Krebs on Security

NOVEMBER 2, 2021

22 on RAMP , a new and fairly exclusive Russian-language darknet cybercrime forum. In a post on the Russian cybercrime forum XSS , an established cybercrook using the handle “ Boriselcin ” explained that Groove was little more than a pet project to screw with the media and security industry.

Ransomware 257

Ransomware Cybercrime VPN Media 257

Security Affairs

APRIL 24, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, PaperCut ) The post Russian cybercrime group likely behind ongoing exploitation of PaperCut flaws appeared first on Security Affairs.

Cybercrime 76

Cybercrime Software Education Ransomware 76

Security Affairs

JANUARY 31, 2024

According to German media , one of the two operators was also involved in the operations of the site mega-downloads.net. Movie2k was a platform involved in the unauthorized distribution of copyrighted movies, TV shows, and other media content. It was operating between 2008 and 2013.

Media 104

Media Cybercrime Advertising Information Security 104

Security Affairs

JANUARY 2, 2022

According to South Korean media outlet Chosun, North Korean threat actors have stolen around $1.7 According to local media, US federal prosecutors believe that North Korea’s government considers cryptocurrency a long-term investment and it is amassing crypto funds through illegal activities. “Citing the U.S. 380 billion.

Cryptocurrency 126

Cryptocurrency Cybercrime Media Government 126

Security Affairs

DECEMBER 22, 2022

. “South Korea’s main spy agency, the National Intelligence Service, said North Korea’s capacity to steal digital assets is considered among the best in the world because of the country’s focus on cybercrimes since U.N. economic sanctions were toughened in 2017 in response to its nuclear and missile tests.” Citing the U.S.

Cryptocurrency 127

Cryptocurrency Cybercrime Media Government 127

Security Boulevard

DECEMBER 19, 2022

biased exclusivity and double layer monetization combination where the attacker might only sell the database to its actual owner and actually get rid of it once they receive the payment.

Penetration Testing 73

Penetration Testing Cybercrime Data breaches Social Engineering 73

Security Affairs

FEBRUARY 8, 2024

Several media reported that three million electric toothbrushes were compromised and recruited into a DDoS botnet. The newspaper quoted an employee of cybersecurity firm Fortinet as a source of the information. The news made the headlines and was reported by many other media outlets and websites without appropriate verification.

DDOS 106

DDOS IoT Media Internet 106

Security Affairs

MARCH 10, 2022

Vodafone announced to have launched an investigation after the Lapsus$ cybercrime group claimed to have stolen its source code. Early this week, the cybercrime group asked their subscribers in a poll on messaging app Telegram: “What should we leak next?” followed by three options: Vodafone source code. The poll will end on March 13. “We

Data breaches 84

Data breaches Cybercrime Media Hacking 84

Security Affairs

MARCH 14, 2020

Media are reporting that the Brno University Hospital , in Brno (Czech Republic), has been hit by a severe cyber attack. “The information on cyber attack was confirmed by Prime Minister Andrej Babiš, who was informed by Jaroslav Šmíd, who now manages the National Office for Cyber ??and and Information Security.”

Cyber Attacks 131

Cyber Attacks Cybercrime Advertising Media 131

Security Affairs

DECEMBER 15, 2022

The portal of the FBI’s InfraGard US Critical Infrastructure Intelligence was hacked, and data is available for sale on a cybercrime forum. ” The seller, who is a forum member that goes online with moniker USDoD, is demanding $50,000 for the full user database containing names and contact information.

Cybercrime 92

Cybercrime Accountability Hacking Education 92

Security Affairs

SEPTEMBER 29, 2021

Russian media reported that the police made searches in the Moscow office of security firm Group-IB apparently linked to an investigation into a criminal case. The police made searches in the Moscow office of the threat intelligence firm Group-IB, according to the media local authorities are investigating a criminal case.

Cybercrime 75

Cybercrime Media Hacking Cybersecurity 75

Security Affairs

APRIL 28, 2023

The malware allows operators to steal login credentials from popular services such as social media platforms and cryptocurrency wallets, then stolen data is sold on cybercrime forums by the operators. CryptBot distributors spread the malware through modified versions of legitimate software such as Google Earth Pro and Google Chrome.

Malware 93

Malware Cybercrime Cryptocurrency Media 93

Security Affairs

MAY 2, 2023

. “Noncompliant virtual currency exchanges, which have a lax anti-money laundering program or collect minimal Know Your Customer information or none at all, serve as important hubs in the cybercrime ecosystem and are operating in violation of Title 18 United States Code, Sections 1960 and 1956.”

