article thumbnail

Authorities released free decryptor for Phobos and 8base ransomware

Security Affairs

The group has been active since March 2022, it focused on small and medium-sized businesses in multiple industries, including finance, manufacturing, business services, and IT. Affiliates paid fees to administrators like Ptitsyn for decryption keys, with payments routed via unique cryptocurrency wallets from 2021–2024.

article thumbnail

Top Cybersecurity Trends to Watch Out For in 2025

Centraleyes

Cyber-Physical System (CPS) Security As manufacturing, healthcare, and transportation industries become more digitized, the integration of cyber-physical systemslike smart grids, industrial control systems, and IoT devicesis growing.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Cybercrime Soars: FBI's 2024 Report Reveals $16.6 Billion in Losses

SecureWorld News

Top cybercrime categories: Phishing/spoofing: 193,407 complaints Extortion: 86,415 complaints Personal data breaches: 64,882 complaints Cryptocurrency-related scams: Nearly 150,000 complaints involved cryptocurrency, accounting for $9.3 billion in losses.

article thumbnail

Medusa ransomware hit over 300 critical infrastructure organizations until February 2025

Security Affairs

As of February 2025, Medusa developers and affiliates have impacted over 300 victims from a variety of critical infrastructure sectors with affected industries including medical, education, legal, insurance, technology, and manufacturing.” Victims can additionally pay $10,000 USD in cryptocurrency to add a day to the countdown timer.

article thumbnail

Triada strikes back

SecureList

Specifically, they can modify cryptocurrency wallet addresses during transfer attempts, replace links in browsers, send arbitrary text messages and intercept replies, and steal login credentials for messaging and social media apps. The downloaded payload attempts to steal the victim’s cryptocurrency using various methods.

article thumbnail

New PumaBot targets Linux IoT surveillance devices

Security Affairs

Darktrace researchers discovered a new botnet called PumaBot targets Linux-based IoT devices, using SSH brute-force attacks to steal credentials, spread malware, and mine cryptocurrency. PumaBot skips broad internet scans and instead pulls a list of targets from its C2 server to brute-force SSH logins. ” states the report.

article thumbnail

IT threat evolution Q3 2024

SecureList

Head Mare post on X Head Mare has targeted a variety of industries, including government, energy, transportation, manufacturing and entertainment. As is the case with most hacktivist groups, Head Mare maintains a public account on the X social network, which it uses to post information about some of its victims.