Hot for Security

FEBRUARY 24, 2021

The New York Department of Financial Services (NYDFS) has issued an alert to instant-quote websites, particularly car insurers, warning of a growing campaign to steal nonpublic information (NPI). The attackers captured the full, unredacted driver’s license numbers without going any further in the process and abandoned the quote.”.

Financial Services 122

Financial Services Insurance Cybercrime Hacking 122

CSO Magazine

JANUARY 20, 2022

“Emotet has been one of the most professional and long-lasting cybercrime services out there,” according to Europol. It was thought the malware, first discovered in 2014, had been vanquished by law enforcement agencies from eight countries in January 2021. However, it reportedly resurfaced this past November.

Financial Services 117

Financial Services Malware Cybercrime 117

Security Affairs

JULY 9, 2020

More than 15 billion username and passwords are available on cybercrime marketplaces, including over 5 billion unique credentials, states the experts. The credentials are sold for an average of $15.43, the most expensive pairs relate to banking and financial services accounts, with an average price of nearly $71.

Cybercrime 117

Cybercrime Antivirus Marketing Accountability 117

Bleeping Computer

OCTOBER 15, 2021

A new phishing campaign dubbed MirrorBlast is deploying weaponized Excel documents that are extremely difficult to detect to compromise financial service organizations [.].

Cybercrime 111

Cybercrime Financial Services Phishing 111

SecureWorld News

JUNE 29, 2021

The Microsoft Threat Intelligence Center says it has observed new activity from the cybercrime group, mainly password spay and brute-force attacks. Plus, Microsoft says it has uncovered that one of its customer service systems was under an ongoing attack and being used to launch highly targeted attacks against some Microsoft customers.

Cybercrime 52

Cybercrime Financial Services Accountability Passwords 52

SecureWorld News

JUNE 29, 2021

The Microsoft Threat Intelligence Center says it has observed new activity from the cybercrime group, mainly password spray and brute-force attacks. Plus, Microsoft says it has uncovered that one of its customer service systems was under an ongoing attack and being used to launch highly targeted attacks against some Microsoft customers.

Cybercrime 52

Cybercrime Financial Services Accountability Passwords 52

Krebs on Security

DECEMBER 13, 2022

Federal Bureau of Investigation (FBI) to build cyber and physical threat information sharing partnerships with the private sector, this week saw its database of contact information on more than 80,000 members go up for sale on an English-language cybercrime forum. Pompompurin has been a thorn in the side of the FBI for years.

Hacking 362

Hacking Energy and Utilities Cybercrime Accountability 362

Security Boulevard

APRIL 15, 2021

Cybercrime is on the rise across all levels of industry and government. Nowhere is that more apparent than in financial services, where firms like banks and credit unions experience attacks nearly 300x more often than other industries.

Banking 105

Banking Cybersecurity Financial Services Healthcare 105

Krebs on Security

FEBRUARY 9, 2023

Authorities in the United States and United Kingdom today levied financial sanctions against seven men accused of operating “ Trickbot ,” a cybercrime-as-a-service platform based in Russia that has enabled countless ransomware attacks and bank account takeovers since its debut in 2016.

Hacking 193

Hacking Cybercrime Ransomware Government 193

Veracode Security

JULY 29, 2022

The global financial services industry is undergoing a seismic shift and not enough people are truly aware of what this means. By November of this year, banks and other financial institutions must have in place a new process for payment systems that uses the ISO 20022 standard instead of SWIFT.

Banking 107

Banking Financial Services Cybercrime Technology 107

Security Affairs

OCTOBER 19, 2023

This is an important achievement in the fight against cybercrime. Law enforcement from the US, Europe, Germany, France, Italy, Japan, Spain, Netherlands, Czech Republic, and Latvia conducted a joint operation that led to the seizure of the Ragnar Locker ransomware’s infrastructure. Both FBI and Europol declined to comment on the events.

Ransomware 106

Ransomware Financial Services Cybercrime Manufacturing 106

Krebs on Security

JULY 23, 2020

According to a filing (PDF) by the New York State Department of Financial Services (DFS), the weakness that exposed the documents was first introduced during an application software update in May 2014 and went undetected for years. According to the FBI, BEC scams are the most costly form of cybercrime today.

Insurance 299

Insurance Financial Services Penetration Testing Scams 299

SecureWorld News

NOVEMBER 2, 2023

This collaborative policy statement, endorsed by 48 countries, the European Union, and Interpol, signifies a pivotal breakthrough in the battle against this financially devastating form of cybercrime. Stephen Gates , Principal Security SME at Horizon3.ai, Their livelihoods have been at stake.

