SecureList

MAY 3, 2021

Banking phishing: new version of an old scheme. Clients of several Dutch banks faced a phishing attack using QR codes. The links in their messages took the victim to a well-designed phishing pages with official emblems, business language and references to relevant laws. Quarterly highlights. Vaccine with cyberthreat.

Phishing 137

Phishing Banking Accountability Computers and Electronics 137

Security Affairs

JUNE 15, 2020

The Earth Empusa threat group is distributing new Android spyware, dubbed ActionSpy, through watering hole attacks to targets Turkic minority group. Attackers injected the malicious code to deploy the spyware in websites, some of them were actually fake. The server, in turn, may send some commands to the compromised device.

Spyware 106

Spyware Advertising Encryption Phishing 106

Security Affairs

JULY 18, 2019

The researchers attribute the spyware to the Russia-linked and Gamaredon Group. EvilGnome allows attackers to take screenshots, steal files, capture audio recordings from the microphone, and download and execute other payloads. Intezer spotted a new piece of Linux malware dubbed EvilGnome because it disguises as a Gnome extension.

Spyware 109

Spyware Malware Advertising Cyber Attacks 109

Security Affairs

JULY 21, 2021

FormBook is a data-stealing malware that is used in cyber espionage campaigns, like other spyware it is capable of extracting data from HTTP sessions, keystroke logging, stealing clipboard contents. The post XLoader, a $49 spyware that could target both Windows and macOS devices appeared first on Security Affairs. Pierluigi Paganini.

Spyware 113

Spyware Malware Cybercrime Advertising 113

Security Affairs

MAY 18, 2020

Security experts discovered a highly sophisticated Android spyware platform, dubbed Mandrake, that remained undetected for four years. Researchers from Bitdefender discovered a high-sophisticated Android spyware platform dubbed Mandrake, it was involved in highly targeted attacks against specific devices. Pierluigi Paganini.

Spyware 113

Spyware Malware Advertising Banking 113

SecureList

DECEMBER 16, 2021

One specific case of the PseudoManuscrypt downloader’s distribution is its installation via the Glupteba botnet (whose main installer is also distributed via the pirated software installer distribution platform).

Spyware 136

Spyware Energy and Utilities Malware Manufacturing 136

Security Affairs

APRIL 16, 2019

Scranos is a powerful cross-platform rootkit-enabled spyware discovered while investigating malware posing as legitimate software like video players, drivers and even anti-virus products. The rootkit injects a downloader into a svchost.exe process. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Spyware 103

Spyware Adware Malware Accountability 103

SecureList

NOVEMBER 28, 2024

Except for the first-stage loader and the PipeShell plugin, all plugins are downloaded from the C2 and then loaded into memory, leaving no trace on disk. Based on limited telemetry, we believe with medium to low confidence that some of the initial infections were spear-phishing emails.

Malware 118

Malware Government Software Spyware 118

Security Boulevard

MARCH 24, 2025

Researchers name several countries as potential Paragon spyware customers TechCrunch The Citizen Lab, a group of academics and security researchers, recently published a report indicating the governments of Australia, Canada, Cyprus, Denmark, Israel, and Singapore are "likely" customers of Israeli spyware maker Paragon Solutions.

Surveillance 75

Surveillance Telecommunications Data breaches Spyware 75

SecureList

MARCH 3, 2022

. >Percentage of ICS computers on which malicious objects were blocked ( download ). Percentage of ICS computers on which malicious objects were blocked, January – December 2018 – 2021 ( download ). Percentage of ICS computers on which malicious objects were blocked in selected industries ( download ). Malicious objects.

Spyware 131

Spyware Ransomware Cryptocurrency Phishing 131

Security Affairs

AUGUST 4, 2024

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Spyware 124

Spyware Phishing Malware Ransomware 124

Security Affairs

FEBRUARY 15, 2025

CISA adds Microsoft Windows, Zyxel device flaws to its Known Exploited Vulnerabilities catalog Microsoft Patch Tuesday security updates for February 2025 ficed 2 actively exploited bugs Hacking Attackers exploit a new zero-day to hijack Fortinet firewalls Security OpenSSL patched high-severity flaw CVE-2024-12797 Progress Software fixed multiple high-severity (..)

