Security Affairs

OCTOBER 2, 2021

Android has detected that your device has been infected,” states the fake security warning observed by the researchers. “FluBot is an Android spyware that aims to steal financial login and password data from your device. You must install an Android security update to remove FluBot.” ” states the report.

Banking 120

Banking Malware Spyware Passwords 120

Security Affairs

NOVEMBER 22, 2019

The Russian hacker who created and used Neverquest banking malware has finally been sentenced to 4 years in prison by a US District Court. The Neverquest was used by cyber criminals to steal login credentials from banking customers, it leverages on injection mechanisms to provide users fake forms into legitimate banking websites.

Banking 104

Banking Malware Advertising Passwords 104

Security Affairs

MAY 31, 2023

Real estate agencies handle sensitive data, including customers’ personally identifiable information, bank account details, and other data highly valued by cybercriminals. The file contained PostgreSQL and Redis databases credentials, including host, port, username, and password. Ensuring cybersecurity is vital.

Passwords 95

Passwords Phishing Accountability Banking 95

Security Affairs

MARCH 31, 2021

Experts warn that cybercriminals are targeting Indonesia’s major banks posing as bank representatives or customer support team members on Twitter. To lure victims, cybercriminals pose as bank representatives or customer support team members on Twitter. From January to early March 2021, this scheme grew in scope 2.5-fold

Banking 96

Banking Scams Accountability Media 96

Security Affairs

DECEMBER 18, 2023

These pieces of malware are created with the intent of stealing valuable data, such as login credentials, financial information, personal details, and more. This data may include usernames, passwords, credit card numbers, social security numbers, and other sensitive information.

Banking 116

Banking Cybercrime Malware Accountability 116

Security Affairs

AUGUST 16, 2019

The European Central Bank (ECB) announced that threat actors had access for months to the contact information of hundreds of financial industry subscribers to its newsletter. According to the organization, hackers infected with a malware an external server that hosts the Banks’ Integrated Reporting Dictionary (BIRD).

Data breaches 81

Data breaches Banking Advertising Marketing 81

Security Affairs

JANUARY 15, 2020

P&N Bank discloses data breach, customer account information, balances exposed. The Australian P&N Bank is notifying its customers a data breach that has exposed personally identifiable information (PII) and sensitive account data. The bank hired external experts to help it in investigating the incident.

Data breaches 59

Data breaches Banking Cyber Attacks Accountability 59

Security Affairs

NOVEMBER 15, 2023

Source: Cybernews The information exposed in this data leak could have been exploited for fraud, identity theft, phishing attempts, or as a source of data for meticulously targeted cyberattacks.

Passwords 106

Passwords Identity Theft Social Engineering Spyware 106

Security Affairs

JUNE 17, 2019

Security researchers at Cofense have spotted a phishing campaign aimed at commercial banking customers distributing a new remote access trojan (RAT) tracked as WSH RAT. Threat actors are using the RAT to deliver keyloggers and information stealers. ” reads the analysis published by Cofence. Pierluigi Paganini.

Banking 103

Banking Phishing Advertising Malware 103

Security Affairs

FEBRUARY 19, 2019

According to a new research conducted by Group-IB experts, 74 percent of Russian banks were not ready for cyberattacks. Even so, 74 percent of Russian banks were not ready for cyberattacks , 29 percent were found to be actively infected with malware, and in 52 percent of cases traces of past attacks were detected.

Banking 76

Banking Marketing Cybercrime Information Security 76

Security Affairs

AUGUST 13, 2019

Security experts analyzed a new interesting Android banking Trojan, dubbed Cerberus, that is offered for rent by its author. The malware implements banking Trojan capabilities such as the use of overlay attacks, the ability to intercept SMS messages and access to the contact list. ” continues the report.

Banking 94

Banking Malware Advertising Social Engineering 94

Security Affairs

JUNE 29, 2019

. “Backups of employees’ OneDrive accounts were also present and spanned the wide range of information that employees need to perform their jobs: email correspondence, system passwords, sales and marketing contact information, project specifications, and more.” Pierluigi Paganini.

Banking 94

Banking Backups Big data Advertising 94

Daniel Miessler

MARCH 10, 2022

In that post we talked about 8 levels of password security, starting from using shared and weak passwords and going all the way up to passwordless. A growing percentage of malware packages now include prompts for not only a username and password, but also an MFA code. Get started with WebAuthn >>.

