Cybercrime and Financial Services - Cyber Security Informer

Japan ’s FSA warns of unauthorized trades via stolen credentials from fake security firms’ sites

Security Affairs

APRIL 22, 2025

Japan s Financial Services Agency (FSA) warns of hundreds of millions in unauthorized trades linked to hacked brokerage accounts. Japan s Financial Services Agency (FSA) reported that the damage caused by unauthorized access to and transactions on internet trading services is increasing.

Financial Services

Financial Services Passwords Antivirus Accountability

An Interview With the Target & Home Depot Hacker

Krebs on Security

NOVEMBER 14, 2024

Shefel claims the true mastermind behind the Target and other retail breaches was Dmitri Golubov , an infamous Ukrainian hacker known as the co-founder of Carderplanet, among the earliest Russian-language cybercrime forums focused on payment card fraud. “I’m also godfather of his second son.”

Advertising

Advertising Retail Cryptocurrency Cybercrime

Microsoft seized 240 sites used by the ONNX phishing service

Security Affairs

NOVEMBER 23, 2024

Microsoft disrupted the ONNX phishing service, seizing 240 sites and naming an Egyptian man as the operator behind the operation. Microsoft announced the disruption of the ONNX phishing service, another success against cybercrime which led to the seizure of 240 sites. ” reads the analysis published by Microsoft.

Phishing

Phishing Cybercrime Financial Services Media

Threat actor says Interbank refused to pay the ransom after a two-week negotiation

Security Affairs

OCTOBER 31, 2024

Interbank , formally the Banco Internacional del Perú Service Holding S.A.A. is a leading Peruvian provider of financial services has over 2 million customers. Peruvian Interbank confirmed a data breach after threat actors accessed its systems and leaked stolen information online.

Data breaches

Data breaches Financial Services Hacking Mobile

DMM Bitcoin halts operations six months after a $300 million cyber heist

Security Affairs

DECEMBER 3, 2024

Japan’s Financial Services Agency, who investigated the incident, found severe issues in DMM Bitcoin’s risk management, including inadequate oversight, lack of independent audits, and poor security practices. Elliptic also confirmed it has identified the wallets involved in the attack.

Cryptocurrency

Cryptocurrency Financial Services Accountability Hacking

Shields up US retailers. Scattered Spider threat actors can target them

Security Affairs

MAY 17, 2025

Google warns that the cybercrime group Scattered Spider behind UK retailer attacks is now targeting U.S. The financially motivated group UNC3944 (also known as Scattered Spider , 0ktapus ) is known for social engineering and extortion. companies, shifting their focus across the Atlantic.

Retail

Retail Social Engineering Cybercrime Financial Services

Are Cybersecurity Jobs in High Demand?

Hacker's King

OCTOBER 19, 2024

In 2023 alone, global cybercrime damages were projected to reach $10.5 Escalating Cybercrime As cybercriminals become more sophisticated, the need for cybersecurity experts who can anticipate, prevent, and respond to attacks is essential. trillion annually.

Cybersecurity

Cybersecurity Healthcare Cyber threats Government

GUEST ESSAY: Four essential strategies to bolster cyber resilience in critical infrastructure

The Last Watchdog

MARCH 10, 2025

In 2023, victims reported nearly 900,000 cybercrime complaints to the FBI. While any business is a potential target for hackers, critical infrastructure organizations including defense, healthcare, energy, utilities, and financial services companies are perhaps most at risk due to their financial resources.

Energy and Utilities

Energy and Utilities Cyber threats Financial Services Government

How Security Teams Collect the Data They Need for Threat Intelligence

SecureWorld News

APRIL 14, 2025

The evolution of cybercrime is shifting into hyperdrive. Industry-specific organizations also exist for key economic sectors like financial services , healthcare, energy, and transportation to serve as hubs for exchanging threat intelligence data, incident reports, and best practices.

Media

Media Social Engineering Malware Phishing

Luxury, Loyalty and Lateral Movement: Retail and Banking Attacks Surge

SecureWorld News

JUNE 4, 2025

In a matter of days, three major cybersecurity incidents have hit the retail and financial services sectors, drawing renewed attention to supply chain vulnerabilities, credential-based attacks, and the increasing value of non-financial customer data.

