article thumbnail

New PumaBot targets Linux IoT surveillance devices

Security Affairs

Darktrace researchers discovered a new botnet called PumaBot targets Linux-based IoT devices, using SSH brute-force attacks to steal credentials, spread malware, and mine cryptocurrency. PumaBot skips broad internet scans and instead pulls a list of targets from its C2 server to brute-force SSH logins. ” states the report.

article thumbnail

Happy 15th Anniversary, KrebsOnSecurity!

Krebs on Security

A surveillance photo of Connor Riley Moucka, a.k.a. The first profiled Cryptomus , a dodgy cryptocurrency exchange allegedly based in Canada that has become a major payment processor and sanctions evasion platform for dozens of Russian exchanges and cybercrime services online.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Report from the Cambridge Cybercrime Conference

Schneier on Security

Related Entries Surveillance Used by a Drug Cartel Chinese-Owned VPNs The NSA's "Fifty Years of Mathematical Cryptanalysis (1937–1987)" NCSC Guidance on "Advanced Cryptography" Cryptocurrency Thefts Get Physical Featured Essays The Value of Encryption Data Is a Toxic Asset, So Why Not Throw It Out?

article thumbnail

Experts warn of the new sophisticate Crocodilus mobile banking Trojan

Security Affairs

Camera Access: Starts front camera streaming for potential identity theft or surveillance. “Already observed targeting banks in Spain and Turkey and popular cryptocurrency wallets, Crocodilus is clearly engineered to go after high-value assets.” Data Theft: Captures Google Authenticator screen content to steal OTP codes.

article thumbnail

Why SMS two-factor authentication codes aren't safe and what to use instead

Zero Day

"The company and its founder have worked with government spy agencies and surveillance industry contractors to surveil mobile phones and track user location," Bloomberg reported. In this instance, the messages passed through a controversial Swiss outfit named Fink Telecom Services.

article thumbnail

From Stealer to Spy: AMOS Malware Evolves into Full-Fledged Backdoor Threat for macOS

Penetration Testing

A recent update embeds a persistent backdoor, turning what was once a hit-and-run data thief into a long-term intruder capable of remote command execution, system surveillance, and re-infection. Originally known for its data exfiltration from browser extensions and cold wallets, AMOS now goes beyond theft.

article thumbnail

Privacy Roundup: Week 12 of Year 2025

Security Boulevard

Surveillance Tech in the News This section covers surveillance technology and methods in the news. Malware AMOS and Lumma stealers actively spread to Reddit users MalwareBytes Reddit posts (directly on reddit.com ) by threat actors on subreddits frequented by cryptocurrency traders link to information stealing malware.