Security Affairs

OCTOBER 14, 2024

Dutch police dismantled Bohemia/Cannabia, two major dark web markets for illegal goods, drugs, and cybercrime services. These are two of the largest and longest-running dark web platforms for the trade of illegal goods, drugs, and cybercrime services. ” reads the announcement published by Polite. More arrests are anticipated.

Marketing 132

Marketing Cybercrime DDOS Cryptocurrency 132

Security Affairs

JUNE 22, 2025

This move, reported by cybersecurity firm Cybereason, shows Qilin stepping up its operations and trying to take over space left by rival cybercrime groups. With advanced tools, legal help, spam services, and massive data storage, it’s positioning itself as a full-service cybercrime platform.

Ransomware 123

Ransomware DDOS Cybercrime Healthcare 123

Security Affairs

OCTOBER 21, 2024

Despite being informed weeks prior, the organization’s failure to rotate exposed API keys, particularly the Zendesk token with access to over 800,000 support tickets, reflects poor incident response. Hunt will add the information of the impacted users to HIBP very soon.

Internet 133

Internet Internet Data breaches Authentication 133

Security Affairs

JANUARY 22, 2025

terabit-per-second (Tbps) distributed denial-of-service (DDoS) attack. Terabit per second (Tbps) DDoS attack, which is the largest attack ever reported. The previous largest DDoS attack blocked by Cloudflare occurred in October 2024 and peaked at 3.8 Cloudflare announced that it has blocked a record-breaking 5.6

DDOS 75

DDOS Malware Hacking Internet 75

Security Affairs

MAY 16, 2025

HTTPBot uses an attack ID for precise control and employs advanced DDoS tactics like HTTP Floods and obfuscation to bypass traditional detection methods. “HTTPBot has taken a different approach by developing a range of HTTP-based attack methods to conduct transactional (business) DDoS attacks. ” concludes the report.

DDOS 116

DDOS Education IoT Malware 116

Security Affairs

OCTOBER 13, 2024

The Mexican Drug Cartels Want You Casio: Notice of Partial Service Outage and Information Leak Caused by Ransomware Attack He founded a “startup” to access sanctioned Russian websites: the cyber police of Khmelnytskyi region exposed the hacker Hacked ‘AI Girlfriend’ Data Shows Prompts Describing Child Sexual Abuse Malware Over 300,000!

Data breaches 121

Data breaches Cryptocurrency Cybercrime Artificial Intelligence 121

Security Affairs

JANUARY 8, 2025

Gayfemboy, a Mirai botnet variant, has been exploiting a flaw in Four-Faith industrial routers to launch DDoS attacks since November 2024. Operators behind the botnet also launched DDoS attacks against researchers tracking it. Gayfemboys grouping information is based on device details. Key targets include China, the U.S.,

DDOS 123

DDOS Hacking Government Cybercrime 123

Security Affairs

JULY 9, 2025

“Pay2Key.I2P represents a dangerous convergence of Iranian state-sponsored cyber warfare and global cybercrime. The authoring agencies are continuing to monitor the situation and will release pertinent cyber threat and cyber defense information as it becomes available.” It also mimics legitimate software (e.g.,

Ransomware 114

Ransomware Cyber threats Encryption DDOS 114

Security Affairs

JANUARY 16, 2025

” The botnet size enables diverse attacks, from DDoS to phishing, spreading malware via SOCKS proxies, and amplifying C2 operations while masking attackers’ identities. The SPF information is included in the domains DNS records as a TXT record.

DNS 139

DNS Malware Firmware Authentication 139

Security Affairs

NOVEMBER 16, 2024

A botnet employed in DDoS or cryptomining attacks is exploiting a zero-day in end-of-life GeoVision devices to grow up. ” The botnet was used to carry out DDoS or cryptomining attacks. ” reads the advisory published by TWCERT.

DDOS 135

DDOS Internet Internet Hacking 135

Security Affairs

DECEMBER 19, 2024

Threat actors initially compromised the devices, and then employed them in DDoS attacks. These systems have been infected with the Mirai malware and were subsequently used as a DDOS attack source to other devices accessible by their network.” ” read the report published by Juniper Networks.

DDOS 71

DDOS Firmware Firewall Passwords 71

Security Affairs

MARCH 10, 2025

Akamai researchers also observed threat actors behind the DDoS botnet Muhstik exploiting this vulnerability. Therefore, it is recommended that users conduct a comprehensive asset assessment, verify their usage scenarios, and update PHP to the latest version to ensure security.

DDOS 109

DDOS Security Intelligence Hacking Malware 109

Security Affairs

NOVEMBER 17, 2024

CISA adds Palo Alto Networks Expedition bugs to its Known Exploited Vulnerabilities catalog Hackers target critical flaw CVE-2024-10914 in EOL D-Link NAS Devices China-linked threat actors compromised multiple telecos and spied on a limited number of U.S.