Spyware 70

Spyware Firewall Artificial Intelligence Malware 70

Security Affairs

AUGUST 21, 2024

The Computer Emergency Response Team of Ukraine (CERT-UA) warned of new phishing attacks, carried out by the Vermin group, distributing a malware. The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new phishing campaign conducted by the Vermin group that distributed malware.

Malware 128

Malware Spyware Phishing Cyber threats 128

Security Affairs

MARCH 8, 2020

Experts uncovered a new Coronavirus (COVID-19 ) -themed campaign that is distributing a malware downloader that delivers the FormBook information-stealing Trojan. ’ The executable employed in this campaign is a strain of the GuLoader malware downloader. The malware can also execute commands from a command and control (C2) server.

Malware 145

Malware Scams Social Engineering Phishing 145

SecureList

MAY 27, 2022

When opened, this document eventually downloads a backdoor. The group uses various malware families, including Wroba, and attack methods that include phishing, mining, smishing and DNS poisoning. Territories affected by Roaming Mantis activity ( download ). Cyberattacks related to the crisis in Ukraine. Other malware.

Phishing 134

Phishing Spyware Firmware Malware 134

CyberSecurity Insiders

JANUARY 5, 2022

Highly placed sources say that the malware has been distributed via phishing campaign by a cyber threat group named MalSmoke. Downloading files from trustworthy websites and never opening emails send by anonymous senders will help in avoiding Zloader malware installation.

Malware 131

Malware Spyware Antivirus Cyber threats 131

SecureList

JANUARY 19, 2022

Kaspersky ICS CERT has uncovered a number of spyware campaigns targeting industrial enterprises. The attackers use off-the-shelf spyware, but limit the scope and lifetime of each sample to the bare minimum. The attackers use off-the-shelf spyware, but limit the scope and lifetime of each sample to the bare minimum.

Spyware 105

Spyware Accountability VPN Malware 105

The Hacker News

JULY 31, 2023

Organizations in Italy are the target of a new phishing campaign that leverages a new strain of malware called WikiLoader with an ultimate aim to install a banking trojan, stealer, and spyware called Ursnif (aka Gozi). "It

Banking 92

Banking Spyware Phishing Malware 92

Hacker's King

MAY 24, 2025

In simpler terms, phishing scams, brute force attacks, and MFA bypass techniques. Phishing attacks Phishing so far makes for the most dangerous aspect of cybersecurity. Unlike the traditional methods of sending more information about a certain service, a phishing email acts the complete opposite.

Cyber Attacks 59

Cyber Attacks Passwords Education Phishing 59

Security Affairs

MAY 8, 2020

Group-IB, a Singapore-based cybersecurity company, observed the growth of the lifespan of phishing attacks in the second half of 2019. Figure 1 The distribution of web-phishing among target categories . CERT-GIB’s findings indicate that phishing attack perpetrators have revised their so-called target pool. Target reshuffle.

Phishing 87

Phishing Spyware Banking Malware 87

Adam Levin

FEBRUARY 25, 2020

Stalkerware apps are installed by someone with physical access to a device (potentially by a spouse or parent) or via phishing exploits where the sender lures their target into clicking a link or downloading something that appears to be legitimate. What You Need to Know.

Malware 236

Malware Mobile Phishing Authentication 236

IT Security Guru

APRIL 26, 2021

Whether it’s through downloading a rogue attachment or playing a game from an unprotected website, computer viruses are common. Phishing and stolen identities – Phishing, the go-to method of attack for cybercriminals, is also a frequent tactic within the gaming community.

Cybersecurity 131

Cybersecurity Spyware VPN Antivirus 131

Hacker's King

JANUARY 8, 2025

These Android hacking techniques can be described as: Phishing Attacks: This is a technique in which hackers gain the trust of individuals by mimicking someone authentic. You should always download apps from trusted sources like 'Play Store' for Android users. Uninstall any suspicious apps or recently downloaded apps.

Hacking 52

Hacking Spyware Antivirus Passwords 52

Malwarebytes

AUGUST 18, 2022

Phishing attacks are a persistent threat to businesses globally. According to Verizon , 82 percent of data breaches in 2021 involved the human element—with phishing attacks making up over 60 precent of these. With Malwarebytes DNS filtering , however, you can prevent a large swath of phishing attacks.

DNS 73

DNS Phishing Small Business Spyware 73

SecureList

OCTOBER 5, 2022

Our answer is nearly always the same: (spear) phishing. The downloaded files were NSIS installers, containing malicious code in the installation script. The malicious script: the parts in red indicate the malware download code. It proxies all the functionality to the original DLL and also downloads an additional DLL from the C2.

