Cryptocurrency, DDOS, Hacking and Malware

Fake DDoS protection pages on compromised WordPress sites lead to malware infections

Security Affairs

AUGUST 21, 2022

Threat actors compromise WordPress sites to display fake Cloudflare DDoS protection pages to distribute malware. DDoS Protection pages are associated with browser checks performed by WAF/CDN services which verify if the site visitor is a human or a bot. The file poses as a tool required to bypass the DDoS verification.

DDOS

DDOS Malware Antivirus Firewall

KmsdBot, a new evasive bot for cryptomining activity and DDoS attacks

Security Affairs

NOVEMBER 14, 2022

Researchers spotted a new evasive malware, tracked as KmsdBot, that infects systems via an SSH connection that uses weak credentials. Akamai Security Research discovered a new evasive Golang-based malware, tracked as KmsdBot, that infects systems via an SSH connection that uses weak login credentials. ” Pierluigi Paganini.

DDOS

DDOS Malware Cryptocurrency Architecture

New evolving Abcbot DDoS botnet targets Linux systems

Security Affairs

NOVEMBER 13, 2021

Qihoo 360’s Netlab detailed a new evolving DDoS botnet called Abcbot with wormable capabilities that targets Linux systems. Researchers from Qihoo 360’s Netlab security team have spotted a new botnet, tracked as Abcbot, that targets Linux systems to launch distributed denial-of-service (DDoS) attacks. Pierluigi Paganini.

DDOS

DDOS Malware Passwords Cryptocurrency

PurpleFox malware infected at least 2,000 computers in Ukraine

Security Affairs

FEBRUARY 2, 2024

The Computer Emergency Response Team in Ukraine (CERT-UA) reported that a PurpleFox malware campaign had already infected at least 2,000 computers in the country. Experts defined DirtyMoe as a complex malware that has been designed as a modular system. ” reads the alert published by CERT-UA.

Malware

Malware Internet Internet DDOS

Crooks target Ukraine’s IT Army with a tainted DDoS tool

Security Affairs

MARCH 10, 2022

Threat actors are spreading password-stealing malware disguised as a security tool to target Ukraine’s IT Army. Cisco Talos researchers have uncovered a malware campaign targeting Ukraine’s IT Army , threat actors are using infostealer malware mimicking a DDoS tool called the “Liberator.” 35) on port 6666.

DDOS

DDOS Digital transformation Malware Advertising

New shc Linux Malware used to deploy CoinMiner

Security Affairs

JANUARY 4, 2023

Researchers discovered a new Linux malware developed with the shell script compiler ( shc ) that was used to deliver a cryptocurrency miner. The ASEC analysis team recently discovered that a Linux malware developed with shell script compiler ( shc ) that threat actors used to install a CoinMiner. ” continues the report.

Malware

Malware DDOS Cryptocurrency Firewall

LilithBot Malware, a new MaaS offered by the Eternity Group

Security Affairs

OCTOBER 6, 2022

Researchers linked the threat actor behind the Eternity malware-as-a-service (MaaS) to a new malware strain called LilithBot. Zscaler researchers linked a recently discovered sample of a new malware called LilithBot to the Eternity group (aka EternityTeam; Eternity Project). ” reads the report published by Zscaler.

Malware

Malware DDOS Ransomware Cryptocurrency

New Go-based Redigo malware targets Redis servers

Security Affairs

DECEMBER 1, 2022

Redigo is a new Go-based malware employed in attacks against Redis servers affected by the CVE-2022-0543 vulnerability. Researchers from security firm AquaSec discovered a new Go-based malware that is used in a campaign targeting Redis servers. SecurityAffairs – hacking, Redis). ” reads the analysis published by AquaSec.

Malware

Malware DDOS Architecture Cryptocurrency

Will cryptocurrency mining soon saturate AWS, Microsoft Azure and Google Cloud?

The Last Watchdog

JUNE 20, 2018

Cryptojacking, as defined by the Federal Trade Commission , is the use of JavaScript code to capture cryptocurrencies in users’ browsers without asking permission. Bilogorskiy: Before 2013 a lot of malware was focused on spam, DDoS and monetizing through malicious advertising and ad fraud. Bilogorskiy: Exactly.

