Security Affairs

DECEMBER 30, 2019

The United Nations on Friday have approved a Russian-sponsored and China-backed resolution to create a new convention on cybercrime. The United Nations on Friday has approved a Russian-sponsored and China-backed resolution to create a new convention on cybercrime.

Cybercrime 63

Cybercrime Surveillance Spyware Government 63

Security Affairs

MARCH 24, 2024

Government’s Antitrust Case Against Apple Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Ramadan ) Is it a Russia’s weapon? Players hacked during the matches of Apex Legends Global Series.

Malware 102

Malware Cybercrime Hacking Cyber threats 102

Security Affairs

FEBRUARY 25, 2024

Iran Crisis Russia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaign U.S.

Spyware 97

Spyware Cyber Insurance Hacking Advertising 97

SecureWorld News

AUGUST 25, 2022

Israeli spyware company NSO Group has experienced quite a bit of controversy in the last few years. Its spyware product, Pegasus, has been used by various criminals and nation states to target individuals of interest, such as activists, politicians, and business leaders. After being blacklisted by the U.S.,

Spyware 76

Spyware Government Marketing Surveillance 76

Security Affairs

APRIL 21, 2024

PoC publicly available Linux variant of Cerber ransomware targets Atlassian servers Ivanti fixed two critical flaws in its Avalanche MDM Researchers released exploit code for actively exploited Palo Alto PAN-OS bug Cisco warns of large-scale brute-force attacks against VPN and SSH services PuTTY SSH Client flaw allows of private keys recovery A renewed (..)

Data breaches 100

Data breaches Phishing Ransomware Malware 100

Security Affairs

JULY 15, 2023

Russia-linked APT Gamaredon starts stealing data from victims between 30 and 50 minutes after the initial compromise The source code of the BlackLotus UEFI Bootkit was leaked on GitHub US CISA warns of Rockwell Automation ControlLogix flaws Indexing Over 15 Million WordPress Websites with PWNPress New AVrecon botnet remained under the radar for two (..)

Spyware 94

Spyware Hacking Data breaches Mobile 94

Security Affairs

JUNE 25, 2023

Someone is sending mysterious smartwatches to the US Military personnel CISA orders govt agencies to fix recently disclosed flaws in Apple devices VMware fixed five memory corruption issues in vCenter Server Fortinet fixes critical FortiNAC RCE, install updates asap More than a million GitHub repositories potentially vulnerable to RepoJacking New Mirai (..)

DDOS 93

DDOS Cybercrime Spyware Malware 93

Security Affairs

DECEMBER 16, 2021

Tens of thousands of devices worldwide, including many industrial control systems (ICS), have been hit by the PseudoManuscrypt spyware. Kaspersky researchers reported that tens of thousands of devices belonging to industrial and government organizations worldwide have been hit by the PseudoManuscrypt spyware.

Spyware 112

Spyware Energy and Utilities Malware Engineering 112

Security Affairs

SEPTEMBER 3, 2023

ransomware builder used by multiple threat actors Cisco fixes 3 high-severity DoS flaws in NX-OS and FXOS software Cybercrime Unpacking the MOVEit Breach: Statistics and Analysis Cl0p Ups The Ante With Massive MOVEit Transfer Supply-Chain Exploit FBI, Partners Dismantle Qakbot Infrastructure in Multinational Cyber Takedown U.S.

Social Engineering 108

Social Engineering Spyware Data breaches Surveillance 108

Security Affairs

APRIL 22, 2024

The threat actors shared a portion of the stolen data with TechCrunch as proof of the hack, it includes records on current and former government officials, diplomats, and politically exposed people. The list also includes criminals, suspected terrorists, intelligence operatives and a European spyware firm.

Risk 117

Risk Spyware Hacking Accountability 117

Security Affairs

NOVEMBER 25, 2020

Group-IB supported an INTERPOL-led operation Falcon targeting business email compromise cybercrime gang from Nigeria, dubbed TMT. Group-IB , a global threat hunting and intelligence company, supported an INTERPOL-led operation Falcon targeting business email compromise (BEC) cybercrime gang from Nigeria, dubbed TMT by Group-IB.

Cybercrime 125

Cybercrime Phishing Social Engineering Spyware 125

Malwarebytes

FEBRUARY 16, 2021

Around the world, governments tried to stop their hospitals from being overwhelmed by ordering lockdowns, stay-in-place orders, and school closures. If 2020 taught us anything, it’s that cybercrime stops for nothing. By April 2020, half the world’s population had been asked or ordered to stay at home.

Malware 121

Malware Scams Spyware Healthcare 121

Security Affairs

OCTOBER 1, 2023

Patch your TeamCity instance to avoid server hack Is Gelsemium APT behind a targeted attack in Southeast Asian Government?

