Schneier on Security

MAY 5, 2020

Unlike most of the shady apps found in Play Store malware, Kaspersky's researchers say, PhantomLance's hackers apparently smuggled in data-stealing apps with the aim of infecting only some hundreds of users; the spy campaign likely sent links to the malicious apps to those targets via phishing emails. "In

Malware 295

Malware Spyware Phishing Government 295

SecureList

FEBRUARY 16, 2023

Short-lived phishing sites often offered to see the premieres before the eagerly awaited movie or television show was scheduled to hit the screen. At the beginning of that year, we still observed phishing attacks that used the themes of infection and prevention as the bait.

Phishing 91

Phishing Scams Accountability Energy and Utilities 91

Security Affairs

SEPTEMBER 18, 2020

Web-phishing targeting various online services almost doubled during the COVID-19 pandemic , it accounted for 46 percent of the total number of fake web pages. Downloaders , intended for the installation of additional malware,and backdoors , granting cybercriminals remote access to victims’ computers, also made it to top-3.

Phishing 102

Phishing Ransomware Spyware Banking 102

The Hacker News

JULY 31, 2023

Organizations in Italy are the target of a new phishing campaign that leverages a new strain of malware called WikiLoader with an ultimate aim to install a banking trojan, stealer, and spyware called Ursnif (aka Gozi). "It

Banking 76

Banking Spyware Phishing Malware 76

Security Affairs

JULY 21, 2021

FormBook is a data-stealing malware that is used in cyber espionage campaigns, like other spyware it is capable of extracting data from HTTP sessions, keystroke logging, stealing clipboard contents. The post XLoader, a $49 spyware that could target both Windows and macOS devices appeared first on Security Affairs. Pierluigi Paganini.

Spyware 99

Spyware Malware Cybercrime Advertising 99

SecureList

FEBRUARY 15, 2021

The Kaspersky Anti-Phishing component blocked 434,898,635 attempts at accessing scam sites. The most frequent targets of phishing attacks were online stores (18.12 The contact phone trick was heavily used both in email messages and on phishing pages. Agentb malware family. Trends of the year. Malicious links.

Phishing 136

Phishing Malware Scams Accountability 136

SecureList

AUGUST 5, 2021

A fake notification about a Microsoft Teams meeting or a request to view an important document traditionally takes the victim to a phishing login page asking for corporate account credentials. pdf.exe) that the victim was asked to download was a malicious program known as Backdoor.Win32.RWS.a. In fact, the file named “??????? ?8883987726

Phishing 116

Phishing Banking Scams Computers and Electronics 116

Security Affairs

JUNE 15, 2020

The Earth Empusa threat group is distributing new Android spyware, dubbed ActionSpy, through watering hole attacks to targets Turkic minority group. Attackers injected the malicious code to deploy the spyware in websites, some of them were actually fake. The server, in turn, may send some commands to the compromised device.

Spyware 66

Spyware Advertising Encryption Phishing 66

SecureList

MAY 3, 2021

Banking phishing: new version of an old scheme. Clients of several Dutch banks faced a phishing attack using QR codes. The links in their messages took the victim to a well-designed phishing pages with official emblems, business language and references to relevant laws. Quarterly highlights. Vaccine with cyberthreat.

Phishing 102

Phishing Banking Accountability Computers and Electronics 102

Malwarebytes

AUGUST 18, 2022

Phishing attacks are a persistent threat to businesses globally. According to Verizon , 82 percent of data breaches in 2021 involved the human element—with phishing attacks making up over 60 precent of these. With Malwarebytes DNS filtering , however, you can prevent a large swath of phishing attacks.

DNS 63

DNS Phishing Small Business Spyware 63

SecureList

NOVEMBER 1, 2021

million redirects to phishing pages. As such, this quarter saw a new threat in the shape of fraudulent welfare payment apps that could be downloaded on such platform. Share of spam in global mail traffic, April – September 2021 ( download ). Source of spam by country, Q3 2021 ( download ). against Q2 and 0.2 against Q1.

Phishing 87

Phishing Scams Accountability Computers and Electronics 87

Security Affairs

MAY 18, 2020

Security experts discovered a highly sophisticated Android spyware platform, dubbed Mandrake, that remained undetected for four years. Researchers from Bitdefender discovered a high-sophisticated Android spyware platform dubbed Mandrake, it was involved in highly targeted attacks against specific devices. Pierluigi Paganini.

