Security Affairs

DECEMBER 29, 2023

On Christmas Eve, Resecurity’s HUNTER unit spotted the author of perspective password stealer Meduza has released a new version (2.2). Presently, Meduza password stealer supports Windows Server 2012/2016/2019/2022 and Windows 10/11.

Password Management 124

Password Management Cryptocurrency Passwords Authentication 124

Security Affairs

APRIL 14, 2024

The Australian man developed and sold Firebird to customers on a dedicated hacking forum. He is accused of advertising and selling the Hive remote access trojan (RAT) on the “Hack Forums” website. When informed that the target had significant cryptocurrency and project files, Chakhmakhchyan agreed to sell the Hive RAT.

Computers and Electronics 108

Computers and Electronics Advertising Cryptocurrency Malware 108

Security Affairs

MAY 13, 2024

” To defend against ransomware campaign like this one, NJCCIC provided the following recommendations: Security Awareness Training : Engage in security awareness training to enhance defense mechanisms and recognize potential signs of malicious communications.

Phishing 103

Phishing Ransomware Security Awareness Authentication 103

Security Affairs

APRIL 15, 2020

Google has removed 49 new Chrome browser extensions from its official Web Store that hide the code to hijack cryptocurrency wallets. Google has removed 49 new Chrome browser extensions from its official Web Store that contain the code to steal sensitive information and hijack cryptocurrency wallets. Pierluigi Paganini.

Cryptocurrency 92

Cryptocurrency Advertising Phishing Passwords 92

Security Affairs

NOVEMBER 4, 2020

Yesterday almost $1 billion worth of cryptocurrency contained in a password-protected BitCoin wallet was moved to another wallet. Ahead of the 2020 Presidential election a mysterious transaction was noticed by cyber security experts and researchers. SecurityAffairs – hacking, BitCoin wallet). Pierluigi Paganini.

Cryptocurrency 139

Cryptocurrency Passwords Advertising Hacking 139

Security Affairs

MARCH 15, 2024

“Buyers could search for compromised computer credentials on E-Root, such as usernames and passwords that would allow buyers to access remote computers for purposes of stealing private information or manipulating the contents of the remote computer. ” reads the press release published by DoJ.

Cybercrime 100

Cybercrime Cryptocurrency Advertising Passwords 100

Security Affairs

JANUARY 2, 2020

The Poloniex cryptocurrency exchange is forcing users to reset their passwords following a data leak. . Another bad news for the community of the virtual currencies communities, the Poloniex cryptocurrency exchange has forced its users to reset their passwords following a data leak. . This is a real email!

Passwords 59

Passwords Cryptocurrency Data breaches Advertising 59

Security Affairs

JANUARY 2, 2024

Palo Alto Networks’s Unit 42 first observed the malware in November 2023 reporting that it has been advertised on the hacking forum Hackforums since April 30, 2023. The content of the messages attempted to trick the recipients into opening a password-protected RAR archive. net on 2023-04-30.

Malware 113

Malware Passwords Cryptocurrency Hacking 113

Security Affairs

JANUARY 31, 2024

Direct Trading Technologies (DTT) is an international fintech company offering trading platforms for stocks, forex, precious metals, energies, indices, Contracts for Difference (CFDs), and cryptocurrencies. Source: Cybernews Users holding the company’s email addresses, potentially the employees, had their passwords exposed in plaintext.

Technology 115

Technology Identity Theft Backups Passwords 115

Security Affairs

SEPTEMBER 21, 2019

US authorities have indicted two men for hacking the exchange EtherDelta in December 2017, one of them was also accused of TalkTalk hack. US authorities have indicted two men, Elliot Gunton and Anthony Tyler Nashatka, for hacking the cryptocurrency exchange EtherDelta in 2017. SecurityAffairs – TalkTalk, hacking).

Hacking 79

Hacking DNS Cryptocurrency Accountability 79

Security Affairs

FEBRUARY 4, 2024

AnyDesk remarked that its systems don’t store private keys, security tokens or passwords that could be exploited by threat actors to target end-user devices. As a security measure, the threat actor sanitized some of the passwords. The threat actor offered 18,317 accounts for $15,000 to be paid in cryptocurrency.”

Software 111

Software Passwords Ransomware Cryptocurrency 111

Security Affairs

JANUARY 2, 2020

Security expert discovered a Google Chrome extension named Shitcoin Wallet that steals passwords and wallet private keys. Harry Denley, director of security at the MyCrypto , discovered that the Google Chrome extension named Shitcoin Wallet is stealing passwords and wallet private keys. Pierluigi Paganini.

