Security Affairs

APRIL 25, 2024

Department of Justice (DoJ) announced the arrest of two co-founders of a cryptocurrency mixer Samourai. Department of Justice (DoJ) has arrested two co-founders of the cryptocurrency mixer Samourai and seized the service. Magistrate Judge in the Western District of Pennsylvania. criminal charges. ” continues the DoJ.

Cryptocurrency 84

Cryptocurrency Marketing Mobile Hacking 84

Krebs on Security

MAY 22, 2023

Social networks are constantly battling inauthentic bot accounts that send direct messages to users promoting scam cryptocurrency investment platforms. The messages said recipients had earned an investment credit at a cryptocurrency trading platform called moonxtrade[.]com. “On Twitter, more spam and crypto scam.”

Scams 252

Scams DDOS Cryptocurrency Accountability 252

Security Affairs

DECEMBER 6, 2022

DoJ announced that Nicholas Truglia (25) was sentenced to 18 months in prison for the theft of over $20 million worth of cryptocurrency through SIM swapping attacks. Nicholas Truglia and his associates stole a staggering amount of cryptocurrency from the victim through a complex SIM swap scheme.” ” said U.S.

Cryptocurrency 84

Cryptocurrency Accountability Mobile Hacking 84

Security Affairs

FEBRUARY 10, 2022

The Federal Bureau of Investigation (FBI) observed an escalation in SIM swap attacks aimed at stealing millions from the victims by hijacking their mobile phone numbers. Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts.

Mobile 86

Mobile Cryptocurrency Authentication Accountability 86

Hackology

DECEMBER 11, 2023

Are you tired of messaging apps that compromise your privacy and security? Look no further than Utopia P2P Messenger Mobile App! Utopia includes a personal AI assistant called ChatGPT, available 24/7 for answering questions and providing information. It’s the ultimate solution for all your messaging needs.

Mobile 64

Mobile Encryption Architecture Cryptocurrency 64

Security Affairs

NOVEMBER 15, 2021

The malware has been active at least since late October 2021, it targeting the mobile users of banks in Italy, the UK, and the US. The trojan allows to hijack users’ mobile devices and steal funds from online banking and cryptocurrency accounts. login credentials, personal information, current balance, etc.).

Banking 119

Banking Mobile Social Engineering Malware 119

Security Affairs

JUNE 18, 2022

Malibot is a new Android malware targeting online banking and cryptocurrency wallet customers in Spain and Italy. F5 Labs researchers spotted a new strain of Android malware, named Malibot, that is targeting online banking and cryptocurrency wallet customers in Spain and Italy. ” reads the advisory published by F5 Labs.

Banking 110

Banking Cryptocurrency Malware Mobile 110

Security Affairs

JUNE 25, 2023

On November 2021, the US Department of Justice indicted Joseph James O’Connor for stealing $784,000 worth of cryptocurrency using SIM swap attacks. Crooks conduct SIM swapping attacks to take control of victims’ phone numbers tricking the mobile operator employees into porting them to SIMs under the control of the fraudsters.

Cybercrime 81

Cybercrime Cryptocurrency Accountability Media 81

Security Affairs

AUGUST 26, 2023

Security consulting firm Kroll revealed that a SIM-swapping attack against one of its employees caused the theft of user information for multiple cryptocurrency platforms. On August 19, 2023, the consulting firm became aware that threat actors targeted the T-Mobile phone number belonging to one of its employees.

Data breaches 85

Data breaches Mobile Accountability Phishing 85

Security Affairs

NOVEMBER 13, 2022

The group defrauded investors through a pseudo-investment scheme in cryptocurrencies and securities, the investigation began in 2020. The gang operated its websites and platforms where they offered depositors to receive excess profits from investing in cryptocurrency and trading in securities (stocks, bonds, futures, options). .

Cryptocurrency 87

Cryptocurrency Mobile Hacking Cybercrime 87

Security Affairs

SEPTEMBER 11, 2021

SOVA is a new Android banking trojan that targets banking applications, cryptocurrency wallets, and shopping apps from the U.S. The mobile malware is currently in development and testing phase, threat actors will likely implement other features to conduct DDoS and Ransomware attacks in future. “Like many others, S.O.V.A.

