Malwarebytes

MAY 22, 2024

On Monday, the computing giant unveiled a new line of PCs that integrate Artificial Intelligence (AI) technology to promise faster speeds, enhanced productivity, and a powerful data collection and search tool that screenshots a device’s activity—including password entry—every few seconds.

Artificial Intelligence 100

Artificial Intelligence Passwords Accountability Media 100

Security Affairs

MARCH 17, 2021

Chinese-language threat actors are targeting telecom companies, as part of a cyber espionage campaign tracked as ‘Operation Diànxùn,’ to steal sensitive data and trade secrets tied to 5G technology. Hackers behind these campaigns are targering people working in the telecom industry.

Malware 96

Malware Data collection Technology Phishing 96

Security Affairs

OCTOBER 27, 2022

Data collected by Microsoft Defender for Endpoint shows that nearly 3,000 devices in almost 1,000 organizations have seen at least one RaspberryRobin payload-related alert in the last 30 days. In some cases, the attackers delivered the Truebot malware between the Raspberry Robin infection and the Cobalt Strike deployment.

Ransomware 95

Ransomware Malware Data collection Encryption 95

Security Affairs

MAY 2, 2021

The Threat Report Portugal: Q1 2021 compiles data collected on the malicious campaigns that occurred from January to March, Q1, of 2021. Threat Report Portugal Q1 2021: Phishing and malware by numbers. The submissions were classified as either phishing or malware. Phishing and Malware Q1 2021. Malware by Numbers.

Threat Reports 85

Threat Reports Phishing Malware Data collection 85

SecureList

OCTOBER 18, 2023

In early September 2022, we discovered several new malware samples belonging to the MATA cluster. As we were collecting and analyzing the relevant telemetry data, we realized the campaign had been launched in mid-August 2022 and targeted over a dozen corporations in Eastern Europe from the oil and gas sector and defense industry.

Malware 105

Malware Phishing Internet Internet 105

Security Affairs

FEBRUARY 13, 2024

The data collected unearthed a total of 1771 ransomware claims, with 55 recorded incidents in Italy. Throughout this period, the platform diligently tracked 185 criminal groups operating worldwide, meticulously tracing 342 servers employed for ransomware activities.

Ransomware 102

Ransomware Data collection Hacking Cybersecurity 102

Security Affairs

NOVEMBER 14, 2021

The Threat Report Portugal: Q3 2021 compiles data collected on the malicious campaigns that occurred from July to September, Q3, of 2021. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática.

Threat Reports 82

Threat Reports Phishing Malware Banking 82

Security Affairs

OCTOBER 17, 2023

The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). The malware maintains persistence through Cron jobs.

Telecommunications 103

Telecommunications Authentication Data collection Passwords 103

Security Affairs

JANUARY 26, 2021

Threat Report Portugal Q4 2020: Data related to Phishing and malware attacks based on the Portuguese Abuse Open Feed 0xSI_f33d. The Portuguese Abuse Open Feed 0xSI_f33d is an open sharing database with the ability to collect indicators from multiple sources, developed and maintained by Segurança-Informática. Malware by Numbers.

Threat Reports 110

Threat Reports Phishing Malware Banking 110

Malwarebytes

APRIL 10, 2024

Digital security is about so much more than malware. When I started Malwarebytes more than 16 years ago, malware was the primary security concern—the annoying pop-ups, the fast-spreading viruses, the catastrophic worms—and throughout our company’s history, Malwarebytes routinely excelled against this threat. It was our attitude.

Data breaches 73

Data breaches Passwords Banking Malware 73

Krebs on Security

SEPTEMBER 9, 2019

Secret Service is investigating a breach at a Virginia-based government technology contractor that saw access to several of its systems put up for sale in the cybercrime underground, KrebsOnSecurity has learned. The Department of Homeland Security did not respond to requests for comment, nor did the Department of Transportation.

Cybercrime 248

Cybercrime Government Data collection Internet 248

SecureList

OCTOBER 25, 2023

Introduction It’s just another cryptocurrency miner… Nobody would even suspect the mining malware was merely a mask, masquerading behind an intricate modular framework that supports both Linux and Windows. This malware employed a custom EternalBlue SMBv1 exploit to infiltrate its victims’ systems.

Malware 114

Malware DNS Encryption Cryptocurrency 114

Security Affairs

JULY 30, 2020

Threat actors behind this campaign are utilizing compromised infrastructure from multiple European countries to host their C2 infrastructure and distribute the malware to the targets. “Our analysis indicates that one of the purposes of the activity in 2020 was to install data gathering implants on victims’ machines.

