Cybercrime, Ransomware and Software - Cyber Security Informer

Ransomware Attack Targets Major North American Water Company

Security Boulevard

JANUARY 24, 2024

A ransomware attack last week hit the North American operations of massive water and wastewater systems operator Veolia, illustrating the ongoing threat to the critical infrastructure sector by cybercrime groups. The post Ransomware Attack Targets Major North American Water Company appeared first on Security Boulevard.

Ransomware

Ransomware Cybercrime Software IoT

Microsoft seized the US infrastructure of the Storm-1152 cybercrime group

Security Affairs

DECEMBER 14, 2023

Microsoft’s Digital Crimes Unit seized multiple domains used by cybercrime group Storm-1152 to sell fraudulent Outlook accounts. Microsoft’s Digital Crimes Unit seized multiple domains used by a cybercrime group, tracked as Storm-1152, to sell fraudulent accounts. ” reads the announcement published by Microsoft.

Cybercrime

Cybercrime Accountability Media Technology

Blacktail: Unveiling the tactics of a notorious cybercrime group

CyberSecurity Insiders

JUNE 26, 2023

In recent months, a cybercrime group known as Blacktail has begun to make headlines as they continue to target organizations around the globe. Since February, the group has launched multiple attacks based on their latest ransomware campaign labeled Buhti. Babuk is a ransomware that was first discovered in early 2021.

Cybercrime

Cybercrime Social Engineering Ransomware Phishing

Cybercrime to cost over $10 Trillion by 2025

Security Boulevard

MARCH 17, 2021

With cybercrime rising by 600% during the pandemic, businesses are more vulnerable than ever to the financial and reputational repercussions of cyberattacks. Costs of Cybercrime Global cybercrime costs are on the rise, increasing 15 per cent year over year, according to a 2021 cyberwarfare report by CyberSecurity Ventures.

Cybercrime

Cybercrime Cyber Attacks Ransomware Healthcare

Who Wrote the ALPHV/BlackCat Ransomware Strain?

Krebs on Security

JANUARY 28, 2022

In December 2021, researchers discovered a new ransomware-as-a-service named ALPHV (a.k.a. “ BlackCat “), considered to be the first professional cybercrime group to create and use a ransomware strain written in the Rust programming language. Image: Varonis. Image: Varonis. ” Meanwhile, the U.S.

Ransomware

Ransomware Accountability Cybercrime Malware

Black Basta Ransomware Suspected of Exploiting Windows Zero-Day Flaw

SecureWorld News

JUNE 12, 2024

The prolific Black Basta ransomware operation is believed to have leveraged a recently patched Windows privilege escalation vulnerability as a Zero-Day exploit before a fix was made available, according to new research by cybersecurity firm Symantec. Microsoft addressed the flaw on March 12, 2024, as part of its monthly Patch Tuesday updates.

Ransomware

Ransomware Cyber threats Cybercrime Cybersecurity

Europol lifts the lid on cybercrime tactics

Malwarebytes

SEPTEMBER 15, 2023

The report follows the Internet Organized Crime Assessment (IOCTA), Europol’s assessment of the cybercrime landscape and how it has changed over the last 24 months. Legitimate software and tools built into operating systems are then misused to establish persistence and traverse their victims’ networks.”

Cybercrime

Cybercrime Ransomware DDOS Backups

Known ransomware attacks up 68% in 2023

Malwarebytes

FEBRUARY 6, 2024

Top of the list is “Big Game” ransomware, the most serious cyberthreat to businesses all around the world. The report reveals that, awash with money, the number of known Big Game attacks surged by 68% in 2023, thanks to Ransomware-as-a-Service groups like LockBit and ALPHV.

Ransomware

Ransomware Cybercrime Malware Social Engineering

Ransomware Group Debuts Searchable Victim Data

Krebs on Security

JUNE 14, 2022

Cybercrime groups that specialize in stealing corporate data and demanding a ransom not to publish it have tried countless approaches to shaming their victims into paying. The latest innovation in ratcheting up the heat comes from the ALPHV/BlackCat ransomware group, which has traditionally published any stolen victim data on the Dark Web.

Ransomware

Ransomware Internet Internet Cybercrime

As of May 2024, Black Basta ransomware affiliates hacked over 500 organizations worldwide

Security Affairs

MAY 12, 2024

Black Basta ransomware affiliates have breached over 500 organizations between April 2022 and May 2024, FBI and CISA reported. The FBI, CISA, HHS, and MS-ISAC have issued a joint Cybersecurity Advisory (CSA) regarding the Black Basta ransomware activity as part of the StopRansomware initiative.