Cybercrime 90

Cybercrime Cryptocurrency Advertising Education 90

Security Affairs

SEPTEMBER 27, 2021

Researchers from vpnMentor recently published a report that sheds the light on the use of Telegram in the cybercrime ecosystem. vpnMentor researchers joined several cybercrime-focused Telegram groups and discovered a vast network of more 1,000s individuals sharing data leaks and dumps and discussing how to exploit them in illegal activities.

Cybercrime 125

Cybercrime Hacking Mobile DDOS 125

Security Affairs

APRIL 24, 2023

EvilExtractor is a new “all-in-one” info stealer for Windows that is being advertised for sale on dark web cybercrime forums. EvilExtractor is a modular info-stealer, it exfiltrates data via an FTP service. .

Cybercrime 89

Cybercrime Malware Education Phishing 89

Security Affairs

MARCH 19, 2023

The shipping industry is a privileged target of cybercrime organizations. According to the media, the attack also impacted the oil supplier Mabanaft GmbH. The Play ransomware group has been active since July 2022, the list of victims includes the City of Oakland and the Cloud services provider Rackspace.

Ransomware 90

Ransomware Cybercrime Hacking Cyber Attacks 90

Security Affairs

SEPTEMBER 8, 2022

Researchers from Google’s Threat Analysis Group (TAG) reported that some former members of the Conti cybercrime group were involved in five different campaigns targeting Ukraine between April and August 2022. The activities overlap with operations attributed to a group tracked by CERT-UA as UAC-0098 [ 1 , 2 , 3 ]. .

Ransomware 126

Ransomware Cybercrime Government Media 126

Security Affairs

JUNE 2, 2021

Group-IB discovered a database allegedly belonging to a bulletproof hosting provider DDoS-Guard posted for sale on a cybercrime forum. The database supposedly contains information about DDoS-Guard’s customers, including their names, IP-addresses, and payment information. About Group-IB.

DDOS 105

DDOS Cybercrime Authentication Accountability 105

Security Affairs

OCTOBER 14, 2021

The incident was disclosed after threat actors have advertised the sale of more than 60 GB of data on an underground cybercrime forum. Below is the statement shared by the company with media outlets [ 1 , 2 ] requesting a comment on the incident. ” Steven Chung, Acer Corporate Communications, told the media.

Computers and Electronics 77

Computers and Electronics Retail Media Cybercrime 77

Security Affairs

JULY 10, 2023

It seems that the problem was known in the cybercrime ecosystem. At this time, a Revolut spokesperson declined to comment when contacted by multiple media. Crooks made expensive purchases that would be declined, then withdraw the refunds at ATMs.

Cybercrime 86

Cybercrime Media Hacking Accountability 86

Security Affairs

APRIL 30, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter ) The post Security Affairs newsletter Round 417 by Pierluigi Paganini – International edition appeared first on Security Affairs.

Cybercrime 89

Cybercrime Malware Hacking Accountability 89

Security Affairs

JUNE 14, 2021

The G7 members highlights the importance to collaborate to increase the security of supply chains, the statement also recognizes the foundational role that telecommunications infrastructure, including 5G and future communication technologies, plays and will play in underpinning our wider digital and ICT infrastructure. Pierluigi Paganini.

Ransomware 102

Ransomware Cybercrime Telecommunications Accountability 102

Security Affairs

OCTOBER 30, 2023

.” In June 2023, Joseph James O’Connor, aka PlugwalkJoe (24), the hacker who was involved in the attacks on Twitter in 2020, was sentenced to five years in prison for cybercrime offenses. Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts.

Cryptocurrency 114

Cryptocurrency Accountability Hacking Cybercrime 114

CyberSecurity Insiders

DECEMBER 9, 2021

Security GPA has grown into a powerful and easy-to-use tool that helps. information security teams understand and communicate risk inside their network. 2 – Threat Landscape: Threat Landscape leverages threat intelligence to help security. SC Media 5-Star Review. Cybercrime Magazine Hot 150.

Risk 140

Risk Information Security Cybersecurity Technology 140

Security Affairs

APRIL 14, 2023

Open-source media player software provider Kodi discloses a data breach after threat actors stole its MyBB forum database. The threat actors also attempted to sell the stolen data on the BreachForums cybercrime forum that was recently shut down by law enforcement. This post confirms that a breach has taken place.”

