The Last Watchdog

SEPTEMBER 6, 2023

Over time, Bitcoin has become the most widely used cryptocurrency in the world. Use strong passwords, 2FA. The security of your Bitcoin wallet is mostly dependent on the strength of your passwords. Use uppercase, lowercase, digits, special characters, and a combination of them to create strong, one-of-a-kind passwords.

Cryptocurrency 100

Cryptocurrency Backups Passwords Software 100

Security Affairs

FEBRUARY 24, 2023

Researchers warn of an evasive cryptojacking malware targeting macOS which spreads through pirated applications Jamf Threat Labs researchers reported that an evasive cryptojacking malware targeting macOS was spotted spreading under the guise of the Apple-developed video editing software, Final Cut Pro.

Cryptocurrency 90

Cryptocurrency Malware Software Passwords 90

Malwarebytes

DECEMBER 1, 2021

Security researchers have discovered banking Trojan apps on the Google Play Store, and say they have been downloaded by more than 300,000 Android users. As you may know, banking Trojans are kitted for stealing banking data like your username and password, and two-factor authentication (2FA) codes that you use to login to your bank account.

Malware 117

Malware Banking Authentication Cryptocurrency 117

Security Affairs

JANUARY 4, 2023

Researchers discovered a new Linux malware developed with the shell script compiler ( shc ) that was used to deliver a cryptocurrency miner. The ASEC analysis team recently discovered that a Linux malware developed with shell script compiler ( shc ) that threat actors used to install a CoinMiner. ” continues the report.

Malware 93

Malware DDOS Cryptocurrency Firewall 93

Bleeping Computer

APRIL 24, 2021

Cybercriminals have created a fake Microsoft DirectX 12 download page to distribute malware that steals your cryptocurrency wallets and passwords. [.].

Malware 107

Malware Cryptocurrency Passwords 107

SecureList

JUNE 5, 2023

Satacom downloader, also known as LegionLoader, is a renowned malware family that emerged in 2019. It is known to use the technique of querying DNS servers to obtain the base64-encoded URL in order to receive the next stage of another malware family currently distributed by Satacom.

Cryptocurrency 78

Cryptocurrency DNS Malware Encryption 78

Malwarebytes

APRIL 3, 2023

A new macOS malware—called MacStealer—that is capable of stealing various files, cryptocurrency wallets, and details stored in specific browsers like Firefox, Chrome, and Brave, was discovered by security researchers from Uptycs, a cybersecurity company specializing in cloud security. Users of macOS Catalina (10.5)

Malware 97

Malware Passwords Cryptocurrency Password Management 97

Malwarebytes

FEBRUARY 22, 2022

The researchers dubbed this malware Xenomorph because it shows similarities to another banking Trojan that is generally known as Alien. In reality this application was a Trojan dropper which contacted a remote server and downloaded one of several payloads based on certain parameters. Fast Cleaner.

Banking 103

Banking Backups Malware Cryptocurrency 103

Security Affairs

AUGUST 10, 2023

Zscaler ThreatLabz researchers discovered a new information stealer malware, called Statc Stealer, that can steal a broad range of info from Windows devices. The malware can steal sensitive information from various web browsers, including login data, cookies, web data, and preferences. ” concludes the report.

Malware 85

Malware Encryption Advertising Cryptocurrency 85

Malwarebytes

NOVEMBER 24, 2021

No matter which of the many accounts post up these videos, they all typically link to the same download hosting site. When free games lead to Malware. The file offered up for download is SteamKeyGeneration.rar, weighing in at 4.19MB. The.RAR is password protected, with the password being supplied in the YouTube description.

Malware 143

Malware Scams Passwords Cryptocurrency 143

Malwarebytes

MARCH 1, 2024

Cybercriminals are targeting Mac users interested in cryptocurrency opportunities with fake calendar invites. In reality the link runs a script to install Mac malware on the target’s machine. “AppleScript has been used against Mac users with moderate frequency by malware creators over the years.

Cryptocurrency 98

Cryptocurrency Malware Authentication Banking 98

Security Affairs

SEPTEMBER 16, 2020

A threat actor is launching brute-force attacks on MSSQL servers in the attempt to access them to install a new crypto-mining malware dubbed MrbMiner. A group of hackers is launching brute-force attacks on MSSQL servers with the intent to compromise them and install crypto-mining malware dubbed MrbMiner. Mining process.”

Malware 139

Malware Cryptocurrency Advertising Accountability 139

SecureList

MAY 6, 2024

A significant share of scam, phishing and malware attacks is about money. Methodology In this report, we present an analysis of financial cyberthreats in 2023, focusing on banking Trojans and phishing pages that target online banking, shopping accounts, cryptocurrency wallets and other financial assets. million in 2022. of attacks.