Spyware 88

Spyware Malware Advertising Banking 88

SecureList

FEBRUARY 9, 2022

Our Anti-Phishing system blocked 253 365 212 phishing links. Safe Messaging blocked 341 954 attempts to follow phishing links in messengers. Hurry up and lose your account: phishing in the corporate sector. Another noticeable phishing trend targeting the corporate sector was to exploit popular cloud services as bait.

Phishing 65

Phishing Scams Accountability Banking 65

Security Affairs

JULY 18, 2019

The researchers attribute the spyware to the Russia-linked and Gamaredon Group. EvilGnome allows attackers to take screenshots, steal files, capture audio recordings from the microphone, and download and execute other payloads. Intezer spotted a new piece of Linux malware dubbed EvilGnome because it disguises as a Gnome extension.

Spyware 83

Spyware Malware Advertising Cyber Attacks 83

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 85

Spyware Hacking Malware Social Engineering 85

SecureList

DECEMBER 16, 2021

One specific case of the PseudoManuscrypt downloader’s distribution is its installation via the Glupteba botnet (whose main installer is also distributed via the pirated software installer distribution platform).

Spyware 92

Spyware Energy and Utilities Malware VPN 92

CyberSecurity Insiders

JANUARY 5, 2022

Highly placed sources say that the malware has been distributed via phishing campaign by a cyber threat group named MalSmoke. Downloading files from trustworthy websites and never opening emails send by anonymous senders will help in avoiding Zloader malware installation.

Malware 131

Malware Spyware Antivirus Cyber threats 131

Security Affairs

AUGUST 21, 2022

In the past, the Donot Team spyware was found in attacks outside of South Asia. The investigation also discovered links between the spyware and infrastructure used in these attacks, and Innefu Labs, a cybersecurity company based in India. ” continues the report.

Malware 93

Malware Spyware Phishing Government 93

SecureList

JANUARY 19, 2022

Kaspersky ICS CERT has uncovered a number of spyware campaigns targeting industrial enterprises. The attackers use off-the-shelf spyware, but limit the scope and lifetime of each sample to the bare minimum. The attackers use off-the-shelf spyware, but limit the scope and lifetime of each sample to the bare minimum.

Spyware 76

Spyware Accountability VPN Malware 76

Security Affairs

APRIL 16, 2019

Scranos is a powerful cross-platform rootkit-enabled spyware discovered while investigating malware posing as legitimate software like video players, drivers and even anti-virus products. The rootkit injects a downloader into a svchost.exe process. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Spyware 69

Spyware Adware Malware Accountability 69

SecureList

MARCH 3, 2022

. >Percentage of ICS computers on which malicious objects were blocked ( download ). Percentage of ICS computers on which malicious objects were blocked, January – December 2018 – 2021 ( download ). Percentage of ICS computers on which malicious objects were blocked in selected industries ( download ). Malicious objects.

Spyware 84

Spyware Ransomware Cryptocurrency Phishing 84

Malwarebytes

OCTOBER 3, 2022

APT28 attack uses old PowerPoint trick to download malware. Spyware disguises itself as Zoom downloads. Windows 11 pulls ahead of Windows 10 in anti-phishing stakes. Optus data breach "attacker" says sorry, it was a mistake. Fast Company hacked to send obscene and racist messages. FCC moves to block robotexts.

Spyware 57

Spyware Data breaches Passwords Phishing 57

eSecurity Planet

FEBRUARY 16, 2021

Adware, also known as malvertising , is a type of malware that downloads or displays advertisements to the user interface. Users sometimes unknowingly infect themselves with adware installed by default when they download and install other applications. Additional features of botnets include spam, ad and click fraud, and spyware.

Malware 105

Malware Adware Spyware Antivirus 105

SecureList

MAY 27, 2022

When opened, this document eventually downloads a backdoor. The group uses various malware families, including Wroba, and attack methods that include phishing, mining, smishing and DNS poisoning. Territories affected by Roaming Mantis activity ( download ). Cyberattacks related to the crisis in Ukraine. Other malware.

Phishing 103

Phishing Spyware Firmware Malware 103

SC Magazine

APRIL 6, 2021

Among phishing schemes to emerge recently is one targeting university students with promises of tax refunds. companies that offer online shopping, eSentire said this time it caught attackers spear phishing a professional working in the health care technology industry. “It Scammers target.edu addresses with IRS-themed phish.