Retail

Retail Banking Financial Services Social Engineering

A cyber attack briefly disrupted South African Airways operations

Security Affairs

MAY 9, 2025

.” In April 2025, the South African multinational telecommunications company MTN Group Limited disclosed a data breach that exposed subscribers personal information, it added that the incident did not impact the core network, billing systems and financial services infrastructure.

Cyber Attacks

Cyber Attacks Data breaches Telecommunications Financial Services

The danger of data breaches — what you really need to know

Webroot

APRIL 22, 2025

Here are some of the most likely targets for access to consumer data: Healthcare organizations : Healthcare companies are a prime target for cybercrime due to the large amounts of sensitive data they store, which includes personal information and medical records. Its like putting a lock on your personal data.

Data breaches

Data breaches Identity Theft Passwords eCommerce

Cybercrime Groups ShinyHunters, Scattered Spider Join Forces in Extortion Attacks on Businesses

The Hacker News

AUGUST 12, 2025

An ongoing data extortion campaign targeting Salesforce customers may soon turn its attention to financial services and technology service providers, as ShinyHunters and Scattered Spider appear to be working hand in hand, new findings show.

Cybercrime

Cybercrime Financial Services Technology

16 billion passwords leaked across Apple, Google, more: What to know and how to protect yourself

Zero Day

JUNE 22, 2025

Also: 4 ways to secure your remote work setup If your payment card details, bank accounts, or other digital financial services have been compromised, call the provider immediately (or freeze your cards using the mobile app, if your app has that feature).

Passwords

Passwords Data breaches Password Management Identity Theft

Coyote malware is first-ever malware abusing Windows UI Automation

Security Affairs

JULY 24, 2025

The Coyote malware collects system details and focuses on identifying victims’ financial services. Like any other banking trojan, Coyote is hunting banking information, but what sets Coyote apart is the way it obtains this information, which involves the (ab)use of UIA.” ” reads the report published by Akamai.

Malware

Malware Banking Social Engineering Financial Services

Heard about the 16 billion passwords leak? Here are the facts and how to protect yourself

Zero Day

JUNE 20, 2025

Also: 4 ways to secure your remote work setup If your payment card details, bank accounts, or other digital financial services have been compromised, call the provider immediately (or freeze your cards using the mobile app, if your app has that feature).

Passwords

Passwords Data breaches Password Management Identity Theft

Security Affairs newsletter Round 508 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

JANUARY 26, 2025

President Donald Trump granted a “full and unconditional pardon” to Ross Ulbricht, Silk Road creator Pwn2Own Automotive 2025 Day 1: organizers awarded $382,750 for 16 zero-days Subaru Starlink flaw allowed experts to remotely hack cars Two ransomware groups abuse Microsofts Office 365 platform to gain access to target organizations Cloudflare (..)

DDOS

DDOS Hacking Penetration Testing Malware

Chinese Hackers Flood Japan with 580 Million Phishing Emails Using ‘CoGUI’ Kit

eSecurity Planet

MAY 8, 2025

According to reports by cybersecurity firm Proofpoint, a cybercrime tool known as CoGUI was used to send over 580 million phishing emails between January and April 2025. This pattern of targeting lines up with an alert from Japans Financial Services Agency , which recently warned of an increase in phishing aimed at financial institutions.

Phishing

Phishing Scams Mobile Financial Services

How Criminals Are Using Generative AI

Schneier on Security

MAY 9, 2024

There’s a new report on how criminals are using generative AI tools: Key Takeaways: Adoption rates of AI technologies among criminals lag behind the rates of their industry counterparts because of the evolving nature of cybercrime. Instead, they are jailbreaking existing ones.

Financial Services

Financial Services Cybercrime Technology Artificial Intelligence

Toyota Financial Services discloses a data breach

Security Affairs

DECEMBER 11, 2023

Toyota Financial Services (TFS) disclosed a data breach, threat actors had access to sensitive personal and financial data. Toyota Financial Services (TFS) is warning customers it has suffered a data breach that exposed sensitive personal and financial data.

Financial Services

Financial Services Data breaches Identity Theft Banking

Medusa ransomware gang claims the hack of Toyota Financial Services

Security Affairs

NOVEMBER 17, 2023

Toyota Financial Services discloses unauthorized activity on systems after the Medusa ransomware gang claimed to have hacked the company. Toyota Financial Services confirmed the discovery of unauthorized activity on systems in a limited number of its locations. The company has yet to disclose a data breach.