Phishing 80

Phishing Banking Mobile Scams 80

SecureList

JANUARY 13, 2022

The group seems to work more like a unit within a larger formation of Lazarus attackers, with the ability to tap into its vast resources: be it malware implants, exploits, or infrastructure. Also, we have previously reported on cryptocurrency-focused BlueNoroff attacks. Malware infection.

Cryptocurrency 126

Cryptocurrency Malware Accountability Banking 126

CyberSecurity Insiders

APRIL 19, 2021

But cyber experts claim the link will lead victims to a malware that will help hackers to hack the device and the victim might lose access to their WhatsApp account on a respective note. The malware is reported to be doing round in Canada, Australia and India and might quickly spread to other countries within no time say experts.

Malware 128

Malware Mobile Cryptocurrency Banking 128

Security Affairs

OCTOBER 20, 2021

A Cookie Theft malware was employed in phishing attacks against YouTube creators, Google’s Threat Analysis Group (TAG) warns. Financially motivated threat actors are using Cookie Theft malware in phishing attacks against YouTube creators since late 2019. ” reads the analysis published by Google TAG. Pierluigi Paganini.

Accountability 126

Accountability Malware Phishing Social Engineering 126

Malwarebytes

FEBRUARY 17, 2023

The tag-team campaign serves up ransomware known as Mortal Kombat, which borrows the name made famous by the video game, and Laplas Clipper malware, a clipboard stealer. The email is cryptocurrency themed, and claims that a payment of yours has “timed out” and will need resending. YOU CAN GET THEM VIA ATM MACHINE OR ONLINE.

Ransomware 75

Ransomware Malware Cryptocurrency Encryption 75

Security Affairs

MARCH 12, 2020

Cybercriminals continue to exploit the fear in the coronavirus outbreak to spread malware and steal sensitive data from victims. Experts from cybersecurity Reason reported cybercrimnals are using new coronavirus -themed attacks to deliver malware. To make sure the malware can persist and keep operating, it uses the “Task Scheduler”.”

Malware 137

Malware Advertising Passwords Cryptocurrency 137

Krebs on Security

APRIL 20, 2023

Researchers at ESET say this job offer from a phony HSBC recruiter on LinkedIn was North Korean malware masquerading as a PDF file. Researchers at ESET say this job offer from a phony HSBC recruiter on LinkedIn was North Korean malware masquerading as a PDF file. Image: Mandiant.

Malware 281

Malware Software Technology Accountability 281

Security Affairs

APRIL 6, 2020

Experts uncovered a hacking campaign that is breaching Docker clusters to deploy a new crypto-mining malware tracked as Kinsing. Cloud security firm Aqua Security uncovered a hacking campaign carried out during the past months, hackers are scanning the Internet for Docker servers running API ports exposed without a password.

Cryptocurrency 101

Cryptocurrency Malware Advertising VPN 101

SecureList

DECEMBER 13, 2023

Cybercriminals try to capitalize on their victims in every possible way by distributing various types of malware designed for different platforms. In recent months, we have written private reports on a wide range of topics, such as new cross-platform ransomware, macOS stealers and malware distribution campaigns.

Ransomware 90

Ransomware Passwords Malware Encryption 90

Security Affairs

APRIL 18, 2021

Threat actors targeted are exploiting the ProxyLogon vulnerabilities in Microsoft Exchange servers to deploy Monero cryptocurrency miners. “The.zip file is not a compressed archive, but a batch script that then invokes the built-into-Windows certutil.exe program to download two additional files, win_s.zip and win_d.zip.”

Cryptocurrency 80

Cryptocurrency Passwords Hacking Information Security 80

Identity IQ

APRIL 29, 2021

What is Malware? . Malware is an umbrella term used to describe any malicious software designed to harm, exploit, or extract sensitive data from a system, device, or network. Stolen data can include anything from your payment details to your medical records, passwords, and more. Why do Cybercriminals Use Malware?

Malware 98

Malware Adware Spyware Advertising 98

SecureList

OCTOBER 24, 2023

Introduction As a cybersecurity company, Kaspersky is constantly dealing with known and brand-new malware samples. A good example of this is GoPIX, a malware campaign that has been active since December 2022. If they click such a link, a redirection follows, with the user ending up on the malware landing page.

Ransomware 92

Ransomware Malware Advertising Passwords 92

Krebs on Security

AUGUST 29, 2023

government today announced a coordinated crackdown against QakBot , a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. Qakbot/Qbot was once again the top malware loader observed in the wild in the first six months of 2023. Emerging in 2007 as a banking trojan, QakBot (a.k.a.

