Security Affairs

JUNE 24, 2020

The CryptoCore hacker group that is believed to be operating out of Eastern Europe has stolen around $200 million from online cryptocurrency exchanges. Experts from ClearSky states that a hacker group tracked as CryptoCore, which is believed to be operating out of Eastern Europe, has stolen around $200 million from cryptocurrency exchanges.

Cryptocurrency 101

Cryptocurrency Phishing Accountability Passwords 101

Security Affairs

MAY 13, 2024

Password Management : Use strong, unique passwords and implement multi-factor authentication (MFA) whenever possible, prioritizing authentication apps or hardware tokens over SMS text-based codes. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Phorpiex botnet)

Phishing 100

Phishing Ransomware Security Awareness Authentication 100

Security Affairs

FEBRUARY 24, 2023

Trojanized versions of legitimate applications are being used to deploy XMRig cryptocurrency miner on macOS systems. Later first generation samples changed to a user Launch Agent, which would not require the conspicuous password prompt. ” reads the analysis published by the experts. ” concludes the report.

Cryptocurrency 89

Cryptocurrency Malware Software Passwords 89

Security Affairs

MAY 2, 2021

The bold author of a new cryptocurrency stealer, dubbed WeSteal, is promising its customers a leading way to make money in 2021. According to Palo Alto Networks, the author of WeSteal, that goes online as “ComplexCodes,” started advertising the cryptocurrency stealer on underground forums in mid-February 2021. Pierluigi Paganini.

Cryptocurrency 106

Cryptocurrency Malware Advertising System Administration 106

Security Affairs

JULY 15, 2022

Threat actors behind the campaign used multiple accounts across several social media platforms to advertise password-cracking software for Programmable Logic Controller (PLC), Human-Machine Interface (HMI), and project files. The password cracking software also acts as a dropper for the Sality P2P bot. ” concludes the report.

Passwords 111

Passwords Software Firmware Malware 111

Krebs on Security

MAY 4, 2023

government this week put a $10 million bounty on the head of a Russian man who for the past 18 years operated Try2Check , one of the cybercrime underground’s most trusted services for checking the validity of stolen credit card data. This and other “nordia@” emails shared a password: “ anna59.”

Marketing 235

Marketing Cybercrime Accountability Cryptocurrency 235

Security Affairs

JULY 3, 2023

The malware also targets crypto wallet extensions, password managers, and 2FA extensions. The malware also collects a variety of data, including system info, browser info, password manager info, miner related registry info, and installed games info. The malware admin declared that their operations do not involve any ransom activities.

Password Management 80

Password Management Passwords Malware Antivirus 80

Security Affairs

FEBRUARY 24, 2020

Racoon malware , Legion, Mohazo, and Racealer, is an infostealer that recently appeared in the threat landscape that is advertised in hacking forums. The malware is cheap compared to similar threats, it is able to steal sensitive data from about 60 applications, including (browsers, cryptocurrency wallets, email and FTP clients).

Cybercrime 90

Cybercrime Malware Cryptocurrency Advertising 90

Security Affairs

DECEMBER 29, 2023

On Christmas Eve, Resecurity’s HUNTER unit spotted the author of perspective password stealer Meduza has released a new version (2.2). Presently, Meduza password stealer supports Windows Server 2012/2016/2019/2022 and Windows 10/11.

Password Management 124

Password Management Cryptocurrency Passwords Authentication 124

Security Affairs

JUNE 11, 2023

Experts found new MOVEit Transfer SQL Injection flaws The University of Manchester suffered a cyber attack and suspects a data breach Russians charged with hacking Mt. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Social Engineering 88

Social Engineering Data breaches Ransomware Cybercrime 88

Security Affairs

APRIL 14, 2024

The Australian man developed and sold Firebird to customers on a dedicated hacking forum. He is accused of advertising and selling the Hive remote access trojan (RAT) on the “Hack Forums” website. When informed that the target had significant cryptocurrency and project files, Chakhmakhchyan agreed to sell the Hive RAT.

Computers and Electronics 107

Computers and Electronics Advertising Cryptocurrency Malware 107

Krebs on Security

NOVEMBER 8, 2021

million in cryptocurrency sent to another REvil affiliate, and that the U.S. ” These last two nicknames correspond to accounts on several top cybercrime forums way back in 2013, where a user named “Yaroslav2468” registered using the email address yarik45@gmail.com. The DOJ also said it had seized $6.1

Ransomware 298

Ransomware Cybercrime System Administration Passwords 298

Security Affairs

NOVEMBER 15, 2019

On Thursday, US authorities arrested two crooks charging them with stealing $550,000 in cryptocurrency from at least 10 victims using SIM swapping. American law enforcement has declared war to sim swapping scammers and announced the arrest of two individuals for stealing $550,000 in Cryptocurrency. In May, the U.S. Pierluigi Paganini.

