Security Affairs

NOVEMBER 22, 2022

The attackers used methods to deliver the malware, including phishing websites masquerading as legitimate ones, YouTube videos and fake “free software catalogue” websites. The post Aurora Stealer Malware is becoming a prominent threat in the cybercrime ecosystem appeared first on Security Affairs. Pierluigi Paganini.

Cybercrime 92

Cybercrime Malware Cryptocurrency Advertising 92

Security Affairs

NOVEMBER 3, 2021

Experts warn of the availability in the cybercrime underground of offers for initial access to networks of players in global supply chains. based transportation management and trucking software supplier and a U.S.-based In August 2021 , an affiliate of the Conti ransomware gang claimed access to corporate networks belonging to a U.S.-based

Cybercrime 104

Cybercrime VPN Ransomware Hacking 104

Security Affairs

APRIL 15, 2022

ZingoStealer is a new information-stealer developed by a threat actor known as Haskers Gang who released it for free after they attempted to sell the source code for $500. The cybercrime gang has been active since at least January 2020. SecurityAffairs – hacking, cybercrime). To nominate, please visit:? Pierluigi Paganini.

Cybercrime 82

Cybercrime Malware Cryptocurrency Hacking 82

Security Affairs

APRIL 24, 2023

Print management software provider PaperCut confirmed ongoing active exploitation of CVE-2023-27350 vulnerability. On April 19th, Print management software provider PaperCut confirmed that it is aware of the active exploitation of the CVE-2023-27350 vulnerability. ” concludes the report published by Huntress.

Cybercrime 73

Cybercrime Software Education Ransomware 73

Security Affairs

DECEMBER 11, 2021

Accenture researchers detailed the activity of a new sophisticated cybercrime group, called Karakurt, behind recent cyberattacks. In recent attacks, the group switched on VPN IP pool or AnyDesk software to establish persistence and avoid detection. In June 2021 the gang registered the domains hosting its leak sites, karakurt[.]group

Cybercrime 75

Cybercrime VPN Ransomware Hacking 75

Security Affairs

FEBRUARY 23, 2021

FireEye experts linked a series of attacks targeting Accellion File Transfer Appliance (FTA) servers to the cybercrime group UNC2546, aka FIN11. Security experts from FireEye linked a series of cyber attacks against organizations running Accellion File Transfer Appliance (FTA) servers to the cybercrime group UNC2546, aka FIN11.

Cybercrime 79

Cybercrime Software Ransomware Cyber Attacks 79

Security Affairs

OCTOBER 22, 2021

FIN7 is a Russian criminal group that has been active since mid-2015, it focuses on restaurants, gambling, and hospitality industries in the US to harvest financial information that was used in attacks or sold in cybercrime marketplaces. SecurityAffairs – hacking, cyber security). ” continues the expert.

Cybercrime 103

Cybercrime Ransomware Cybersecurity Backups 103

Security Affairs

SEPTEMBER 9, 2021

The activity of the TeamTNT group has been detailed by security firm Trend Micro, but in August 2020 experts from Cado Security discovered that that botnet is also able to target misconfigured Kubernetes installations. The campaign is responsible for thousands of infections globally in only a couple of months. Pierluigi Paganini.

Cybercrime 88

Cybercrime Cryptocurrency Penetration Testing Malware 88

Security Affairs

JUNE 16, 2023

Progress Software addressed a third vulnerability impacting its MOVEit Transfer application that could lead to privilege escalation and information disclosure. Customers have to modify firewall rules to deny HTTP and HTTPs traffic to the software on ports 80 and 443. ” reads the advisory published by Progress.

Software 89

Software Penetration Testing Government Media 89

Security Affairs

APRIL 24, 2023

Ransomware operators use the AuKill tool to disable EDR software through Bring Your Own Vulnerable Driver (BYOVD) attack. Sophos researchers reported that threat actors are using a previously undocumented defense evasion tool, dubbed AuKill, to disable endpoint detection and response (EDR) software.

Software 94

Software Ransomware Education Media 94

Security Affairs

FEBRUARY 15, 2023

The company also addressed an important-severity flaw, tracked as CVE-2022-24090 , in the Photoshop software. The flaw was reported by Kushal Arvind Shah of Fortinet’s FortiGuard Labs and impacts both Windows and macOS versions of Illustrator 26.0.3 and earlier versions.

Software 86

Software Hacking Cybercrime Information Security 86

Security Affairs

DECEMBER 30, 2019

The United Nations on Friday have approved a Russian-sponsored and China-backed resolution to create a new convention on cybercrime. The United Nations on Friday has approved a Russian-sponsored and China-backed resolution to create a new convention on cybercrime. It will only serve to stifle global efforts to combat cybercrime.”

