Security Affairs

DECEMBER 4, 2024

The operation was carried out by Public Prosecutor’s Office in Frankfurt am Main, the Central Office for Combating Cybercrime (ZIT), and the Federal Criminal Police Office (BKA). Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, cybercrime)

Cybercrime 117

Cybercrime Cryptocurrency Hacking Internet 117

Security Affairs

JANUARY 15, 2025

A previously unknown threat actor released config files and VPN passwords for Fortinet FortiGate devices on a popular cybercrime forum. Many of the exposed IP addresses belong to major providers such as Deutsche Telekom, Vodafone, and other major internet service providers. “2025 will be a fortunate year for the world.

VPN 133

VPN Passwords Firewall Firmware 133

Krebs on Security

JANUARY 24, 2023

The plea comes just months after Emelyantsev was extradited from Bulgaria, where he told investigators, “America is looking for me because I have enormous information and they need it.” “Thanks to you, we are now developing in the field of information security and anonymity! But that action did not name any defendants.

Cybercrime 301

Cybercrime Advertising IoT Malware 301

Security Affairs

MAY 27, 2022

The FBI warns organizations in the higher education sector of credentials sold on cybercrime forums that can allow threat actors to access their networks. The FBI has observed incidents of stolen higher education credential information posted on publically accessible online forums or listed for sale on criminal marketplaces.

Cybercrime 145

Cybercrime Education Accountability Phishing 145

Security Affairs

MARCH 15, 2024

US DoJ sentenced a Moldovan national (31) to 42 months in federal prison for operating the E-Root cybercrime marketplace. Diaconu was operating the E-Root cybercrime marketplace. Buyers could search for credentials by desired criteria, such as price, geographic location, internet service provider, and operating system.”

Cybercrime 135

Cybercrime Cryptocurrency Advertising Passwords 135

Security Affairs

OCTOBER 13, 2024

A cyber attack hit Iranian government sites and nuclear facilities Ransomware operators exploited Veeam Backup & Replication flaw CVE-2024-40711 in recent attacks GitLab fixed a critical flaw that could allow arbitrary CI/CD pipeline execution Iran and China-linked actors used ChatGPT for preparing attacks Internet Archive data breach impacted (..)

Data breaches 119

Data breaches Cryptocurrency Cybercrime Artificial Intelligence 119

Security Affairs

JANUARY 4, 2024

An internet outage impacted Orange Spain after a hacker gained access to the company’s RIPE account to misconfigure BGP routing. The hacker, who uses the moniker ‘Snow’, gained access to the RIPE account of Orange Spain and misconfigured the BGP routing causing an internet outage.

Internet 134

Internet Internet Accountability Passwords 134

Krebs on Security

JULY 25, 2023

Researchers this month uncovered a two-year-old Linux-based remote access trojan dubbed AVrecon that enslaves Internet routers into botnet that bilks online advertisers and performs password-spraying attacks. SocksEscort[.]com com , is what’s known as a “SOCKS Proxy” service.

Malware 245

Malware VPN Internet Internet 245

Krebs on Security

AUGUST 23, 2024

At issue is a well-known security and privacy threat called “ namespace collision ,” a situation where domain names intended to be used exclusively on an internal company network end up overlapping with domains that can resolve normally on the open Internet. SSL/TLS certs). Image: Defcon.org.

DNS 329

DNS Internet Internet Authentication 329

Security Affairs

MAY 28, 2025

. “Using an AI powered network traffic analysis tool we built called SIFT, GreyNoise has caught multiple anomalous network payloads with zero-effort that are attempting to disable TrendMicro security features in ASUS routers, then exploit vulnerabilities and novel tradecraft in ASUS AiProtection features on those routers.”

Firmware 136

Firmware Internet Internet Hacking 136

Security Affairs

JUNE 19, 2023

Cado researchers recently detected an interesting attack pattern linked to an emerging cybercrime group tracked as Diicot (formerly, “Mexals”) and described in analyses published by Akamai and Bitdefender. This campaign specifically targets SSH servers exposed to the internet with password authentication enabled.

Cybercrime 98

Cybercrime DDOS Internet Internet 98

Krebs on Security

JUNE 22, 2022

.” The DOJ’s statement doesn’t mention that RSOCKS has been in operation since 2014, when access to the web store for the botnet was first advertised on multiple Russian-language cybercrime forums. “Thanks to you, we are now developing in the field of information security and anonymity!,”

Advertising 321

Advertising Cybercrime System Administration Hacking 321

Krebs on Security

NOVEMBER 16, 2023

In a 2,200-page report, Finnish authorities laid out how they connected the extortion spree to Kivimäki, a notorious hacker who was convicted in 2015 of perpetrating tens of thousands of cybercrimes, including data breaches, payment fraud, operating a botnet and calling in bomb threats.

