Security Affairs

AUGUST 24, 2022

The streaming media platform Plex is urging its users to reset passwords after threat actors gained access to its database. Exposed data includes emails, usernames, and encrypted passwords. The company is urging all users to immediately reset account passwords and log out of all devices connected to its service.

Data breaches 109

Data breaches Passwords Media Accountability 109

Security Affairs

OCTOBER 10, 2020

Microsoft has uncovered Zerologon attacks that were allegedly conducted by the infamous TA505 Russia-linked cybercrime group. Microsoft spotted a series of Zerologon attacks allegedly launched by the Russian cybercrime group tracked as TA505 , CHIMBORAZO and Evil Corp. Pierluigi Paganini. SecurityAffairs – hacking, Zerologon).

Cybercrime 119

Cybercrime Security Intelligence Authentication Banking 119

Security Affairs

JUNE 17, 2021

UNC2465 cybercrime group that is affiliated with the Darkside ransomware gang has infected with malware the website of a CCTV camera vendor. Experts noticed that in this supply chain attack, UNC2465 did not deliver the Darkside ransomware as the final payload, but they not exclude that the cybercrime group could move to a new RaaS operation.

Cybercrime 104

Cybercrime Ransomware Antivirus Software 104

Security Affairs

DECEMBER 18, 2023

These pieces of malware are created with the intent of stealing valuable data, such as login credentials, financial information, personal details, and more. This data may include usernames, passwords, credit card numbers, social security numbers, and other sensitive information.

Banking 116

Banking Cybercrime Malware Accountability 116

Security Affairs

JULY 15, 2022

Threat actors behind the campaign used multiple accounts across several social media platforms to advertise password-cracking software for Programmable Logic Controller (PLC), Human-Machine Interface (HMI), and project files. The password cracking software also acts as a dropper for the Sality P2P bot. ” concludes the report.

Passwords 113

Passwords Software Firmware Malware 113

Security Affairs

JULY 3, 2023

The malware also targets crypto wallet extensions, password managers, and 2FA extensions. The malware also collects a variety of data, including system info, browser info, password manager info, miner related registry info, and installed games info. The malware admin declared that their operations do not involve any ransom activities.

Password Management 87

Password Management Passwords Malware Antivirus 87

Security Affairs

APRIL 18, 2024

. “Australian offenders are allegedly among 10,000 cybercriminals globally who have used the platform, known as LabHost, to trick victims into providing their personal information, such as online banking logins, credit card details and passwords, through persistent phishing attacks sent via texts and emails.”

Phishing 99

Phishing Cybercrime Passwords Banking 99

The Last Watchdog

APRIL 13, 2022

Additionally, there are also Russian cybercrime organizations that are not state-sponsored but are allowed to operate. Although there’s no one magic solution to eliminating cyberattacks and cybercrime risks, there are steps you can take to reduce the chances of becoming a victim. businesses called #ShieldsUp.

Cybersecurity 188

Cybersecurity Cybercrime Education Passwords 188

Krebs on Security

NOVEMBER 2, 2021

22 on RAMP , a new and fairly exclusive Russian-language darknet cybercrime forum. ” In the first week of September, Groove posted on its darknet blog nearly 500,000 login credentials for customers of Fortinet VPN products, usernames and passwords that could be used to remotely connect to vulnerable systems. .”

Ransomware 241

Ransomware Cybercrime VPN Media 241

Security Affairs

MAY 31, 2023

The file contained PostgreSQL and Redis databases credentials, including host, port, username, and password. Typically, these instances serve as potential treasure troves, housing crucial information such as customer records, payment data, and a myriad of other invaluable details. env) hosted on the official Neho’s website.

Passwords 95

Passwords Phishing Accountability Banking 95

The Last Watchdog

OCTOBER 24, 2022

Employee security awareness is the most important defense against data breaches. Related: Leveraging security standards to protect your company. It involves regularly changing passwords and inventorying sensitive data. As such, you should limit the amount of information that employees have access to. . This can be risky.

Passwords 191

Passwords Security Awareness Data breaches Cybersecurity 191

Krebs on Security

NOVEMBER 16, 2023

In a 2,200-page report, Finnish authorities laid out how they connected the extortion spree to Kivimäki, a notorious hacker who was convicted in 2015 of perpetrating tens of thousands of cybercrimes, including data breaches, payment fraud, operating a botnet and calling in bomb threats.

Cybercrime 200

Cybercrime Hacking Data breaches Banking 200

Security Affairs

JUNE 13, 2023

A database containing the personal information of more than 8.9 million Zacks Investment Research users was leaked on a cybercrime forum. A database containing personal information of 8,929,503 Zacks Investment Research users emerged on a popular hacking forum on June 10, 2023. ” reported HIBP.