Data breaches 93

Data breaches Backups Passwords Accountability 93

Security Affairs

FEBRUARY 20, 2023

This is done through deep learning methodologies such as the Generative Adversarial Network (GAN) i.e., a group of neural network models for machine learning, deputed to teach computers how to process information by emulating the human brain. He is also the author of the book “La Gestione della Cyber Security nella Pubblica Amministrazione”.

Social Engineering 92

Social Engineering Engineering Artificial Intelligence Computers and Electronics 92

Security Affairs

JULY 3, 2022

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs for free in your email box.

Telecommunications 85

Telecommunications Media DDOS Malware 85

Krebs on Security

JUNE 18, 2021

We see a similar dynamic with social media platforms, where the “user” is not the customer at all but the product whose data is being bought and sold by these platforms. But the company never acted to fix it until the news media came calling. According to the FBI, BEC scams are the most costly form of cybercrime today.

Insurance 281

Insurance Risk Financial Services CISO 281

Security Affairs

SEPTEMBER 3, 2023

ransomware builder used by multiple threat actors Cisco fixes 3 high-severity DoS flaws in NX-OS and FXOS software Cybercrime Unpacking the MOVEit Breach: Statistics and Analysis Cl0p Ups The Ante With Massive MOVEit Transfer Supply-Chain Exploit FBI, Partners Dismantle Qakbot Infrastructure in Multinational Cyber Takedown U.S.

Social Engineering 105

Social Engineering Spyware Data breaches Surveillance 105

Security Affairs

DECEMBER 2, 2023

Researchers devised an attack technique to extract ChatGPT training data Fortune-telling website WeMystic exposes 13M+ user records Expert warns of Turtle macOS ransomware US govt sanctioned North Korea-linked APT Kimsuky Black Basta Ransomware gang accumulated at least $107 million in Bitcoin ransom payments since early 2022 Apple addressed 2 new (..)

Ransomware 96

Ransomware Hacking Spyware Cybercrime 96

Security Affairs

FEBRUARY 10, 2021

Europol investigators revealed that the cybercrime organization stole more than $100 million worth of cryptocurrency using SIM Swapping attacks. “This enabled them to steal money, bitcoin and personal information, including contacts synced with online accounts. . SecurityAffairs – hacking, cybercrime).

Cybercrime 81

Cybercrime Cryptocurrency Accountability Authentication 81

Security Affairs

DECEMBER 31, 2023

INC RANSOM ransomware gang claims to have breached Xerox Corp Spotify music converter TuneFab puts users at risk Cyber attacks hit the Assembly of the Republic of Albania and telecom company One Albania Russia-linked APT28 used new malware in a recent phishing campaign Clash of Clans gamers at risk while using third-party app New Version of Meduza (..)

Artificial Intelligence 102

Artificial Intelligence Cyber Attacks Malware Ransomware 102

Security Affairs

SEPTEMBER 14, 2023

Timchenko is co-founder, CEO, and publisher of Meduza, a Russian independent media outlet exiled in Europe. The Kremlin has labeled the media outlet as “an undesirable organization.” “Whether during war or peace, surveillance of journalists and independent media by intrusive spyware like Pegasus is prohibited under E.U

Spyware 91

Spyware Surveillance Media Government 91

Security Affairs

JANUARY 22, 2024

In an adaptive phishing campaign, attackers gather specific information about victims through various sources, such as social media, public websites, and previous data breaches. Attackers may use personal information, such as names, job roles, or company details, to create fake messages that appear to come from trusted sources.

Phishing 107

Phishing Education Social Engineering Media 107

Security Affairs

APRIL 9, 2023

Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter newsletter) The post Security Affairs newsletter Round 414 by Pierluigi Paganini – International edition appeared first on Security Affairs.

Computers and Electronics 82

Computers and Electronics Backups Cybercrime Marketing 82

The Last Watchdog

OCTOBER 24, 2022

. • Create security awareness for employees. One of the most important ways to protect against data breaches is to increase employee security awareness. Employees are the first line of defense against cybercrime and should understand how to recognize phishing emails and what to do if they suspect them.

Passwords 214

Passwords Security Awareness Data breaches Cybersecurity 214

Security Affairs

SEPTEMBER 12, 2021

The attack caught the attention of the media and the police authorities that increased pressure on the group. BleepingComputer also noticed that after the return of the group, a new public representative named ‘REvil’ had begun posting at cybercrime forums.

Ransomware 113

Ransomware Cybercrime Media Hacking 113