Cryptocurrency

Cryptocurrency Passwords Ransomware Malware

Interview With a Crypto Scam Investment Spammer

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. The messages said recipients had earned an investment credit at a cryptocurrency trading platform called moonxtrade[.]com. In May 2020, Zipper told another Lolzteam member that quot[.]pw

Scams

Scams DDOS Cryptocurrency Accountability

New SOVA Android Banking trojan is rapidly growing

Security Affairs

SEPTEMBER 11, 2021

SOVA is a new Android banking trojan that targets banking applications, cryptocurrency wallets, and shopping apps from the U.S. The malware allows attacker to gather sensitive data from infected devices, including banking credentials and PII. two related to first iteration of the malware, and the last one being the newer release.

Banking

Banking DDOS Cryptocurrency Mobile

Security Affairs newsletter Round 397

Security Affairs

DECEMBER 11, 2022

Samsung S22 hacked Sophos fixed a critical flaw in its Sophos Firewall version 19.5 Samsung S22 hacked Sophos fixed a critical flaw in its Sophos Firewall version 19.5 Samsung S22 hacked Sophos fixed a critical flaw in its Sophos Firewall version 19.5 SecurityAffairs – hacking, newsletter ). Pierluigi Paganini.

Firewall

Firewall Banking DDOS Hacking

Abcbot and Xanthe botnets have the same origin, experts discovered

Security Affairs

JANUARY 10, 2022

Experts linked the C2 infrastructure behind an the Abcbot botnet to a cryptocurrency-mining botnet attack that was uncovered in December 2020. Experts linked the infrastructure used by the Abcbot DDoS botnet to the operations of a cryptocurrency-mining botnet that was uncovered in December 2020. ” concludes the report.

Cryptocurrency

Cryptocurrency DDOS Malware Software

Updated Kmsdx botnet targets IoT devices

Security Affairs

AUGUST 28, 2023

KmsdBot is an evasive Golang-based malware that was first detected by Akamai in November 2022, it infects systems via an SSH connection that uses weak login credentials. The malware was employed in cryptocurrency mining campaigns and to launch denial-of-service (DDoS) attacks. ” reads the report published by Akamai.

IoT

IoT DDOS Architecture Internet

Security Affairs newsletter Round 385

Security Affairs

SEPTEMBER 25, 2022

builder Over 39K unauthenticated Redis services on the internet targeted in cryptocurrency campaign Hackers stole $160 Million from Crypto market maker Wintermute U.S. gov adds more Chinese Telecom firms to the Covered List Imperva blocked a record DDoS attack with 25.3 SecurityAffairs – hacking, newsletter).

Cryptocurrency

Cryptocurrency Data breaches DNS DDOS

Security Affairs newsletter Round 395

Security Affairs

NOVEMBER 27, 2022

SecurityAffairs – hacking, newsletter ). Data from 5.4M Data from 5.4M Data from 5.4M Follow me on Twitter: @securityaffairs and Facebook and Mastodon. Pierluigi Paganini. The post Security Affairs newsletter Round 395 appeared first on Security Affairs.

DDOS

DDOS Cybercrime Cryptocurrency Ransomware

Security Affairs newsletter Round 279

Security Affairs

AUGUST 30, 2020

A Google Drive weakness could allow attackers to serve malware Adobe released open- source tool Stringlifier to identify randomly generated strings Canadian delivery company Canpar Express suffered a ransomware attack Cybercriminal greeners from Iran attack companies worldwide for financial gain Dark web Empire Market still down after 3 days.

DDOS

DDOS Scams Malware Advertising

Eternity Project: You can pay $260 for a stealer and $490 for a ransomware

Security Affairs

MAY 15, 2022

Researchers at cybersecurity firm Cyble analyzed a Tor website named named ‘Eternity Project’ that offers for sale a broad range of malware, including stealers, miners, ransomware, and DDoS Bots. The channel was used to share information about malware listings and updates. SecurityAffairs – hacking, malware).

Ransomware

Ransomware DDOS Cybercrime Malware

Cyber Attack news headlines trending on Google

CyberSecurity Insiders

DECEMBER 7, 2022

Going deep into the details, the bank’s IT servers were targeted by a DDoS attack that might have been launched by Anonymous Hacking Group or by a team of pro-Ukrainian hacktivists. As most of the malware can run android apps. .