Cryptocurrency 80

Cryptocurrency Identity Theft Accountability Media 80

Security Affairs

MAY 18, 2022

Microsoft researchers warn of the rising threat of cryware targeting non-custodial cryptocurrency wallets, also known as hot wallets. Microsoft warns of the rise of cryware, malicious software used to steal info an dfunds from non-custodial cryptocurrency wallets, also known as hot wallets. Password and info stealers.

Cryptocurrency 91

Cryptocurrency Social Engineering Malware Cybercrime 91

SecureWorld News

JULY 25, 2023

A recent report from Mandiant sheds light on the hacking unit operated by North Korea's Reconnaissance General Bureau (RGB), which primarily targets cryptocurrency companies in an effort to fund the country's sanctioned nuclear weapons program.

Cryptocurrency 76

Cryptocurrency VPN Cybercrime Engineering 76

Security Affairs

SEPTEMBER 17, 2018

Palo Alto Network researchers discovered a new malware, tracked as XBash, that combines features from ransomware, cryptocurrency miners, botnets, and worms. The malicious code combines features from different families of malware such as ransomware, cryptocurrency miners, botnets, and worms. Pierluigi Paganini.

Cryptocurrency 89

Cryptocurrency Malware Ransomware Cybercrime 89

Security Affairs

SEPTEMBER 21, 2019

US authorities have indicted two men for hacking the exchange EtherDelta in December 2017, one of them was also accused of TalkTalk hack. US authorities have indicted two men, Elliot Gunton and Anthony Tyler Nashatka, for hacking the cryptocurrency exchange EtherDelta in 2017. SecurityAffairs – TalkTalk, hacking).

Hacking 79

Hacking DNS Cryptocurrency Accountability 79

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4

Artificial Intelligence 90

Artificial Intelligence Data breaches Scams Insurance 90

Security Affairs

FEBRUARY 4, 2024

AnyDesk remarked that its systems don’t store private keys, security tokens or passwords that could be exploited by threat actors to target end-user devices. As a security measure, the threat actor sanitized some of the passwords. The threat actor offered 18,317 accounts for $15,000 to be paid in cryptocurrency.”

Software 111

Software Passwords Ransomware Cryptocurrency 111

Security Affairs

APRIL 5, 2019

Researchers at AT&T Alien Labs have spotted a malware called Xwo that is actively scanning the Internet for exposed web services and default passwords. Experts at AT&T Alien Labs discovered a new piece of malware called Xwo that is actively scanning the Internet for exposed web services and default passwords.

Internet 89

Internet Internet Passwords Malware 89

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M worth of cryptocurrency. Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M worth of cryptocurrency. Attackers also stole funds in other cryptocurrencies.

Cryptocurrency 77

Cryptocurrency VPN Manufacturing Firewall 77

Security Affairs

FEBRUARY 10, 2022

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. Do not provide your mobile number account information over the phone to representatives that request your account password or pin. Use a variation of unique passwords to access online accounts.

Mobile 90

Mobile Cryptocurrency Authentication Accountability 90

The Last Watchdog

SEPTEMBER 28, 2022

Related: The threat of ‘business logic’ hacks. According to a new study, phishing attacks rose 61 percent in 2022, with cryptocurrency fraud increasing 257 percent year-over-year. Because the address comes across as an internal team member, people trust them, ultimately exposing themselves to cybercrime.

Phishing 124

Phishing Scams Cybercrime Passwords 124

Security Affairs

JUNE 4, 2023

Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Spyware 85

Spyware Hacking Malware Social Engineering 85

Security Affairs

MARCH 26, 2020

that is hosting various cybercrime products and services were being sold. was shut down by the FBI today, and its suspected administrator – alleged Russian hacker Kirill Victorovich Firsov – was arrested and charged with crimes related to the hacking of U.S. The Russian man also advertised the platform on other hacking forums.