Artificial Intelligence 103

Artificial Intelligence Firmware Data breaches Hacking 103

Security Affairs

AUGUST 7, 2022

affiliate sideloads Cobalt Strike through Windows Defender Gootkit AaaS malware is still active and uses updated tactics Austria investigates DSIRF firm for allegedly developing Subzero spyware ALPHV/BlackCat ransomware gang claims to have stolen data from Creos Luxembourg S.A.

Spyware 124

Spyware Manufacturing Small Business Surveillance 124

Security Affairs

SEPTEMBER 24, 2023

Government of Bermuda blames Russian threat actors for the cyber attack City of Dallas has set a budget of $8.5 Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cyber Attacks 86

Cyber Attacks Firewall Data breaches Telecommunications 86

SecureWorld News

JULY 11, 2022

The United States government has attributed the hack to a North Korean state-sponsored advanced persistent threat (APT) known as the Lazarus Group. The offer was emailed as a PDF document, and once it was downloaded, spyware infected the company's systems.

Social Engineering 70

Social Engineering Hacking Cryptocurrency Engineering 70

Security Affairs

MAY 29, 2022

Experts believe that Russian Gamaredon APT could fuel a new round of DDoS attacks The strange link between Industrial Spy and the Cuba ransomware operation Reuters: Russia-linked APT behind Brexit leak website GitHub: Nearly 100,000 NPM Users’ credentials stolen in the April OAuth token attack Android pre-installed apps are affected by high-severity (..)

InfoSec 102

InfoSec Spyware DDOS Firewall 102

SecureWorld News

NOVEMBER 23, 2021

The steps we’re taking today will send a clear message: In a free society, it is unacceptable to weaponize powerful state-sponsored spyware against those who seek to make the world a better place.". Being on this list effectively blocks the government or its vendors from doing business with NSO. And he didn't stop there.

Spyware 66

Spyware Surveillance Engineering Software 66

Security Affairs

FEBRUARY 28, 2021

Bug bounty hacker earned $5,000 reporting a Stored XSS flaw in iCloud.com Experts warn of threat actors abusing Google Alerts to deliver unwanted programs FBI warns of the consequences of telephony denial-of-service (TDoS) attacks An attacker was able to siphon audio feeds from multiple Clubhouse rooms Georgetown County has yet to recover from a sophisticated (..)

Spyware 85

Spyware Backups Manufacturing Data breaches 85

Security Affairs

MARCH 5, 2020

According to the CrowdStrike 2020 Global Threat Report, the telecommunications and government sectors were the most targeted by the threat actors. Chinese hackers also targeted several organizations in the healthcare sector, government and defense sectors of countries in Asia. ” reads the report published by CrowdStrike.

Telecommunications 89

Telecommunications Mobile Spyware Advertising 89

Security Affairs

MARCH 4, 2023

stolen credit/debit cards Pegasus spyware used to spy on a Polish mayor Hundreds of thousands of websites hacked as part of redirection campaign MQsTTang, a new backdoor used by Mustang Panda APT against European entities Trusted Platform Module (TPM) 2.0 FiXS, a new ATM malware that is targeting Mexican banks BidenCash leaks 2.1M

Spyware 88

Spyware Data breaches Retail Ransomware 88

Security Affairs

NOVEMBER 8, 2021

Government experts state that the group uses multiple mechanisms to compromise networks of the victims, including phishing emails with malicious attachments to gain access and Remote Desktop Protocol (RDP) to move laterally once on the network. The Hive ransomware adds the.hive extension to the filename of encrypted files.

Computers and Electronics 115

Computers and Electronics Ransomware Retail Spyware 115

Security Affairs

NOVEMBER 14, 2021

Hundreds of thousands of fake warnings of cyberattacks sent from a hacked FBI email server GravityRAT returns disguised as an end-to-end encrypted chat app Intel and AMD address high severity vulnerabilities in products and drivers New evolving Abcbot DDoS botnet targets Linux systems Retail giant Costco discloses data breach, payment card data exposed (..)

Spyware 53

Spyware Data breaches Ransomware Retail 53

Security Affairs

JULY 11, 2022

A PDF containing the offer was sent to the employee, once opened the file a spyware compromised his system and infiltrate the Ronin’s network. government blamed North Korea-linked APT Lazarus for the Ronin Validator cyber heist. reads a post-mortem analysis published by Sky Mavis. In April, the U.S.

Engineering 85

Engineering Spyware Phishing Hacking 85

Security Affairs

FEBRUARY 13, 2022

Organizations are addressing zero-day vulnerabilities more quickly, says Google CISA, FBI, NSA warn of the increased globalized threat of ransomware Croatian phone carrier A1 Hrvatska discloses data breach FritzFrog P2P Botnet is back and targets Healthcare, Education and Government Sectors CISA adds 15 new vulnerabilities to its Known Exploited Vulnerabilities (..)

