Security Affairs

AUGUST 12, 2020

The experts first discovered the malware in June 2018, but it has been available since 2014, when they observed threat actors spreading it via a Microsoft Word document containing an auto-executable malicious VBA Macro. To do this, the spyware creates different threads and timer functions in the main function. Pierluigi Paganini.

Passwords 139

Passwords Spyware VPN Malware 139

Security Affairs

FEBRUARY 12, 2024

Public Wi-Fi users are prime targets for MITM attacks because the information they send is often not encrypted, meaning it’s easy for hackers to access your data. Once they’re in, they can grab your emails, usernames, passwords, and more. They might even lock you out of your own accounts by resetting your passwords.

DNS 130

DNS VPN Encryption Passwords 130

Security Affairs

FEBRUARY 10, 2024

Some configurations also include specific instructions about what data to collect, such as the maximum size and maximum number of files, as well as lists of targeted extensions and directories, or directories to exclude” Bitdefender continues.

Ransomware 126

Ransomware Architecture Malware Passwords 126

Security Affairs

AUGUST 4, 2022

The attackers were delivering the malware using archive files and Microsoft Office documents exploiting the Follina Windows flaw ( CVE-2022-30190 ). “The earliest versions of this Rat was typically archived into a zip file pretending to be a document specific to a Russian group.

Malware 100

Malware Information Security Encryption Phishing 100

Security Affairs

JULY 11, 2022

BlackCat (aka ALPHV) Ransomware gang introduced an advanced search by stolen victim’s passwords, and confidential documents. They introduced an advanced search by stolen victim’s passwords, and confidential documents leaked in the TOR network. ALPHV seems to be significantly competing with Lockbit 3.0

Ransomware 90

Ransomware Passwords Data breaches Technology 90

Security Affairs

AUGUST 12, 2021

“The HTML attachment is divided into several segments, including the JavaScript files used to steal passwords, which are then encoded using various mechanisms. ” Attackers split the HTML attachment in individual segments that appear harmless and bypass security solutions. com , or api[.]statvoo[.]com Pierluigi Paganini.

Phishing 118

Phishing Passwords Encryption Cybercrime 118

Security Affairs

NOVEMBER 20, 2023

According to court documents, the crooks stole approximately $600,000 from approximately 1,600 compromised accounts. According to court documents, on November 18, 2022, Garrison launched the attack against the betting site, obtaining access to approximately 60,000 user accounts. ” reads the press release published by DoJ.

Accountability 118

Accountability Hacking Passwords Cybercrime 118

Security Affairs

DECEMBER 25, 2021

. “This letter is to inform you that you have been exposed to a coworker who tested positive for OMICRON variant of COVID-19 sometime between December 18th and 20th,” reads a phishing message shared by Bleeping Computer. “Please take a look at the details in the attached document.”

Phishing 133

Phishing Passwords Banking Malware 133

Krebs on Security

NOVEMBER 16, 2023

Security experts soon discovered Ransom Man had mistakenly included an entire copy of their home folder, where investigators found many clues pointing to Kivimäki’s involvement. The 2,200-page document shows that Kivimäki owned and operated the domain krebsonsecurity[.]org

Cybercrime 208

Cybercrime Hacking Data breaches Banking 208

Security Affairs

JUNE 27, 2022

The malspam messages have the topic “Free primary legal aid” use a password-protected attachment “Algorithm of actions of members of the family of a missing serviceman LegalAid.rar.” ” The RAR archive analyzed by the Ukrainian CERT-UA contains the document “Algorithm_LegalAid.xlsm.”

Telecommunications 128

Telecommunications Malware Media Passwords 128

Security Affairs

MARCH 27, 2023

A new MacStealer macOS malware allows operators to steal iCloud Keychain data and passwords from infected systems. Uptycs researchers team discovered a new macOS information stealer, called MacStealer, which allows operators to steal iCloud Keychain data and passwords from infected systems.

Cybercrime 95

Cybercrime Malware Passwords Advertising 95

Krebs on Security

APRIL 20, 2023

The decrypted icon files revealed the location of the malware’s control server, which was then queried for a third stage of the malware compromise — a password stealing program dubbed ICONICSTEALER. The malware was found inside of a document that offered an employment contract at the multinational bank HSBC. Microsoft Corp.