Passwords 65

Passwords Cryptocurrency Advertising Antivirus 65

Security Affairs

AUGUST 7, 2018

Group-IB researchers have investigated user data leaks from cryptocurrency exchanges and has analyzed the nature of these incidents. In 2017, when cryptocurrencies were gaining momentum, their record-breaking capitalization and a spike in Bitcoin’s exchange rate led to dozens of attacks on cryptocurrency services.

Cryptocurrency 48

Cryptocurrency Passwords Authentication Accountability 48

Security Affairs

AUGUST 20, 2019

Your IP address represents your digital identity online, hacking it not only allows attackers to access your device or your accounts, but it may cause even bigger damage. Cybercriminals are interested in hacking your IP address for various reasons. The hacked and stolen IPs are often used for carrying out illegal activities.

Hacking 89

Hacking VPN Internet Internet 89

Security Affairs

DECEMBER 15, 2023

Businesses employ MongoDB to organize and store large swaths of document-oriented information, and in GokuMarket’s case, the details of over a million customers and admin users. GokuMarket, a cryptocurrency exchange, was recently acquired by Canada-based crypto exchange ByteX.

Passwords 91

Passwords Cryptocurrency Scams Mobile 91

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M worth of cryptocurrency. Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M worth of cryptocurrency. ” continues the notice.

Cryptocurrency 78

Cryptocurrency VPN Manufacturing Firewall 78

Security Affairs

JUNE 11, 2023

Experts found new MOVEit Transfer SQL Injection flaws The University of Manchester suffered a cyber attack and suspects a data breach Russians charged with hacking Mt. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Social Engineering 88

Social Engineering Data breaches Ransomware Cybercrime 88

Security Affairs

JUNE 20, 2019

Researchers discovered that recently patched Firefox zero-day (CVE-2019-11707) has been exploited to deliver Windows and Mac malware to cryptocurrency exchanges. According to Martin, other cryptocurrency organizations were hit by similar attacks. SecurityAffairs – CVE-2019-11707, hacking). ” reported SecurityWeek. .”

Cryptocurrency 74

Cryptocurrency Malware Advertising Passwords 74

Security Affairs

MAY 18, 2022

Microsoft researchers warn of the rising threat of cryware targeting non-custodial cryptocurrency wallets, also known as hot wallets. Microsoft warns of the rise of cryware, malicious software used to steal info an dfunds from non-custodial cryptocurrency wallets, also known as hot wallets. Password and info stealers.

Cryptocurrency 91

Cryptocurrency Social Engineering Malware Cybercrime 91

Security Affairs

JANUARY 21, 2021

QNAP is warning customers of a new piece of malware dubbed Dovecat that is targeting NAS devices to mine cryptocurrency. Taiwanese vendor QNAP has published a security advisory to warn customers of a new piece of malware named Dovecat that is targeting NAS devices. ” reads the security advisory published by the vendor.

Cryptocurrency 114

Cryptocurrency Firmware Malware Passwords 114

Security Affairs

OCTOBER 2, 2021

According to a data breach notification letter filed with US state attorney general offices, the attackers with the knowledge of their username and password and phone number associated with the account, were able to steal funds bypassing the SMS-based authentication. SecurityAffairs – hacking, cryptocurrency).

Cryptocurrency 115

Cryptocurrency Data breaches Authentication Accountability 115

Security Affairs

MARCH 6, 2022

Soldiers that want to exchange such vehicles for cryptocurrency need to wave a white flag and use the password “million” to accept the offer. SecurityAffairs – hacking, Ukraine). appeared first on Security Affairs. At this time Anonymous has yet to confirm and deny the news, if have any info please contact me.

Cryptocurrency 92

Cryptocurrency Media Authentication Passwords 92

Security Affairs

MARCH 6, 2021

A suspicious wave of attacks resulted in the hack of four cybercrime forums Verified, Crdclub, Exploit, and Maza since January. Since January, a series of mysterious cyberattacks that resulted in the hack of popular Russian-language cybercrime forums. No other information looked to be compromised in the attack.”

Cybercrime 145

Cybercrime DDOS Hacking Passwords 145

Security Affairs

AUGUST 4, 2023

60 using the username root and password TestX@!#33. The researchers speculate the packages are part of a highly-targeted attack on developers working in the cryptocurrency sector. “This seems to be another highly-targeted attack on developers involved in the cryptocurrency sphere. . ” concludes the report.