Banking 90

Banking DDOS Cryptocurrency Mobile 90

Security Affairs

NOVEMBER 4, 2021

The US DoJ charged the suspected Twitter hacker ‘PlugWalkJoe’ with the theft of $784,000 worth of cryptocurrency using SIM swap attacks. Crooks conduct SIM swapping attacks to take control of victims’ phone numbers tricking the mobile operator employees into porting them to SIMs under the control of the fraudsters.

Hacking 98

Hacking Cryptocurrency Accountability Identity Theft 98

Security Affairs

FEBRUARY 10, 2022

Crooks conduct SIM swapping attacks to take control of victims’ phone numbers tricking the mobile operator employees into porting them to SIMs under the control of the fraudsters. Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts.

Banking 99

Banking Accountability Mobile Cryptocurrency 99

Security Affairs

NOVEMBER 5, 2023

CISA adds two F5 BIG-IP flaws to its Known Exploited Vulnerabilities catalog Threat actors actively exploit F5 BIG-IP flaws CVE-2023-46747 and CVE-2023-46748 Pro-Hamas hacktivist group targets Israel with BiBi-Linux wiper British Library suffers major outage due to cyberattack Critical Atlassian Confluence flaw can lead to significant data loss WiHD (..)

Cyber Insurance 95

Cyber Insurance Cryptocurrency Internet Internet 95

Security Affairs

DECEMBER 15, 2023

Businesses employ MongoDB to organize and store large swaths of document-oriented information, and in GokuMarket’s case, the details of over a million customers and admin users. GokuMarket, a cryptocurrency exchange, was recently acquired by Canada-based crypto exchange ByteX.

Passwords 86

Passwords Cryptocurrency Scams Mobile 86

Security Affairs

JULY 24, 2018

.” He goes on to describe the types of Android-based devices that were found to be in a vulnerable state and accessible from the Internet, “ […] we’ve found everything from tankers in the US to DVRs in Hong Kong to mobile telephones in South Korea. Security Affairs – debugging tools , hacking). Pierluigi Paganini.

Cryptocurrency 44

Cryptocurrency IoT Mobile Advertising 44

Security Affairs

MAY 19, 2024

records on Chinese users Charges and Seizures Brought in Fraud Scheme Aimed at Denying Revenue for Workers Associated with North Korea U.S. elections face more threats from foreign actors and artificial intelligence Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter)

Artificial Intelligence 85

Artificial Intelligence Data breaches Ransomware Hacking 85

Security Affairs

FEBRUARY 19, 2024

The Raccoon stealer was first spotted in April 2019, it was designed to steal victims’ credit card data, email credentials, cryptocurrency wallets, and other sensitive data. FBI identified more than 50 million unique credentials and forms of identification (email addresses, bank accounts, cryptocurrency addresses, credit card numbers, etc.)

Identity Theft 87

Identity Theft Cryptocurrency Cybercrime Hacking 87

Security Affairs

JULY 7, 2022

Researchers uncovered a large-scale cryptocurrency mining campaign targeting the NPM JavaScript package repository. Checkmarx researchers spotted a new large-scale cryptocurrency mining campaign, tracked as CuteBoi , that is targeting the NPM JavaScript package repository. ” concludes the experts. Pierluigi Paganini.

Cryptocurrency 101

Cryptocurrency Accountability Mobile Hacking 101

Security Affairs

OCTOBER 4, 2021

million in cryptocurrencies. As a result, computer equipment, mobile phones, vehicles and more than 360 thousand dollars in cash were seized. million was blocked on the attacker’s cryptocurrencies.” .” reads the press release published by the Europol. The authorities also froze $1.3 In addition, $ 1.3

Ransomware 100

Ransomware Cryptocurrency Cybercrime Mobile 100

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 72

Malware Cybercrime Cryptocurrency Social Engineering 72

Security Affairs

SEPTEMBER 5, 2022

The researchers found two SharkbotDopper apps in Google Play Store, “Mister Phone Cleaner” and “Kylhavy Mobile Security,” with 10K and 50K installs respectively. The malware was observed targeting the mobile users of banks in Italy, the UK, and the US.

Banking 86

Banking Malware Mobile Accountability 86

Security Affairs

JULY 16, 2022

The post Security Affairs newsletter Round 374 by Pierluigi Paganini appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, newsletter).

Firmware 89

Firmware Ransomware DDOS Cryptocurrency 89

Security Affairs

MAY 17, 2022

Trend Micro researchers also discovered 40 fake cryptocurrency miner apps that are variants of similar apps that they discovered in August 2021. Web researchers, the development team behind the threat has frequently changed its code. Most of the malicious apps were VPN software (42), followed by Camera (20), and Photo Editing (13).

