Security Affairs

JULY 12, 2019

BITPoint Japan-based cryptocurrency announced that hackers have stolen more than $32 million (3.5 billion yen) worth of cryptocurrency due to a cyber attack. BITPoint Japan-based cryptocurrency was victim of a cyber attack, the Remixpoint’s subsidiary announced that hackers have stolen more than $32 million (3.5

Cryptocurrency 87

Cryptocurrency Cyber Attacks Financial Services Advertising 87

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4

Artificial Intelligence 92

Artificial Intelligence Data breaches Scams Insurance 92

Security Affairs

DECEMBER 17, 2023

CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Data breaches 82

Data breaches Cybercrime Firewall Artificial Intelligence 82

Security Affairs

APRIL 4, 2022

During the weekend, multiple owners of Trezor hardware cryptocurrency wallets reported having received fake data breach notifications from Trezor, BleepingComputer first reported. At this time company has already notified impacted customers, which are in the cryptocurrency and finance sectors. Pierluigi Paganini.

Phishing 116

Phishing Data breaches Cryptocurrency Social Engineering 116

Security Affairs

AUGUST 26, 2023

Security consulting giant Kroll disclosed a data breach resulting from a SIM-swapping attack against one of its employees. Security consulting firm Kroll revealed that a SIM-swapping attack against one of its employees caused the theft of user information for multiple cryptocurrency platforms.

Data breaches 89

Data breaches Mobile Accountability Phishing 89

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 93

Data breaches Malware Mobile Spyware 93

Security Affairs

DECEMBER 31, 2021

The Have I Been Pwned data breach notification service now includes credentials for 441K accounts that were stolen by RedLine malware. The Have I Been Pwned data breach notification service now allows victims of the RedLine malware to check if their credentials have been stolen.

Accountability 131

Accountability Malware Data breaches Passwords 131

Security Affairs

JULY 2, 2023

WordPress sites using the Ultimate Member plugin are under attack LockBit gang demands a $70 million ransom to the semiconductor manufacturing giant TSMC Avast released a free decryptor for the Windows version of the Akira ransomware Iran-linked Charming Kitten APT enhanced its POWERSTAR Backdoor miniOrange’s WordPress Social Login and Register plugin (..)

Cybercrime 85

Cybercrime Hacking Ransomware Malware 85

Security Affairs

SEPTEMBER 3, 2022

Google rolled out emergency fixes to address actively exploited Chrome zero-day Samsung discloses a second data breach this year The Prynt Stealer malware contains a secret backdoor. users China-linked APT40 used ScanBox Framework in a long-running espionage campaign Russian streaming platform Start discloses a data breach impacting 7.5M

Data breaches 65

Data breaches Malware Surveillance Ransomware 65

Security Affairs

AUGUST 7, 2018

Group-IB researchers have investigated user data leaks from cryptocurrency exchanges and has analyzed the nature of these incidents. In 2017, when cryptocurrencies were gaining momentum, their record-breaking capitalization and a spike in Bitcoin’s exchange rate led to dozens of attacks on cryptocurrency services.

Cryptocurrency 48

Cryptocurrency Passwords Authentication Accountability 48

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 86

Spyware Hacking Malware Social Engineering 86

Security Affairs

MAY 9, 2021

Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager UNC2529, a new sophisticated cybercrime gang that targets U.S.

Data breaches 87

Data breaches DDOS VPN Hacking 87

Security Affairs

SEPTEMBER 25, 2022

builder Over 39K unauthenticated Redis services on the internet targeted in cryptocurrency campaign Hackers stole $160 Million from Crypto market maker Wintermute U.S. builder Over 39K unauthenticated Redis services on the internet targeted in cryptocurrency campaign Hackers stole $160 Million from Crypto market maker Wintermute U.S.

