SecureWorld News

MARCH 29, 2024

This ends up executing sketchy code that installs viruses, ransomware, spyware, or adware behind the victim's back. A stepping stone to impactful cybercrime This tactic has tangible real-world implications. A mix of social engineering, hacking, and abuse of legitimate services makes this style of online crime incredibly effective.

Cybercrime 108

Cybercrime Advertising Engineering Antivirus 108

Security Affairs

SEPTEMBER 3, 2023

ransomware builder used by multiple threat actors Cisco fixes 3 high-severity DoS flaws in NX-OS and FXOS software Cybercrime Unpacking the MOVEit Breach: Statistics and Analysis Cl0p Ups The Ante With Massive MOVEit Transfer Supply-Chain Exploit FBI, Partners Dismantle Qakbot Infrastructure in Multinational Cyber Takedown U.S.

Social Engineering 128

Social Engineering Data breaches Spyware Hacking 128

SecureWorld News

JULY 11, 2022

The Cybersecurity and Infrastructure Security Agency (CISA) issued a warning in April that the group was targeting cryptocurrency and blockchain companies and that it was using social engineering schemes to gain access to the victim's network. The employee who fell for the social engineering scheme no longer works for Sky Mavis.

Hacking 97

Hacking Social Engineering Cryptocurrency Cybercrime 97

Security Affairs

APRIL 14, 2024

Crooks manipulate GitHub’s search results to distribute malware BatBadBut flaw allowed an attacker to perform command injection on Windows Roku disclosed a new security breach impacting 576,000 accounts LastPass employee targeted via an audio deepfake call TA547 targets German organizations with Rhadamanthys malware CISA adds D-Link multiple (..)

Data breaches 130

Data breaches Social Engineering Hacking Malware 130

Malwarebytes

JANUARY 25, 2024

Reconnaissance and social engineering are specific fields where AI can be deployed. Currently only state sponsored groups, professional spyware vendors, and the large criminal operations have access to, and know how to use advanced AI tools to increase the effectivity of their attacks.

Ransomware 112

Ransomware Government Social Engineering Spyware 112

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 98

Spyware Hacking Malware Social Engineering 98

SecureList

JANUARY 19, 2022

Kaspersky ICS CERT has uncovered a number of spyware campaigns targeting industrial enterprises. The attackers use off-the-shelf spyware, but limit the scope and lifetime of each sample to the bare minimum. The attackers use off-the-shelf spyware, but limit the scope and lifetime of each sample to the bare minimum.

Spyware 105

Spyware Accountability VPN Malware 105

Security Affairs

JUNE 11, 2023

Gox exchange and operating BTC-e Japanese Pharmaceutical giant Eisai hit by a ransomware attack Clop ransomware gang was testing MOVEit Transfer bug since 2021 Stealth Soldier backdoor used is targeted espionage attacks in Libya Researchers published PoC exploit code for actively exploited Windows elevation of privilege issue Experts detail a new Kimsuky (..)

Social Engineering 98

Social Engineering Data breaches Ransomware Hacking 98

Security Affairs

JULY 4, 2023

The threat actor employed various techniques to circumvent the Multi-Factor Authentication (MFA), including social engineering to trick victims into installing a purported security application for their bank account on their Android devices. The malicious apps are used to capture SMSs containing authorization codes.

Banking 98

Banking Phishing Social Engineering Authentication 98

SecureList

MAY 27, 2022

The attackers study their victims carefully and use the information they find to frame social engineering attacks. One of the things you can do to protect yourself from advanced mobile spyware is to reboot your device on a daily basis. When opened, this document eventually downloads a backdoor. Other malware.

Phishing 135

Phishing Spyware Firmware Malware 135

Identity IQ

MAY 7, 2021

Social Engineering: Cybercriminals are increasingly using sophisticated social engineering tools to trick people into revealing their login credentials. Spyware can be loaded onto your machine to log all your keystrokes. This includes bulk collections of details stolen in data breaches.

Accountability 105

Accountability Data breaches Passwords Social Engineering 105

SecureWorld News

JULY 27, 2023

Some highlights include: Stealers are primarily sold on cybercrime forums. Mike Parkin, Senior Technical Engineer at Vulcan Cyber, said: "There's no doubt we're seeing more information stealing malware, but there's been an uptick in cybercriminal activity overall.

Malware 93

Malware Passwords Social Engineering Accountability 93

SecureList

NOVEMBER 22, 2022

These are attractive aspects that cybercrime groups will be unable to resist. And not only cybercrime groups, but also state-sponsored groups who have already started targeting this industry. It also offers anonymity to users. In 2022, we observed many other cryptocurrency-related threats potentially costing users millions of dollars.

Cryptocurrency 107

Cryptocurrency Mobile Ransomware Banking 107

SecureList

APRIL 27, 2021

During routine monitoring of detections for FinFisher spyware tools, we discovered traces that point to recent FinFly Web deployments. We also found some overlaps in these sets of activities with HAFNIUM in terms of infrastructure and TTPs as well as the use of ShadowPad malware during the same timeframe. Final thoughts.