Cybercrime 112

Cybercrime Advertising Hacking Accountability 112

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 76

Malware Cybercrime Cryptocurrency Social Engineering 76

Security Affairs

FEBRUARY 10, 2021

Europol investigators revealed that the cybercrime organization stole more than $100 million worth of cryptocurrency using SIM Swapping attacks. ” Crooks conducted SIM swapping attacks to steal money, cryptocurrencies and personal information, including contacts synced with online accounts. Pierluigi Paganini.

Cybercrime 80

Cybercrime Cryptocurrency Accountability Authentication 80

Security Affairs

MAY 15, 2022

The operators sell the Stealer module for $260 as an annual subscription, it allows to steal a lot of sensitive information from infected systems, including passwords, cookies, credit cards, and crypto-wallets. SecurityAffairs – hacking, malware). Eternity Stealer. Stolen data are exfiltrated via Telegram Bot. Pierluigi Paganini.

Ransomware 75

Ransomware DDOS Cybercrime Malware 75

Security Affairs

AUGUST 7, 2018

Group-IB researchers have investigated user data leaks from cryptocurrency exchanges and has analyzed the nature of these incidents. In 2017, when cryptocurrencies were gaining momentum, their record-breaking capitalization and a spike in Bitcoin’s exchange rate led to dozens of attacks on cryptocurrency services.

Cryptocurrency 48

Cryptocurrency Passwords Authentication Accountability 48

Malwarebytes

JUNE 14, 2021

source: Wales Online) The coming AI hackers (Source: Harvard Business Review) Hackers steal 26m account logins for Apple, Amazon, Facebook, Netflix and more (Source: Metro) This phishing email is pushing password-stealing malware to Windows PCs (Source: ZDNet) Researchers discover Stem Audio smart speaker eavesdropping risk (Source: The Daily Swig).

Cybercrime 55

Cybercrime Scams VPN Phishing 55

Security Affairs

MAY 20, 2020

The Ukrainian Secret Service (SSU) has arrested a hacker known as Sanix, who was selling billions of stolen credentials on hacking forums and Telegram channels. The man is known in the cybercrime underground for selling billions of stolen credentials. SecurityAffairs – Sanix, hacking). Pierluigi Paganini.

Cybercrime 60

Cybercrime Passwords Advertising Hacking 60

Security Affairs

NOVEMBER 6, 2018

Group-IB and Swiss insurance broker ASPIS that owns CryptoIns project, have developed the world’s first scoring model for assessing cryptocurrency exchanges. Based on the risk score, CryptoIns experts have calculated insurance rates for cryptocurrency exchange users who can now insure their accounts against cyber threats.

Insurance 62

Insurance Cryptocurrency Cyber threats Marketing 62

Security Affairs

AUGUST 4, 2023

60 using the username root and password TestX@!#33. The researchers speculate the packages are part of a highly-targeted attack on developers working in the cryptocurrency sector. “This seems to be another highly-targeted attack on developers involved in the cryptocurrency sphere. . ” concludes the report.

Cryptocurrency 82

Cryptocurrency Marketing Encryption Passwords 82

Security Affairs

MARCH 31, 2022

The malicious code allows stealing user credentials stored in various browsers, as well as many different cryptocurrency wallets. Stolen data are then offered for sale on cybercrime marketplaces. SecurityAffairs – hacking, Mars infostealer). ” The malware is based on the Oski Stealer and it was first spotted in June 2021.

Cryptocurrency 79

Cryptocurrency Malware Cybercrime Advertising 79

Security Affairs

DECEMBER 20, 2023

Writing to the clipboard:a common tactic for stealing cryptocurrency funds. Password encryption keys key4.db db – Stores the master key to decrypt all passwords stored in logins.json. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, JaskaGO)

Malware 110

Malware Passwords Cryptocurrency Software 110

Security Affairs

APRIL 4, 2022

During the weekend, multiple owners of Trezor hardware cryptocurrency wallets reported having received fake data breach notifications from Trezor, BleepingComputer first reported. We also recommend two-factor authentication and other account security measures for our users as added measures to keep accounts and passwords secure.”

Phishing 115

Phishing Data breaches Cryptocurrency Social Engineering 115

Security Affairs

FEBRUARY 5, 2022

PayBito is a bitcoin and cryptocurrency exchange for major cryptocurrencies including Bitcoin Cash, Bitcoin, Ethereum, HCX, Litecoin, Ethereum Classic. The group also claims to have stolen email and password hashes that can be easily decrypted due to the use of a “weak hash algorithm.” SecurityAffairs – hacking, PayBito).

Ransomware 86

Ransomware Cryptocurrency Hacking Advertising 86