Cryptocurrency 83

Cryptocurrency Data breaches DNS DDOS 83

Security Affairs

JANUARY 23, 2024

This will mean it is a criminal offence punishable with up to 10 years’ imprisonment to provide assets to Ermakov, or to use or deal with his assets including through cryptocurrency wallets or ransomware payments. “ In November 2022, Medibank announced that personal data belonging to around 9.7M

Government 99

Government Insurance Ransomware Hacking 99

Security Affairs

JUNE 13, 2021

If you want to also receive for free the international press subscribe here. million customers impacted. million customers impacted. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, newsletter).

Data breaches 62

Data breaches Hacking Cryptocurrency Scams 62

Security Affairs

MARCH 7, 2021

Every week the best security articles from Security Affairs free for you in your email box. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. Subscribing to the newsletter you will also receive the best of the international press on cybersecurity, intelligence, and cybercrime.

Data breaches 70

Data breaches Data collection Ransomware Hacking 70

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 76

Malware Cybercrime Cryptocurrency Social Engineering 76

Security Affairs

FEBRUARY 10, 2022

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. Do not provide your mobile number account information over the phone to representatives that request your account password or pin.

Mobile 90

Mobile Cryptocurrency Authentication Accountability 90

Security Affairs

FEBRUARY 4, 2024

The security breach was discovered as a result of a security audit, the company immediately notified relevant authorities. AnyDesk did not reveal if it has suffered a data breach. As a security measure, the threat actor sanitized some of the passwords. ” reported Resecurity.

Software 113

Software Passwords Ransomware Cryptocurrency 113

Security Affairs

DECEMBER 2, 2023

Researchers devised an attack technique to extract ChatGPT training data Fortune-telling website WeMystic exposes 13M+ user records Expert warns of Turtle macOS ransomware US govt sanctioned North Korea-linked APT Kimsuky Black Basta Ransomware gang accumulated at least $107 million in Bitcoin ransom payments since early 2022 Apple addressed 2 new (..)

Ransomware 96

Ransomware Hacking Spyware Cybercrime 96

Security Affairs

DECEMBER 11, 2022

If you want to also receive for free the newsletter with the international press subscribe here. Samsung S22 hacked Sophos fixed a critical flaw in its Sophos Firewall version 19.5

Firewall 91

Firewall Banking DDOS Hacking 91

Security Affairs

MAY 9, 2024

Cybersecurity firm Zscaler is investigating claims of a data breach after hackers offered access to its network. Cybersecurity firm Zscaler is investigating allegations of a data breach following reports that threat actors are offering for sale access to its network. Revenue: $1.8

Data breaches 87

Data breaches Cybercrime Cryptocurrency Internet 87

Security Affairs

MARCH 4, 2023

FiXS, a new ATM malware that is targeting Mexican banks BidenCash leaks 2.1M stolen credit/debit cards Pegasus spyware used to spy on a Polish mayor Hundreds of thousands of websites hacked as part of redirection campaign MQsTTang, a new backdoor used by Mustang Panda APT against European entities Trusted Platform Module (TPM) 2.0

Spyware 82

Spyware Data breaches Retail Ransomware 82

Security Affairs

JANUARY 9, 2022

million accounts were compromised in the FlexBooker data breach Night Sky, a new ransomware operation in the threat landscape North Korea-linked Konni APT targets Russian diplomatic bodies Threat actors stole 1.1 billion from cryptocurrency exchanges Crypto security breaches cause $4.25 Pierluigi Paganini.

Data breaches 65

Data breaches Media Hacking Accountability 65

Security Affairs

SEPTEMBER 11, 2022

IHG suffered a cyberattack that severely impacted its booking process China-Linked BRONZE PRESIDENT APT targets Government officials worldwide Scammers live-streamed on YouTube a fake Apple crypto event US Treasury sanctioned Iran ’s Ministry of Intelligence over Albania cyberattack $30 Million worth of cryptocurrency stolen by Lazarus from Axie Infinity (..)

