Security Affairs

JULY 8, 2022

. “The systematic attacks observed against Ukraine include reported and suspected phishing attacks against Ukrainian state authorities, Ukrainian individuals and organizations, and the general population.” In some of the attacks, threat actors used an Excel document named Nuclear.xls, suggesting an alarming lure.

Cybercrime 98

Cybercrime Malware DDOS Ransomware 98

Security Affairs

AUGUST 12, 2021

Microsoft warns of a long-running spear-phishing campaign that has targeted Office 365 customers in multiple attacks since July 2020. Microsoft revealed that a year-long spear-phishing campaign has targeted Office 365 customers in multiple attacks starting with July 2020. SecurityAffairs – hacking, cybercrime). com , or api[.]statvoo[.]com

Phishing 118

Phishing Passwords Encryption Cybercrime 118

Security Affairs

NOVEMBER 3, 2022

It focused on deploying POS malware and launching targeted spear-phishing attacks against organizations worldwide. The Sentinel Labs’s analysis revealed that Black Basta ransomware operators develop and maintain their own toolkit, they documented only collaboration with a limited and trusted set of affiliates. Pierluigi Paganini.

Cybercrime 100

Cybercrime Ransomware Antivirus Malware 100

Security Affairs

JUNE 17, 2021

UNC2465 cybercrime group that is affiliated with the Darkside ransomware gang has infected with malware the website of a CCTV camera vendor. In the documented attack, once the backdoor is deployed, UNC2465 interactively established an NGROK tunnel and performed lateral movements in less than 24 hours. Pierluigi Paganini.

Cybercrime 106

Cybercrime Ransomware Antivirus Software 106

Security Affairs

DECEMBER 25, 2021

The phishing messages use weaponized Word or Excel attachments to install the Dridex banking Trojan. “This letter is to inform you that you have been exposed to a coworker who tested positive for OMICRON variant of COVID-19 sometime between December 18th and 20th,” reads a phishing message shared by Bleeping Computer.

Phishing 132

Phishing Passwords Banking Malware 132

Security Affairs

FEBRUARY 27, 2023

Data allegedly stolen from the American gaming giant Activision in December security breach were leaked on a cybercrime forum. The Threat Actors successfully phished a privileged user on the network. They exfiltrated sensitive work place documents as well as scheduled to be released content dating to November 17th, 2023.

Hacking 90

Hacking Cybercrime Social Engineering Data breaches 90

Security Affairs

JUNE 13, 2021

The Anti-Phishing Working Group (APWG) revealed that the number of phishing websites peaked at record levels in the first quarter of 2021. The Anti-Phishing Working Group (APWG) has published its new Phishing Activity Trends Report related to the first quarter of 2021. Reported Phishing Websites for Q1 2021.

Phishing 109

Phishing Advertising Cryptocurrency Encryption 109

Security Affairs

SEPTEMBER 20, 2019

Cofense researchers spotted a phishing campaign that is targeting taxpayers in the United States to infect them with the Amadey malware. Security experts at Cofense uncovered a phishing campaign that is targeting taxpayers in the United States attempting to infect them with a new piece of malware named Amadey. The post U.S.

Phishing 84

Phishing Social Engineering Malware Advertising 84

Security Affairs

OCTOBER 23, 2023

Criminal activities conducted by the group are smishing , phishing and vishing campaigns, and the ‘son in distress’ scam. The leaders of the criminal organization used false documentation and spoofing techniques to hide their identity and invested their profits in crypto assets to launder the proceeds.

Computers and Electronics 91

Computers and Electronics Scams Cybercrime Phishing 91

Security Affairs

APRIL 21, 2024

carmaker with phishing attacks Law enforcement operation dismantled phishing-as-a-service platform LabHost Previously unknown Kapeka backdoor linked to Russian Sandworm APT Cisco warns of a command injection escalation flaw in its IMC.

Data breaches 104

Data breaches Phishing Ransomware Malware 104

Security Affairs

MARCH 14, 2024

In the campaign observed by ZDI, threat actors used PDF documents lures that contained Google DoubleClick Digital Marketing (DDM) open redirects. “The phishing campaign employed open redirect URLs from Google Ad technologies to distribute fake Microsoft software installers (.MSI) MSI) installers. net domain inside the PDF file.

Phishing 110

Phishing Malware Software Internet 110

Security Affairs

SEPTEMBER 18, 2020

Web-phishing targeting various online services almost doubled during the COVID-19 pandemic , it accounted for 46 percent of the total number of fake web pages. Secure web- phishing. In the light of global pandemic and the businesses’ dive into online world, the share of this phishing category increased to remarkable 46 percent.