Cybercrime 291

Cybercrime Hacking Data breaches Banking 291

Security Affairs

APRIL 22, 2025

Japan s Financial Services Agency (FSA) reported that the damage caused by unauthorized access to and transactions on internet trading services is increasing. from fake websites (phishing sites) disguised as websites of real securities companies.” ” reads the FSA’s alert.

Financial Services 116

Financial Services Passwords Accountability Antivirus 116

Security Affairs

DECEMBER 17, 2024

The FBI warned of a fresh wave of HiatusRAT malware attacks targeting internet-facing Chinese-branded web cameras and DVRs. In March 2024, threat actors behind this campaign started targeting Internet of Things (IoT) devices in the US, Australia, Canada, New Zealand, and the United Kingdom. ” reads the PIN report.

Architecture 108

Architecture Internet Internet Malware 108

Security Affairs

MAY 2, 2025

. “Our seasoned IT security team immediately took proactive steps to keep systems safe and as a result we have restricted internet access at our sites today. ” In response to the attack, the company had “restricted internet access at its sites,” however Harrods’ site remained online.

Retail 116

Retail Internet Internet Data breaches 116

Security Affairs

AUGUST 28, 2024

“Kadariya is charged with cybercrime offenses associated with an alleged scheme to transmit the Angler Exploit Kit (AEK), other malware, and online scams to the computers of millions of unsuspecting victim Internet users through online advertisements – so-called “malvertising” – and other means from October 2013 through March 2022. .

Malware 133

Malware Computers and Electronics Cybercrime Internet 133

Security Affairs

NOVEMBER 3, 2024

The international operation was coordinated by the Central Office for Combating Internet Crime ( ZIT ) of the Public Prosecutor General’s Office in Frankfurt am Main, the Hessian State Criminal Police Office ( HLKA ) and the Federal Criminal Police Office (BKA). ” said The head of the ZIT, senior public prosecutor Dr.

DDOS 130

DDOS Internet Internet Hacking 130

Zero Day

JUNE 6, 2025

The data in question was posted on a Russian cybercrime forum on May 15 and then uploaded again on June 3, apparently garnering attention from other cybercriminals and potential buyers. But in this age of cybercrime, these numbers have become vulnerable.

Password Management 98

Password Management Passwords Artificial Intelligence Software 98

Security Affairs

NOVEMBER 16, 2024

According to Shadowserver Foundation, there are approximately 17,000 Internet-facing GeoVision devices vulnerable to the CVE-2024-11120 zero-day. . “Moreover, this vulnerability has already been exploited by attackers, and we have received related reports.” ” The botnet was used to carry out DDoS or cryptomining attacks.

DDOS 133

DDOS Internet Internet Hacking 133

Security Affairs

MARCH 23, 2024

An operation conducted by the Federal Criminal Police Office in Germany (BKA) and the Frankfurt cybercrime combating unit (ZIT) led to the seizure of the infrastructure of the darknet marketplace Nemesis Market in Germany and Lithuania. Crimemarket was a prominent platform for trading illegal drugs, narcotics, and cybercrime services.

Marketing 134

Marketing Cybercrime DDOS Internet 134

SecureWorld News

NOVEMBER 14, 2024

This stolen data is often exposed on both the clear and dark web, heightening risks of identity theft and further perpetuating cybercrime. The average data theft per attack is roughly 450 GB, impacting countless individuals and putting their private health information at risk of exploitation.

Healthcare 119

Healthcare Ransomware Identity Theft Data breaches 119

Security Affairs

FEBRUARY 16, 2021

Researchers at the threat intelligence firm Cyble discovered a new wave of phishing attacks targeting multiple organizations that are abusing the ngrok platform, a secure and introspectable tunnel to the localhost. Cyble also spotted a phishing tool kit, named “KingFish3 (Social master), advertised on a cybercrime forum. 4f421deb219c[.]ngrok[.]io)

Phishing 143

Phishing Cybercrime Mobile Internet 143

Security Affairs

OCTOBER 29, 2024

The vendor also provided a workaround to minimize potential risks, they recommended to restrict firewall management to trusted sources or disable firewall WAN management from Internet access. Similarly, for SSLVPN, ensure that access is limited to trusted sources or disable SSLVPN access from the Internet.

VPN 132

VPN Ransomware Firewall Internet 132

Security Affairs

DECEMBER 20, 2024

The man was held in the Netherlands, and he was charged for his alleged role in the international cybercrime operation known as Raccoon Infostealer. In October 2020, the US Justice Department charged Sokolovsky with computer fraud for allegedly infecting millions of computers with the Raccoon Infostealer.

