors hacked Uganda ‘s central bank system, government officials confirmed this week. Ugandan officials confirmed on Thursday that the national central bank suffered a security breach by financially-motivated threat actors. The Daily Monitor newspaper reported that the attackers stole 47.8

Banking

Banking Government Accountability Hacking

ToxicPanda Android banking trojan targets Europe and LATAM, with a focus on Italy

Security Affairs

NOVEMBER 5, 2024

The ToxicPanda Android malware has infected over 1,500 devices, enabling attackers to perform fraudulent banking transactions. Cleafy researchers spotted a new Android banking malware, dubbed ToxicPanda, which already infected over 1,500 Android devices. ” reads the report published by Cleafy.

Banking

Banking Malware Accountability Antivirus

Russian authorities arrest three suspects behind Mamont Android banking trojan

Security Affairs

MARCH 28, 2025

Russian authorities arrested three suspects for developing Mamont, a newly identified Android banking trojan. Russian authorities arrested three suspects in Saratov for developing Mamont (Russian for mammoth), a recently discovered Android banking trojan. Mamont can also spread to contacts in the victims messenger app.

Banking

Banking Computers and Electronics Mobile Malware

Coyote Banking Trojan targets Brazilian users, stealing data from 70+ financial apps and websites

Security Affairs

FEBRUARY 4, 2025

Coyote Banking Trojan targets Brazilian users, stealing data from over 70 financial applications and websites. FortiGuard Labs researchers detected a campaign using LNK files executing PowerShell commands to deploy the Coyote Banking Trojan. Then the malware starts monitoring the active window.

Banking

Banking Malware Antivirus Cyber threats

California Cryobank, the largest US sperm bank, disclosed a data breach

Security Affairs

MARCH 19, 2025

California Cryobank, the largest US sperm bank, suffered a data breach exposing customer information. California Cryobank (CCB) is the largest sperm bank in the U.S., providing frozen donor sperm and reproductive services, including egg and embryo storage.

Data breaches

Data breaches Banking Insurance Hacking

Change Healthcare Breach Hits 100M Americans

Krebs on Security

OCTOBER 30, 2024

The chief information security officer for a large academic healthcare system affected by the breach told KrebsOnSecurity they participated in a call with the FBI and were told a third party partner managed to recover at least four terabytes of data that was exfiltrated from Change by the cybercriminal group.

Healthcare

Healthcare Insurance Computers and Electronics Data breaches

Crooks are reviving the Grandoreiro banking trojan

Security Affairs

MARCH 28, 2025

Grandoreiro Banking Trojan resurfaces, targeting users in Latin America and Europe in new phishing campaigns. Forcepoint X-Labs researchers warn of new phishing campaigns targeting Latin America and Europe in new phishing campaigns.

Banking

Banking Phishing Malware Passwords

Experts warn of the new sophisticate Crocodilus mobile banking Trojan

Security Affairs

MARCH 29, 2025

The new Android trojan Crocodilus exploits accessibility features to steal banking and crypto credentials, mainly targeting users in Spain and Turkey. ThreatFabric researchers discovered a new Android trojan called Crocodilus, which exploits accessibility features to steal banking and crypto credentials. ” ThreatFabric concludes.

Banking

Banking Mobile Identity Theft Malware

DoJ seized credit card marketplace PopeyeTools and charges its administrators

Security Affairs

NOVEMBER 24, 2024

Stolen information offered for sale on the carding website included bank account, credit card, and debit card numbers and associated information for conducting transactions. million in revenue.

Cybercrime

Cybercrime Cryptocurrency Banking Accountability

Seychelles Commercial Bank Reported Cybersecurity Incident

Security Affairs

JULY 29, 2025

Seychelles Commercial Bank on Friday said it had recently identified and contained a cybersecurity incident. A hacker claims to have stolen and sold the personal data of clients of Seychelles Commercial Bank. The bank reassures all its internet banking customers that no funds have been accessed.”

Banking

Banking Cybersecurity Internet Internet

FBI warns of malicious free online document converters spreading malware

Security Affairs

MARCH 24, 2025

They can also steal personal data, banking details, cryptocurrency info, emails, and passwords by scraping the files the users upload. .” Fake file converters and download tools may perform advertised tasks but can provide resulting files containing hidden malware, giving criminals access to victims’ devices.