Advertising 96

Advertising Data collection Malware Phishing 96

Thales Cloud Protection & Licensing

MAY 23, 2022

We have reached the point where highly connected cyber-physical systems are the norm, and the lines between information technology (IT) and operational technology (OT) are blurred. Network segmentation is a fundamental tactic that can inhibit the spread of malware or any unauthorized traffic within the internal network.

Healthcare 126

Healthcare Ransomware Authentication Threat Reports 126

SecureList

SEPTEMBER 28, 2022

Prilex is a Brazilian threat actor that has evolved out of ATM-focused malware into modular point-of-sale malware. Active since 2014, in 2016, the group decided to give up ATM malware and focus all of their attacks on PoS systems, targeting the core of the payment industry. Evolving into PoS malware.

Malware 103

Malware Banking Software Encryption 103

The Last Watchdog

JUNE 2, 2021

We’ve barely scratched the surface of applying artificial intelligence and advanced data analytics to the raw data collecting in these gargantuan cloud-storage structures erected by Amazon, Microsoft and Google. But it’s coming, in the form of driverless cars, climate-restoring infrastructure and next-gen healthcare technology.

Encryption 176

Encryption Artificial Intelligence IoT Data collection 176

Malwarebytes

DECEMBER 7, 2021

Nickel’s techniques vary, but in the end the group’s activity has only one objective, namely to implant stealthy malware for getting into networks, stealing data, and spying on government agencies, think tanks, and human rights organizations. Targets, methods, and techniques. Stay safe, everyone!

Hacking 101

Hacking Malware Surveillance Data collection 101

Security Affairs

JUNE 16, 2020

Contact tracing technologies played an essential role in the containment of the pandemic in several countries, including South Korea, Singapore, Israel, and other nations. The privacy risks associated with the adoption of the app are not proportionate with the benefits of its use in the current context due to the above factors.

Data collection 94

Data collection Advertising Government Technology 94

eSecurity Planet

JULY 22, 2021

According to a pair of recent reports from cloud security vendor Zscaler, cybercriminals picked up on this, with the result being a significant surge in malware attacks against these devices. ” Two Malware Groups Lead Attacks. The majority of attacks – 97 percent – came from two malware groups, Gafgyt and Mirai.

IoT 145

IoT Risk Architecture Manufacturing 145

Malwarebytes

DECEMBER 7, 2021

Nickel’s techniques vary, but in the end the group’s activity has only one objective, namely to implant stealthy malware for getting into networks, stealing data, and spying on government agencies, think tanks, and human rights organizations. Targets, methods, and techniques. Stay safe, everyone!

Hacking 80

Hacking Malware Surveillance Data collection 80

SecureList

JULY 27, 2023

The most remarkable findings Early in June, we issued an early warning of a long-standing campaign that we track under the name Operation Triangulation , involving a previously unknown iOS malware platform distributed via zero-click iMessage exploits. Kaspersky employees were also affected by this threat.

Malware 88

Malware Government Phishing Social Engineering 88

Thales Cloud Protection & Licensing

FEBRUARY 16, 2021

Digital technology and connected IoT devices have proliferated across industries and into our daily lives. Once installed, the malware “phoned home” to a command-and-control network run by the hacking group, which enabled them to enter the network and take further action. Critical Success Factors to Widespread Deployment of IoT.

IoT 96

IoT Manufacturing Energy and Utilities Data collection 96

Security Affairs

AUGUST 10, 2019

Malware researchers at antivirus firm Dr Web discovered more than 33 Android Apps in the Google Play Store with over 100 million installations that contain a clicker Tojan tracked as Android. .” The Command & Control server, in turn, sends the necessary settings to the malware. Once executed, Android.

Mobile 92

Mobile Advertising Malware Data collection 92

eSecurity Planet

FEBRUARY 16, 2024

Reconnaissance Reconnaissance is the starting point of Volt Typhoon’s cyber campaign, characterized by thorough planning and data collection. With increased network access and control , they have the capacity to alter operational technology (OT) assets and disrupt critical services.

Internet 111

Internet Internet Cybersecurity Network Security 111

SecureList

DECEMBER 2, 2022

It is a highly demanding activity, which requires time, multidisciplinary skills, efficient technology, innovation and dedication. We have been doing so since 2008, benefiting from Kaspersky’s decades of cyberthreat data management, and unrivaled technologies. But why are we offering cyber threat intelligence at all?