Cryptocurrency 65

Cryptocurrency Cybercrime Identity Theft Malware 65

Krebs on Security

MARCH 1, 2022

A Ukrainian security researcher this week leaked several years of internal chat logs and other sensitive data tied to Conti , an aggressive and ruthless Russian cybercrime group that focuses on deploying its ransomware to companies with more than $100 million in annual revenue. hospitals and healthcare providers.”.

Ransomware 303

Ransomware Healthcare Cybercrime Government 303

Security Affairs

MAY 28, 2025

While the open-source nature of these tools can help security experts spot them faster, the primary victims here are everyday internet users.” This build-your-own-malware approach makes these attacks more efficient, stealthy, and adaptable. ” concludes the report that also provides Indicators of compromise.

Antivirus 123

Antivirus Malware Banking Passwords 123

SecureWorld News

MARCH 20, 2025

Phishing plays straight out of the cybercrime playbook "March Madness brings heightened cybersecurity risks this year, especially with the expansion of sports gambling beyond traditional office pools creating new attack vectors for credential harvesting and financial fraud," warns J.

Scams 84

Scams Social Engineering Mobile Phishing 84

Security Affairs

OCTOBER 18, 2024

“On August 7, 2024, we became aware of claims that information was taken from our systems and posted on the dark web. The dark web is a hidden part of the internet that is not accessible through regular search engines like Google.

Data breaches 141

Data breaches Healthcare Insurance Engineering 141

Security Affairs

APRIL 13, 2025

The company founded in 2001 offers prepaid and postpaid mobile plans, data bundles and internet services, fiber broadband, roaming and international calling, SIM-only plans and device deals. Cell C is the fourth-largest mobile network operator in South Africa, , after Vodacom, MTN, and Telkom.

Data breaches 131

Data breaches Unstructured Data Identity Theft Healthcare 131

Security Affairs

MARCH 16, 2025

As a result, the Department now doesnt have internet connectivity, and all computers are returned off to prevent further damage. . “On March 11, 2025, at 3:00 PM Yap Department of Health Services IT unit detected a cyberattack ransomware on the network. In response, the whole network was taken offline.

Ransomware 119

Ransomware Government Internet Internet 119

The Last Watchdog

OCTOBER 24, 2022

. • Create security awareness for employees. One of the most important ways to protect against data breaches is to increase employee security awareness. Employees are the first line of defense against cybercrime and should understand how to recognize phishing emails and what to do if they suspect them.

Passwords 214

Passwords Security Awareness Data breaches Cybersecurity 214

Security Affairs

JULY 2, 2024

“The man, 42, is expected to appear in Perth Magistrates Court today (28 June, 2024) to face nine charges for alleged cybercrime offences.” These harvested cfedentials could be used to access victims’ personal information and bank details. ” AFP Western Command Cybercrime Detective Inspector Andrea Coleman said.

Cybercrime 131

Cybercrime Wireless Banking VPN 131

Security Affairs

MARCH 27, 2025

is a US-based telecommunications company that provides broadband internet, cable TV, and phone services. is known for offering high-speed internet and competitive pricing in markets where it competes with larger providers. a leading Internet Service Provider with over 1.5 WideOpenWest (WOW!) Arkana claimed to have breached WOW!s

Hacking 81

Hacking Telecommunications Data breaches Internet 81

Security Affairs

MAY 26, 2021

Last week, French authorities have seized the dark web marketplace Le Monde Parallèle, it is another success of national police in the fight against cybercrime. French authorities seized the dark web marketplace Le Monde Parallèle, the operation is another success of national police in the fight against cybercrime activity in the dark web.

Cybercrime 145

Cybercrime Cryptocurrency Banking Mobile 145

Security Affairs

AUGUST 18, 2023

The law enforcement operation was coordinated by INTERPOL’s Cybercrime Directorate, under the auspices of the INTERPOL Africa Cybercrime Operations desk and INTERPOL’s Support Programme for the African Union in relation to AFRIPOL (ISPA). Another suspect was arrested in Nigeria and is accused of defrauding a Gambian victim.

Cybercrime 98

Cybercrime Scams Internet Internet 98

Security Affairs

JULY 28, 2024

Ukraine’s cyber operation shut down the ATM services of major Russian banks A bug in Chrome Password Manager caused user credentials to disappear BIND updates fix four high-severity DoS bugs in the DNS software suite Terrorist Activity is Accelerating in Cyberspace – Risk Precursor to Summer Olympics and Elections Progress Software fixed (..)

Spyware 126

Spyware Data breaches Cybercrime Banking 126