SecureList

NOVEMBER 29, 2024

CloudSorcerer is a sophisticated cyber-espionage tool used for stealth monitoring, data collection and exfiltration via Microsoft, Yandex and Dropbox cloud infrastructures. The data collected about the targets’ companies and contact information could be used to spy on people of interest and lay the groundwork for future attacks.

Energy and Utilities 105

Energy and Utilities Ransomware Malware Government 105

Malwarebytes

SEPTEMBER 29, 2022

A slick tool with its own fully functional dashboard, its sights are set on targets not entirely dissimilar to other data stealers. System data collection, drive enumeration, and loading processes and DLLs into memory are all tell-tale signs that bad things are afoot on the target computer.

Cryptocurrency 93

Cryptocurrency Malware Password Management Data collection 93

Security Boulevard

MARCH 24, 2025

Android Apps Use Bluetooth and WiFi Scanning to Track Users Without GPS Cyber Insider Researchers found that 86% of apps they analyzed collect sensitive data, including location data stemming from scanning Wi-Fi network details, and collecting device identifiers.

Surveillance 75

Surveillance Telecommunications Malware Data breaches 75

Security Affairs

SEPTEMBER 19, 2018

percent of all the data collected, followed by TP-Link that accounted for 9.07%. “More and more exploits are being weaponized by cybercriminals, and infected devices are used to steal personal data and mine cryptocurrencies, on top of traditional DDoS attacks. ” concludes Kaspersky.

IoT 106

IoT Passwords Malware Advertising 106

Security Affairs

MARCH 7, 2021

jailbreaking tool Attackers took over the Perl.com domain in September 2020 Bug bounty hunter awarded $50,000 for a Microsoft account hijack flaw Clop ransomware gang leaks data allegedly stolen from cybersecurity firm Qualys Cyber Defense Magazine – March 2021 has arrived.

Data breaches 80

Data breaches Data collection Ransomware Hacking 80

eSecurity Planet

JANUARY 6, 2022

The role of cryptocurrency in ransomware payments is already facing scrutiny, but as business crypto payments become more commonplace, “there will be an increased emphasis on the security aspects of these new technologies,” says ReliaQuest Enterprise Architect Marcus Carey. DeFi Security to Face Greater Scrutiny.

Ransomware 136

Ransomware Cybersecurity Artificial Intelligence CISO 136

Security Affairs

FEBRUARY 20, 2023

Stealc is able to steal sensitive data from popular web browsers, browser extensions for cryptocurrency wallets, desktop cryptocurrency wallets and also information from other applications, such as email and messenger clients. Attackers can define a set of grabber rules to to steal specific files matching them.

Malware 98

Malware Cryptocurrency Advertising Data collection 98

Security Affairs

FEBRUARY 2, 2019

Attackers can also automate data collection from the device (user’s current physical address, IP address, contents of the clipboard, stored pictures/videos, contact information and more) and send them to the victims to scare them.

Social Engineering 111

Social Engineering Advertising Hacking Data collection 111

CyberSecurity Insiders

APRIL 15, 2021

The report that was compiled after analyzing data collected from Jan’2020 to Dec’2020 from over 1800 organizations gives us an overview of the current trends existing in the mobile landscape. It gives an insight on how organizations can defend themselves against such attacks by following a basic mobile cyber hygiene.

Mobile 70

Mobile Technology Software Risk 70

Malwarebytes

JANUARY 9, 2023

Digging further into the skimmer's infrastructure on Russian-based hosting provider DDoS-Guard, we came across a digital crime haven for cryptocurrency scams, Bitcoin mixers, malware distribution sites and much more. We should note that the sites we found injected with this skimmer had nothing to do with cryptocurrencies themselves.

DDOS 98

DDOS Scams Cryptocurrency Phishing 98

SecureList

JANUARY 28, 2021

Add in more smart health devices, such as smart body scales, glucose level monitors, blood pressure monitors and even toothbrushes and you have huge amounts of data that is invaluable for marketers and insurers. Public awareness of the perils of unfettered data collection is growing, and the free market is taking notice.