Ransomware

Ransomware Hacking Healthcare Retail

FIN7 cybercrime gang creates fake cybersecurity firm to recruit pentesters for ransomware attacks

Security Affairs

OCTOBER 22, 2021

FIN7 hacking group created fake cybersecurity companies to hire experts and involve them in ransomware attacks tricking them of conducting a pentest. The FIN7 hacking group is attempting to enter in the ransomware business and is doing it with an interesting technique. ” continues the expert.

Cybercrime

Cybercrime Ransomware Cybersecurity Backups

Ransomware Hit ATM Giant Diebold Nixdorf

Krebs on Security

MAY 11, 2020

Diebold Nixdorf , a major provider of automatic teller machines (ATMs) and payment technology to banks and retailers, recently suffered a ransomware attack that disrupted some operations. The 35,000-employee company also produces point-of-sale systems and software used by many retailers. ” NOT SO PRO LOCK. in March. .

Ransomware

Ransomware Retail Malware Data breaches

German tech firm Software AG hit by ransomware attack

Security Affairs

OCTOBER 9, 2020

German tech firm Software AG has suffered a ransomware attack that took place during last weekend, media blamed the Clop ransomware gang. The website ZDNet revealed in exclusive that German tech firm Software AG was hit by the Clop ransomware , the criminal gang is demanding more than $20 million ransom.

Software

Software Ransomware Advertising Malware

DoppelPaymer ransomware group suspects identified

Malwarebytes

SEPTEMBER 19, 2023

The German police in cooperation with the US Secret Service have executed search warrants against suspected members of the DoppelPaymer ransomware group in Germany and Ukraine. Over the last years, DoppelPaymer claimed responsibility for a high-profile ransomware attack on Kia Motors America. Prevent intrusions.

Ransomware

Ransomware Backups Cryptocurrency Cybercrime

1,000 ships impacted by a ransomware attack on maritime software supplier DNV

Security Affairs

JANUARY 17, 2023

A ransomware attack against the maritime software supplier DNV impacted approximately 1,000 vessels. About 1,000 vessels have been impacted by a ransomware attack against DNV , one of the major maritime software suppliers. . All users can still use the onboard, offline functionalities of the ShipManager software.”

Software

Software Ransomware Cyber Attacks Mobile

Over 100,000 Hackers Exposed in Data from Top Cybercrime Forums

SecureWorld News

AUGUST 16, 2023

Recent research conducted by Hudson Rock has shed light on the extensive compromise of computers and the exposure of hackers within cybercrime forums. Hudson Rock's research delved deep into the underbelly of the cyber world, focusing on the top 100 cybercrime forums.

Cybercrime

Cybercrime Passwords Data collection Data breaches

Friday Five: Another Cybercrime Market Taken Down, Addressing Open Source Software Security, and Fake Ransomware

Digital Guardian

APRIL 7, 2023

Genesis Market is the latest victim in a string of law enforcement takedowns, the FDA and CISA are cracking down on medical devices and open-source software, respectively, and fake ransomware scams are on the rise. Catch up on all the latest in this week’s Friday Five!

Marketing

Marketing Software Ransomware Cybercrime

How ransomware changed in 2023

Malwarebytes

FEBRUARY 14, 2024

In 2023, the CL0P ransomware gang broke the scalability barrier and shook the security world with a series of short, automated campaigns, hitting hundreds of unsuspecting targets simultaneously with attacks based on zero-day exploits. Big game ransomware attacks are devastating but relatively rare compared to other forms of cyberattack.

Ransomware

Ransomware Cybercrime Backups Malware

Three cybercrime technology trends to watch in 2023

CyberSecurity Insiders

JANUARY 3, 2023

We see these three cyber trends looming in 2023: Advanced Persistent Threat (APT) software will level the playing field between less-experienced, profit-driven cybercriminals and more politically motivated state-backed groups. The post Three cybercrime technology trends to watch in 2023 appeared first on Cybersecurity Insiders.

Technology

Technology Cybercrime Artificial Intelligence Government

Malvertising Is a Cybercrime Heavyweight, Not an Underdog

SecureWorld News

MARCH 29, 2024

Some of the unearthed hoaxes delivered infostealers such as Aurora Stealer, Batloader, and IceID, with the latter having gained notoriety for facilitating Quantum ransomware distribution. This ends up executing sketchy code that installs viruses, ransomware, spyware, or adware behind the victim's back.