Spyware 78

Spyware Surveillance Ransomware Hacking 78

Security Affairs

NOVEMBER 17, 2019

TA505 Cybercrime targets system integrator companies. New TA2101 threat actor poses as government agencies to distribute malware. WhatsApp flaw CVE-2019-11931 could be exploited to install spyware. Experts warn of spike in TCP DDoS reflection attacks targeting Amazon, SoftLayer and telco infrastructure.

DDOS 50

DDOS Spyware Advertising Ransomware 50

Security Affairs

OCTOBER 27, 2019

TA505 cybercrime group use SDBbot RAT in recent campaigns. Autoclerk travel reservations platform data leak also impacts US Government and military. Swedish Government grants police the use of spyware against violent crime suspects. Fake UpdraftPlus WordPress Plugins used to backdoor sites. Winnti APT group uses skip-2.0

Spyware 42

Spyware Advertising Hacking DDOS 42

Security Affairs

AUGUST 27, 2021

Government experts state that the group uses multiple mechanisms to compromise networks of the victims, including phishing emails with malicious attachments to gain access and Remote Desktop Protocol (RDP) to move laterally once on the network. The Hive ransomware adds the.hive extension to the filename of encrypted files.

Ransomware 98

Ransomware Encryption Spyware Backups 98

Krebs on Security

APRIL 2, 2019

In response to an inquiry from this office, the RCMP stopped short of naming names, but said “we can confirm that our National Division Cybercrime Investigative Team did execute a search warrant at a Toronto location last week.”. government said was used to infect more than a half million computers worldwide. In 2014, the U.S.

Advertising 211

Advertising Malware Marketing Software 211

SecureList

NOVEMBER 17, 2021

Last year, we foresaw the APT and cybercrime worlds becoming more porous on an operational level. In 2020, we predicted that governments would adopt a “name and shame” strategy to draw attention to the activities of hostile APT groups, a trend that has evolved even more in the last year.

Mobile 129

Mobile Surveillance Ransomware Government 129

Security Affairs

APRIL 8, 2019

CEO of NGN International, Yaqoob AlAwadhi stated that, from 2017 to 2018, cybercrimes aimed at financial thefts increased significantly with cyber-criminals largely exploiting software vulnerabilities through phishing mailings and hacked legal resources. Map of Middle-Eastern Countries.

Artificial Intelligence 65

Artificial Intelligence Government Banking Advertising 65

Security Affairs

APRIL 21, 2019

Scranos – A Cross Platform, Rootkit-Enabled Spyware rapidly spreading. Operator of Codeshop Cybercrime Marketplace Sentenced to 90 months in prison. Hacker broke into super secure French Governments Messaging App Tchap hours after release. Ecuador suffered 40 Million Cyber attacks after the Julian Assange arrest.

Computers and Electronics 61

Computers and Electronics Spyware Data breaches DNS 61

SecureWorld News

FEBRUARY 7, 2024

State Department announced Monday a new policy to impose visa restrictions on individuals linked to the misuse of commercial spyware tools that enable unlawful surveillance and human rights abuses globally. The policy allows visa denials on a case-by-case basis for those involved in spyware misuse. RELATED: U.S.

Spyware 79

Spyware Surveillance Government Accountability 79

SecureWorld News

JULY 20, 2023

The Commerce Department recently added four spyware vendors to its Entity List for their involvement in trafficking cyber exploits used to gain unauthorized access to information systems. This move targets the activities of spyware vendors that pose a serious threat to the privacy and security of individuals and organizations worldwide.

Spyware 73

Spyware Surveillance Government Technology 73

SecureList

AUGUST 30, 2023

Tomiris called, they want their Turla malware back We first reported Tomiris in September 2021, following our investigation into a DNS hijack against a government organization in the CIS (Commonwealth of Independent States). Using a number of vulnerabilities in iOS, the attachment is executed and installs spyware.

Malware 73

Malware Spyware Cryptocurrency Government 73

Security Affairs

MARCH 19, 2019

Group-IB specialists discovered 19 928 of Singaporean banks’ cards that have shown up for sale in the dark web in 2018 and found hundreds of compromised government portals’ credentials stolen by hackers throughout past 2 years. Users’ logins and passwords from the Government Technology Agency ( [link] [.] Have you been pwned?

Banking 80

Banking Government Passwords Marketing 80

SecureList

NOVEMBER 1, 2022

In most cases, the targets appear to be diplomatic and government organizations in Europe. In June, we identified a previously unknown Android spyware app that targets Persian-speaking individuals. The spyware itself collects various data from the victims’ devices, such as call logs or lists of contacts.

Malware 139

Malware Ransomware Spyware Encryption 139