Hacking 253

Hacking Malware Ransomware Government 253

Malwarebytes

MAY 10, 2022

From bogus attack warnings to data theft malware. Although the mail is being described as phishing, there is no direct request for passwords or logins linked to in the mail itself. A rogue file called JesterStealer is downloaded to the victim’s PC and executes when the document is opened with macros enabled.

Malware 92

Malware Phishing Passwords Password Management 92

Security Affairs

AUGUST 21, 2022

Threat actors compromise WordPress sites to display fake Cloudflare DDoS protection pages to distribute malware. Recently security experts from Sucuri, spotted JavaScript injections targeting WordPress sites to display fake DDoS Protection pages which lead victims to download remote access trojan malware. Pierluigi Paganini.

DDOS 91

DDOS Malware Antivirus Firewall 91

SecureWorld News

AUGUST 8, 2022

Cybersecurity and Infrastructure Security Agency (CISA) and the Australian Cyber Security Centre (ACSC) released a joint Cybersecurity Advisory (CSA) providing details on the top malware strains of 2021. The top malware strains in 2021 included remote access Trojans (RATs), banking Trojans, information stealers, and ransomware.

Malware 87

Malware Banking Healthcare Penetration Testing 87

Security Affairs

SEPTEMBER 27, 2022

Threat actors behind the new ‘Erbium’ information-stealing malware are distributing it as fake cracks and cheats for popular video games to steal victims’ credentials and cryptocurrency wallets. The Erbium info-stealing malware was first spotted by researchers at threat intelligence firm Cluster25 on July 21, 2022.

Malware 81

Malware Password Management Authentication Passwords 81

Security Boulevard

MAY 19, 2022

In April 2022, ThreatLabz discovered several newly registered domains, which were created by a threat actor to spoof the official Microsoft Windows 11 OS download portal. These variants of Vidar malware fetch the C2 configuration from attacker-controlled social media channels hosted on Telegram and Mastodon network. Profile ID: 739.

Media 64

Media Social Engineering Backups Passwords 64

Malwarebytes

DECEMBER 21, 2022

The new version of Godfather uses an icon and name similar to a legitimate application named MYT Music, which is hosted on the Google Play Store with over 10 million downloads. The target apps include banking applications, cryptocurrency wallets, and crypto exchanges. How to avoid malware.

Banking 92

Banking Malware Mobile Financial Services 92

Security Affairs

DECEMBER 20, 2023

JaskaGO is a new Go-based information stealer malware that targets both Windows and Apple macOS systems, experts warn. JaskaGO is a sophisticated malware that supports an extensive array of commands and can maintain persistence in different ways. Following the discovery, researchers observed dozens of new samples that show the malware.

Malware 111

Malware Passwords Cryptocurrency Software 111

SecureList

DECEMBER 27, 2022

We have published technical details of how this notorious group steals cryptocurrency before. We continue to track the group’s activities and this October we observed the adoption of new malware strains in its arsenal. However, it has recently started to adopt new methods of malware delivery. Novel infection chain.

Malware 131

Malware Banking Passwords Antivirus 131

Security Affairs

APRIL 12, 2019

Hackers are using the EternalBlue exploit and leveraging advantage of Living off the Land ( LotL ) obfuscated PowerShell-based scripts to deliver malware and a Monero cryptocurrency. “The malware also uses the pass the hash method, wherein it authenticates itself to remote servers using the user’s hashed password.

Malware 78

Malware Cryptocurrency Passwords Advertising 78

CyberSecurity Insiders

MARCH 23, 2023

The malware evolved since its previous variant and now arrives with new capabilities. The malware can hijack crypto wallets copied to clipboard. Background BlackGuard stealer is malware as a service sold in underground forums and Telegram since 2021 , when a Russian user posted information about a new malware called BlackGuard.

Malware 121

Malware Cryptocurrency Passwords VPN 121

Malwarebytes

FEBRUARY 21, 2024

A Malwarebytes Premium customer started a thread on Reddit saying we had blocked malware from trying to infect their computer after they connected a vibrator to a USB port in order to charge the device. Lumma steals information from cryptocurrency wallets and browser extensions, as well as two-factor authentication details.

Software 144

Software Passwords Malware Cryptocurrency 144

Security Affairs

SEPTEMBER 29, 2019

Experts at Juniper Threat Labs have discovered a new piece of malware dubbed Masad Stealer that exfiltrate s cryptocurrency wallet files via Telegram. Security researchers at the Juniper Threat Labs discovered a strain of malware dubbed Masad Stealer that is actively distributed.

Malware 76

Malware Cryptocurrency Advertising Marketing 76