Cybercrime

Cybercrime Advertising Engineering Antivirus

Rise of AI in Cybercrime: How ChatGPT is revolutionizing ransomware attacks and what your business can do

CyberSecurity Insiders

JUNE 13, 2023

Understanding the role of ChatGPT in modern ransomware attacks We’ve written about ransomware many times , but it’s crucial to reiterate that the cost to individuals, businesses, and institutions can be massive, both financially and in terms of data loss or reputational damage. This is where the danger lies.

Cybercrime

Cybercrime Ransomware Phishing Artificial Intelligence

Software firm AnyDesk disclosed a security breach

Security Affairs

FEBRUARY 4, 2024

Remote desktop software company AnyDesk announced that threat actors compromised its production environment. Remote desktop software company AnyDesk announced on Friday that threat actors had access to its production systems. AnyDesk is a remote desktop software that allows users to connect to a computer or device remotely.

Software

Software Passwords Ransomware Cryptocurrency

SEC Launches Investigation of Progress Software in MOVEit Data Breach

SecureWorld News

OCTOBER 13, 2023

Securities and Exchange Commission (SEC) has initiated an investigation into Progress Software regarding the high-profile MOVEit data breach incident that unfolded earlier this year. The incident, tracked as CVE-2023-34362 , was exploited by the notorious Cl0p ransomware group , a Russian-speaking cybercrime gang. million.

Data breaches

Data breaches Software Insurance Cybercrime

Carbanak malware returned in ransomware attacks

Security Affairs

DECEMBER 26, 2023

Researchers at NCC Group reported that in November they observed the return of the infamous banking malware Carbanak in ransomware attacks. The cybersecurity firm NCC Group reported that in November the banking malware Carbanak was observed in ransomware attacks.

Malware

Malware Ransomware Banking Healthcare

UNC2465 cybercrime group launched a supply chain attack on CCTV vendor

Security Affairs

JUNE 17, 2021

UNC2465 cybercrime group that is affiliated with the Darkside ransomware gang has infected with malware the website of a CCTV camera vendor. An affiliate of the Darkside ransomware gang , tracked as UNC2465, has conducted a supply chain attack against a CCTV vendor, Mandiant researchers discovered. ” concludes the report.

Cybercrime

Cybercrime Ransomware Antivirus Software

FBI Hacker Dropped Stolen Airbus Data on 9/11

Krebs on Security

SEPTEMBER 13, 2023

The FBI responded by reverifying InfraGard members and by seizing the cybercrime forum where the data was being sold. In a post on the English language cybercrime forum BreachForums , USDoD leaked information on roughly 3,200 Airbus vendors, including names, addresses, phone numbers, and email addresses. But on Sept. But on Sept.

Cybercrime

Cybercrime Passwords Authentication Malware

A Tough Week for REvil Ransomware

Heimadal Security

NOVEMBER 9, 2021

The REvil/Sodinokibi ransomware (AKA Sodin) is a great example of Ransomware-as-a-Service, a type of cybercrime where two parties collaborate on the hack: the code writers who create the ransomware, and the affiliates who distribute it and collect the payment. malicious software owner and/or creator) […].

Ransomware

Ransomware Architecture Cybercrime Software

FIN7 Hackers Leveraging Password Reuse and Software Supply Chain Attacks

The Hacker News

APRIL 5, 2022

The notorious cybercrime group known as FIN7 has diversified its initial access vectors to incorporate software supply chain compromise and the use of stolen credentials, new research has revealed.

Software

Software Passwords Cybercrime Ransomware

REvil Ransomware Gang Starts Auctioning Victim Data

Krebs on Security

JUNE 2, 2020

The criminal group behind the REvil ransomware enterprise has begun auctioning off sensitive data stolen from companies hit by its malicious software. A partial screenshot from the REvil ransomware group’s Dark Web blog. and Europe in early March.” So it’s a double vig.”

Ransomware

Ransomware Backups Encryption Internet

A new Linux version of TargetCompany ransomware targets VMware ESXi environments

Security Affairs

JUNE 6, 2024

A new Linux variant of the TargetCompany ransomware family targets VMware ESXi environments using a custom shell script. A new variant of the TargetCompany ransomware group uses a custom shell script as a means of payload delivery and execution, this is the first time the technique was observed in the wild.

Ransomware

Ransomware Encryption Backups Malware

Russian-speaking cybercrime evolution: What changed from 2016 to 2021

SecureList

OCTOBER 20, 2021

Having been in the field for so long, we have witnessed some major changes in the cybercrime world’s modus operandi. This report shares our insights into the Russian-speaking cybercrime world and the changes in how it operates that have happened in the past five years.