Malware

Malware Identity Theft Scams Antivirus

Cybersecurity Snapshot: CISA Calls for Stamping Out Buffer Overflow Vulnerabilities, as Europol Tells Banks To Prep For Quantum Threat

Security Boulevard

FEBRUARY 14, 2025

Plus, Europol offers best practices for banks to adopt quantum-resistant cryptography. Meanwhile, an informal Tenable poll looks at cloud security challenges. government is urging software makers to adopt secure application-development practices that help prevent buffer overflow attacks.

Banking

Banking Cybercrime Cybersecurity Ransomware

New sophisticate malware SuperCard X targets Androids via NFC relay attacks

Security Affairs

APRIL 21, 2025

The fraud campaign starts with fake bank alerts via SMS or WhatsApp, luring victims to call attackers. Since victims often do not recall their PIN immediately, the attackers guide them through their mobile banking application to retrieve this sensitive information.” ” reads the report published by Cleafy.

Malware

Malware Social Engineering Banking Engineering

Pro-Russia hackers NoName057 targets Italy again after Zelensky’s visit to the country

Security Affairs

JANUARY 12, 2025

” On Saturday, January 11, the attacks targeted Italian ministries and government institutions, while on Sunday a new wave of DDoS attacks hit Italian banks and private businesses. Noname057(16) hackers also hit Italian banks, including Intesa, Monte Paschi di Siena, and Italian ports of the cities of Taranto and Trieste.

DDOS

DDOS Banking Government Marketing

A crime ring compromised Italian state databases reselling stolen info

Security Affairs

OCTOBER 28, 2024

. “Milan prosecutors allege the business intelligence agency tapped into three key databases: one gathering alerts over suspicious financial activities; one used by the national tax agency with citizens’ bank transactions, utility bills, income statements; and the police investigations’ database, the person said.”

Computers and Electronics

Computers and Electronics Banking Marketing Hacking

France’s second-largest telecoms provider Free suffered a cyber attack

Security Affairs

OCTOBER 28, 2024

“No passwords” , “no bank cards” , “no content of communications (emails, SMS, voice messages, etc.)” The company said that passwords and bank card details were not compromised, it also pointed out that its customers’ communications were not exposed. million IBAN details.

Cyber Attacks

Cyber Attacks Telecommunications Data breaches Banking

March Madness Meets Cyber Mayhem: How Cybercriminals Are Playing Offense this Season

SecureWorld News

MARCH 20, 2025

Stephen Kowski, Field CTO at SlashNext Email Security+. Attackers are mimicking tournament brackets, betting promotions, and registration formstricking users into handing over credentials or linking bank accounts to fraudulent sites. Use multi-factor authentication (MFA) : Enable MFA, especially for betting or banking accounts.

Scams

Scams Social Engineering Phishing Mobile

International law enforcement operation dismantled RedLine and Meta infostealers

Security Affairs

OCTOBER 29, 2024

Change passwords : After malware removal, update passwords for key accounts (email, banking, work, social media) and enable two-factor authentication. Monitor financial accounts : Check bank statements and report any suspicious transactions promptly. Use a password manager : Simplifies managing strong, unique passwords across accounts.

Identity Theft

Identity Theft Malware Passwords Banking

Coinbase disclosed a data breach after an extortion attempt

Security Affairs

MAY 15, 2025

.” The security breach did not expose passwords, private keys, or customer funds. Exposed data included contact details, partial SSNs and bank info, ID images, account history, and limited internal documents. “Criminals targeted our customer support agents overseas.

Data breaches

Data breaches Banking Accountability Threat Detection

Cisco states that data published on cybercrime forum was taken from public-facing DevHub environment

Security Affairs

OCTOBER 21, 2024

IntelBroker targeted many major organizations in past attacks, including AMD , AT&T, Bank of America, Microsoft, Europol , SAP, T-Mobile, Verizon, and others. The company has disabled public access to the site while we continue the investigation.