Phishing 105

Phishing Ransomware Spyware Banking 105

Security Affairs

JULY 12, 2023

The issue, tracked as CVE-2023-36884 , was exploited by nation-state actors and cybercriminals to gain remote code execution via malicious Office documents. The company revealed that it is aware of high-targeted attacks that attempt to exploit these issues through specially-crafted Office documents. ” reads the post.

Phishing 92

Phishing Cybercrime Hacking Government 92

Security Affairs

MAY 21, 2024

The gang published a series of documents as proof of the hack, including people’s ID cards, data sheets, payroll payment requesters and a picture of the folder exfiltrated from the victim’s systems. The attacks began with a spam/phishing email containing malicious URL links. Sunoco is the largest at 8 billion gallons.

Hacking 124

Hacking Ransomware Phishing Malware 124

Security Affairs

SEPTEMBER 4, 2021

FIN7 cybercrime gang used weaponized Windows 11 Alpha-themed Word documents to drop malicious payloads, including a JavaScript backdoor. Anomali Threat Research experts have monitored recent spear-phishing attacks conducted by financially motivated threat actor FIN7. The attack chain began with a Microsoft Word document (.doc)

Cybercrime 122

Cybercrime Retail Phishing Hacking 122

Security Affairs

NOVEMBER 28, 2023

The ransomware gang claims the theft of board meeting minutes, internal project documentation, personnel details, audit reports, and more. In October 2022, CISA, the FBI, and the Department of Health and Human Services (HHS) warned that the Daixin Team cybercrime group is actively targeting U.S.

Hacking 124

Hacking VPN Ransomware Cybercrime 124

Security Affairs

AUGUST 8, 2023

The issue, tracked as CVE-2023-36884 , was exploited by nation-state actors and cybercriminals to gain remote code execution via malicious Office documents. The company revealed that it is aware of high-targeted attacks that attempt to exploit these issues through specially-crafted Office documents. “An reads the post.

Phishing 94

Phishing Cybercrime Hacking Government 94

Security Affairs

DECEMBER 21, 2023

Businesses employ MongoDB to organize and store large swaths of document-oriented information. The exposed database hosted over 100K links with scanned documents hosted on a Goyzer domain. The data was leaked via a publicly exposed and passwordless MongoDB database, which has since been closed.

Identity Theft 113

Identity Theft Scams Phishing Accountability 113

Security Affairs

OCTOBER 8, 2023

Belgian intelligence service VSSE accused Alibaba of ‘possible espionage’ at European hub in Liege A WhatsApp zero-day exploit can cost several million dollars CISA adds JetBrains TeamCity and Windows flaws to its Known Exploited Vulnerabilities catalog NATO is investigating a new cyber attack claimed by the SiegedSec group Global CRM Provider Exposed (..)

Data breaches 108

Data breaches Cybercrime Ransomware Hacking 108

Security Affairs

JUNE 29, 2023

The experts also identified a set of off-the-shelf tools used by Andariel during the command execution phase, including: Supremo remote desktop; 3Proxy; Powerline; Putty; Dumpert; NTDSDumpEx; ForkDump; The malware EarlyRat was dropped via phishing messages using weaponized documents. ” concludes the report.

Malware 86

Malware Cybercrime Phishing Internet 86

Security Affairs

JANUARY 3, 2024

This involves specifying the credentials, as well as the IBAN and BIC codes that will be used for the ‘swapping’ or spoofing process in the documents. The necessary login credentials for online banking systems are previously harvested through a phishing kit. Decision-making and automation of cybercriminal operations.

Artificial Intelligence 122

Artificial Intelligence Banking Scams Cybercrime 122

Security Affairs

DECEMBER 18, 2020

Cybercrime organizations continue to be very active while pharmaceutical organizations are involved in the development of a COVID-19 vaccine and medicines to cure the infections. The experts uncovered a large scale spear-phishing campaign that has been ongoing since September 2020. ” continues the report.

Phishing 143

Phishing Cybercrime Internet Internet 143

Security Affairs

MARCH 13, 2020

In the last weeks, security experts reported many Coronavirus-themed attacks carried out by cybercrime gangs, now experts warn of similar attacks from nation – s tate actors. North Korea's BabyShark malware has been found in the form of document on South Korea's response to COVID-19.

Cybercrime 112

Cybercrime Malware Advertising Phishing 112

Security Affairs

MARCH 10, 2024

Judge ordered NSO Group to hand over the Pegasus spyware code to WhatsApp Cybercrime BlackCat Ransomware Affiliate TTPs American Express credit cards EXPOSED in third-party vendor data breach – account numbers and names among details accessed in hack LockBit 3.0’S

Spyware 92

Spyware Data breaches Hacking Ransomware 92

Security Affairs

OCTOBER 20, 2019

TA505 cybercrime group that operated the Dridex Trojan and Locky ransomware, has been using a new RAT dubbed SDBbot in recent attacks. Security experts at Proofpoint observed the notorious TA505 cybercrime group that has been using a new RAT dubbed SDBbot in recent attacks. Pierluigi Paganini.