Cybercrime

Cybercrime Banking Malware Ransomware

Friday Five: Another Cybercrime Market Taken Down, Addressing the Security of Open Source Software and Medical Devices, and Fake Ransomware

Digital Guardian

APRIL 7, 2023

Genesis Market is the latest victim in a string of law enforcement takedowns, the FDA and CISA are cracking down on medical devices and open-source software, respectively, and fake ransomware scams are on the rise. Catch up on all the latest in this week’s Friday Five!

Marketing

Marketing Software Ransomware Scams

Friday Five: Another Cybercrime Market Taken Down, Addressing the Security of Open Source Software and Medical Devices, and Fake Ransomware

Digital Guardian

APRIL 7, 2023

Genesis Market is the latest victim in a string of law enforcement takedowns, the FDA and CISA are cracking down on medical devices and open-source software, respectively, and fake ransomware scams are on the rise. Catch up on all the latest in this week’s Friday Five!

Marketing

Marketing Software Ransomware Scams

Cybercrime underground flooded with offers for initial access to shipping and logistics orgs

Security Affairs

NOVEMBER 3, 2021

Experts warn of the availability in the cybercrime underground of offers for initial access to networks of players in global supply chains. In August 2021 , an affiliate of the Conti ransomware gang claimed access to corporate networks belonging to a U.S.-based based transportation management and trucking software supplier and a U.S.-based

Cybercrime

Cybercrime VPN Ransomware Hacking

Cactus RANSOMWARE gang hit the Swedish retail and grocery provider Coop

Security Affairs

JANUARY 1, 2024

The Cactus ransomware group claims to have hacked Coop, one of the largest retail and grocery providers in Sweden. The Cactus ransomware group claims to have hacked Coop and is threatening to disclose a huge amount of personal information, over 21 thousand directories. The Cactus ransomware relies on multiple legitimate tools (e.g.

Retail

Retail Ransomware Encryption Hacking

Suspected exploitation of Apache ActiveMQ flaw CVE-2023-46604 to install HelloKitty ransomware

Security Affairs

NOVEMBER 2, 2023

Apache ActiveMQ is an open-source message broker software that serves as a message-oriented middleware (MOM) platform. It is developed by the Apache Software Foundation and written in Java. Rapid7 identified exploitation attempts of the CVE-2023-46604 flaw to deploy HelloKitty ransomware in two different customer environments.

Ransomware

Ransomware Cybercrime Software Encryption

Amadey malware spreads via software cracks laced with SmokeLoader

Security Affairs

JULY 25, 2022

Operators behind the Amadey Bot malware use the SmokeLoader to distribute a new variant via software cracks and keygen sites. The malware is available for sale in illegal forums, in the past, it was used by cybercrime gangs like TA505 to install GandCrab ransomware or the FlawedAmmyy RAT. ” concludes the report.

Software

Software Malware Cybercrime VPN

Giant health insurer struck by ransomware didn't have antivirus protection

Malwarebytes

OCTOBER 11, 2023

The Philippine Health Insurance Corporation (PhilHealth), has confirmed that it was unprotected by antivirus software when it was attacked by the Medusa ransomware group in September. EDR can detect an intruder's suspicious activity in advance of them running ransomware, as well as being able to identify the ransomware itself.

Antivirus

Antivirus Insurance Ransomware Healthcare

Hitting ransomware for six: marking the anniversary of a valuable cybercrime tool

BH Consulting

JULY 26, 2022

For the past six years, a free project has helped ransomware victims to avoid paying criminals or suffering prolonged recovery times. During the last decade, the threat of ransomware has ratcheted steadily upwards. Since then, the portal has grown to become a valuable resource for victims of ransomware.

Cybercrime

Cybercrime Ransomware Education Media

Linux variant of Cerber ransomware targets Atlassian servers

Security Affairs

APRIL 17, 2024

Threat actors are exploiting the CVE-2023-22518 flaw in Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware. Cado Security Labs recently became aware that Cerber ransomware is being deployed into Confluence servers via the CVE-2023-22518 exploit. ” continues the report.

Ransomware

Ransomware Encryption Malware Accountability

Play ransomware gang hit Dutch shipping firm Royal Dirkzwager

Security Affairs

MARCH 19, 2023

Dutch maritime logistics company Royal Dirkzwager suffered a ransomware attack, the company was hit by the Play ransomware gang. The Play ransomware group hit the Dutch maritime logistics company Royal Dirkzwager. Company CEO Joan Blaas said that the ransomware attack did not impact the operations of the company.