Cyber threats 109

Cyber threats DNS Technology Engineering 109

eSecurity Planet

JANUARY 6, 2022

Ransomware has already been combined with distributed denial-of-service (DDoS) attacks , and Manky notes that ransomware could see the addition of wiper malware, “which could not only wreck data but destroy systems and hardware. “A near-future event could cause a massive depopulation of internet-connected devices. .

Ransomware 135

Ransomware Cybersecurity Artificial Intelligence CISO 135

SecureList

NOVEMBER 2, 2022

The activity looked like an attempt to transfer the data collected during the attack to the attacker’s C&C server. This incident, a fragment of a long-running APT campaign, demonstrates a data collection scenario. T1587.001: Malware. Malware analysis. Malware analysis. Malware analysis.

Engineering 120

Engineering Malware Passwords Data collection 120

Thales Cloud Protection & Licensing

JANUARY 4, 2023

Data sovereignty hits the road. The concept of "data sovereignty" refers to both the legality of data collection and storage in accordance with local laws. Data is always in motion due to the global nature of most businesses, whose customers and partners may be situated anywhere in the world.

Cybersecurity 87

Cybersecurity Risk Ransomware Marketing 87

SecureList

MARCH 29, 2023

However, traditional financial threats – such as banking malware and financial phishing, continue to take up a significant share of such financially-motivated cyberattacks. For instance, malicious spam campaigns targeting organizations grew 10-fold in April 2022, spreading Qbot and Emotet malware. of all phishing attacks in 2022.

Banking 76

Banking Phishing Cryptocurrency Mobile 76

SecureList

NOVEMBER 10, 2022

If the cryptomining malware is installed successfully on the victim’s computer, it delivers its operator stable earnings. The main tool we use to obtain and analyze threat-related data is Kaspersky Security Network (KSN). Not always malware. Ways of propagation. Cryptojacking in numbers.

Cryptocurrency 113

Cryptocurrency Malware Software Ransomware 113

eSecurity Planet

AUGUST 10, 2022

From mass production of cheap malware to ransomware as a service (RaaS) , cyber criminals have industrialized cybercrime, and a new HP Wolf Security report warns that cybercriminals are adapting advanced persistent threat (APT) tactics too. EDR gains visibility on what’s happening on an organization’s endpoints by capturing activity data.

Ransomware 131

Ransomware Digital transformation Malware Internet 131

Centraleyes

MARCH 25, 2024

Every month, the National Institute of Standards and Technology (NIST) adds over 2,000 new security flaws to its National Vulnerability Database. The tool may work with various third-party technologies, such as ticketing systems, patch management solutions, and SIEM tools. And it’s only getting worse.

Antivirus 52

Antivirus Firewall Risk Software 52

SecureWorld News

APRIL 3, 2023

The origins of Security Data Lake The idea of a Security Data Lake ( SDL) is rooted in the traditional idea of a Data Lake. Its inception was driven by the exponential growth of data and declining storage costs. A Data Lake is a storage repository that keeps vast amounts of data in its original format.

Unstructured Data 81

Unstructured Data Data collection Information Security Backups 81

Security Affairs

NOVEMBER 8, 2021

With copious amounts of data collected by healthcare facilities, cybercriminals often target such entities. Moreover, the healthcare industry collects unique data, known as Protected Health Information (PHI), which is extremely valuable. The healthcare industry might be known for the work it does to treat patients.

Healthcare 97

Healthcare Identity Theft Digital transformation Data collection 97

Krebs on Security

JULY 18, 2022

re network uses at least two free VPN services to lure its users to install a malware-like software that achieves persistence on the user’s computer,” the researchers wrote. “Our technology ensures the maximum security from reverse engineering and antivirus detections,” ExEClean promised. “The 911[.]re

VPN 313

VPN Computers and Electronics Antivirus Software 313

Security Affairs

JUNE 21, 2019

” Turla attackers used many other tools and malware in the latest campaigns, such as a custom dropper to deliver the Neptun backdoor, a USB data collecting tool, a hacking tool that combines four NSA tools ( EternalBlue , EternalRomance , DoublePulsar , SMBTouch ).

Government 78

Government Advertising Hacking Data collection 78

Security Boulevard

APRIL 21, 2022

Well, a recent SANS survey entitled Modernizing Security Operations [registration required] found that EDR is the most effective technology used in Security Operations. In December 2021 SysJoker, a new backdoor malware , targets Windows, macOS, and Linux. But how do you choose an effective EDR solution?

Antivirus 64

Antivirus Data collection Malware Software 64