Malware 145

Malware Spyware Government Social Engineering 145

BH Consulting

NOVEMBER 15, 2022

He argued that security works when it costs €100,000 for spyware to hack into a politician’s iPhone. Detective Inspector Gerard Doyle of the Garda Siochana National Cybercrime Bureau urged victims not to pay the ransom. Sharon Conheady’s entertaining talk explored the ethical side of social engineering.

Insurance 59

Insurance Social Engineering CISO Ransomware 59

Security Affairs

MARCH 27, 2023

Such was related to a worldwide malware operation known as NullMixer, a controversial and widespread malware delivery maneuver based on SEO poisoning and social engineering technique to lure tech-savvy users, including IT personnel.

Malware 98

Malware Encryption Social Engineering Marketing 98

BH Consulting

OCTOBER 6, 2022

Social engineering techniques, such as phishing, target not the systems but the people using them. So with European Cybersecurity Month here, now’s a good time to familiarise ourselves again with a popular cybercrime tactic. After all, it’s called social engineering for a reason. spyware, ransomware).”.

Security Awareness 52

Security Awareness Phishing Scams Social Engineering 52

SecureList

NOVEMBER 1, 2022

In June, we identified a previously unknown Android spyware app that targets Persian-speaking individuals. The spyware itself collects various data from the victims’ devices, such as call logs or lists of contacts. SandStrike is distributed as a means to access resources about the Bahá?í í religion that are banned in Iran.

Malware 145

Malware Ransomware Spyware Encryption 145

Malwarebytes

FEBRUARY 12, 2021

The scammers created those fake identities to redirect traffic away from the adult platforms onto pages showing bogus alerts claiming users were infected with pornographic spyware. This well-known scheme attempts to scare victims into calling so-called technicians for assistance but in fact defrauds them for hundreds of dollars.

Scams 101

Scams Advertising Spyware Mobile 101

SecureList

NOVEMBER 14, 2023

This politician became the target of a previously undiscovered “zero-day” attack aimed at infecting his phone with spyware. They advertise on dark web platforms and employ various techniques, including malware, phishing, and other social engineering methods.

Hacking 142

Hacking Energy and Utilities Malware Media 142

SecureList

JULY 27, 2023

Following this, we released the first of a series of additional reports describing the final payload in the infection chain: a highly sophisticated spyware implant that we dubbed “TriangleDB” Operating in memory, this implant periodically communicates with the C2 (command and control) infrastructure to receive commands.

Malware 98

Malware Government Phishing Social Engineering 98

Security Affairs

AUGUST 1, 2022

An Australian national has been charged for the creation and sale of the Imminent Monitor (IM) spyware, which was also used for criminal purposes. The 24-year-old Australian national Jacob Wayne John Keen has been charged for his alleged role in the development and sale of spyware known as Imminent Monitor (IM).

Spyware 129

Spyware Malware Hacking Cybercrime 129

SecureList

OCTOBER 26, 2021

Historically, Lazarus used MATA to attack various industries for cybercrime-like intentions: stealing customer databases and spreading ransomware. Historically, its Windows implant was represented by a single-stage spyware installer. Southeast Asia and Korean Peninsula. This version was detected and researched several times up to 2018.

Malware 145

Malware Government Surveillance Spyware 145

SecureList

NOVEMBER 17, 2021

Last year, we foresaw the APT and cybercrime worlds becoming more porous on an operational level. The Israeli Defense Forces (IDF) have claimed that threat actors have been using catfishing to lure Israeli soldiers into installing spyware. Let’s start by looking at the predictions we made for 2021.

Mobile 145

Mobile Surveillance Ransomware Government 145

eSecurity Planet

OCTOBER 21, 2022

From ransomware attacks locking businesses out of their data until they pay potentially millions of dollars to spyware tracking users’ every move through their infected device, the effects of malware can be devastating. Types of spyware are often classified based on what information they’re gathering. Need More Intel on Rootkits?

Malware 75

Malware Adware Spyware Antivirus 75

SecureList

NOVEMBER 10, 2021

Looking for alternative sources to download a streaming app or an episode of a show, users often discover various types of malware, including Trojans, spyware and backdoors, as well as naughty applications, such as adware. When discussing streaming-related threats, it is crucial to talk about malware and unwanted software.

Phishing 128

Phishing Accountability Malware Adware 128

Security Affairs

JULY 21, 2024

Threat actors attempted to capitalize CrowdStrike incident Russian nationals plead guilty to participating in the LockBit ransomware group MediSecure data breach impacted 12.9 Threat actors attempted to capitalize CrowdStrike incident Russian nationals plead guilty to participating in the LockBit ransomware group MediSecure data breach impacted 12.9

Data breaches 124

Data breaches Cybercrime Hacking Ransomware 124

Security Affairs

JULY 21, 2024

Threat actors attempted to capitalize CrowdStrike incident Russian nationals plead guilty to participating in the LockBit ransomware group MediSecure data breach impacted 12.9 Threat actors attempted to capitalize CrowdStrike incident Russian nationals plead guilty to participating in the LockBit ransomware group MediSecure data breach impacted 12.9

Data breaches 98

Data breaches Cybercrime Ransomware Social Engineering 98