Cybercrime

Cybercrime Data breaches Technology Banking

Cybercriminals Impersonate Dubai Police to Defraud Consumers in the UAE – Smishing Triad in Action

Security Affairs

DECEMBER 10, 2024

A month earlier, Dubai and Abu Dhabi Police warned citizens not to share their confidential information, including their account, card details or online banking credentials. The actors became more creative. The experts estimate the scale of threat actors’ activities: they send between 50,000 and 100,000 messages daily.

Phishing

Phishing Social Engineering Banking DNS

Crooks use a fake antivirus site to spread Venom RAT and a mix of malware

Security Affairs

MAY 28, 2025

DomainTools noted that the fake Bitdefender site also overlaps in timing and infrastructure with other phishing domains impersonating banks and IT services, including sites used to steal logins for Microsoft and the Royal Bank of Canada. ” concludes the report that also provides Indicators of compromise.

Antivirus

Antivirus Malware Banking Cryptocurrency

A new Linux variant of FASTCash malware targets financial systems

Security Affairs

OCTOBER 15, 2024

The experts reported that the ATP group has been using this malware at least since 2016 to siphon millions of dollars from ATMs of small and midsize banks in Asia and Africa. In November 2018, Symantec first discovered the FastCash Trojan , which was used by the North Korea-linked APT group Lazarus in a series of attacks against ATMs.

Malware

Malware Banking Hacking Accountability

Europol dismantles €460M crypto scam targeting 5,000 victims worldwide

Security Affairs

JULY 1, 2025

The criminal network allegedly used global associates and a Hong Kong-based corporate and banking setup to move illicit funds via cash, bank, and crypto transfers. ” Online fraud is a top threat to EU security, with rising scale and sophistication. ” reads the press release published by Europol.

Scams

Scams Cryptocurrency Banking Social Engineering

International law enforcement operation seized the domain of the Russian crypto exchange Garantex

Security Affairs

MARCH 7, 2025

The Garantex Team “ In February, the EU announced sanctions on Garantex for ties to sanctioned Russian banks (Sberbank, T-Bank, and Alfa-Bank), leading Tether to block its wallets. ” read the press release published by the Council of the EU.

Banking

Banking Marketing Cryptocurrency Hacking

FBI shared a list of phishing domains associated with the LabHost PhaaS platform

Security Affairs

MAY 1, 2025

“The platform enabled cyber criminals to impersonate more than 200 organizations, including major banks and government institutions, in an effort to collect personal information and banking credentials from unsuspecting victims worldwide. .” reads the Flash Alert published by the FBI.

Phishing

Phishing Banking Threat Detection Authentication

Nigerian man Sentenced to 26+ years in real estate phishing scams

Security Affairs

NOVEMBER 4, 2024

Once the funds hit the accounts, Mr. Ojelade and his coconspirators withdrew the money or transferred it into other bank accounts.” ” Investigators estimated the actual losses from the fraudulent scheme at $12 million, while prosecutors believe the intended losses exceeded $100 million. “Mr.

Scams

Scams Phishing Identity Theft Accountability

Chinese Cybercriminals Released Z-NFC Tool for Payment Fraud

Security Affairs

APRIL 23, 2025

In one such instance, cybercriminals specifically focused on fraud automation against Barclays , Bank of Scotland , Lloyds Banking Group , Halifax , HSBC , Santander , Wise and Revolut. Primarily, the actors use Android-based phones, with numerous cards “loaded” into mobile wallets for further fraud. How do those apps work?

Banking

Banking Mobile Marketing Hacking

Laboratory Services Cooperative data breach impacts 1.6 Million People

Security Affairs

APRIL 11, 2025

“The specific information involved is not the same for everyone.” Health Insurance Information: This may encompass plan name, plan type, insurance companies, and member/group ID numbers. ” reads the notice of data breach.

Data breaches

Data breaches Insurance Banking Accountability

New Triada Trojan comes preinstalled on Android devices

Security Affairs

APRIL 2, 2025

.” To protect against malware, experts recommend buying smartphones from authorized distributors and installing security solutions like Kaspersky for Android immediately. In March 2018, security researchers at Antivirus firmDr.Web discovered that 42 models of low-cost Android smartphones were shipped with the Android.Triada.231

Cryptocurrency

Cryptocurrency Malware Firmware Antivirus

Morphing Meerkat phishing kits exploit DNS MX records

Security Affairs

MARCH 31, 2025

Phishing emails use generic or spoofed logos, often impersonating banks or shipping services with scare tactics. Attackers adapt phishing pages into over a dozen languages using a JavaScript translation module, enabling large-scale attacks across different regions.

