Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. The messages said recipients had earned an investment credit at a cryptocurrency trading platform called moonxtrade[.]com. “On Twitter, more spam and crypto scam.”

Scams 252

Scams DDOS Cryptocurrency Accountability 252

Security Affairs

APRIL 28, 2024

Hackers may have accessed thousands of accounts on the California state welfare platform Brokewell Android malware supports an extensive set of Device Takeover capabilities Experts warn of an ongoing malware campaign targeting WP-Automatic plugin Cryptocurrencies and cybercrime: A critical intermingling Kaiser Permanente data breach may have impacted (..)

Cybercrime 89

Cybercrime Spyware Data breaches Antivirus 89

Security Affairs

NOVEMBER 8, 2021

The FBI warns of an increase of fraudulent schemes leveraging cryptocurrency ATMs and QR Codes to facilitate payment. The FBI Internet Crime Complaint Center (IC3) published an alert to warn the public of fraudulent schemes leveraging cryptocurrency ATMs and Quick Response (QR) codes to complete payment transactions.

Cryptocurrency 75

Cryptocurrency Scams Accountability Government 75

Security Affairs

FEBRUARY 24, 2020

The malware is cheap compared to similar threats, it is able to steal sensitive data from about 60 applications, including (browsers, cryptocurrency wallets, email and FTP clients). And this goes beyond usernames and passwords to information that can get them immediate financial gain like credit card information and cryptocurrency wallets.”

Cybercrime 86

Cybercrime Malware Cryptocurrency Advertising 86

Security Affairs

FEBRUARY 19, 2024

The man was held in the Netherlands, and he was charged for his alleged role in the international cybercrime operation known as Raccoon Infostealer. The Raccoon stealer was first spotted in April 2019, it was designed to steal victims’ credit card data, email credentials, cryptocurrency wallets, and other sensitive data.

Identity Theft 87

Identity Theft Cryptocurrency Cybercrime Hacking 87

Security Affairs

MAY 9, 2024

Today Im sellng access to one of the largest cyber security companies. In a previous update, ZScaler reported that their investigation discovered an isolated test environment on a single server (without any customer data) that was exposed to the internet. Revenue: $1.8

Data breaches 82

Data breaches Cybercrime Cryptocurrency Internet 82

Security Affairs

DECEMBER 20, 2023

The Federal Criminal Police Office in Germany (BKA) and the internet-crime combating unit of Frankfurt (ZIT), along with law enforcement agencies from multiple countries (United States, Switzerland, Moldova, and Ukraine), conducted an operation that resulted in the seizure of the dark web marketplace Kingdom Market.

Marketing 99

Marketing Cryptocurrency Accountability Banking 99

Security Affairs

NOVEMBER 5, 2023

CISA adds two F5 BIG-IP flaws to its Known Exploited Vulnerabilities catalog Threat actors actively exploit F5 BIG-IP flaws CVE-2023-46747 and CVE-2023-46748 Pro-Hamas hacktivist group targets Israel with BiBi-Linux wiper British Library suffers major outage due to cyberattack Critical Atlassian Confluence flaw can lead to significant data loss WiHD (..)

Cyber Insurance 94

Cyber Insurance Cryptocurrency Internet Internet 94

Security Affairs

JANUARY 13, 2024

Akira ransomware targets Finnish organizations GitLab fixed a critical zero-click account hijacking flaw Juniper Networks fixed a critical RCE bug in its firewalls and switches Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467 Team Liquid’s wiki leak exposes (..)

VPN 100

VPN Cybercrime Ransomware Hacking 100

Security Affairs

MAY 3, 2024

“Apart from the EdgeRouter devices, we also found compromised Raspberry Pi and other internet-facing devices in the botnet. . “We attribute the NTLMv2 hash relay attacks and the proxying of credential phishing to Pawn Storm, while the pharmaceutical spam looks to be related to the infamous Canadian Pharmacy gang.”

Phishing 91

Phishing Cryptocurrency Internet Internet 91

Security Affairs

FEBRUARY 4, 2024

Clorox estimates the costs of the August cyberattack will exceed $49 Million Mastodon fixed a flaw that can allow the takeover of any account Iranian hackers breached Albania’s Institute of Statistics (INSTAT) Operation Synergia led to the arrest of 31 individuals Ex CIA employee Joshua Adam Schulte sentenced to 40 years in prison Cloudflare breached (..)

Identity Theft 99

Identity Theft VPN Malware Ransomware 99

Security Affairs

JULY 2, 2023

WordPress sites using the Ultimate Member plugin are under attack LockBit gang demands a $70 million ransom to the semiconductor manufacturing giant TSMC Avast released a free decryptor for the Windows version of the Akira ransomware Iran-linked Charming Kitten APT enhanced its POWERSTAR Backdoor miniOrange’s WordPress Social Login and Register plugin (..)