Authentication 364

Authentication Phishing Passwords Accountability 364

Security Affairs

FEBRUARY 23, 2024

The telecommunications provider pointed out that no financial information (credit or debit card numbers, banking details) has been compromised. No driver’s licence numbers, ID documentation details, banking details or passwords have been disclosed as a result of this incident.” ”continues the statement.

Data breaches 96

Data breaches Telecommunications Banking Mobile 96

Security Affairs

FEBRUARY 27, 2021

‘Hotarus Corp’ Ransomware operators hacked Ecuador’s largest private bank, Banco Pichincha, and the country’s Ministry of Finance. ?A The group claims to have also stolen data from the Banco Pichincha bank and infected a system at Ministry of Finance using for training purposes with PHP-based ransomware.

Hacking 138

Hacking Banking Ransomware Passwords 138

Security Affairs

FEBRUARY 12, 2024

Public Wi-Fi users are prime targets for MITM attacks because the information they send is often not encrypted, meaning it’s easy for hackers to access your data. Once they’re in, they can grab your emails, usernames, passwords, and more. They might even lock you out of your own accounts by resetting your passwords.

DNS 126

DNS VPN Encryption Passwords 126

Security Affairs

DECEMBER 29, 2023

On Christmas Eve, Resecurity’s HUNTER unit spotted the author of perspective password stealer Meduza has released a new version (2.2). Altogether, Meduza makes a great competitor to Azorult , Redline , Racoon , and Vidar Stealer used by cybercriminals for account takeover (ATO), online-banking theft, and financial fraud.

Password Management 128

Password Management Cryptocurrency Passwords Authentication 128

Security Affairs

OCTOBER 17, 2021

The customers of Banco Pichincha, the largest bank in Ecuador, are still experiencing service disruptions after a massive cyberattack hit the financial organization early this week. The cyberattack took place over the last weekend and forced the bank to shut down a large part of its computer network in response to the incident.

Banking 98

Banking InfoSec Cyber Attacks Cybercrime 98

Malwarebytes

NOVEMBER 23, 2021

million active and inactive customer data, including email addresses, original WordPress admin passwords, Secure File Transfer Protocol (sFTP) and database credentials, and SSL private keys. According to initial investigations, the intruder used a compromised password to access legacy code in GoDaddy’s environment to steal data.

Passwords 144

Passwords Accountability CISO Banking 144

Security Affairs

FEBRUARY 4, 2024

Some users may not have changed their password, or this process might still be ongoing. Per a public statement from AnyDesk on February 2, 2024, “ as a precaution, we (AnyDesk) are revoking all passwords to our web portal, my.anydesk.com, and we recommend that users change their passwords if the same credentials are used elsewhere.

Scams 128

Scams Passwords Phishing Accountability 128

The Last Watchdog

APRIL 13, 2022

Enforce strong passwords and implement multi-factor authentication (MFA) — by educating users about using a unique password for each account and enforcing higher security for privileged accounts (administrators, root). Therefore, educating your employees about the importance of security to your network is critical.

Cybersecurity 214

Cybersecurity Cybercrime Education Government 214

Security Affairs

JANUARY 2, 2024

The content of the messages attempted to trick the recipients into opening a password-protected RAR archive. Altogether, Meduza makes a great competitor to Azorult , Redline , Racoon , and Vidar Stealer used by cybercriminals for account takeover (ATO), online-banking theft, and financial fraud. net on 2023-04-30.

Malware 116

Malware Passwords Cryptocurrency Hacking 116

Security Affairs

JANUARY 3, 2024

Resecurity has uncovered a cybercriminal faction known as “ GXC Team “, who specializes in crafting tools for online banking theft, ecommerce deception, and internet scams. Upon detection, it alters the banking information of the intended recipient (like the victim’s supplier) to details specified by the perpetrator.

Artificial Intelligence 119

Artificial Intelligence Banking Scams Cybercrime 119

Security Affairs

DECEMBER 11, 2023

The company told them that threat actors gained access to full names, residence addresses, contract information, lease-purchase details, and IBAN (International Bank Account Number). Toyota Financial Services warns its German customers to remain vigilant and contact their bank to take additional security precautions.

Financial Services 115

Financial Services Data breaches Identity Theft Banking 115

Security Affairs

JANUARY 19, 2024

. “However, VF does not collect or retain in its IT systems any consumer social security numbers, bank account information or payment card information as part of its direct-to-consumer practices, and, while the investigation remains ongoing, VF has not detected any evidence to date that any consumer passwords were acquired by the threat actor.”