Financial Services

Financial Services Hacking Ransomware Data breaches

Latin American Financial Services: Sunny Climes and Cybercrimes

Digital Shadows

DECEMBER 9, 2021

The post Latin American Financial Services: Sunny Climes and Cybercrimes first appeared on Digital Shadows. Few things make my eyes sparkle like talking about Latin America. Back in 2018, I had the privilege of being.

Financial Services

Financial Services Cybercrime Banking Ransomware

Survey: Financial Services Firms Under Cybersecurity Siege

Security Boulevard

APRIL 20, 2022

VMware today published a survey of 130 security leaders in the financial services sector that suggests more cyberattacks designed to undermine the integrity of public markets are being launched by cartels of cybercriminals. The post Survey: Financial Services Firms Under Cybersecurity Siege appeared first on Security Boulevard.

Financial Services

Financial Services Cybersecurity Cybercrime Marketing

Defending Financial Services Against Fraud in a Shifting Cyber Landscape

Thales Cloud Protection & Licensing

NOVEMBER 13, 2023

Defending Financial Services Against Fraud in a Shifting Cyber Landscape sparsh Tue, 11/14/2023 - 05:05 As we approach International Fraud Awareness Week during 12-18 November 2023, taking stock of the evolving threat landscape and the vulnerabilities that financial services organizations face is crucial.

Financial Services

Financial Services Encryption Cybercrime Threat Reports

Toyota disclosed a data breach after ZeroSevenGroup leaked stolen data on a cybercrime forum

Security Affairs

AUGUST 20, 2024

Toyota has confirmed a data breach after a threat actor leaked 240GB of data stolen from its infrastructure on a cybercrime forum. Toyota disclosed a data breach after a threat actor leaked an archive of 240GB of data stolen from its systems on a cybercrime forum, BleepingComputer reported.

Data breaches

Data breaches Cybercrime Financial Services Hacking

15 billion credentials available in the cybercrime marketplaces

Security Affairs

JULY 9, 2020

More than 15 billion username and passwords are available on cybercrime marketplaces, including over 5 billion unique credentials, states the experts. The credentials are sold for an average of $15.43, the most expensive pairs relate to banking and financial services accounts, with an average price of nearly $71.

Cybercrime

Cybercrime Antivirus Accountability Marketing

U.S. Indicts North Korean Hackers in Theft of $200 Million

Krebs on Security

FEBRUARY 17, 2021

The Justice Department says those indicted were members of a DPRK-sponsored cybercrime group variously identified by the security community as the Lazarus Group and Advanced Persistent Threat 38 (APT 38). million in August 2020 from a financial services company based in New York. billion from banks and other victims worldwide.

Cryptocurrency

Cryptocurrency Financial Services Banking Government

NY Charges First American Financial for Massive Data Leak

Krebs on Security

JULY 23, 2020

According to a filing (PDF) by the New York State Department of Financial Services (DFS), the weakness that exposed the documents was first introduced during an application software update in May 2014 and went undetected for years. According to the FBI, BEC scams are the most costly form of cybercrime today.

Insurance

Insurance Financial Services Penetration Testing Scams

NY Department of Financial Services Issues Cyber Fraud Alert to Auto Insurers

Hot for Security

FEBRUARY 24, 2021

The New York Department of Financial Services (NYDFS) has issued an alert to instant-quote websites, particularly car insurers, warning of a growing campaign to steal nonpublic information (NPI). The attackers captured the full, unredacted driver’s license numbers without going any further in the process and abandoned the quote.”.

Financial Services

Financial Services Insurance Cybercrime Hacking

FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked

Krebs on Security

DECEMBER 13, 2022

Federal Bureau of Investigation (FBI) to build cyber and physical threat information sharing partnerships with the private sector, this week saw its database of contact information on more than 80,000 members go up for sale on an English-language cybercrime forum. Pompompurin has been a thorn in the side of the FBI for years.

Hacking

Hacking Cybercrime Energy and Utilities Accountability

Would You Have Fallen for This Phone Scam?