Ransomware 95

Ransomware Financial Services Healthcare Education 95

Security Affairs

DECEMBER 26, 2023

The recent cyber-attacks by an Iranian-backed cybercriminal group on a water utility in Aliquippa , Pennsylvania by targeting an Israeli-made SCADA system exemplify incidents teetering on the edge of cyberterrorism and cybercrime.

Cyber threats 117

Cyber threats Energy and Utilities Artificial Intelligence Cyber Attacks 117

Krebs on Security

APRIL 28, 2020

The request for the last four of the customer’s credit card number was consistent with my own testing, which relied upon on a caller ID spoofing service advertised in the cybercrime underground and aimed at a Citi account controlled by this author. A screen shot from an underground store selling CVV records. Click to enlarge.

Scams 359

Scams Banking Accountability Financial Services 359

Security Affairs

MARCH 14, 2024

The Australian and New Zealand Nissan Corporation and Financial Services (“Nissan”) advises that its systems have been subject to a cyber incident. Stolen data included corporate files and personal information Nissan refused to pay the ransom and the cybercrime group published the alleged stolen files.

Data breaches 94

Data breaches Identity Theft Financial Services Cybercrime 94

Security Affairs

DECEMBER 17, 2023

Hunters International ransomware gang claims to have hacked the Fred Hutch Cancer Center New NKAbuse malware abuses NKN decentralized P2P network protocol Snatch ransomware gang claims the hack of the food giant Kraft Heinz Multiple flaws in pfSense firewall can lead to arbitrary code execution BianLian, White Rabbit, and Mario Ransomware Gangs Spotted (..)

Data breaches 82

Data breaches Cybercrime Firewall Artificial Intelligence 82

SecureWorld News

SEPTEMBER 11, 2023

In a significant collaborative effort, the United States and the United Kingdom have jointly imposed sanctions on 11 individuals associated with the notorious Russia-based Trickbot cybercrime group. Furthermore, any transactions involving these individuals are generally prohibited for U.S. individuals or within the United States.

Cybercrime 99

Cybercrime Healthcare Financial Services Cyber threats 99

Security Affairs

JANUARY 23, 2024

Financial services company LoanDepot disclosed a data breach that impacted roughly 16.6 LoanDepot is a financial services company that primarily operates as a mortgage lender. The company provides a range of mortgage and non-mortgage loan products and services. million individuals. million individuals.

Data breaches 106

Data breaches Financial Services Cybersecurity Encryption 106

Security Affairs

DECEMBER 26, 2018

Researchers at Menlo Labs uncovered a malicious email campaign targeting employees of banks and financial services companies abusing Google Cloud Storage. Experts analyzed some malicious VBS scripts that were highly obfuscated and were likely created by one of the builder available in the cybercrime underground.

Financial Services 91

Financial Services Cybercrime Malware Advertising 91

Krebs on Security

SEPTEMBER 29, 2021

In February, KrebsOnSecurity wrote about a novel cybercrime service that helped attackers intercept the one-time passwords (OTPs) that many websites require as a second authentication factor in addition to passwords. And all of them operate via Telegram , a cloud-based instant messaging system.

Passwords 321

Passwords Mobile Authentication Banking 321

Security Affairs

OCTOBER 29, 2021

“The government and the people of Papua New Guinea can be assured that the government financial services will continue as usual,” Pundari said. SecurityAffairs – hacking, cybercrime). The government was not able to pay cheques and ordinary operations were impacted. Follow me on Twitter: @securityaffairs and Facebook.

Ransomware 83

Ransomware Government Financial Services Cybercrime 83

Krebs on Security

NOVEMBER 16, 2022

A financial cybercrime group calling itself the Disneyland Team has been making liberal use of visually confusing phishing domains that spoof popular bank brands using Punycode , an Internet standard that allows web browsers to render domain names with non-Latin alphabets like Cyrillic. com — which was created to phish U.S.

Malware 273

Malware Banking Phishing DDOS 273

Malwarebytes

NOVEMBER 11, 2021

Of course, we’re interested from a cybercrime point of view. Cybercrime. Cybercrime in this report includes the creation and spread of malware, hacking to steal sensitive personal or industry data, denial of service attacks to cause financial and/or reputational damage, and other criminal activities.