Cybercrime 60

Cybercrime Surveillance Spyware Government 60

Security Affairs

OCTOBER 9, 2020

German tech firm Software AG has suffered a ransomware attack that took place during last weekend, media blamed the Clop ransomware gang. The website ZDNet revealed in exclusive that German tech firm Software AG was hit by the Clop ransomware , the criminal gang is demanding more than $20 million ransom. ” reported ZDNet.

Software 111

Software Ransomware Advertising Malware 111

Security Affairs

DECEMBER 18, 2023

Info stealers, also known as information stealers, are a type of malicious software (malware) designed to covertly collect sensitive and personal information from a victim’s computer or network. It violates privacy and security regulations, and individuals involved in such activities can face severe legal consequences.

Banking 111

Banking Cybercrime Malware Accountability 111

Security Affairs

JANUARY 17, 2023

A ransomware attack against the maritime software supplier DNV impacted approximately 1,000 vessels. About 1,000 vessels have been impacted by a ransomware attack against DNV , one of the major maritime software suppliers. . All users can still use the onboard, offline functionalities of the ShipManager software.”

Software 86

Software Ransomware Cyber Attacks Mobile 86

Security Affairs

JULY 15, 2022

Threat actors behind the campaign used multiple accounts across several social media platforms to advertise password-cracking software for Programmable Logic Controller (PLC), Human-Machine Interface (HMI), and project files. The password cracking software also acts as a dropper for the Sality P2P bot. ” concludes the report.

Passwords 109

Passwords Software Firmware Malware 109

The Last Watchdog

APRIL 13, 2022

Additionally, there are also Russian cybercrime organizations that are not state-sponsored but are allowed to operate. Although there’s no one magic solution to eliminating cyberattacks and cybercrime risks, there are steps you can take to reduce the chances of becoming a victim. businesses called #ShieldsUp. The efficacy of hygiene.

Cybersecurity 214

Cybersecurity Cybercrime Education Passwords 214

Security Affairs

JUNE 2, 2023

aspx’) in the ‘wwwroot’ folder of the MOVEit software. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, MOVEit Transfer ) The post MOVEit Transfer software zero-day actively exploited in the wild appeared first on Security Affairs.

Software 78

Software Engineering Authentication Internet 78

Security Affairs

JULY 26, 2023

Swedish software firm Ortivus suffered a cyberattack that has resulted in at least two British ambulance services losing access to electronic patient records. Two British ambulance services were not able to access electronic patient records after a cyber attack that hit their software provider Ortivus.

Cyber Attacks 83

Cyber Attacks Computers and Electronics Software Healthcare 83

Krebs on Security

MAY 22, 2023

According to the hacker, their spam software has been in private use until the last few weeks, when it was released as open source code. “There was nothing in the Mastodon software to detect that activity, and the protocol is not designed to handle this.” A DIRECT QUOT The domain quot[.]pw

Scams 252

Scams DDOS Cryptocurrency Accountability 252

Security Affairs

OCTOBER 18, 2022

An international law enforcement operation led by Europol disrupted a cybercrime ring focused on hacking wireless key fobs to steal cars. The gang was composed of software developers, resellers, and car thieves who used the tool created by the gang to steal the vehicles. ” reads the announcement published by EuroJust.

Hacking 86

Hacking Cybercrime Manufacturing Wireless 86

Security Boulevard

MAY 25, 2021

I've decided to make my Cybercrime Forum Data Set for 2019 and 2021 exclusively available online for free in order for me to speed the dissemination process and to possibly empower security researchers and vendors with the necessary information to help them stay on the top of their game in terms of current and emerging cyber threats including U.S

Cybercrime 59

Cybercrime Cyber threats Hacking Software 59

Krebs on Security

JULY 25, 2023

Proxy services can be used in a legitimate manner for several business purposes — such as price comparisons or sales intelligence — but they are massively abused for hiding cybercrime activity because they make it difficult to trace malicious traffic to its original source. Usually, these users have no idea their systems are compromised.

Malware 211

Malware VPN Internet Internet 211

Security Affairs

FEBRUARY 16, 2021

Researchers at the threat intelligence firm Cyble discovered a new wave of phishing attacks targeting multiple organizations that are abusing the ngrok platform, a secure and introspectable tunnel to the localhost. Cyble also spotted a phishing tool kit, named “KingFish3 (Social master), advertised on a cybercrime forum. 4f421deb219c[.]ngrok[.]io)

Phishing 122

Phishing Cybercrime Mobile Internet 122

Security Affairs

JANUARY 20, 2024

In July, Conor Brian Fitzpatrick agreed to plead guilty to a three-count criminal information charging the defendant with conspiracy to commit access device fraud, solicitation for the purpose of offering access devices, and possession of child pornography.