Krebs on Security

APRIL 28, 2020

The request for the last four of the customer’s credit card number was consistent with my own testing, which relied upon on a caller ID spoofing service advertised in the cybercrime underground and aimed at a Citi account controlled by this author. A screen shot from an underground store selling CVV records. Click to enlarge.

Scams

Scams Banking Accountability Financial Services

U.S., U.K. Sanction 7 Men Tied to Trickbot Hacking Group

Krebs on Security

FEBRUARY 9, 2023

Authorities in the United States and United Kingdom today levied financial sanctions against seven men accused of operating “ Trickbot ,” a cybercrime-as-a-service platform based in Russia that has enabled countless ransomware attacks and bank account takeovers since its debut in 2016.

Hacking

Hacking Cybercrime Ransomware Government

The Rise of One-Time Password Interception Bots

Krebs on Security

SEPTEMBER 29, 2021

In February, KrebsOnSecurity wrote about a novel cybercrime service that helped attackers intercept the one-time passwords (OTPs) that many websites require as a second authentication factor in addition to passwords. And all of them operate via Telegram , a cloud-based instant messaging system.

Passwords

Passwords Authentication Banking Mobile

First American Financial Pays Farcical $500K Fine

Krebs on Security

JUNE 18, 2021

According to the FBI, BEC scams are the most costly form of cybercrime today. In July 2020, the New York State Department of Financial Services announced the company was the target of their first ever cybersecurity enforcement action in connection with the incident, charges that could bring steep financial penalties.

Insurance

Insurance Risk Financial Services CISO

Disneyland Malware Team: It’s a Puny World After All

Krebs on Security

NOVEMBER 16, 2022

A financial cybercrime group calling itself the Disneyland Team has been making liberal use of visually confusing phishing domains that spoof popular bank brands using Punycode , an Internet standard that allows web browsers to render domain names with non-Latin alphabets like Cyrillic. com — which was created to phish U.S.

Malware

Malware Banking Phishing DDOS

Financial services continue to lead in cybersecurity preparedness, but chinks appear in the armor

Thales Cloud Protection & Licensing

AUGUST 31, 2022

Financial services continue to lead in cybersecurity preparedness, but chinks appear in the armor. That is why criminals have historically chosen to focus on this industry over the years, with organized crime evolving into organized cybercrime. Thu, 09/01/2022 - 05:15. Malware and ransomware attacks increase.

Financial Services

Financial Services Cybersecurity Computers and Electronics Banking

Russian cybercrime gang targets finance firms with stealthy macros

Bleeping Computer

OCTOBER 15, 2021

A new phishing campaign dubbed MirrorBlast is deploying weaponized Excel documents that are extremely difficult to detect to compromise financial service organizations [.].

Cybercrime

Cybercrime Financial Services Phishing

Are Banks Spending Their Cybersecurity Budgets in the Right Place?

Security Boulevard

APRIL 15, 2021

Cybercrime is on the rise across all levels of industry and government. Nowhere is that more apparent than in financial services, where firms like banks and credit unions experience attacks nearly 300x more often than other industries.

Banking

Banking Cybersecurity Financial Services Healthcare

Hackers target financial firms hosting malicious payloads on Google Cloud Storage

Security Affairs

DECEMBER 26, 2018

Researchers at Menlo Labs uncovered a malicious email campaign targeting employees of banks and financial services companies abusing Google Cloud Storage. Experts analyzed some malicious VBS scripts that were highly obfuscated and were likely created by one of the builder available in the cybercrime underground.

Financial Services

Financial Services Cybercrime Malware Advertising

Law enforcement operation seized Ragnar Locker group’s infrastructure

Security Affairs

OCTOBER 19, 2023

This is an important achievement in the fight against cybercrime. Law enforcement from the US, Europe, Germany, France, Italy, Japan, Spain, Netherlands, Czech Republic, and Latvia conducted a joint operation that led to the seizure of the Ragnar Locker ransomware’s infrastructure. Both FBI and Europol declined to comment on the events.

Financial Services

Financial Services Ransomware Cybercrime Manufacturing

Papua New Guinea ‘s finance ministry was hit by a ransomware

Security Affairs

OCTOBER 29, 2021

“The government and the people of Papua New Guinea can be assured that the government financial services will continue as usual,” Pundari said. SecurityAffairs – hacking, cybercrime). The government was not able to pay cheques and ordinary operations were impacted. Follow me on Twitter: @securityaffairs and Facebook.