Cybercrime 81

Cybercrime Hacking Ransomware Malware 81

Security Affairs

APRIL 28, 2023

The malware allows operators to steal login credentials from popular services such as social media platforms and cryptocurrency wallets, then stolen data is sold on cybercrime forums by the operators. CryptBot distributors spread the malware through modified versions of legitimate software such as Google Earth Pro and Google Chrome.

Malware 88

Malware Cybercrime Cryptocurrency Media 88

Security Affairs

MAY 26, 2021

Last week, French authorities have seized the dark web marketplace Le Monde Parallèle, it is another success of national police in the fight against cybercrime. French authorities seized the dark web marketplace Le Monde Parallèle, the operation is another success of national police in the fight against cybercrime activity in the dark web.

Cybercrime 139

Cybercrime Cryptocurrency Banking Mobile 139

Security Affairs

APRIL 7, 2021

” According to the Italian media , the man hired the hitman through an internet assassination service on the TOR network, was agreed to pay about €10 000 worth in Bitcoins. The Italian crypto service provider provided information to the Polizia Postale to identify the Italian suspect.

Cryptocurrency 54

Cryptocurrency Cybercrime Internet Internet 54

Security Affairs

OCTOBER 26, 2022

The man is currently being held in the Netherlands, he was charged for his alleged role the international cybercrime operation known as Raccoon Infostealer. The Raccoon stealer was first spotted in April 2019, it was designed to steal victims’ credit card data, email credentials, cryptocurrency wallets, and other sensitive data.

Identity Theft 76

Identity Theft Cryptocurrency Cyber threats Cybercrime 76

Security Affairs

AUGUST 27, 2023

million in critical infrastructure cyber projects via new program Ivanti Ships Urgent Patch for API Authentication Bypass Vulnerability Defense contractor Belcan leaks admin password with a list of flaws Leaseweb is restoring ‘critical’ systems after security breach Microsoft is now a cybersecurity titan.

Cybercrime 74

Cybercrime Hacking Cryptocurrency Ransomware 74

Security Affairs

MARCH 5, 2023

The experts pointed out that the Colour-Blind malware “points to the democratization of cybercrime” allowing threat actors to develop their own variants based on the shared source code. . “The malware triggers multiple subprocesses, including threads for cookies, passwords and cryptocurrency wallet theft.”

Malware 87

Malware Cryptocurrency Passwords Cybercrime 87

Security Affairs

AUGUST 12, 2023

and “no-log policy,” they were accepting payments in cryptocurrencies. This latest success in the fight against cybercrime follows a complex investigation supported by Europol and the US Federal Bureau of Investigation (FBI).” A joint operation conducted by European and U.S.

Cybercrime 72

Cybercrime DDOS Ransomware Cryptocurrency 72

Security Affairs

NOVEMBER 7, 2021

Casinos of tribal communities are losing millions in Ransomware attacks Threat actors stole $55 million worth of cryptocurrency from bZx DeFi platform Philips Tasy EMR healthcare infomatics solution vulnerable to SQL injection White hat hackers earn over $1 Million at Pwn2Own Austin 2021 A drone was modified to disrupt U.S. Operators made $2.1

Data breaches 77

Data breaches Cryptocurrency Ransomware Hacking 77

Security Affairs

NOVEMBER 9, 2021

Threat actors execute malicious scripts to deploy Monero cryptocurrency miners, perform container-to-host escape using well-known techniques, and scan the Internet for exposed ports from other compromised containers. The attack chain starts with the creation of a container on a vulnerable host using an exposed Docker REST API.

Cryptocurrency 93

Cryptocurrency Malware Cybercrime Architecture 93

Security Affairs

FEBRUARY 10, 2022

In 2018, the FBI Internet Crime Complaint Center (IC3) received complaints for 1,611 SIM swapping attacks, while the number of complaints in the period between 2018 e 2002 was 320 causing a total of losses of $12 million. ” reads the Publish Service Announcement published by the IC3.

Mobile 86

Mobile Cryptocurrency Authentication Accountability 86

Security Affairs

FEBRUARY 10, 2021

Europol investigators revealed that the cybercrime organization stole more than $100 million worth of cryptocurrency using SIM Swapping attacks. “This enabled them to steal money, bitcoin and personal information, including contacts synced with online accounts. . SecurityAffairs – hacking, cybercrime).

Cybercrime 76

Cybercrime Cryptocurrency Accountability Authentication 76

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M worth of cryptocurrency. Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M worth of cryptocurrency. ” continues the notice.