Data breaches 90

Data breaches Passwords Cybercrime Encryption 90

Security Affairs

AUGUST 13, 2020

A threat actor has released the databases of Utah-based gun exchange and hunting sites for free on a cybercrime forum. On August 10th, a hacker has leaked online the databases of Utah-based gun exchange for free on a cybercrime forum. The leaked data includes login names, hashed passwords, and email addresses.

Hacking 136

Hacking Data breaches Cybercrime Passwords 136

Security Affairs

MARCH 24, 2024

surfaces in the threat landscape Pokemon Company resets some users’ passwords Ukraine cyber police arrested crooks selling 100 million compromised accounts New AcidPour wiper targets Linux x86 devices. Is it a Russia’s weapon? Players hacked during the matches of Apex Legends Global Series.

Malware 102

Malware Cybercrime Hacking Cyber threats 102

Krebs on Security

JULY 25, 2023

Researchers this month uncovered a two-year-old Linux-based remote access trojan dubbed AVrecon that enslaves Internet routers into botnet that bilks online advertisers and performs password-spraying attacks. SocksEscort began in 2009 as “ super-socks[.]com

Malware 195

Malware VPN Internet Internet 195

CyberSecurity Insiders

FEBRUARY 3, 2021

As a result, a number of concerning behavioral trends were seen, with 45% of employees saying they’d suffered a security incident at work and not reported it, and perhaps even more worryingly, 15% saying they had given their work log-in and password to others in the organization. .

CISO 52

CISO Information Security Digital transformation Cybercrime 52

Security Affairs

MARCH 16, 2024

The security breach exposed the surnames, first names and social security numbers of impacted individuals. Email addresses, phone numbers, passwords and financial data are not exposed. “Jobseekers registered in February 2022 and former users of Pôle Emploi are potentially affected by this theft of personal data.”

Data breaches 111

Data breaches Cybercrime Government Ransomware 111

Security Affairs

FEBRUARY 24, 2020

And this goes beyond usernames and passwords to information that can get them immediate financial gain like credit card information and cryptocurrency wallets.” The post Raccoon Malware, a success case in the cybercrime ecosystem appeared first on Security Affairs. ” concludes CyberArk.

Cybercrime 89

Cybercrime Malware Cryptocurrency Advertising 89

Security Affairs

APRIL 27, 2024

Officials reported that the security breach occurred on February 9, when someone logged into some BenefitsCal users’ accounts. Threat actors exploited reused passwords obtained from third-party websites. Users are recommended to use strong passwords and avoid reusing the same credentials for multiple websites.

Accountability 103

Accountability Passwords Data breaches Hacking 103

Security Affairs

JANUARY 7, 2022

Stolen data are now available for sale on multiple cybercrime forums. The threat actors claim the stolen database contains customer information, including names, emails, phone numbers, hashed passwords, and password salt. Threat actors compromised the FlexBooker accounts of more than 3.7 million accounts.

Data breaches 141

Data breaches Accountability Passwords Cybercrime 141

SecureWorld News

JULY 3, 2023

This means that most cyberattacks could be prevented by following simple cybersecurity best practices, such as using strong passwords, updating software, and avoiding phishing emails. According to PurpleSec, 98% of cybercrime relies on social engineering to accomplish it. Cybercrime is a highly profitable business.

Cybercrime 81

Cybercrime Social Engineering Data breaches Cyber threats 81

Security Affairs

APRIL 12, 2022

The illegal dark web marketplace RaidForums has been shut down and its infrastructure seized as a result of the international law enforcement Operation TOURNIQUET coordinated by Europol’s European Cybercrime Centre. Europol will continue working with its international partners to make cybercrime harder – and riskier –to commit.

Cybercrime 143

Cybercrime Banking Accountability Data breaches 143

Security Affairs

DECEMBER 21, 2023

The database included the personally identifiable information of Blink Mobility customers and administrators, including: Phone number Email address Encrypted password Registration date Device info and device token Details on subscription and rented vehicles (license plate, VIN, booking start and end location, etc.)

Mobile 107

Mobile Identity Theft Passwords Phishing 107

Security Affairs

MAY 21, 2023

Please vote for Security Affairs ( [link] ) as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections where is reported Securityaffairs or my name Pierluigi Paganini Please nominate Security Affairs as your favorite blog.