Cryptocurrency 82

Cryptocurrency Marketing Encryption Passwords 82

Security Affairs

DECEMBER 20, 2023

Writing to the clipboard:a common tactic for stealing cryptocurrency funds. Password encryption keys key4.db db – Stores the master key to decrypt all passwords stored in logins.json. Login information – “Login Data” folder. Executing shell commands. Displaying alert messages. Retrieving running process list.

Malware 110

Malware Passwords Cryptocurrency Software 110

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4

Artificial Intelligence 91

Artificial Intelligence Data breaches Scams Insurance 91

Security Affairs

SEPTEMBER 16, 2020

According to security firm Tencent, the team of hackers has been active over the past few months by hacking into Microsoft SQL Servers (MSSQL) to install a crypto-miner. “Tencent Security Threat Intelligence Center detected a new type of mining Trojan family MrbMiner. SecurityAffairs – hacking, MrbMiner).

Malware 138

Malware Cryptocurrency Advertising Accountability 138

Security Affairs

FEBRUARY 5, 2022

PayBito is a bitcoin and cryptocurrency exchange for major cryptocurrencies including Bitcoin Cash, Bitcoin, Ethereum, HCX, Litecoin, Ethereum Classic. The group also claims to have stolen email and password hashes that can be easily decrypted due to the use of a “weak hash algorithm.” SecurityAffairs – hacking, PayBito).

Ransomware 86

Ransomware Cryptocurrency Hacking Advertising 86

Security Affairs

APRIL 4, 2022

During the weekend, multiple owners of Trezor hardware cryptocurrency wallets reported having received fake data breach notifications from Trezor, BleepingComputer first reported. We also recommend two-factor authentication and other account security measures for our users as added measures to keep accounts and passwords secure.”

Phishing 115

Phishing Data breaches Cryptocurrency Social Engineering 115

Security Affairs

DECEMBER 31, 2021

The RedLine malware allows operators to steal several information, including credentials, credit card data, cookies, autocomplete information stored in browsers, cryptocurrency wallets, credentials stored in VPN clients and FTP clients. The data included usernames, email addresses and plain text passwords.”

Accountability 131

Accountability Malware Data breaches Passwords 131

Security Affairs

SEPTEMBER 16, 2022

The RedLine malware allows operators to steal several pieces of information, including credentials, credit card data, cookies, autocomplete information stored in browsers, cryptocurrency wallets, credentials stored in VPN clients and FTP clients. SecurityAffairs – hacking, YouTube). ” concludes the report.

Malware 84

Malware Cryptocurrency Hacking Passwords 84

Security Affairs

FEBRUARY 10, 2022

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. Do not provide your mobile number account information over the phone to representatives that request your account password or pin.

Mobile 90

Mobile Cryptocurrency Authentication Accountability 90

Security Affairs

FEBRUARY 2, 2024

The Windows botnet has been active since late 2017, it was mainly used to mine cryptocurrency, but it was also involved in DDoS attacks in 2018. The malware uses exploits for known vulnerabilities and password brute-forcing attacks for self-propagation.

Malware 97

Malware Internet Internet DDOS 97

Security Affairs

JUNE 25, 2023

The researchers pointed out that attackers target gamers because they often use powerful hardware for gaming, which is excellent for mining cryptocurrencies. stream” to carry out cryptocurrency mining activities.” The threat actors bundled a legitimate installer file of super-mario-forever-v702e with the malicious codes.

Malware 95

Malware Cryptocurrency Passwords Hacking 95

Security Affairs

AUGUST 8, 2019

Avast spotted a new strain of Clipsa malware that is used to mine and steal cryptocurrencies along with carrying out brute-force attacks on WordPress sites. Clipsa is a malware that is well known to cyber security community is able to steal cryptocurrency via clipoard hijacking and mine cryptocurrency after installing a miner. .

Malware 87

Malware Cryptocurrency Passwords Internet 87

Security Boulevard

MARCH 17, 2022

The estimated value of greater Decentralized Finance and cryptocurrencies surpassed half a trillion dollars in market capitalization in 2018, and then one trillion for the first time in 2021 ( 1 ). Since then, cryptocurrency values reached new records during the pandemic. Cryptocurrencies Are Established Via Blockchain Security.

Cyber Attacks 98

Cyber Attacks Cryptocurrency Marketing Software 98

Security Affairs

DECEMBER 7, 2021

Taiwanese vendor QNAP warns customers of ongoing attacks targeting their NAS devices with cryptocurrency miners. Taiwanese vendor QNAP warns customers of threat actors targeting their NAS devices with cryptocurrency miners. Use stronger passwords for your administrator and other user accounts. SecurityAffairs – hacking, IoT).

Cryptocurrency 98

Cryptocurrency Ransomware Malware Passwords 98