Cyber Attacks

Cyber Attacks Banking DDOS Healthcare

Log4j Vulnerability Aftermath

Security Affairs

DECEMBER 21, 2021

Uptycs researchers have observed attacks related to miners, DDOS malware and some variants of ransomware actively leveraging LogforShell flaw in log4j. So far we have observed attacks related to coinminers, DDOS malware and some variants of ransomware actively leveraging this vulnerability. DDoS botnet payloads.

DDOS

DDOS Malware Ransomware Cryptocurrency

DirtyMoe botnet infected 100,000+ Windows systems in H1 2021

Security Affairs

JUNE 22, 2021

Experts defined DirtyMoe as a complex malware that has been designed as a modular system. The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. “Both PurpleFox and DirtyMoe are still active malware and gaining strength.”

DNS

DNS Cryptocurrency Internet Internet

Security Affairs newsletter Round 270

Security Affairs

JUNE 28, 2020

SecurityAffairs – hacking, newsletter). Every week the best security articles from Security Affairs free for you in your email box. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

DDOS

DDOS Spyware Advertising Healthcare

Fileless PowerGhost cryptocurrency miner leverages EternalBlue exploit to spread

Security Affairs

JULY 30, 2018

Security experts from Kaspersky Lab have spotted a new cryptocurrency miner dubbed PowerGhost that can spread leveraging a fileless infection technique. “The malware, which we dubbed PowerGhost, is capable of stealthily establishing itself in a system and spreading across large corporate networks infecting both workstations and servers.”

Cryptocurrency

Cryptocurrency DDOS Advertising Malware

AdSense fraud campaign relies on 10,890 sites that were infected since September 2022

Security Affairs

FEBRUARY 14, 2023

In November 2022, researchers from security firm Sucuri reported to have tracked a surge in WordPress malware redirecting website visitors to fake Q&A sites via ois[.]is. The Sucuri SiteCheck detected redirects on over 2,500 sites during September and October, while PublicWWW results show nearly 15,000 websites affected by this malware.

Malware

Malware DDOS Cryptocurrency Hacking

Security Affairs newsletter Round 313

Security Affairs

MAY 9, 2021

SecurityAffairs – hacking, newsletter, cyber security). Every week the best security articles from Security Affairs free for you in your email box. Experts found critical authentication bypass flaw in HPE Edgeline Infrastructure Manager UNC2529, a new sophisticated cybercrime gang that targets U.S. Pierluigi Paganini.

Data breaches

Data breaches DDOS VPN Hacking

Hackers breached four prominent underground cybercrime forums

Security Affairs

MARCH 6, 2021

A suspicious wave of attacks resulted in the hack of four cybercrime forums Verified, Crdclub, Exploit, and Maza since January. Since January, a series of mysterious cyberattacks that resulted in the hack of popular Russian-language cybercrime forums. The hack of the Maza cybercrime forum was also reported by researchers at Flashpoint.

Cybercrime

Cybercrime DDOS Hacking Passwords

Security Affairs newsletter Round 283

Security Affairs

SEPTEMBER 27, 2020

SecurityAffairs – hacking, Newsletter). Every week the best security articles from Security Affairs free for you in your email box. fitness chains Town Sports leaked online Group-IB detects a series of ransomware attacks by OldGremlin HOW DO PROVIDERS IMPLEMENT INTERNET BLOCKING IN BELARUS? Pierluigi Paganini.

IoT

IoT Banking Advertising Ransomware

Security Affairs newsletter Round 364 by Pierluigi Paganini

Security Affairs

MAY 8, 2022

SecurityAffairs – hacking, newsletter). If you want to also receive for free the newsletter with the international press subscribe here. To nominate, please visit:? Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

IoT

IoT DNS Antivirus DDOS

Cyberthreats to financial organizations in 2022

SecureList

NOVEMBER 23, 2021

We should expect more fraud, targeting mostly BTC , because this cryptocurrency is the most popular. Currently, at a value of approximately $60,000, cybercriminals have adapted their malware to monitor the operating system’s clipboard and redirect funds to addresses under their control. MageCart attacks moving to the server side.