Marketing 94

Marketing Data collection Government Encryption 94

Thales Cloud Protection & Licensing

SEPTEMBER 5, 2019

The report found that for IoT in Europe, the primary data security threats lie with attacks on IoT devices, loss or theft of IoT devices, and more broadly a lack of established security frameworks for IoT – all of which ranked higher in Europe than in our global sample.

Technology 91

Technology Digital transformation IoT Big data 91

Security Affairs

NOVEMBER 16, 2018

In 2017-2018 hackers’ interest in cryptocurrency exchanges ramped up. Thus, 60% of the total amount was stolen from Coincheck , a Japanese cryptocurrency exchange. GIB Threat Intelligence cyber threats data collection system has been named one of the best in class by Gartner, Forrester, and IDC. Attacks on Crypto.

Cybercrime 108

Cybercrime Hacking Banking Phishing 108

SecureList

OCTOBER 25, 2023

Introduction It’s just another cryptocurrency miner… Nobody would even suspect the mining malware was merely a mask, masquerading behind an intricate modular framework that supports both Linux and Windows. During that time, it had effectively evaded analysis and had previously been misclassified as a cryptocurrency miner.

Malware 145

Malware DNS Encryption Ransomware 145

SiteLock

AUGUST 27, 2021

Some sneaky malware attacks include backdoors, a type of malware that allows cybercriminals to access a site without the owner’s knowledge, and cryptojacking , which mines websites for cryptocurrency without showing any symptoms. What do I need to secure my website? An SSL certificate.

Small Business 98

Small Business Malware DDOS Engineering 98

Security Affairs

NOVEMBER 19, 2019

CERT-GIB’s report is based on data collected and analyzed by the Threat Detection System (TDS) Polygon as part of operations to prevent and detect threats distributed online in H1 2019 in more than 60 countries. To bypass antivirus systems, hackers send out malicious emails in non-working hours with delayed activation. Dangerous email.

Ransomware 99

Ransomware Antivirus Malware Banking 99

SecureList

SEPTEMBER 6, 2022

Its main stealer functionality involves extracting data such as passwords, cookies, card details, and autofill data from browsers, cryptocurrency wallet secrets, credentials for VPN services, etc. Once a miner file is launched on an affected computer, it starts using the machine’s energy to mine cryptocurrency.

Mobile 131

Mobile Passwords Software Accountability 131

Security Affairs

OCTOBER 10, 2018

GIB Threat Intelligence cyber threats data collection system has been named one of the best in class by Gartner, Forrester, and IDC. On the fake resources, the criminals placed code that was designed to download the Buhtrap and RTM Trojans.

Cyber Attacks 108

Cyber Attacks Banking Cyber threats Phishing 108

Identity IQ

JANUARY 17, 2023

For example, some countries may use a singular set of data protection regulations, whereas the United States decided to divide the data protection law into multiple categories. Let’s take a closer look at the specific data privacy laws that have been implemented in the U.S.:

Data privacy 98

Data privacy Identity Theft Accountability Banking 98

Security Boulevard

MARCH 31, 2022

RedLine is a malware service available for purchase on underground forums that specifically targets the theft of sensitive information: passwords, credit cards, execution environment data, computer name, installed software, and more recently, cryptocurrency wallets and related files. Data collection from FTP clients, IM clients.

Cybersecurity 98

Cybersecurity Social Engineering Passwords Malware 98

SecureList

NOVEMBER 14, 2023

Solutions like XDR, SIEM, and MDM platforms, apart from traditional anti-virus products, enable centralized data collection, accelerate analysis, and correlate security events from various sources, facilitating swift response to complex incidents.

Hacking 140

Hacking Energy and Utilities Media Malware 140

Security Boulevard

JUNE 15, 2023

Stealers" are a kind of malware designed to run on an endpoint post-compromise, while their primary features center on the theft of user data. Key Mystic Stealer functions include its ability to extract data from web browsers and cryptocurrency wallets. All data is encrypted with RC4. But it doesn't stop there.