Data breaches 116

Data breaches Retail Insurance Passwords 116

CyberSecurity Insiders

JANUARY 30, 2023

Accessed information includes data related to phone numbers, email accounts, addresses, names, the location where the order was delivered, and the final 4 digits of bank cards. JD Sports has assured that hackers accessed no passwords related to their accounts and issued an apology for failing to protect the customer info.

Data breaches 109

Data breaches Retail Identity Theft Social Engineering 109

Security Affairs

SEPTEMBER 15, 2022

Threat actors used employees’ publicly-available Personally Identifiable Information (PII) and social engineering techniques to impersonate victims and obtain access to files, healthcare portals, payment information, and websites. million payments. The attacker stole $3.1 million with this attack.

Healthcare 83

Healthcare Social Engineering Accountability Passwords 83

Security Affairs

APRIL 18, 2024

. “Australian offenders are allegedly among 10,000 cybercriminals globally who have used the platform, known as LabHost, to trick victims into providing their personal information, such as online banking logins, credit card details and passwords, through persistent phishing attacks sent via texts and emails.”

Phishing 102

Phishing Cybercrime Passwords Banking 102

Security Affairs

JUNE 11, 2023

Microsoft researchers warn of banking adversary-in-the-middle (AitM) phishing and BEC attacks targeting banking and financial organizations. Microsoft discovered multi-stage adversary-in-the-middle (AiTM) phishing and business email compromise (BEC) attacks against banking and financial services organizations.

Phishing 93

Phishing Banking Financial Services Authentication 93

Security Affairs

JULY 8, 2021

The American multinational investment bank and financial services firm Morgan Stanley discloses a data breach caused by the hack of an Accellion FTA server of a third-party vendor. The company pointed out that exposed files did not contain passwords that could be used to access financial accounts. ” reads the letter.

Data breaches 119

Data breaches Hacking Banking Financial Services 119

Security Affairs

DECEMBER 25, 2021

The phishing messages use weaponized Word or Excel attachments to install the Dridex banking Trojan. The messages use a password-protected Excel attachment, the password is provided in the content of the message. The message attempts to trick the victims into enabling the macros to correctly view the content of the attachments.

Phishing 129

Phishing Passwords Banking Malware 129

Security Affairs

JANUARY 26, 2024

Dunaev pleaded guilty on November 30, 2023, he admitted to conspiring to engage in computer fraud and identity theft, as well as conspiring to commit wire fraud and bank fraud. A for being a developer for the TrickBot gang since 2016. ” reads the press release published by DoJ. million via ransomware deployed by Trickbot.”

Malware 102

Malware Identity Theft Banking Ransomware 102

Security Affairs

AUGUST 31, 2022

. “Specialists randomly checked random entries from the database through the password recovery function on the online cinema website: all logins turned out to be valid.” The company added that browsing history or passwords were not included in the stolen database. ” reads the data breach notice published on Telegram.

Data breaches 87

Data breaches Passwords Banking Media 87

Security Affairs

OCTOBER 21, 2022

EnergyAustralia pointed out that sensitive data, such as passwords, banking information, driver licences, or passports, were not compromised because they were not stored on the platform. “It added that impacted customers had been contacted by text and email on October 2 with a prompt to reset their passwords.”. .

Passwords 60

Passwords Small Business Banking Retail 60

Security Affairs

AUGUST 7, 2022

Greek intelligence service used surveillance malware to spy on a journalist, Reuters reports Slack resets passwords for about 0.5% of its users due to the exposure of salted password hashes Twitter confirms zero-day used to access data of 5.4 Pierluigi Paganini. SecurityAffairs – hacking, newsletter).

Spyware 125

Spyware Manufacturing Small Business Surveillance 125

Security Affairs

APRIL 8, 2021

The database was posted on a different underground forum and contained 12,344 records of the card shop admins, sellers and buyers including their nicknames, hashed passwords, contact details, history of activity, and current balance. Cardshop users, however, were recommended to change the passwords shortly after the breach report came out.

Banking 107

Banking Insurance Passwords Accountability 107

Security Affairs

DECEMBER 5, 2022

Such malicious scenarios are purposely developed by fraudsters and used for online-banking theft and financial fraud. According to the experts from Resecurity, the identified “In The Box” marketplace may now proudly be called the largest and most significant catalyst for banking theft and fraud involving mobile devices.

Mobile 102

Mobile Malware Banking Retail 102