Spyware 85

Spyware Cryptocurrency VPN Malware 85

Security Affairs

MARCH 7, 2022

The malware was spotted at the end of October by researchers from cyber security firms Cleafy and ThreatFabric, the name comes after one of the domains used for its command and control servers. The malware was observed targeting the mobile users of banks in Italy, the UK, and the US. ” reads the report published by NCC Group.

Banking 75

Banking Antivirus Mobile Malware 75

Security Affairs

FEBRUARY 4, 2024

Ransomware Revenue Down As More Victims Refuse to Pay Energy giant Schneider Electric hit by Cactus ransomware attack Hundreds Of Network Operators’ Credentials Found Circulating In Dark Web Fla.

Identity Theft 100

Identity Theft VPN Malware Ransomware 100

Security Affairs

NOVEMBER 10, 2020

Now the experts from Kaspersky’s Global Research and Analysis Team (GReAT) gathered further evidence that demonstrates that malware operators behind Tetrade, tracked as Guildma, have expanded their tactics to infect mobile devices with spyware. ” concludes the report. ” concludes the report. ” Pierluigi Paganini.

Banking 97

Banking Mobile Malware Spyware 97

Security Affairs

MARCH 4, 2023

CISA and FBI warn of Royal ransomware operation Retailer WH Smith discloses data breach after a cyberattack GunAuction site was hacked and data of 565k accounts were exposed Cryptojacking campaign targets insecure deployments of Redis servers Cisco fixed a critical command injection bug in IP Phone Series Threat actors target law firms with GootLoader (..)

Spyware 78

Spyware Data breaches Retail Ransomware 78

Security Affairs

AUGUST 20, 2021

“ The teams remain mobilized, executing the protection and recovery plan, with all their control and security protocols, and working to re-establish all company operations.” “Information from unofficial sources said Renner paid R$20 million in cryptocurrencies as a ransom.

Ransomware 106

Ransomware Retail Cryptocurrency Data breaches 106

Security Affairs

DECEMBER 11, 2022

Samsung S22 hacked Sophos fixed a critical flaw in its Sophos Firewall version 19.5

Firewall 87

Firewall Banking Hacking DDOS 87

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 90

Data breaches Malware Mobile Spyware 90

Security Affairs

JANUARY 22, 2023

If you want to also receive for free the newsletter with the international press subscribe here. The Irish DPC fined WhatsApp €5.5M

Data breaches 86

Data breaches Retail Malware VPN 86

Security Affairs

JULY 16, 2020

Upon launching the malware on the mobile device, it will start by hiding its icon from the app drawer, then it asks the victim for the Accessibility Service privileges. . The list of targeted apps includes cryptocurrency wallet applications (i.e. . ” ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Malware 83

Malware Banking Mobile Spyware 83

Security Affairs

MAY 26, 2021

According to a statement published by the Ministry of the Economy, the French authorities arrested two administrators of the platform and seized various computer equipment, false documents, bank cards and prepaid cards, several thousand euros in cryptocurrency.

Cybercrime 139

Cybercrime Cryptocurrency Banking Mobile 139

Security Affairs

MAY 27, 2022

According to the experts, ERMAC is operated by threat actors behind the BlackRock mobile malware. is able to steal credentials for financial and cryptocurrency apps included in the list of targeted apps that are sent by the C2. was discovered by ESET researchers after a campaign impersonating Bolt Food targeted Polish users.

Banking 140

Banking Malware Cybercrime Phishing 140

SecureWorld News

MAY 27, 2021

Here are three examples from the new report: "In 2019, a NASA contract employee used a personal computer to access NASA-owned networks and systems to mine cryptocurrency.". "In 6 key areas where NASA's information security is failing. Pervasive weaknesses exist in NASA IT internal controls and risk management practices.

Cyber Risk 59

Cyber Risk Risk Architecture Cyber threats 59

Security Affairs

AUGUST 15, 2022

targets over 200 banking and cryptocurrency exchange apps. It strongly leverages on the opportunity arises in recent years, as mobile devices became for most people the central storage for personal and business data.” The malware has been active since 2021 and evolves over time. The latest version of the SOVA Trojan, 5.0,

Encryption 97

Encryption Malware Banking Ransomware 97