Hacking 98

Hacking Cybercrime Government Software 98

Security Affairs

NOVEMBER 18, 2021

Security researchers from Sansec Threat Research Team discovered a Linux backdoor during an investigation into the compromised of an e-commerce server with a software skimmer. The post Attackers deploy Linux backdoor on e-stores compromised with software skimmer appeared first on Security Affairs. Pierluigi Paganini.

Software 83

Software eCommerce Malware Engineering 83

SecureWorld News

JULY 3, 2023

This means that most cyberattacks could be prevented by following simple cybersecurity best practices, such as using strong passwords, updating software, and avoiding phishing emails. According to PurpleSec, 98% of cybercrime relies on social engineering to accomplish it. Cybercrime is a highly profitable business.

Cybercrime 84

Cybercrime Social Engineering Data breaches Education 84

Security Affairs

OCTOBER 18, 2023

The researchers reported that several cybercrime groups began exploiting the flaw in early 2023, when the bug was still a zero-day. These recent campaigns exploiting the WinRAR bug underscore the importance of patching and that there is still work to be done to make it easy for users to keep their software secure and up-to-date.

Cybercrime 118

Cybercrime Malware Software Hacking 118

Security Affairs

MARCH 14, 2024

Researchers at the Zero Day Initiative (ZDI) recently uncovered a DarkGate campaign in mid-January 2024, which exploited the Windows zero-day flaw CVE-2024-21412 using fake software installers. is an Internet Shortcut Files Security Feature Bypass Vulnerability. MSI) masquerading as legitimate software. MSI) installers.

Phishing 100

Phishing Malware Software Internet 100

Krebs on Security

OCTOBER 8, 2020

There’s an old adage in information security: “Every company gets penetration tested, whether or not they pay someone for the pleasure.” ” Many organizations that do hire professionals to test their network security posture unfortunately tend to focus on fixing vulnerabilities hackers could use to break in.

Cybercrime 316

Cybercrime VPN Malware Penetration Testing 316

Security Affairs

APRIL 8, 2022

A Ukrainian man was sentenced in the US to 5 years in prison for his criminal activity in the cybercrime group FIN7. for high-level hacking activity in the cybercrime group FIN7 (aka Carbanak Group and the Navigator Group). Iarmak is the third member of the FIN7 cybercrime group to be sentenced in the U.S. in May 2020.

Cybercrime 102

Cybercrime Hacking Software Phishing 102

Security Affairs

FEBRUARY 27, 2023

.” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, malware) The post ChromeLoader campaign uses VHD files disguised as cracked games and pirated software appeared first on Security Affairs.

Software 85

Software Malware Advertising Hacking 85

Krebs on Security

APRIL 27, 2023

Salesforce Community is a widely-used cloud-based software product that makes it easy for organizations to quickly create websites. This misconfigured Salesforce Community site from the state of Vermont was leaking pandemic assistance loan application data, including names, SSNs, email address and bank account information. ”

Banking 302

Banking Government Information Security Authentication 302

Security Affairs

AUGUST 20, 2023

Over 3,000 Android Malware spotted using unsupported/unknown compression methods to avoid detection WinRAR flaw enables remote code execution of arbitrary code #OpFukushima: Anonymous group protests against the plan to dump Fukushima RADIOACTIVE wastewater into Pacific Massive phishing campaign targets users of the Zimbra Collaboration email server (..)

Cybercrime 76

Cybercrime Hacking Malware Phishing 76

Security Affairs

MAY 12, 2024

Recommendations provided in the report include installing updates promptly, using phishing-resistant multi-factor authentication (MFA), securing remote access software, making backups, and applying mitigations from the #StopRansomware Guide.

Ransomware 109

Ransomware Hacking Healthcare Retail 109

Security Affairs

FEBRUARY 18, 2024

CISA: hackers breached a state government organization Russia-linked Turla APT uses new TinyTurla-NG backdoor to spy on Polish NGOs US Gov dismantled the Moobot botnet controlled by Russia-linked APT28 A cyberattack halted operations at Varta production plants North Korea-linked actors breached the emails of a Presidential Office member Nation-state (..)

Cybercrime 92

Cybercrime Ransomware Malware Data breaches 92

Security Affairs

FEBRUARY 17, 2024

Vyacheslav Igorevich Penchukov was a leader of two prolific malware groups that infected thousands of computers with malicious software. On October 2022, Swiss police arrested Penchukov in Geneva, also known as Tank, which is one of the leaders of the JabberZeus cybercrime group.

Malware 89

Malware Cybercrime Banking Hacking 89