Security Affairs

APRIL 21, 2024

PoC publicly available Linux variant of Cerber ransomware targets Atlassian servers Ivanti fixed two critical flaws in its Avalanche MDM Researchers released exploit code for actively exploited Palo Alto PAN-OS bug Cisco warns of large-scale brute-force attacks against VPN and SSH services PuTTY SSH Client flaw allows of private keys recovery A renewed (..)

Data breaches 99

Data breaches Phishing Ransomware Malware 99

Security Affairs

SEPTEMBER 3, 2023

ransomware builder used by multiple threat actors Cisco fixes 3 high-severity DoS flaws in NX-OS and FXOS software Cybercrime Unpacking the MOVEit Breach: Statistics and Analysis Cl0p Ups The Ante With Massive MOVEit Transfer Supply-Chain Exploit FBI, Partners Dismantle Qakbot Infrastructure in Multinational Cyber Takedown U.S.

Social Engineering 107

Social Engineering Spyware Data breaches Surveillance 107

Security Affairs

JULY 15, 2023

Russia-linked APT Gamaredon starts stealing data from victims between 30 and 50 minutes after the initial compromise The source code of the BlackLotus UEFI Bootkit was leaked on GitHub US CISA warns of Rockwell Automation ControlLogix flaws Indexing Over 15 Million WordPress Websites with PWNPress New AVrecon botnet remained under the radar for two (..)

Spyware 91

Spyware Hacking Data breaches Mobile 91

Security Affairs

OCTOBER 1, 2023

ALPHV/BlackCat ransomware gang hacked the hotel chain Motel One FBI warns of dual ransomware attacks Progress Software fixed two critical severity flaws in WS_FTP Server Child abuse site taken down, organized child exploitation crime suspected – exclusive A still unpatched zero-day RCE impacts more than 3.5M

Artificial Intelligence 102

Artificial Intelligence Firmware Data breaches Hacking 102

Security Affairs

APRIL 22, 2024

The threat actors shared a portion of the stolen data with TechCrunch as proof of the hack, it includes records on current and former government officials, diplomats, and politically exposed people. The list also includes criminals, suspected terrorists, intelligence operatives and a European spyware firm.

Risk 117

Risk Spyware Hacking Accountability 117

SecureWorld News

JULY 11, 2022

The United States government has attributed the hack to a North Korean state-sponsored advanced persistent threat (APT) known as the Lazarus Group. The offer was emailed as a PDF document, and once it was downloaded, spyware infected the company's systems.

Social Engineering 76

Social Engineering Hacking Cryptocurrency Engineering 76

Security Affairs

JUNE 25, 2023

Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter ) The post Security Affairs newsletter Round 425 by Pierluigi Paganini – International edition appeared first on Security Affairs.

DDOS 90

DDOS Cybercrime Spyware Malware 90

SecureWorld News

AUGUST 25, 2022

Israeli spyware company NSO Group has experienced quite a bit of controversy in the last few years. Its spyware product, Pegasus, has been used by various criminals and nation states to target individuals of interest, such as activists, politicians, and business leaders. After being blacklisted by the U.S.,

Spyware 82

Spyware Government Marketing Surveillance 82

Security Affairs

AUGUST 7, 2022

affiliate sideloads Cobalt Strike through Windows Defender Gootkit AaaS malware is still active and uses updated tactics Austria investigates DSIRF firm for allegedly developing Subzero spyware ALPHV/BlackCat ransomware gang claims to have stolen data from Creos Luxembourg S.A. SecurityAffairs – hacking, newsletter).

Spyware 124

Spyware Manufacturing Small Business Surveillance 124

Security Affairs

DECEMBER 16, 2021

Tens of thousands of devices worldwide, including many industrial control systems (ICS), have been hit by the PseudoManuscrypt spyware. Kaspersky researchers reported that tens of thousands of devices belonging to industrial and government organizations worldwide have been hit by the PseudoManuscrypt spyware. Pierluigi Paganini.

Spyware 111

Spyware Energy and Utilities Malware Engineering 111

Security Affairs

SEPTEMBER 24, 2023

Government of Bermuda blames Russian threat actors for the cyber attack City of Dallas has set a budget of $8.5 Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cyber Attacks 85

Cyber Attacks Firewall Data breaches Telecommunications 85

Security Affairs

NOVEMBER 25, 2020

Group-IB supported an INTERPOL-led operation Falcon targeting business email compromise cybercrime gang from Nigeria, dubbed TMT. Group-IB , a global threat hunting and intelligence company, supported an INTERPOL-led operation Falcon targeting business email compromise (BEC) cybercrime gang from Nigeria, dubbed TMT by Group-IB.