DNS

DNS Phishing Banking Hacking

Lazarus APT stole $1.5B from Bybit, it is the largest cryptocurrency heist ever

Security Affairs

FEBRUARY 22, 2025

Security researchers discovered that the North Korean Lazarus APT group was behindmultiple attacks against banks end cryptocurrency exchanges. This threat actor was involved in cyber espionage campaigns and sabotage activities to destroy data and disrupt systems.

Cryptocurrency

Cryptocurrency Hacking Banking Cybersecurity

Operation SyncHole: Lazarus APT targets supply chains in South Korea

Security Affairs

APRIL 25, 2025

” In South Korea, many government and banking websites require users to install specific security software for functions like anti-keylogging and digital signatures. .” reads the report published by Kaspersky. “This potentially was the starting point for the compromise of further five organizations in South Korea.”

Malware

Malware Software Encryption Hacking

The US Treasury’s OCC disclosed an undetected major email breach for over a year

Security Affairs

APRIL 9, 2025

The confidentiality and integrity of the OCCs information security systems are paramount to fulfilling its mission, said Acting Comptroller of the Currency Rodney E. Some contained sensitive financial data, leading the OCC and Treasury to classify the incident as a major one. The review process is still ongoing.

Accountability

Accountability Banking Information Security Hacking

South African telecom provider Cell C disclosed a data breach following a cyberattack

Security Affairs

APRIL 13, 2025

Compromised data includes full names, contact details, ID numbers, banking information, drivers license numbers, medical records and passport details. ” Cell C has taken swift action to contain a recent cyberattack, secure its systems, and limit the impact. The gang claimed the theft of 2 TB of data.

Data breaches

Data breaches Unstructured Data Identity Theft Healthcare

ZAGG disclosed a data breach that exposed its customers’ credit card data

Security Affairs

DECEMBER 29, 2024

It is best known for producing products like screen protectors, mobile device cases, power banks, wireless charging devices, and other smartphone and tablet accessories. is a consumer electronics accessories company based in the United States.

Data breaches

Data breaches Computers and Electronics Hacking Wireless

U.S. Offers $10M bounty for info on RedLine malware creator and state hackers

Security Affairs

JUNE 6, 2025

Change passwords : After malware removal, update passwords for key accounts (email, banking, work, social media) and enable two-factor authentication. Monitor financial accounts : Check bank statements and report any suspicious transactions promptly. Use a password manager : Simplifies managing strong, unique passwords across accounts.

Malware

Malware Identity Theft Passwords Government

Cartier disclosed a data breach following a cyber attack

Security Affairs

JUNE 4, 2025

. “Based on the investigation, we determined that this incident may have affected some of your information, specifically your name, e-mail address and country. The affected information did not include any passwords, credit card details or other banking information.”

Data breaches

Data breaches Cyber Attacks Manufacturing Banking

Raccoon Infostealer operator sentenced to 60 months in prison

Security Affairs

DECEMBER 20, 2024

FBI identified more than 50 million unique credentials and forms of identification (email addresses, bank accounts, cryptocurrency addresses, credit card numbers, etc.) in the stolen data.

Cryptocurrency

Cryptocurrency Identity Theft Cybercrime Malware

Security Affairs newsletter Round 496 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

NOVEMBER 3, 2024

Chinese threat actors use Quad7 botnet in password-spray attacks FBI arrested former Disney World employee for hacking computer menus and mislabeling allergy info Sophos details five years of China-linked threat actors’ activity targeting network devices worldwide PTZOptics cameras zero-days actively exploited in the wild New LightSpy spyware (..)

Cryptocurrency

Cryptocurrency Hacking Phishing Cyber Attacks

IT Worker arrested for selling access in $100M PIX cyber heist

Security Affairs

JULY 8, 2025

Brazil arrests IT worker João Roque for aiding $100M PIX cyber heist, one of Brazil’s biggest banking system breaches. Brazilian police arrested João Roque (48), an IT employee at C&M, for allegedly aiding a cyberattack that stole over 540 million reais (~$100 million) via the PIX banking system.