Cryptocurrency

Cryptocurrency Banking Cybercrime Ransomware

Security Affairs newsletter Round 411 by Pierluigi Paganini

Security Affairs

MARCH 19, 2023

Much ado about nothing Cisco fixed CVE-2023-20049 DoS flaw affecting enterprise routers Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter) The post Security Affairs newsletter Round 411 by Pierluigi Paganini appeared first on Security Affairs.

DDOS

DDOS Ransomware Phishing Cryptocurrency

New HEH botnet wipes devices potentially bricking them

Security Affairs

OCTOBER 7, 2020

Experts noticed that the malware supports multiple CPU architectures, including x86(32/64), ARM(32/64), MIPS(MIPS32/MIPS-III) and PPC, it is written in the Go open-source programming language. Upon gaining access to the device, the bot downloads one of seven binaries that install the HEH malware. Pierluigi Paganini.

Architecture

Architecture IoT Malware Advertising

Crooks exploit exposed Docker APIs to build AESDDoS botnet

Security Affairs

JUNE 15, 2019

Hence, the malware is executed within an already running container while trying to hide its own presence.” ” The AESDDoS malware is active since at least since 2014 and it was used to build large DDoS botnet. launching DDoS attacker, mining cryptocurrency, etc.). SecurityAffairs – containers, hacking).

DDOS

DDOS Malware Advertising Cryptocurrency

Necro Python bot now enhanced with new VMWare, server exploits

Security Affairs

JUNE 4, 2021

Researchers noticed that malware authors have added multiple exploits for over 10 different web applications and the SMB protocol. The main payloads allow the malware to launch DDoS attacks, sniff and exfiltre network traffic using a SOCKS proxy and install XMRig Monero cryptocurrency mining software. Pierluigi Paganini.

Malware

Malware Passwords DDOS IoT

Security Affairs newsletter Round 350

Security Affairs

JANUARY 23, 2022

SecurityAffairs – hacking, newsletter). If you want to also receive for free the newsletter with the international press subscribe here. from the Lympo NTF platform. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. The post Security Affairs newsletter Round 350 appeared first on Security Affairs.

VPN

VPN Ransomware Spyware DDOS

Security Affairs newsletter Round 305

Security Affairs

MARCH 14, 2021

SecurityAffairs – hacking, newsletter). If you want to also receive for free the international press subscribe here. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. Pierluigi Paganini. The post Security Affairs newsletter Round 305 appeared first on Security Affairs.

Surveillance

Surveillance DDOS Cryptocurrency Ransomware

QSnatch malware already infected thousands of QNAP NAS devices

Security Affairs

NOVEMBER 4, 2019

Security experts warn of a new piece of malware dubbed QSnatch that already infected thousands of QNAP NAS devices worldwide. A new piece of malware dubbed QSnatch is infecting thousands of NAS devices manufactured by the Taiwanese vendor QNAP. At the time of writing, it is still unclear how threat actor will use the malware (i.e.

Malware

Malware Firmware Advertising Encryption

Security Affairs newsletter Round 260

Security Affairs

APRIL 19, 2020

SecurityAffairs – newsletter, hacking). Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Scams

Scams Phishing Advertising DDOS

Security Affairs newsletter Round 294

Security Affairs

DECEMBER 27, 2020

SecurityAffairs – hacking, newsletter). If you want to receive the weekly Security Affairs Newsletter for free subscribe here. Pierluigi Paganini. The post Security Affairs newsletter Round 294 appeared first on Security Affairs.

Hacking

Hacking DDOS VPN Cryptocurrency

DirtyMoe modules expand the bot using worm-like techniques

Security Affairs

MARCH 21, 2022

Experts defined DirtyMoe as a complex malware that has been designed as a modular system. The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. The malware implements six methods to generate IPs with the help of a pseudo-random generator.

Malware

Malware Passwords DDOS Internet

FreakOut botnet target 3 recent flaws to compromise Linux devices

Security Affairs

JANUARY 19, 2021

The attacks aimed at compromising the tarted systems to create an IRC botnet, which can later be used to conduct several malicious activities, including DDoS attacks and crypto-mining campaign. Brute Force – using hard coded credentials With this list, the malware tries connecting to other network devices using Telnet.

