Krebs on Security

JANUARY 11, 2022

This post examines some of the clues left behind by “ Wazawaka ,” the hacker handle chosen by a major access broker in the Russian-speaking cybercrime scene. Wazawaka has been a highly active member of multiple cybercrime forums over the past decade, but his favorite is the Russian-language community Exploit.

DDOS 272

DDOS Accountability Cybercrime Ransomware 272

Krebs on Security

DECEMBER 29, 2022

That’s a crazy long time for an independent media outlet these days, but then again I’m bound to keep doing this as long as they keep letting me. Here’s a look at some of the more notable cybercrime stories from the past year, as covered by KrebsOnSecurity and elsewhere. KrebsOnSecurity turns 13 years old today.

Cryptocurrency 239

Cryptocurrency Cybercrime Computers and Electronics Scams 239

Krebs on Security

SEPTEMBER 23, 2021

In October 2016, media outlets reported that data collected by some of the world’s most renowned cybersecurity experts had identified frequent and unexplained communications between an email server used by the Trump Organization and Alfa Bank , one of Russia’s largest financial institutions.

Banking 363

Banking DNS Internet Internet 363

Security Affairs

JANUARY 4, 2023

At the end of July, a threat actor leaked data of 5.4 million Twitter accounts that were obtained by exploiting a now-fixed vulnerability in the popular social media platform. Then the scraped data were offered on various online cybercrime marketplaces. The database is a cleaned version of the one published in December.

Data breaches 98

Data breaches Accountability Hacking Data collection 98

The Last Watchdog

JANUARY 23, 2024

Between social media, mobile apps, internet-connected devices and the rise of artificial intelligence vast amounts of personal data is being gathered constantly, putting individuals’ privacy at risk,” said Lisa Plaggemier, Executive Director at NCA.

Data privacy 100

Data privacy Education Artificial Intelligence Cybersecurity 100

Security Affairs

OCTOBER 15, 2018

Scammers create fake websites of known brands, fraudulent promotional campaigns, and fake accounts on social media. In recent years, an often-used fraud method has been fake mobile applications: 36% of users are unable to distinguish between genuine and fake apps, and 60% of the latter request access to the user’s personal data. .

Marketing 79

Marketing Phishing Media Engineering 79

CyberSecurity Insiders

OCTOBER 3, 2022

Monitoring and tracking potential threats from the dark web, open source, and social media platforms to detect threats that could attack your organization is critical to ensure public and corporate safety and security. FRAUD: Cybercrime, e-crime, and online fraud. Trafficking in stolen or illegal physical.

Risk 123

Risk Media Cyber threats Cybersecurity 123

Security Affairs

APRIL 15, 2023

The collected data is sent to the C2 server every two days, but the cycle depends on the remote configuration. The level of data collection depends on the permissions granted to the app using the malicious library.

Data collection 93

Data collection Mobile Malware Education 93

Security Affairs

APRIL 6, 2023

The Threat Report Portugal: H2 2022 compiles data collected on the malicious campaigns that occurred from July to December, H2, 2022. The Portuguese Abuse Open Feed 0xSI_f33d is an open-sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 80

Threat Reports Phishing Malware Banking 80

Security Affairs

OCTOBER 27, 2022

The multinational media conglomerate Thomson Reuters left a database with sensitive customer and corporate data exposed online. Thomson Reuters, a multinational media conglomerate, left an open database with sensitive customer and corporate data, including third-party server passwords in plaintext format.

IoT 114

IoT Engineering Passwords Media 114

Security Affairs

APRIL 6, 2023

User personal data for sale. Crooks offers data collected through phishing campaign to the subscribers. Data includes verified online banking credentials, in some cases phishers also provides info on the account balances. “The higher the balance, the more money scammers will typically charge for the credentials.”

Phishing 88

Phishing Scams Social Engineering Banking 88

SecureList

NOVEMBER 14, 2023

Solutions like XDR, SIEM, and MDM platforms, apart from traditional anti-virus products, enable centralized data collection, accelerate analysis, and correlate security events from various sources, facilitating swift response to complex incidents.

Hacking 109

Hacking Energy and Utilities Media Malware 109

Herjavec Group

JANUARY 27, 2022

Data Privacy Week aims to create awareness about online privacy, educate citizens on how to manage and secure their personal information, and support businesses in respecting data and being more transparent about how they collect and use customer data.

Data privacy 52

Data privacy Digital transformation Education Cybersecurity 52

SC Magazine

MARCH 26, 2021

Since the pandemic started, people have been regularly bombarded with human interest stories in the media highlighting smug-looking business leaders all too proud to share how they’ve maintained employee productivity through creepy monitoring software. Jason Meller, founder , and CEO, Kolide.

Surveillance 57

Surveillance Software Media Data collection 57

SC Magazine

MARCH 10, 2021

The one that scares me the most is that with this data and its analysis, adversaries could perpetuate not only cybercrimes, but also physical crimes like looting or kidnapping.”. The post Camera tricks: Privacy concerns raised after massive surveillance cam breach appeared first on SC Media.

Surveillance 129

Surveillance IoT Accountability Passwords 129

SecureList

NOVEMBER 10, 2022

The main tool we use to obtain and analyze threat-related data is Kaspersky Security Network (KSN). KSN is dedicated to processing cybersecurity-related depersonalized data streams from Kaspersky products whose users consented to anonymized data collection. Do not forget to update your operating system and other software.

Cryptocurrency 112

Cryptocurrency Malware Software Ransomware 112

SecureList

SEPTEMBER 6, 2022

The latter had a wide range of functions: it could steal cookies, saved passwords, autofill data for browser forms and cryptocurrency wallet data, collect system information, steal.txt files from the desktop and make screenshots. The scheme encourages users to log in using their social media credentials.

Mobile 103

Mobile Passwords Software Accountability 103