Malware 144

Malware Architecture Ransomware Spyware 144

Security Affairs

AUGUST 21, 2022

In the past, the Donot Team spyware was found in attacks outside of South Asia. The investigation also discovered links between the spyware and infrastructure used in these attacks, and Innefu Labs, a cybersecurity company based in India. ” continues the report.

Malware 100

Malware Spyware Phishing Government 100

Webroot

OCTOBER 25, 2021

Even strong security can’t prevent an account from being hacked if account credentials are stolen in a phishing attack, one of the most common causes of identity theft. In 2020, phishing scams spiked by 510 percent between January and February alone. Fake apps are still cause for concern. Web-borne malware remains widespread.

Identity Theft 131

Identity Theft Spyware Phishing Antivirus 131

Security Boulevard

DECEMBER 30, 2021

As a spyware, it gathers classified information from infected systems without the consent of the user and sends gathered information to remote threat actors. Phishing: Spearphishing Attachment. Phishing: Spearphishing Link. Krachulka Banking Malware.DLL File Download Variant-1. Let's start with Krachulka. framework.

Banking 111

Banking Malware Spyware Phishing 111

Security Affairs

MARCH 12, 2019

All of them have been downloaded from untrusted sources available on the clearnet. Malware authors created well-designed fake web pages, replicating all the graphics of the game misleading the user to download the app, as shown in the following image: Figure 1:fake/phishing Apex Legends web page. Behind the URL “www.areyouabot[.]net”

Spyware 106

Spyware Malware Mobile Phishing 106

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 98

Spyware Hacking Malware Social Engineering 98

Security Affairs

MAY 19, 2020

Spear-phishing is a rapidly emerging threat. It’s more specific than generic phishing attempts and often targets a single person or company. Data from Barracuda cybersecurity researchers identified a 667% increase in spear-phishing attacks between the end of February and the following month.

Energy and Utilities 125

Energy and Utilities Phishing Advertising Technology 125

Security Affairs

MARCH 21, 2022

Ukraine CERT (CERT-UA) warns of spear-phishing ??attacks The Government Team for Response to Computer Emergencies of Ukraine (CERT-UA) warns of spear-phishing messages conducted by UAC-0035 group (aka InvisiMole) against Ukrainian state bodies. attacks conducted by UAC-0035 group (aka InvisiMole) on state organizations of Ukraine.

Spyware 98

Spyware DNS Phishing Government 98

eSecurity Planet

JUNE 16, 2022

Cisco Umbrella , analyzing the threat environment for 2022, found that 86% of organizations experienced phishing, 69% experienced unsolicited crypto mining, 50% were affected by ransomware, and 48% experienced some form of information-stealing malware. Phishing attacks continue to dominate cyber threats. Crimeware and spyware.

Backups 145

Backups Ransomware Firewall Malware 145

Hot for Security

JUNE 15, 2021

Given the portability and myriad of functionalities, mobile devices are highly susceptible to cyber threats, including malware, spyware and phishing attempts that may compromise that precious piece of tech we keep in our pocket and any information stored on it. Avoid smishing and phishing attacks.

Mobile 137

Mobile Banking Phishing Social Engineering 137

SecureList

SEPTEMBER 26, 2022

These websites are often related to crack, keygen and activators for downloading software illegally, and while they may pretend to be legitimate software, they actually contain a malware dropper. The whole infection chain of NullMixer is as follows: The user visits a website to download cracked software, keygens or activators.

Malware 144

Malware Cryptocurrency Passwords Software 144

Hot for Security

JUNE 18, 2021

A recent phishing campaign targeting Windows machines is attempting to infect users with one of the most recent versions of the Agent Tesla remote access Trojan (RAT). Active for over seven years, Agent Tesla has been used frequently in phishing campaigns seeking to steal user credentials, passwords and sensitive information.

Phishing 105

Phishing Malware Spyware Software 105

Security Boulevard

MARCH 17, 2025

Malware North Korean government hackers snuck spyware on Android app store TechCrunch APT threat actors associated with the North Korean government uploaded spyware "KoSpy" to Google Play. According to Lookout, these nation-state threat actors also tricked some users into downloading KoSpy in likely targeted attacks.

Surveillance 59

Surveillance Data breaches Spyware Malware 59