Cryptocurrency 74

Cryptocurrency VPN Manufacturing Firewall 74

Security Affairs

MAY 26, 2021

“Most of the compromised nodes were from China and the US identified in the ISP (Internet Service Provider) list, which had Chinese and US-based providers as the highest hits, including some CSPs (Cloud Service Providers).” The malware deploys the XMRig mining tool to mine Monero cryptocurrency. aws/credentials and ~/.aws/config

Cryptocurrency 127

Cryptocurrency Malware Internet Internet 127

Security Affairs

FEBRUARY 10, 2022

Enjoy” How has spyware changed the rules of cyber security in recent years? What will cyber security look like now that those tools are all over the internet? Spyware are powerful weapons in the arsenal of governments and cybercrime gangs. Is making the internet a safe place technically possible?

Spyware 85

Spyware Hacking Ransomware Surveillance 85

Security Affairs

FEBRUARY 5, 2021

At the end of January, the group has improved its Linux cryptocurrency miner by implementing open-source detection evasion capabilities. The malware deploys the XMRig mining tool to mine Monero cryptocurrency. The TeamTNT botnet is a crypto-mining malware operation that has been active since April 2020 and that targets Docker installs.

Malware 107

Malware DNS Cryptocurrency Internet 107

Security Affairs

MARCH 6, 2024

Once attackers gained initial access to a system, they used a series of shell scripts and employed Linux attack techniques to drop and execute a cryptocurrency miner. The Golang payloads deployed in this campaign allow attackers to identify misconfigured or vulnerable Internet-facing Hadoop, Confluence, Docker, and Redis instances.

Malware 135

Malware Cryptocurrency Engineering Internet 135

Security Affairs

MARCH 26, 2020

that is hosting various cybercrime products and services were being sold. companies for customers’ personal information.” platform, an automated set-up wizard allowed the owner to upload the products and services offered through the shop and configure the payment process via cryptocurrency wallets. ” “Deer.io

Cybercrime 109

Cybercrime Advertising Hacking Accountability 109

Security Affairs

AUGUST 28, 2023

Researchers spotted an updated version of the KmsdBot botnet that is now targeting Internet of Things (IoT) devices. The Akamai Security Intelligence Response Team (SIRT) discovered a new version of the KmsdBot botnet that employed an updated Kmsdx binary targeting Internet of Things (IoT) devices.

IoT 85

IoT DDOS Architecture Internet 85

Security Affairs

DECEMBER 11, 2022

Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. Samsung S22 hacked Sophos fixed a critical flaw in its Sophos Firewall version 19.5

Firewall 87

Firewall Banking Hacking DDOS 87

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4

Artificial Intelligence 85

Artificial Intelligence Data breaches Scams Insurance 85

Security Boulevard

JANUARY 25, 2022

Folks, Who wants to dive deep into some of my latest commercially available research and stay on the top of their OSINT/cybercrime research and threat intelligence gathering game that also includes their team and organization? Dancho Danchev’s “Astalavista Security Group – Investment Proposal” Presentation – A Photos Compilation.

Cybercrime 96

Cybercrime Hacking Scams Ransomware 96

Security Affairs

JANUARY 3, 2024

Resecurity has uncovered a cybercriminal faction known as “ GXC Team “, who specializes in crafting tools for online banking theft, ecommerce deception, and internet scams. This approach was used to deceive individuals into sharing sensitive information with malicious actors.

Artificial Intelligence 111

Artificial Intelligence Banking Scams Cybercrime 111

Security Affairs

DECEMBER 26, 2022

The advertisements impersonate websites of financial organizations and cryptocurrency exchange platforms. The landing websites were designed to prompt users to enter login credentials and financial information. Use an ad blocking extension when performing internet searches. ” reads the advisory published by the FBI.

Advertising 85

Advertising Engineering Education Internet 85

Security Affairs

JULY 21, 2022

The gang focuses on infecting cloud hosts to deploy cryptocurrency miners by exploiting known vulnerabilities and conducting brute-force attacks. PwnRig cryptocurrency miner execution. The 8220 Gang selects victims by identifying them through their internet accessibility. ” concludes the report.

Cryptocurrency 84

Cryptocurrency Malware Internet Internet 84

Security Affairs

JANUARY 9, 2023

The crypto-miner Kinsing was first spotted by security firm Aqua Security in April 2020, at the time the experts spotted threat actors scanning the Internet for Docker servers running API ports exposed without a password. The Kinsing malware abuses the resources of the Docker installations to mine cryptocurrency.

Malware 87

Malware Authentication Cryptocurrency Internet 87