Data breaches 95

Data breaches Ransomware Phishing Malware 95

Security Affairs

DECEMBER 12, 2021

Western Digital SanDisk SecureAccess flaws allow brute force and dictionary attacks New ‘Karakurt’ cybercrime gang focuses on data theft and extortion Cybereason released Logout4Shell, a vaccine for Log4Shell Apache Log4j RCE Volvo Cars suffers a data breach. Is it a ransomware attack?

Energy and Utilities 64

Energy and Utilities Ransomware Cryptocurrency Data breaches 64

Security Affairs

APRIL 9, 2023

CISA adds Veritas Backup Exec flaws to its Known Exploited Vulnerabilities catalog Apple addressed two actively exploited zero-day flaws MSI confirms security breach after Money Message ransomware attack Microsoft aims at stopping cybercriminals from using cracked copies of Cobalt Strike Phishers migrate to Telegram Money Message ransomware group claims (..)

Computers and Electronics 80

Computers and Electronics Backups Cybercrime Marketing 80

Security Affairs

JANUARY 22, 2023

The Irish DPC fined WhatsApp €5.5M

Data breaches 90

Data breaches Retail Malware VPN 90

Security Affairs

AUGUST 20, 2021

At the time of this writing, it is unclear if the retailer has suffered a data breach, the leak site of the RansomExx gang has yet to include the Brazilian group among the list of targeted organizations. “Information from unofficial sources said Renner paid R$20 million in cryptocurrencies as a ransom.

Ransomware 108

Ransomware Retail Cryptocurrency Data breaches 108

Security Affairs

NOVEMBER 27, 2022

Data from 5.4M

DDOS 116

DDOS Cybercrime Cryptocurrency Ransomware 116

Security Affairs

MAY 6, 2020

Europol announced another success in the fight against cybercrime, today it has arrested five Polish hackers who were members of the Infinity Black hacking group. ” Data amassed by the hackers were obtained from third-party data breaches, they were offered on several hacking forums.

Computers and Electronics 73

Computers and Electronics Hacking Cryptocurrency Accountability 73

Security Affairs

NOVEMBER 14, 2021

Hundreds of thousands of fake warnings of cyberattacks sent from a hacked FBI email server GravityRAT returns disguised as an end-to-end encrypted chat app Intel and AMD address high severity vulnerabilities in products and drivers New evolving Abcbot DDoS botnet targets Linux systems Retail giant Costco discloses data breach, payment card data exposed (..)

Spyware 54

Spyware Data breaches Ransomware Retail 54

Security Affairs

FEBRUARY 26, 2023

Clasiopa group targets materials research in Asia CERT of Ukraine says Russia-linked APT backdoored multiple govt sites UK won the Military Cyberwarfare exercise Defence Cyber Marvel 2 (DCM2) CISA warns of disruptive attacks amid the anniversary of Russia’s invasion of Ukraine Highly evasive cryptocurrency miner targets macOS Hackers are actively exploiting (..)

Social Engineering 80

Social Engineering Cryptocurrency Insurance Malware 80

Security Affairs

NOVEMBER 20, 2021

U.S. (..)

Banking 68

Banking Small Business Data breaches Firmware 68

Security Affairs

FEBRUARY 25, 2024

and U.K.

Spyware 95

Spyware Cyber Insurance Hacking Advertising 95

Security Affairs

JUNE 15, 2022

The huge interest in cryptocurrency is keeping high the price of crypto accounts. Other products available in the cybercrime underground are email databases, most of them are dumps that threat actors aggregate from past dumps. The price varies between $100 up to $120 depending on the volume of data and the source of the data.

Identity Theft 93

Identity Theft Accountability DDOS Cybercrime 93

Security Affairs

FEBRUARY 5, 2022

LockBit ransomware gang claims to have stolen customers’ data from the PayBito crypto exchange. PayBito is a bitcoin and cryptocurrency exchange for major cryptocurrencies including Bitcoin Cash, Bitcoin, Ethereum, HCX, Litecoin, Ethereum Classic.

Ransomware 86

Ransomware Cryptocurrency Hacking Advertising 86