Cryptocurrency 52

Cryptocurrency Password Management Malware DNS 52

Identity IQ

JUNE 17, 2024

Lack of user control over data. Individual users have little control over the data collection practices of organizations and are at the mercy of the identity verification requirements those organizations enact. This is already common practice with cryptocurrency.

Identity Theft 52

Identity Theft Authentication Data breaches Technology 52

SecureList

MARCH 29, 2023

Meanwhile, cryptocurrency became a prominent target for those seeking monetary gain. The amount of cryptocurrency-related phishing grew significantly in 2022, and with an endless array of new coins, NFT and other DeFi projects, scammers are continuously duping users. All data collected from Kaspersky Security Network was anonymized.

Banking 113

Banking Phishing Cryptocurrency Mobile 113

Malwarebytes

JUNE 30, 2022

So much data, so little time. The popular tool, used for data theft, is ubiquitous where stealing credentials is concerned. Cryptocurrency wallets, cookies, passwords, browser autofill data, and credit card data: pretty much anything is up for grabs. The big change up seems to be related to how data is exfiltrated.

Cryptocurrency 100

Cryptocurrency Malware Data collection Passwords 100

SecureWorld News

JUNE 15, 2023

Verizon has released its 2023 Data Breach Investigations Report (DBIR), the 16th annual publication providing an analysis of real-world data breaches and security incidents. Virtual currency caught Verizon by surprise this year, as there were at least four times as many breaches due to cryptocurrency.

Data breaches 98

Data breaches Social Engineering Engineering Cryptocurrency 98

CyberSecurity Insiders

AUGUST 15, 2022

Some policies do not cover losses incurred by a company indulging in illegitimate data collection of individuals or clients. And if at all such coverage is offered, the inclusion to provide a cover to losses incurred from cryptocurrency steal is dubious. .

Cyber Insurance 90

Cyber Insurance Insurance Data collection Antivirus 90

Security Boulevard

JUNE 3, 2023

Key Points Bandit is a new information stealer that harvests stored credentials from web browsers, FTP clients, email clients, and targets cryptocurrency wallet applications. Bandit collects sensitive information from victims' machines including cookies, saved login data, and credit card information from more than a dozen web browsers.

Computers and Electronics 64

Computers and Electronics Cryptocurrency Malware Data collection 64

SecureList

NOVEMBER 27, 2024

Similarly, Kaspersky GReAT discovered a scheme devised by the Lazarus group, which developed a malicious decoy game disguised as a legitimate P2E platform containing sophisticated malware designed to steal cryptocurrency and sensitive user data.

Artificial Intelligence 96

Artificial Intelligence Scams Phishing Media 96

SecureList

FEBRUARY 16, 2023

These sites referenced public figures and humanitarian groups, offering to accept cash in cryptocurrency, something that should have raised a red flag in itself. By getting the user’s secret phrase, cybercriminals could get access to their cryptocurrency balance. Now, attackers have started collecting Bitcoin for charity.

Phishing 116

Phishing Scams Accountability Energy and Utilities 116

Security Affairs

MARCH 2, 2025

from Bybit, it is the largest cryptocurrency heist ever International Press Newsletter Cybercrime Mining Company NioCorp Loses $500,000 in BEC Hack Inside Black Bastas Exposed Internal Chat Logs: A Firsthand Look The Bleeding Edge of Phishing: darcula-suite 3.0

Cybercrime 61

Cybercrime Hacking Ransomware Cryptocurrency 61

Security Affairs

FEBRUARY 2, 2025

CISA adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog Aquabot variant v3 targets Mitel SIP phones Critical remote code execution bug found in Cacti framework Attackers actively exploit a critical zero-day in Zyxel CPE Series devices Attackers exploit SimpleHelp RMM Software flaws for initial access VMware fixed a flaw (..)

Data breaches 67

Data breaches Cybercrime Healthcare Ransomware 67