Ransomware

Ransomware Cybercrime Hacking Cyber Attacks

RSAC insights: How IABs — initial access brokers — help sustain, accelerate the ransomware plague

The Last Watchdog

JUNE 20, 2022

I had the chance at RSA Conference 2022 to visit with John Shier, senior security advisor at Sophos, a security software and hardware company. IABs specialize in one specific area of the cybercrime ecosystem where the victims are accumulated and then sold off to the highest bidder,” he says. Teeming criminal activity.

Ransomware

Ransomware Digital transformation Marketing Software

Cybercrime escalates as barriers to entry crumble

CSO Magazine

JULY 22, 2022

Cybercriminals are now operating on a professional footing with easy-to-launch malware and ransomware attacks being offered on a software-as-a-service (SaaS) basis, allowing people with even rudimentary IT skills to launch cyberattacks at targets of their choosing, the report notes.

Cybercrime

Cybercrime eCommerce Advertising Malware

SysAid zero-day exploited by Clop ransomware group

Security Affairs

NOVEMBER 10, 2023

Microsoft reported the exploitation of a zero-day vulnerability, tracked as CVE-2023-47246 , in the SysAid IT support software in limited attacks. The IT giant linked the attacks to the Clop ransomware gang (aka Lace Tempest ). The company reported the flaw to the software vendor which quickly fixed it. on November 8.

Ransomware

Ransomware Malware Software Internet

Ransomware Attack Targets Major North American Water Company

Microsoft seized the US infrastructure of the Storm-1152 cybercrime group

Trending Sources

Blacktail: Unveiling the tactics of a notorious cybercrime group

Cybercrime to cost over $10 Trillion by 2025

Who Wrote the ALPHV/BlackCat Ransomware Strain?

Black Basta Ransomware Suspected of Exploiting Windows Zero-Day Flaw

Europol lifts the lid on cybercrime tactics

Known ransomware attacks up 68% in 2023

Ransomware Group Debuts Searchable Victim Data

As of May 2024, Black Basta ransomware affiliates hacked over 500 organizations worldwide

FIN7 cybercrime gang creates fake cybersecurity firm to recruit pentesters for ransomware attacks

Ransomware Hit ATM Giant Diebold Nixdorf

German tech firm Software AG hit by ransomware attack

DoppelPaymer ransomware group suspects identified

1,000 ships impacted by a ransomware attack on maritime software supplier DNV

Over 100,000 Hackers Exposed in Data from Top Cybercrime Forums

Friday Five: Another Cybercrime Market Taken Down, Addressing Open Source Software Security, and Fake Ransomware

How ransomware changed in 2023

Three cybercrime technology trends to watch in 2023

Malvertising Is a Cybercrime Heavyweight, Not an Underdog

Rise of AI in Cybercrime: How ChatGPT is revolutionizing ransomware attacks and what your business can do

Software firm AnyDesk disclosed a security breach

SEC Launches Investigation of Progress Software in MOVEit Data Breach

Carbanak malware returned in ransomware attacks

UNC2465 cybercrime group launched a supply chain attack on CCTV vendor

FBI Hacker Dropped Stolen Airbus Data on 9/11

A Tough Week for REvil Ransomware

FIN7 Hackers Leveraging Password Reuse and Software Supply Chain Attacks

REvil Ransomware Gang Starts Auctioning Victim Data

A new Linux version of TargetCompany ransomware targets VMware ESXi environments

Russian-speaking cybercrime evolution: What changed from 2016 to 2021

Friday Five: Another Cybercrime Market Taken Down, Addressing the Security of Open Source Software and Medical Devices, and Fake Ransomware

Friday Five: Another Cybercrime Market Taken Down, Addressing the Security of Open Source Software and Medical Devices, and Fake Ransomware

Cybercrime underground flooded with offers for initial access to shipping and logistics orgs

Cactus RANSOMWARE gang hit the Swedish retail and grocery provider Coop

Suspected exploitation of Apache ActiveMQ flaw CVE-2023-46604 to install HelloKitty ransomware

Amadey malware spreads via software cracks laced with SmokeLoader

Giant health insurer struck by ransomware didn't have antivirus protection

Hitting ransomware for six: marking the anniversary of a valuable cybercrime tool

Linux variant of Cerber ransomware targets Atlassian servers

Play ransomware gang hit Dutch shipping firm Royal Dirkzwager

RSAC insights: How IABs — initial access brokers — help sustain, accelerate the ransomware plague

Cybercrime escalates as barriers to entry crumble

SysAid zero-day exploited by Clop ransomware group

Stay Connected