Malwarebytes

JUNE 8, 2021

An international operation that monitored an encrypted device company under control of the Federal Bureau of Investigation (FBI) and the Australian Federal Police (AFP) has led to a massive, coordinated string by law enforcement in a several countries. Providing a service after taking down the real enablers. Why stop now?

Encryption 112

Encryption Telecommunications Cryptocurrency Advertising 112

SecureWorld News

JANUARY 27, 2023

The United States Department of Justice (DOJ) recently announced that it has successfully taken down the HIVE ransomware network, an international cybercrime ring that had been responsible for stealing and encrypting the data of more than 1,500 companies from 80 different countries.

Ransomware 98

Ransomware Cybercrime Cryptocurrency Telecommunications 98

Malwarebytes

OCTOBER 27, 2023

In a security blog about Octo Tempest Microsoft states: “Octo Tempest monetized their intrusions in 2022 by selling SIM swaps to other criminals and performing account takeovers of high-net-worth individuals to steal their cryptocurrency.” Stop malicious encryption.

Social Engineering 119

Social Engineering Engineering Ransomware Backups 119

Malwarebytes

NOVEMBER 6, 2023

In 2022, Octo Tempest began selling SIM swaps to other criminals and performing account takeovers of high-net-worth individuals in order to steal their cryptocurrency. Stop malicious encryption. Make it harder for intruders to operate inside your organization by segmenting networks and assigning access rights prudently.

Ransomware 126

Ransomware Backups Accountability Social Engineering 126

SecureList

MAY 12, 2021

To ensure that their ability to restore encrypted files would never be questioned, they cultivated an online presence, wrote press releases and generally made sure their name would be known to all potential victims. They interact with each other through internet handles, paying for services with cryptocurrency.

Ransomware 145

Ransomware Encryption Malware Cybercrime 145

Malwarebytes

MARCH 3, 2022

The LAPSUS$ group is a relative newcomer to the ransomware scene, but it has made a name for itself by bringing down big targets like Impresa, the largest media conglomerate in Portugal, Brazil’s Ministry of Health, and Brazilian telecommunications operator Claro. Image courtesy of The Verge. Hacked back?

Ransomware 99

Ransomware Password Management Passwords Hacking 99

Malwarebytes

MARCH 8, 2023

Among its victims are Tonga Communications Corporation (TCC), a state-owned telecommunications company, and oil and gas regulator company PetroChina Indonesia. The agencies have reason to believe cryptocurrency ransom payments from such operations support DPRK's "national-level priorities and objectives." Stop malicious encryption.

Ransomware 98

Ransomware Healthcare Government Education 98

Security Boulevard

JULY 15, 2024

StealC is an information stealer capable of exfiltrating a variety of confidential information, including passwords, emails, and cryptocurrency wallets. Can be used to perform cryptographic operations, potentially aiding in encrypting/decrypting data without raising suspicion. dll FreeBL cryptographic library from Mozilla.

Malware 62

Malware Encryption Telecommunications DNS 62

SecureList

NOVEMBER 14, 2023

However, instead of encrypting the data, it purposefully destroyed it in the affected systems. It determined that the injection point was situated within the connection between two Egyptian telecommunication providers. The malware posed as ransomware, demanding money from the victims for “decrypting” their data.

Hacking 137

Hacking Malware Energy and Utilities Government 137

Pen Test

OCTOBER 10, 2023

A particularly insidious new trend is the rise of "double extortion" attacks, in which cybercriminals not only encrypt an organization's data but also threaten to publicly release sensitive stolen information if the ransom is not paid. CryptoLocker, in 2013, pioneered the use of strong encryption algorithms.

Ransomware 52

Ransomware Backups Insurance Cyber Insurance 52

SecureList

MAY 10, 2021

Botnet operators use infected devices to carry out DDoS attacks or mine cryptocurrency. At the same time, ransomware operators, having already started to steal victims’ data before encryption, also turned their eyes on DDoS as an extortion tool. Data for Q1 2020 is taken as 100% ( download ). Conclusion.

DDOS 138

DDOS Cryptocurrency Media Marketing 138