Malware 276

Malware Software Technology Accountability 276

Security Affairs

DECEMBER 15, 2023

The leak comes after the team discovered an unprotected MongoDB instance, which stored information on GokuMarket crypto exchange users. Businesses employ MongoDB to organize and store large swaths of document-oriented information, and in GokuMarket’s case, the details of over a million customers and admin users.

Passwords 98

Passwords Cryptocurrency Scams Mobile 98

Security Affairs

NOVEMBER 17, 2023

Leaked sample data includes financial documents, invoices, hashed account passwords, passport scans, and more. The documents are in German, a circumstance that suggests that they have been stolen from company systems located in Germany.

Financial Services 127

Financial Services Hacking Ransomware Data breaches 127

Security Affairs

APRIL 16, 2024

LightSpy can steal files from multiple popular applications like Telegram, QQ, and WeChat, as well as personal documents and media stored on the device. First documented in 2020 by Trend Micro and Kaspersky, LightSpy refers to an advanced iOS backdoor that’s distributed via watering hole attacks through compromised news sites.

Spyware 110

Spyware Mobile Malware Encryption 110

Security Affairs

FEBRUARY 23, 2024

The company also confirmed that the attack did not affect the availability or operation of their nbn® or mobile services. “We can confirm that no credit or debit card numbers have been compromised, as we do not store this information. ” reads the statement published by the company. ”continues the statement.

Data breaches 101

Data breaches Telecommunications Banking Mobile 101

Security Affairs

DECEMBER 11, 2023

Leaked sample data includes financial documents, invoices, hashed account passwords, passport scans, and more. The documents are in German, a circumstance that suggests that they have been stolen from company systems located in Germany.

Financial Services 119

Financial Services Data breaches Identity Theft Banking 119

CyberSecurity Insiders

SEPTEMBER 7, 2022

As the adoption of cloud storage is growing, it is becoming easy to carry documents, passwords, movies, images, music, etc. Though it is convenient for us, data upload to a third-party platform might fetch some security risks that are as follows. So, here are a few tips that could help in keeping data safe on cloud-.

Passwords 105

Passwords Accountability Mobile Encryption 105

Krebs on Security

OCTOBER 28, 2020

In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. What’s more, Syrén seemed to downplay the severity of the exposure.

Hacking 342

Hacking Ransomware Banking Accountability 342

Security Affairs

MARCH 27, 2023

To bypass email-scanning services, the threat actors started embedding the Google Drive link in a lure document. The link points to a password-protected archive, the document also includes the password. TONEINS and TONESHELL malware was downloaded from the Google Drive link embedded in the body of spear-phishing messages.

Malware 90

Malware Phishing Passwords Government 90

Security Affairs

MARCH 15, 2024

“Buyers could search for compromised computer credentials on E-Root, such as usernames and passwords that would allow buyers to access remote computers for purposes of stealing private information or manipulating the contents of the remote computer. ” reads the press release published by DoJ.

Cybercrime 109

Cybercrime Cryptocurrency Advertising Passwords 109

Duo's Security Blog

FEBRUARY 13, 2024

Then, in turn, they can digitally sign that message and use that secret to set up an encrypted session to send it back and then both parties can communicate bidirectionally securely. So, we began with the use of passwords. Using concepts from Public Key Cryptography WebAuthn was born to verify identity securely.

eCommerce 64

eCommerce Authentication Encryption Passwords 64

Security Affairs

SEPTEMBER 7, 2023

The Atomic macOS Stealer allows operators to can steal various types of information from the infected machines, including Keychain passwords, complete system information, files from the desktop and documents folder, and even the macOS password.

Malware 112

Malware Passwords Engineering Software 112

Security Affairs

FEBRUARY 12, 2024

According to court documents, the FBI covertly purchased and analyzed the Warzone RAT. The seizure is the result of an international law enforcement operation, federal authorities in Atlanta and Boston charged individuals in Malta and Nigeria, for their involvement in selling the malware. ” reads the press release published by DoJ.

Malware 107

Malware Hacking Cybercrime Advertising 107

Security Affairs

SEPTEMBER 24, 2020

The recent Emotet campaign uses spam messages with password-protected attachments, experts noticed a decline in infections over the weekend, a behavior already observed in the past. Emotet joined the password-protected attachment bandwagon with a campaign starting Friday. ” states the Italian CSIRT’s alert.