Cybercrime 128

Cybercrime Phishing Social Engineering Spyware 128

Security Affairs

MAY 29, 2022

SecurityAffairs – hacking, newsletter). Please vote for Security Affairs and Pierluigi Paganini in every category that includes them (e.g. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). To nominate, please visit:?. Follow me on Twitter: @securityaffairs and Facebook.

InfoSec 102

InfoSec Spyware DDOS Firewall 102

Security Affairs

MARCH 4, 2023

stolen credit/debit cards Pegasus spyware used to spy on a Polish mayor Hundreds of thousands of websites hacked as part of redirection campaign MQsTTang, a new backdoor used by Mustang Panda APT against European entities Trusted Platform Module (TPM) 2.0 FiXS, a new ATM malware that is targeting Mexican banks BidenCash leaks 2.1M

Spyware 85

Spyware Data breaches Retail Ransomware 85

SecureWorld News

NOVEMBER 23, 2021

Apple is suing NSO Group, the company most known for its ability to hack iPhones using previously un-discovered Zero-Day vulnerabilities. The steps we’re taking today will send a clear message: In a free society, it is unacceptable to weaponize powerful state-sponsored spyware against those who seek to make the world a better place.".

Spyware 71

Spyware Surveillance Engineering Software 71

Security Affairs

FEBRUARY 28, 2021

SecurityAffairs – hacking, newsletter). If you want to receive the weekly Security Affairs Newsletter for free subscribe here. Pierluigi Paganini. The post Security Affairs newsletter Round 303 appeared first on Security Affairs.

Spyware 82

Spyware Backups Manufacturing Data breaches 82

Security Affairs

MARCH 5, 2020

According to the CrowdStrike 2020 Global Threat Report, the telecommunications and government sectors were the most targeted by the threat actors. Chinese hackers also targeted several organizations in the healthcare sector, government and defense sectors of countries in Asia. SecurityAffairs – hacking, China).

Telecommunications 90

Telecommunications Mobile Spyware Advertising 90

Security Affairs

FEBRUARY 13, 2022

SecurityAffairs – hacking, newsletter). US seizes $3.6 US seizes $3.6 Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. The post Security Affairs newsletter Round 353 appeared first on Security Affairs.

Spyware 74

Spyware Surveillance Ransomware Hacking 74

Security Affairs

NOVEMBER 14, 2021

SecurityAffairs – hacking, newsletter). Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Spyware 53

Spyware Data breaches Ransomware Retail 53

Security Affairs

NOVEMBER 8, 2021

Government experts state that the group uses multiple mechanisms to compromise networks of the victims, including phishing emails with malicious attachments to gain access and Remote Desktop Protocol (RDP) to move laterally once on the network. SecurityAffairs – hacking, ransomware). Follow me on Twitter: @securityaffairs and Facebook.

Computers and Electronics 115

Computers and Electronics Ransomware Retail Spyware 115

Security Affairs

OCTOBER 27, 2019

TA505 cybercrime group use SDBbot RAT in recent campaigns. Autoclerk travel reservations platform data leak also impacts US Government and military. Robots at HIS Group are vulnerable to hack. Swedish Government grants police the use of spyware against violent crime suspects. Winnti APT group uses skip-2.0

Spyware 42

Spyware Advertising Hacking DDOS 42

Security Affairs

NOVEMBER 17, 2019

ZoneAlarm forum site hack exposed data of thousands of users. TA505 Cybercrime targets system integrator companies. New TA2101 threat actor poses as government agencies to distribute malware. The Australian Parliament was hacked earlier this year. WhatsApp flaw CVE-2019-11931 could be exploited to install spyware.

DDOS 51

DDOS Spyware Advertising Ransomware 51

Security Affairs

JULY 11, 2022

A PDF containing the offer was sent to the employee, once opened the file a spyware compromised his system and infiltrate the Ronin’s network. government blamed North Korea-linked APT Lazarus for the Ronin Validator cyber heist. SecurityAffairs – hacking, Zyxel). reads a post-mortem analysis published by Sky Mavis.

Engineering 82

Engineering Spyware Phishing Hacking 82

Security Affairs

AUGUST 27, 2021

Government experts state that the group uses multiple mechanisms to compromise networks of the victims, including phishing emails with malicious attachments to gain access and Remote Desktop Protocol (RDP) to move laterally once on the network. SecurityAffairs – hacking, FBI). Follow me on Twitter: @securityaffairs and Facebook.

Ransomware 98

Ransomware Encryption Spyware Backups 98

Krebs on Security

APRIL 2, 2019

In response to an inquiry from this office, the RCMP stopped short of naming names, but said “we can confirm that our National Division Cybercrime Investigative Team did execute a search warrant at a Toronto location last week.”. government said was used to infect more than a half million computers worldwide. In 2014, the U.S.