DDOS

DDOS DNS Malware Internet

Let’s give a look at the Dark Web Price Index 2022

Security Affairs

JUNE 15, 2022

The huge interest in cryptocurrency is keeping high the price of crypto accounts. Users can also pay for hacked services, a Netflix account with a 1-year subscription goes for $22 ($44 in 2021), while a Bet365 account costs $40.($50 Dark Web Index 2022 also lists malware infections and DDoS attacks. 50 in 2021).

Identity Theft

Identity Theft Accountability DDOS Cybercrime

Threat actors continue to exploit Log4j flaws in their attacks, Microsoft Warns

Security Affairs

JANUARY 5, 2022

Threat actors continue to attempt to exploit Apache Log4J vulnerabilities in their campaigns to deploy malware on target systems, Microsoft warns. We have observed many existing attackers adding exploits of these vulnerabilities in their existing malware kits and tactics, from coin miners to hands-on-keyboard attacks.”

DNS

DNS Malware DDOS Cryptocurrency

Security Affairs newsletter Round 341

Security Affairs

NOVEMBER 20, 2021

SecurityAffairs – hacking, newsletter). Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. The post Security Affairs newsletter Round 341 appeared first on Security Affairs.

Banking

Banking Small Business Data breaches Firmware

Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million

Security Affairs

OCTOBER 18, 2018

Group-IB, an international company that specializes in preventing cyber attacks, has estimated that cryptocurrency exchanges suffered a total loss of $882 million due to targeted attacks in 2017 and in the first three quarters of 2018. According to Group-IB experts, at least 14 crypto exchanges were hacked.

Cyber Attacks

Cyber Attacks Cryptocurrency Phishing Social Engineering

Fake DDoS protection pages on compromised WordPress sites lead to malware infections

KmsdBot, a new evasive bot for cryptomining activity and DDoS attacks

Trending Sources

New evolving Abcbot DDoS botnet targets Linux systems

PurpleFox malware infected at least 2,000 computers in Ukraine

Crooks target Ukraine’s IT Army with a tainted DDoS tool

New shc Linux Malware used to deploy CoinMiner

LilithBot Malware, a new MaaS offered by the Eternity Group

New Go-based Redigo malware targets Redis servers

Will cryptocurrency mining soon saturate AWS, Microsoft Azure and Google Cloud?

Interview With a Crypto Scam Investment Spammer

New SOVA Android Banking trojan is rapidly growing

Security Affairs newsletter Round 397

Abcbot and Xanthe botnets have the same origin, experts discovered

Updated Kmsdx botnet targets IoT devices

Security Affairs newsletter Round 385

Security Affairs newsletter Round 395

Security Affairs newsletter Round 279

Eternity Project: You can pay $260 for a stealer and $490 for a ransomware

Cyber Attack news headlines trending on Google

Log4j Vulnerability Aftermath

DirtyMoe botnet infected 100,000+ Windows systems in H1 2021

Security Affairs newsletter Round 270

Fileless PowerGhost cryptocurrency miner leverages EternalBlue exploit to spread

AdSense fraud campaign relies on 10,890 sites that were infected since September 2022

Security Affairs newsletter Round 313

Hackers breached four prominent underground cybercrime forums

Security Affairs newsletter Round 283

Security Affairs newsletter Round 364 by Pierluigi Paganini

Cyberthreats to financial organizations in 2022

Security Affairs newsletter Round 411 by Pierluigi Paganini

New HEH botnet wipes devices potentially bricking them

Crooks exploit exposed Docker APIs to build AESDDoS botnet

Necro Python bot now enhanced with new VMWare, server exploits

Security Affairs newsletter Round 350

Security Affairs newsletter Round 305

QSnatch malware already infected thousands of QNAP NAS devices

Security Affairs newsletter Round 260

Security Affairs newsletter Round 294

DirtyMoe modules expand the bot using worm-like techniques

FreakOut botnet target 3 recent flaws to compromise Linux devices

Let’s give a look at the Dark Web Price Index 2022

Threat actors continue to exploit Log4j flaws in their attacks, Microsoft Warns

Security Affairs newsletter Round 341

Group-IB: 14 cyber attacks on crypto exchanges resulted in a loss of $882 million

Stay Connected