Social Engineering

Social Engineering Banking Cybercrime Engineering

Android malware campaigns use.NET MAUI to evade detection

Security Affairs

MARCH 25, 2025

McAfee researchers detailed a fake IndusInd Bank app targeting Indian users, stealing personal and banking data via a hidden malicious.NET MAUI payload. Cybercriminals are using.NET MAUI to create Android malware that evades detection by hiding core functions in C# blob binaries instead of traditional DEX files.

Malware

Malware Encryption Banking Cyber threats

National Consumer Protection Week: Keeping your personal data safe in a digitally connected world

Webroot

MARCH 3, 2025

During this time, many government agencies and consumer protection organizations come together to help educate consumers on how to keep their personal and financial information secure. Each year, the first week of March (March 2-8) is recognized as National Consumer Protection Week (NCPW).

Consumer Protection

Consumer Protection Identity Theft Scams Social Engineering

New version of Android malware FakeCall redirects bank calls to scammers

Hackers stole millions of dollars from Uganda Central Bank

Trending Sources

ToxicPanda Android banking trojan targets Europe and LATAM, with a focus on Italy

Russian authorities arrest three suspects behind Mamont Android banking trojan

Coyote Banking Trojan targets Brazilian users, stealing data from 70+ financial apps and websites

California Cryobank, the largest US sperm bank, disclosed a data breach

Change Healthcare Breach Hits 100M Americans

Crooks are reviving the Grandoreiro banking trojan

Experts warn of the new sophisticate Crocodilus mobile banking Trojan

DoJ seized credit card marketplace PopeyeTools and charges its administrators

Seychelles Commercial Bank Reported Cybersecurity Incident

FBI warns of malicious free online document converters spreading malware

Cybersecurity Snapshot: CISA Calls for Stamping Out Buffer Overflow Vulnerabilities, as Europol Tells Banks To Prep For Quantum Threat

New sophisticate malware SuperCard X targets Androids via NFC relay attacks

Pro-Russia hackers NoName057 targets Italy again after Zelensky’s visit to the country

A crime ring compromised Italian state databases reselling stolen info

France’s second-largest telecoms provider Free suffered a cyber attack

March Madness Meets Cyber Mayhem: How Cybercriminals Are Playing Offense this Season

International law enforcement operation dismantled RedLine and Meta infostealers

Coinbase disclosed a data breach after an extortion attempt

Cisco states that data published on cybercrime forum was taken from public-facing DevHub environment

Cybercriminals Impersonate Dubai Police to Defraud Consumers in the UAE – Smishing Triad in Action

Crooks use a fake antivirus site to spread Venom RAT and a mix of malware

A new Linux variant of FASTCash malware targets financial systems

Europol dismantles €460M crypto scam targeting 5,000 victims worldwide

International law enforcement operation seized the domain of the Russian crypto exchange Garantex

FBI shared a list of phishing domains associated with the LabHost PhaaS platform

Nigerian man Sentenced to 26+ years in real estate phishing scams

Chinese Cybercriminals Released Z-NFC Tool for Payment Fraud

Laboratory Services Cooperative data breach impacts 1.6 Million People

New Triada Trojan comes preinstalled on Android devices

Morphing Meerkat phishing kits exploit DNS MX records

Lazarus APT stole $1.5B from Bybit, it is the largest cryptocurrency heist ever

Operation SyncHole: Lazarus APT targets supply chains in South Korea

The US Treasury’s OCC disclosed an undetected major email breach for over a year

South African telecom provider Cell C disclosed a data breach following a cyberattack

ZAGG disclosed a data breach that exposed its customers’ credit card data

U.S. Offers $10M bounty for info on RedLine malware creator and state hackers

Cartier disclosed a data breach following a cyber attack

Raccoon Infostealer operator sentenced to 60 months in prison

Security Affairs newsletter Round 496 by Pierluigi Paganini – INTERNATIONAL EDITION

IT Worker arrested for selling access in $100M PIX cyber heist

Android malware campaigns use.NET MAUI to evade detection

National Consumer Protection Week: Keeping your personal data safe in a digitally connected world

Stay Connected