Advertising 218

Advertising Malware Marketing Software 218

Security Affairs

APRIL 21, 2019

Attackers hacked support agent to access Microsoft Outlook email accounts. Scranos – A Cross Platform, Rootkit-Enabled Spyware rapidly spreading. RCE flaw in Electronic Arts Origin client exposes gamers to hack. Broadcom WiFi Driver bugs expose devices to hack. A new round of the weekly SecurityAffairs newsletter arrived!

Computers and Electronics 62

Computers and Electronics Spyware Data breaches Advertising 62

Security Affairs

APRIL 8, 2019

CEO of NGN International, Yaqoob AlAwadhi stated that, from 2017 to 2018, cybercrimes aimed at financial thefts increased significantly with cyber-criminals largely exploiting software vulnerabilities through phishing mailings and hacked legal resources. SecurityAffairs – Gulf countries, hacking). Pierluigi Paganini.

Artificial Intelligence 65

Artificial Intelligence Government Banking Advertising 65

Security Affairs

MARCH 19, 2019

Group-IB specialists discovered 19 928 of Singaporean banks’ cards that have shown up for sale in the dark web in 2018 and found hundreds of compromised government portals’ credentials stolen by hackers throughout past 2 years. Users’ logins and passwords from the Government Technology Agency ( [link] [.] Have you been pwned?

Banking 80

Banking Government Passwords Marketing 80

Heimadal Security

APRIL 8, 2022

Hamas-linked cybercrime organization dubbed ‘APT-C-23’ was noticed catfishing Israeli officials working in defense, law, enforcement, and government institutions, resulting in the deployment of new malware. Experts at security […].

Hacking 78

Hacking Social Engineering Spyware Cybercrime 78

Security Affairs

FEBRUARY 11, 2024

Gov imposes visa restrictions on individuals misusing Commercial Spyware HPE is investigating claims of a new security breach Experts warn of a surge of attacks targeting Ivanti SSRF flaw How to hack the Airbus NAVBLUE Flysmart+ Manager Crooks stole $25.5

Spyware 94

Spyware Surveillance Identity Theft DDOS 94

Security Affairs

APRIL 2, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter) The post Security Affairs newsletter Round 413 by Pierluigi Paganini – International edition appeared first on Security Affairs.

Spyware 86

Spyware Surveillance Artificial Intelligence Data breaches 86

Security Affairs

DECEMBER 11, 2018

Group-IB, an international company that specializes in preventing cyberattacks , has detected more than 40 000 compromised user credentials of online government services in 30 countries around the world. Group-IB Threat Intelligence has detected government websites’ user accounts compromised by cyber criminals in 30 countries.

Government 93

Government Cybercrime Accountability Advertising 93

SecureList

MAY 27, 2022

Subsequently, DDoS attacks hit some government websites. The following day, Microsoft reported that it had found destructive malware , dubbed WhisperGate, on the systems of government bodies and agencies that work closely with the Ukrainian government. Lapsus$ group hacks Okta. Other malware.

Phishing 103

Phishing Spyware Firmware Malware 103

Krebs on Security

JULY 16, 2019

For at least the past decade, a computer crook variously known as “ Yalishanda ,” “ Downlow ” and “ Stas_vl ” has run one of the most popular “bulletproof” Web hosting services catering to a vast array of phishing sites, cybercrime forums and malware download servers.

Cybercrime 181

Cybercrime Phishing Banking Malware 181

Security Affairs

APRIL 9, 2020

Spyware turned out to be the most common malware class hiding in fraudulent COVID-19 emails, with AgentTesla topping the list of phishers’ favorite strains. Spyware: the most likely COVID-19 payload. Most COVID-19-related phishing emails analyzed had different spyware strains embedded as attachments. Source: CERT-GIB.

Phishing 107

Phishing Malware Spyware DDOS 107

Security Affairs

JULY 18, 2021

SecurityAffairs – hacking, newsletter). If you want to also receive for free the international pre ss subscribe here. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. The post Security Affairs newsletter Round 323 appeared first on Security Affairs.

Spyware 54

Spyware Surveillance Ransomware Retail 54

SecureList

APRIL 27, 2021

This resulted in the deployment of a custom backdoor, named Sunburst, on the networks of more than 18,000 SolarWinds customers, including many large corporations and government bodies, in North America, Europe, the Middle East and Asia. It was first publicly documented in 2014, in the aftermath of the Gamma Group hacking incident.

Malware 138

Malware Spyware Government Social Engineering 138