Malware 132

Malware Passwords Advertising Cybercrime 132

Security Affairs

APRIL 29, 2023

The Atomic macOS Stealer allows operators to can steal various types of information from the infected machines, including Keychain passwords, complete system information, files from the desktop and documents folder, and even the macOS password. The threat actors spread the malware in the form of a ‘.dmg’

Advertising 88

Advertising Passwords Malware Password Management 88

Security Affairs

JULY 9, 2021

Threat actors have devised a new trick to disable macro security warning that leverage non-malicious docs in malspam attacks. Most of the malspam campaigns leverage weaponized Microsoft Office documents and social engineering techniques to trick recipients into enabling the macros. Zeus OpenSSL).

Social Engineering 111

Social Engineering Banking Engineering Passwords 111

Security Affairs

JUNE 21, 2021

The group published the link to 13 password-protected archives, allegedly containing sensitive data stolen from the chipmaker. Attention Password for the Archives: XXXXXXXXXXX#1JLDiw8″ reads the post published by the group on its leak site. !!Inside Only use secure networks and avoid using public Wi-Fi networks.

Ransomware 139

Ransomware Passwords VPN Authentication 139

Security Affairs

FEBRUARY 26, 2021

. “The Ryuk variant analyzed in this document does have self-replication capabilities. “The content of this scheduled task is described in the analysis present in this document. The propagation is achieved by copying the executable on identified network shares. ” continues the report. ” continues the report.

Ransomware 132

Ransomware Passwords Accountability Encryption 132

Security Affairs

DECEMBER 31, 2020

The Emotet campaign uses malicious emails that attempt to trick recipients into opening the zipped archive with the password included in the message. Emails accessed in this way require user action: open the file, unzip it with a password. Emails accessed in this way require user action: open the file, unzip it with a password.

Passwords 104

Passwords Malware Telecommunications Banking 104

Security Affairs

OCTOBER 26, 2020

develops commercial software used to create, edit, sign, and secure Portable Document Format (PDF) files and digital documents. According to the following the security advisory issued by the software maker and unauthorized third party gained limited access to a company database. M&A documents.

Data breaches 110

Data breaches Advertising Software Accountability 110

Security Affairs

AUGUST 1, 2022

In early July, BlackCat (aka ALPHV) Ransomware gang introduced an advanced search by stolen victim’s passwords, and confidential documents. In a recent post from 10 Jul 2022, 15:35 pm in Dark Web , “ALPHV” introduced search not only by text signatures, but also supporting tags for search of passwords and compromised PII.

Ransomware 126

Ransomware Passwords Cyber Attacks Hacking 126

Security Affairs

JULY 9, 2021

Threat actors have devised a new trick to disable macro security warning that leverage non-malicious docs in phishing attacks. Most of the phishing attacks leverage weaponized Microsoft Office documents and social engineering techniques to trick recipients into enabling the macros. Zeus OpenSSL).

Phishing 98

Phishing Social Engineering Banking Engineering 98

Security Affairs

MARCH 5, 2022

One of the most clamorous leaks announced this leak is related to documents allegedly stolen from Russian troops that demonstrate the planning of Moscow for this war. At the moment it has not been possible to verify the authenticity of the published documents, therefore the reliability of the source remains difficult to verify.”

Hacking 145

Hacking Government Banking Media 145

Security Affairs

DECEMBER 12, 2023

Businesses employ MongoDB to organize and store large swaths of document-oriented information. In addition to nearly 200K exposed customers, the DTC app’s open database also leaked information on 22,952 drivers. DTC app has over 100,000 downloads on the Google Play store.

VPN 127

VPN Accountability Banking Marketing 127

Security Affairs

APRIL 6, 2023

The credentials provided by the recipient are sent to an attacker-controlled URL, however, after the recipient enters their password, the phishing page redirects to a benign document that contains the interview questions, or an RFI that includes information of interest for the victims.

Phishing 87

Phishing Media Passwords Malware 87

Security Affairs

JULY 31, 2022

. “The downloaded data contains confidential and closed information about the employees of your company, which took part in the development of closed military projects of MBDA (PLANCTON, CRONOS, CA SIRIUS, EMADS, MCDS, B1NT etc.) Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Manufacturing 120

Manufacturing Hacking Passwords Cybersecurity 120