Cryptocurrency 115

Cryptocurrency Malware Hacking Data breaches 115

Security Affairs

JANUARY 29, 2025

A new variant of the Mirai-based botnet Aquabot targets vulnerable Mitel SIP phones to recruit them into a DDoS botnet. Aquabot is a Mirai-based botnet designed for DDoS attacks. They often claim it is for DDoS mitigation testing, but experts pointed out that it spreads Mirai malware and is used for real attacks.

DDOS 73

DDOS Firmware Malware Firewall 73

SecureList

DECEMBER 16, 2024

Increase in high-profile law enforcement operations against cybercrime groups 2024 was a significant year in the global high-profile fight against cybercrime. We at Kaspersky also actively contributed to law enforcement efforts to combat cybercrime.

Marketing 103

Marketing Data breaches Cryptocurrency Malware 103

Security Affairs

MARCH 8, 2025

Authorities recovered $31 Million Related to 2021 Uranium Finance cyber heist Serbian student activists phone hacked using Cellebrite zero-day exploit Qilin ransomware gang claimed responsibility for the Lee Enterprises attack Meta fired 20 employees for leaking information, more firings expected International Press Newsletter Cybercrime U.S.

Data breaches 73

Data breaches Hacking Cybercrime Artificial Intelligence 73

Security Affairs

JUNE 22, 2025

Tbps DDoS attack Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter) Iran confirmed it shut down internet to protect the country against cyberattacks Godfather Android trojan uses virtualization to hijack banking and crypto apps Cloudflare blocked record-breaking 7.3

Data breaches 66

Data breaches DDOS Internet Internet 66

Security Affairs

NOVEMBER 10, 2024

CISA adds PTZOptics camera bugs to its Known Exploited Vulnerabilities catalog Canadian authorities arrested alleged Snowflake hacker Android flaw CVE-2024-43093 may be under limited, targeted exploitation July 2024 ransomware attack on the City of Columbus impacted 500,000 people Nigerian man Sentenced to 26+ years in real estate phishing scams Russian (..)

Cybercrime 121

Cybercrime Ransomware Phishing Banking 121

Security Affairs

MAY 4, 2025

Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws to its Known Exploited Vulnerabilities catalog The Turmoil Following BreachForums Shutdown: Confusion, Risks, and a New Beginning Earth Kurma APT is actively targeting government and telecommunications orgs in Southeast Asia A large-scale phishing campaign targets WordPress WooCommerce (..)

Cybercrime 76

Cybercrime Cyber Attacks Malware Phishing 76

Security Affairs

JULY 16, 2025

. “Between 14 and 17 July, a joint international operation, known as Eastwood and coordinated by Europol and Eurojust, targeted the cybercrime network NoName057(16). Hundreds of group supporters were warned about their legal liability for aiding the group’s DDoS attacks, often driven by pro-Russian ideology.

DDOS 69

DDOS Cybercrime Cryptocurrency Hacking 69

Security Affairs

MARCH 12, 2025

It spreads by exploiting CVE-2023-1389 and can execute remote shell commands or launch DoS/DDoS attacks when instructed by the C2 server. The malware kills previous instances, deletes itself to evade detection, reads system configuration files, and establishes an encrypted C2 channel on port 82.

IoT 78

IoT Malware Encryption DDOS 78

Security Affairs

FEBRUARY 23, 2025

CISA adds SonicWall SonicOS and Palo Alto PAN-OS flaws to its Known Exploited Vulnerabilities catalog Juniper Networks fixed a critical flaw in Session Smart Routers China-linked APT group Winnti targets Japanese organizations since March 2024 Xerox VersaLink C7025 Multifunction printer flaws may expose Windows Active Directory credentials to attackers (..)

Scams 71

Scams Malware Encryption Phishing 71

SecureWorld News

OCTOBER 31, 2024

These botnets, networks of compromised devices, can perform attacks without the user realizing it, overwhelming networks, spreading spam, and even launching DDoS attacks. Attackers impersonate trusted sources or coworkers and lurk behind emails and messages to trick users into giving away sensitive information.

IoT 120

IoT Phishing DDOS Backups 120

Security Affairs

MARCH 9, 2025

Cellebrite zero-day exploit used to target phone of Serbian student activist One in Four Cyberattacks in 2024 Traced to Infostealers, Huntress Reports Uncovering.NET Malware Obfuscated by Encryption and Virtualization Black Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal Satori Threat Intelligence Disruption: BADBOX 2.0

Malware 71

Malware DDOS Hacking Ransomware 71

Security Boulevard

APRIL 8, 2025

Attackers use phishing, pretexting, and baiting to gain access or information. Cloud Computing Infrastructure: Cloud platforms offer resources for malicious activities, like hosting command and control infrastructure and launching DDoS attacks. Automation and Scripting: Automation enhances efficiency for both sides.