Data breaches 92

Data breaches Cybercrime Ransomware Passwords 92

Security Affairs

AUGUST 20, 2023

Over 3,000 Android Malware spotted using unsupported/unknown compression methods to avoid detection WinRAR flaw enables remote code execution of arbitrary code #OpFukushima: Anonymous group protests against the plan to dump Fukushima RADIOACTIVE wastewater into Pacific Massive phishing campaign targets users of the Zimbra Collaboration email server (..)

Cybercrime 83

Cybercrime Hacking Malware Phishing 83

Security Affairs

FEBRUARY 16, 2021

Experts pointed out that attacks abusing the ngrok platform are hard to detect because connections to subdomains of ngrok.com are not filtered by security measures. Experts provided a list of ngrok -based attacks conducted by cybercrime organizations and nation-stated actors such as Fox Kitten and Pioneer Kitten APT groups.

Phishing 127

Phishing Cybercrime Mobile Internet 127

Security Affairs

MARCH 29, 2024

Credential stuffing is a type of attack in which hackers use automation and lists of compromised usernames and passwords to defeat authentication and authorization mechanisms, with the end goal of account takeover (ATO) and/or data exfiltration.” email addresses and passwords) obtained from an unknown third-party source.

Accountability 111

Accountability Mobile Passwords Authentication 111

Security Affairs

JUNE 11, 2023

Gox exchange and operating BTC-e Japanese Pharmaceutical giant Eisai hit by a ransomware attack Clop ransomware gang was testing MOVEit Transfer bug since 2021 Stealth Soldier backdoor used is targeted espionage attacks in Libya Researchers published PoC exploit code for actively exploited Windows elevation of privilege issue Experts detail a new Kimsuky (..)

Social Engineering 93

Social Engineering Data breaches Ransomware Cybercrime 93

Security Affairs

MARCH 14, 2023

Microsoft warns of large-scale phishing attacks orchestrated with an open-source adversary-in-the-middle (AiTM) phishing kit available in the cybercrime ecosystem Adversary-in-the-middle (AiTM) phishing kits are becoming an essential technology in the cybercrime ecosystem that is used by multiple threat actors to launch phishing attacks.

Phishing 81

Phishing Cybercrime Authentication Mobile 81

Security Affairs

NOVEMBER 22, 2021

.” said Demetrius Comes, GoDaddy’s Chief Information Security Officer. Using a compromised password, an unauthorized third party accessed the provisioning system in our legacy code base for Managed WordPress.” The original WordPress Admin password that was set at the time of provisioning was exposed.

Data breaches 123

Data breaches Passwords Accountability Phishing 123

Security Affairs

APRIL 14, 2023

The threat actors also attempted to sell the stolen data on the BreachForums cybercrime forum that was recently shut down by law enforcement. The company pointed out that although MyBB stores passwords in an encrypted format they assumed all passwords are compromised. The Kodi pastebin and wiki sites will be not impacted.

Data breaches 95

Data breaches Backups Passwords Accountability 95

Security Affairs

APRIL 24, 2023

EvilExtractor is a new “all-in-one” info stealer for Windows that is being advertised for sale on dark web cybercrime forums. The malware can steal sensitive data from the infected endpoint, including browser history and passwords, and cookies.

Cybercrime 92

Cybercrime Malware Education Phishing 92

Security Affairs

OCTOBER 17, 2023

According to Statista.com, the impact of cybercrime is expected to reach almost $13 trillion this year. If your friend or colleague is suddenly asking you for money or to change your password, call them on the phone and ask if they really sent the message. How can just one employee mishap cost a company millions?

Social Engineering 114

Social Engineering Ransomware Engineering Phishing 114

Security Affairs

JANUARY 20, 2023

“ Credential stuffing is a type of attack in which hackers use automation and lists of compromised usernames and passwords to defeat authentication and authorization mechanisms, with the end goal of account takeover (ATO) and/or data exfiltration.” ” said Gal.

Data breaches 93

Data breaches Identity Theft Accountability Passwords 93

Security Affairs

APRIL 30, 2023

Mail keys are unique credentials that AT&T email users can use to log into their accounts using email apps such as Thunderbird or Outlook , but without having to use their passwords.” The carrier has adopted security measures to prevent similar attacks, it also forced a password reset on some email accounts.

Cryptocurrency 82

Cryptocurrency Accountability Passwords Hacking 82

Security Affairs

JANUARY 1, 2024

An attacker can use the exploit to access Google services, even after a user’s password reset. The encrypted tokens are decrypted using an encryption key stored in Chrome’s Local State within the UserData directory, similar to the encryption used for storing passwords.” ” reads the report published by CloudSEK.

Malware 134

Malware Penetration Testing Passwords Encryption 134