Ransomware

Ransomware Government Financial Services Cybercrime

Credit Union Sues Fintech Giant Fiserv Over Security Claims

Krebs on Security

MAY 3, 2019

And that information is for sale in multiple places online and in the cybercrime underground for a few bucks per person. Thus, an attacker would only need to know a target’s SSN to reset that customer’s password, according to Bessemer.

Banking

Banking Accountability Passwords Technology

A Swift Kick in the Nuts and Bolts of Banking

Veracode Security

JULY 29, 2022

The global financial services industry is undergoing a seismic shift and not enough people are truly aware of what this means. By November of this year, banks and other financial institutions must have in place a new process for payment systems that uses the ISO 20022 standard instead of SWIFT.

Banking

Banking Financial Services Cybercrime Technology

Corporate Finance firms leak 500K+ legal and financial documents online

Security Affairs

MARCH 17, 2020

Advantage and Argus seem to be the same company working under two different names, they offer funding and startup capital to business owners without access to traditional lending and financial services. SecurityAffairs – financial documents, cybercrime). The researchers discovered the unsecured database in December 2019.

Banking

Banking Financial Services Advertising Cybercrime

Japan ’s FSA warns of unauthorized trades via stolen credentials from fake security firms’ sites

An Interview With the Target & Home Depot Hacker

Trending Sources

Microsoft seized 240 sites used by the ONNX phishing service

Threat actor says Interbank refused to pay the ransom after a two-week negotiation

DMM Bitcoin halts operations six months after a $300 million cyber heist

Shields up US retailers. Scattered Spider threat actors can target them

Are Cybersecurity Jobs in High Demand?

GUEST ESSAY: Four essential strategies to bolster cyber resilience in critical infrastructure

How Security Teams Collect the Data They Need for Threat Intelligence

Luxury, Loyalty and Lateral Movement: Retail and Banking Attacks Surge

A cyber attack briefly disrupted South African Airways operations

The danger of data breaches — what you really need to know

Cybercrime Groups ShinyHunters, Scattered Spider Join Forces in Extortion Attacks on Businesses

16 billion passwords leaked across Apple, Google, more: What to know and how to protect yourself

Coyote malware is first-ever malware abusing Windows UI Automation

Heard about the 16 billion passwords leak? Here are the facts and how to protect yourself

Security Affairs newsletter Round 508 by Pierluigi Paganini – INTERNATIONAL EDITION

Chinese Hackers Flood Japan with 580 Million Phishing Emails Using ‘CoGUI’ Kit

How Criminals Are Using Generative AI

Toyota Financial Services discloses a data breach

Medusa ransomware gang claims the hack of Toyota Financial Services

Latin American Financial Services: Sunny Climes and Cybercrimes

Survey: Financial Services Firms Under Cybersecurity Siege

Defending Financial Services Against Fraud in a Shifting Cyber Landscape

Toyota disclosed a data breach after ZeroSevenGroup leaked stolen data on a cybercrime forum

15 billion credentials available in the cybercrime marketplaces

U.S. Indicts North Korean Hackers in Theft of $200 Million

NY Charges First American Financial for Massive Data Leak

NY Department of Financial Services Issues Cyber Fraud Alert to Auto Insurers

FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked

Would You Have Fallen for This Phone Scam?

U.S., U.K. Sanction 7 Men Tied to Trickbot Hacking Group

The Rise of One-Time Password Interception Bots

First American Financial Pays Farcical $500K Fine

Disneyland Malware Team: It’s a Puny World After All

Financial services continue to lead in cybersecurity preparedness, but chinks appear in the armor

Russian cybercrime gang targets finance firms with stealthy macros

Are Banks Spending Their Cybersecurity Budgets in the Right Place?

Hackers target financial firms hosting malicious payloads on Google Cloud Storage

Law enforcement operation seized Ragnar Locker group’s infrastructure

Papua New Guinea ‘s finance ministry was hit by a ransomware

Credit Union Sues Fintech Giant Fiserv Over Security Claims

A Swift Kick in the Nuts and Bolts of Banking

Corporate Finance firms leak 500K+ legal and financial documents online

Stay Connected