Cybercrime 102

Cybercrime Encryption Cryptocurrency Advertising 102

Krebs on Security

JUNE 18, 2021

According to the FBI, BEC scams are the most costly form of cybercrime today. In July 2020, the New York State Department of Financial Services announced the company was the target of their first ever cybersecurity enforcement action in connection with the incident, charges that could bring steep financial penalties.

Insurance 280

Insurance Risk Financial Services CISO 280

SecureWorld News

MAY 30, 2023

In the recent SecureWorld Financial Services virtual conference , Mike Britton and Dan Sheiber of Abnormal Security joined Adam Pendleton, CISO of LendingPoint, to discuss ChatGPT's impressive capabilities. But it is powerful, and the danger lies with what can be done using the chatbot tool.

Artificial Intelligence 82

Artificial Intelligence CISO Social Engineering Financial Services 82

CyberSecurity Insiders

MARCH 24, 2023

Breached Hacking Forum Goes Down Along with Founder With last week’s arrest of Breached hacking forum’s founder Conor Brian Fitzpatrick (who goes by the alias Pompompurin), the cybercrime meeting ground was the next domino to fall. Breached was a cybercrime forum that was a hotbed for criminal activity.

Financial Services 52

Financial Services Ransomware Cybercrime Hacking 52

Security Affairs

APRIL 3, 2024

Resecurity researchers warn that a new Version of JsOutProx is targeting financial institutions in APAC and MENA via Gitlab abuse. Resecurity has detected a new version of JSOutProx , which is targeting financial services and organizations in the APAC and MENA regions.

Banking 97

Banking Financial Services Malware Phishing 97

Security Boulevard

DECEMBER 8, 2021

Fighting cybercrime has been an issue for businesses across all industries since the early 1980s. Criminals will find any way they can to insert themselves between transactions, especially if those transactions involve a large sum of money.

Cybercrime 105

Cybercrime Internet Internet Financial Services 105

SecureWorld News

FEBRUARY 15, 2024

As financial institutions increasingly rely on networks of third-party partners, shoring up security across the entire supply chain is critical. To learn more and connect with cybersecurity leaders across the financial sector, attend the SecureWorld Financial Services virtual conference on February 28, 2024.

Banking 95

Banking Financial Services Data breaches Threat Detection 95

Security Affairs

DECEMBER 4, 2023

The experts called it ‘prepositioning’ to analyze the response from financial organizations globally and the reaction of the market. LockBit specifically targeted ICBC Financial Services (ICBC FS), a wholly owned U.S. subsidiary of the state-owned lender, which plays a critical role in the world of international finance.

Ransomware 106

Ransomware Banking Financial Services Marketing 106

Security Affairs

OCTOBER 6, 2022

The database belonging to the company was leaked on a cybercrime forum. The authorities determined that data used in this criminal activity were from the 10,200 records stolen from the telecommunications giant last month.

Data breaches 70

Data breaches Scams Telecommunications Financial Services 70

SC Magazine

JULY 2, 2021

Such discoveries would no doubt prove useful to the financial services community at large. The post Research partnership to examine how fraudsters abuse financial tech innovations appeared first on SC Media.

Financial Services 71

Financial Services Banking Identity Theft Media 71

Security Affairs

DECEMBER 22, 2023

The Australian and New Zealand Nissan Corporation and Financial Services (“Nissan”) advises that its systems have been subject to a cyber incident. Nissan, a Japanese multinational automaker, operates globally, and its regional divisions manage business activities in specific geographic areas.

Ransomware 126

Ransomware Data breaches Financial Services Scams 126

Security Affairs

DECEMBER 15, 2023

Resecurity’s HUNTER (HUMINT) unit spotted the BianLian , White Rabbit , and Mario ransomware gangs collaborating in a joint extortion campaign targeting publicly-traded financial services firms.

Ransomware 104

Ransomware Financial Services Cyber Attacks Cybersecurity 104

Security Affairs

FEBRUARY 19, 2024

Since January 2020, affiliates utilizing LockBit have targeted organizations of diverse sizes spanning critical infrastructure sectors such as financial services, food and agriculture, education, energy, government and emergency services, healthcare, manufacturing, and transportation.

Energy and Utilities 106

Energy and Utilities Ransomware Financial Services Manufacturing 106

Security Affairs

MARCH 17, 2020

Advantage and Argus seem to be the same company working under two different names, they offer funding and startup capital to business owners without access to traditional lending and financial services. SecurityAffairs – financial documents, cybercrime). The researchers discovered the unsecured database in December 2019.

Banking 109

Banking Financial Services Advertising Cybercrime 109