Cybersecurity 52

Cybersecurity Penetration Testing DNS Encryption 52

Penetration Testing

JUNE 9, 2025

Search Our Websites Penetration Testing Tools The Daily Information Technology Daily CyberSecurity About SecurityOnline.info Advertise with us Announcement Contact Contributor Register Login About SecurityOnline.info Advertise on SecurityOnline.info Contact When you purchase through links on our site, we may earn an affiliate commission.

Penetration Testing 93

Penetration Testing Advertising DNS Cybersecurity 93

Security Affairs

NOVEMBER 12, 2024

The Jerusalem Post reported that thousands of credit card readers across at gas stations and supermarket chains in Israel stopped working on Sunday morning following an alleged DDoS attack that hit the company responsible for the operations of the devices. ” reads the article published by The Jerusalem Post.

DDOS 125

DDOS Banking Media Hacking 125

Krebs on Security

JANUARY 30, 2025

Edwards said Funnull is a textbook example of an increasing trend Silent Push calls “infrastructure laundering,” wherein crooks selling cybercrime services will relay some or all of their malicious traffic through U.S. cloud providers. ” A Suncity gambling site promoted via Funnull. based cloud providers.

Accountability 281

Accountability Scams Passwords Data collection 281

Krebs on Security

NOVEMBER 26, 2024

However, this person’s identity may not remain a secret for long: A careful review of Kiberphant0m’s daily chats across multiple cybercrime personas suggests they are a U.S. On BreachForums, Kiberphant0m has sold the source code to “ Shi-Bot ,” a custom Linux DDoS botnet based on the Mirai malware.

DDOS 339

DDOS Cybercrime Accountability Government 339

BH Consulting

FEBRUARY 24, 2025

At the end of January, police forces from eight countries took down two of the worlds largest cybercrime forums. Europol, which supported the forum takedowns, also published three reports : one, into the challenges in cybercrime and investigations involving digital evidence. MORE DDoS attacks: they havent gone away, you know.

Cyber Insurance 59

Cyber Insurance Insurance Ransomware Artificial Intelligence 59

Security Affairs

MAY 25, 2025

Silent Ransom Group targeting law firms, the FBI warns Leader of Qakbot cybercrime network indicted in U.S. Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. local government networks U.S.

Data breaches 69

Data breaches Malware Cybercrime Ransomware 69

Security Affairs

MAY 11, 2025

CISA adds GoVision device flaws to its Known Exploited Vulnerabilities catalog Polish authorities arrested 4 people behind DDoS-for-hire platforms Play ransomware affiliate leveraged zero-day to deploy malware Canary Exploit tool allows to find servers affected by Apache Parquet flaw Unsophisticated cyber actors are targeting the U.S.

Spyware 66

Spyware Ransomware DDOS Malware 66

Security Affairs

JANUARY 26, 2025

President Donald Trump granted a “full and unconditional pardon” to Ross Ulbricht, Silk Road creator Pwn2Own Automotive 2025 Day 1: organizers awarded $382,750 for 16 zero-days Subaru Starlink flaw allowed experts to remotely hack cars Two ransomware groups abuse Microsofts Office 365 platform to gain access to target organizations Cloudflare (..)

DDOS 66

DDOS Hacking Penetration Testing Malware 66

Krebs on Security

FEBRUARY 23, 2025

Stanley, 33, had a brush with celebrity on Twitter in 2015 when he leaked the user database for the DDoS-for-hire service LizardStresser , and soon faced threats of physical violence against his family. federal government information systems than China.” ” Jacob Williams is a former hacker with the U.S. I confess.

Consumer Protection 336

Consumer Protection Government Cryptocurrency Media 336

Security Affairs

JULY 20, 2025

Army National Guard network Former US Army member confesses to Telecom hack and extortion conspiracy CVE-2025-6554 marks the fifth actively exploited Chrome Zero-Day patched by Google in 2025 DDoS peaks hit new highs: Cloudflare mitigated massive 7.3 Tbps assault U.S.

Data breaches 66

Data breaches DDOS Ransomware Hacking 66

Krebs on Security

MARCH 31, 2023

Authorities in Germany this week seized Internet servers that powered FlyHosting , a dark web offering that catered to cybercriminals operating DDoS-for-hire services, KrebsOnSecurity has learned. “Police says: They support ddos attacks, C&C/C2 and stresser a bit too much. A seizure notice left on the FlyHosting domains. .

DDOS 338

DDOS Internet Internet Cybercrime 338

Krebs on Security

MAY 28, 2020

The United Kingdom’s anti-cybercrime agency is running online ads aimed at young people who search the Web for services that enable computer crimes, specifically trojan horse programs and DDoS-for-hire services. law enforcement agents in connection with various cybercrime investigations. FLATTENING THE CURVE.

Cybercrime 309

Cybercrime DDOS Advertising Hacking 309