Cybercrime 44

Cybercrime Advertising Retail Banking 44

Security Affairs

NOVEMBER 27, 2021

Threat actors are targeting IKEA employees in an internal phishing campaign leveraging stolen reply-chain emails. According to BleepingComputer, threat actors are targeting IKEA employees in phishing attacks using stolen reply-chain emails. The company also shared an example of a phishing email sent to its employees.

Cyber Attacks 139

Cyber Attacks Phishing Malware Hacking 139

Security Affairs

NOVEMBER 25, 2021

The PowerShortShell stealer is also used for Telegram surveillance and gathering system information from infected systems. Upon opening the document a DLL is dropped on the target system, then it is used to execute the PowerShortShell stealer payload. ” reads the analysis published by SafeBreach Labs.

Surveillance 95

Surveillance Social Engineering Cybercrime Phishing 95

Security Affairs

NOVEMBER 9, 2022

The malware is available for sale in illegal forums, in the past, it was used by cybercrime gangs like TA505 to install GandCrab ransomware or the FlawedAmmyy RAT. ” reads the report published by the security firm. ” reads the report published by the security firm. Pierluigi Paganini.

Malware 93

Malware Ransomware Cybercrime Phishing 93

Security Affairs

FEBRUARY 12, 2020

The FBI’s Internal Crime Complaint Center (IC3) released the FBI 2019 Internet Crime Report , a document that outlines cybercrime trends over the past year. Here we are to analyze the annual FBI 2019 Internet Crime Complaint Center (IC3) , one of the most interesting documents on the crime trends observed in the last 12 months.

Internet 114

Internet Internet Scams Cybercrime 114

Security Affairs

JANUARY 7, 2023

Cyber researchers warn of a modified Zoom app that was used by threat actors in a phishing campaign to deliver the IcedID Malware. Cyble researchers recently uncovered a phishing campaign targeting users of the popular video conferencing and online meeting platform Zoom to deliver the IcedID malware. ” concludes the report.

Malware 92

Malware Phishing Banking Hacking 92

Security Affairs

AUGUST 1, 2023

Threat actors are targeting Italian organizations with a phishing campaign aimed at delivering a new malware called WikiLoader. WikiLoader is a new piece of malware that is employed in a phishing campaign that is targeting Italian organizations. ” continues the report. ” concludes the report. ” concludes the report.

Malware 95

Malware Phishing Banking Hacking 95

Security Affairs

DECEMBER 28, 2021

” Clients of the company could be targeted by malicious activities, such as phishing campaigns and scams, due to the exposure of their data. In particular, businesses could experience criminal activities and forms of cybercrime as a result of the open bucket.” ” reads the post published by Website Planet. “D.W.

Data breaches 93

Data breaches Scams Cybercrime Phishing 93

Security Affairs

NOVEMBER 8, 2023

The FBI also reported, as of June 2023, that the Silent Ransom Group (SRG), also known as Luna Moth, had been observed conducting callback phishing data theft and extortion attacks. The threat actors sent victims a phone number in a phishing attempt, often related to pending charges on their accounts.

Ransomware 113

Ransomware Backups Encryption Phishing 113

Security Affairs

AUGUST 13, 2020

The attackers seek to steal documents that contain commercial secrets and employee personal data. In all campaigns, RedCurl’s main goal was to steal confidential corporate documents such as contracts, financial documents, employee personal records, and records of legal actions and facility construction.

Phishing 142

Phishing Social Engineering Banking Advertising 142

Security Affairs

DECEMBER 18, 2023

Experts warn of a new phishing campaign distributing the QakBot malware, months after law enforcement dismantled its infrastructure. Threat actors sent a PDF to the victims, the document comes from a user masquerading as an IRS employee. The PDF contained a URL that downloads a digitally signed Windows Installer (.msi).

Malware 106

Malware Phishing Ransomware Hacking 106

Security Affairs

SEPTEMBER 18, 2021

Security researchers from the Cisco Talos team uncovered a spear-phishing campaign targeting the aviation industry for two years avoiding detection. Security researchers from Cisco Talos uncovered a spear-phishing campaign targeting, dubbed Operation Layover, that targeted the aviation industry for two years without being detected.

Malware 104

Malware Phishing DNS Cybercrime 104

Security Affairs

OCTOBER 18, 2020

Researchers from FireEye’s Mandiant observed FIN11 hackers using spear-phishing messages distributing a malware downloader dubbed FRIENDSPEAK. ” The attack chain starts when the victims enable the macro embedded in an Excel spreadsheet that came with the phishing e-mails. .” ” reads the analysis published by FireEye.

Ransomware 132

Ransomware Malware Telecommunications Advertising 132