Phishing 77

Phishing Social Engineering Identity Theft Media 77

Security Affairs

MAY 8, 2020

Group-IB, a Singapore-based cybersecurity company, observed the growth of the lifespan of phishing attacks in the second half of 2019. Figure 1 The distribution of web-phishing among target categories . CERT-GIB’s findings indicate that phishing attack perpetrators have revised their so-called target pool. Target reshuffle.

Phishing 56

Phishing Spyware Banking Malware 56

Security Boulevard

DECEMBER 30, 2021

As a spyware, it gathers classified information from infected systems without the consent of the user and sends gathered information to remote threat actors. Phishing: Spearphishing Attachment. Phishing: Spearphishing Link. Krachulka Banking Malware.DLL File Download Variant-1. Let's start with Krachulka. framework.

Banking 109

Banking Malware Spyware Phishing 109

Security Affairs

MARCH 21, 2022

Ukraine CERT (CERT-UA) warns of spear-phishing ??attacks The Government Team for Response to Computer Emergencies of Ukraine (CERT-UA) warns of spear-phishing messages conducted by UAC-0035 group (aka InvisiMole) against Ukrainian state bodies. attacks conducted by UAC-0035 group (aka InvisiMole) on state organizations of Ukraine.

Spyware 83

Spyware DNS Phishing Government 83

Identity IQ

FEBRUARY 21, 2023

However, when you download or click on the attachment, your device becomes infected. The trojan horse can be hidden in software or attachments that, if downloaded, install different spyware and viruses on your device. This spyware and viruses can cause many problems on your device and compromise personal details.

Identity Theft 93

Identity Theft Phishing Malware Data breaches 93

Security Affairs

FEBRUARY 3, 2023

Russia-linked threat actor Gamaredon employed new spyware in cyber attacks aimed at public authorities and critical information infrastructure in Ukraine. The former is a VBScript used to download next-stage VBScript from a remote server. Currently, the Gamaredon group is using the GammaLoad and GammaSteel SPZs in their campaigns.

Malware 87

Malware Spyware DNS Government 87

The Last Watchdog

FEBRUARY 28, 2021

Cybercriminals often leverage social engineering tactics like phishing and spear-phishing to propagate sophisticated malware. It is not unusual to have your system or network infected with malware, such as spyware, that often lingers secretly with no apparent symptoms. Don’t worry though. Common types. Ransomware.

Cyber threats 113

Cyber threats Computers and Electronics Adware Spyware 113

Security Affairs

MARCH 8, 2020

Experts uncovered a new Coronavirus (COVID-19 ) -themed campaign that is distributing a malware downloader that delivers the FormBook information-stealing Trojan. ’ The executable employed in this campaign is a strain of the GuLoader malware downloader. The malware can also execute commands from a command and control (C2) server.

Malware 119

Malware Scams Social Engineering Phishing 119

SecureList

MARCH 15, 2021

From targeted attacks to exploiting all things COVID-related, the biggest trends in spam and phishing. Phishing is still one of the most effective types of attacks because it exploits users’ emotions, particularly their fear and anxiety. A fake landing page for a mask advertised in a phishing email.

Phishing 131

Phishing Advertising Spyware Internet 131

IT Security Guru

APRIL 26, 2021

Whether it’s through downloading a rogue attachment or playing a game from an unprotected website, computer viruses are common. Phishing and stolen identities – Phishing, the go-to method of attack for cybercriminals, is also a frequent tactic within the gaming community.

Cybersecurity 113

Cybersecurity Spyware VPN Antivirus 113

Webroot

OCTOBER 25, 2021

Even strong security can’t prevent an account from being hacked if account credentials are stolen in a phishing attack, one of the most common causes of identity theft. In 2020, phishing scams spiked by 510 percent between January and February alone. Fake apps are still cause for concern. Web-borne malware remains widespread.

Identity Theft 121

Identity Theft Spyware Phishing Antivirus 121

SecureList

OCTOBER 5, 2022

Our answer is nearly always the same: (spear) phishing. The downloaded files were NSIS installers, containing malicious code in the installation script. The malicious script: the parts in red indicate the malware download code. It proxies all the functionality to the original DLL and also downloads an additional DLL from the C2.

Malware 119

Malware Architecture Spyware Ransomware 119

Hot for Security

JUNE 18, 2021

A recent phishing campaign targeting Windows machines is attempting to infect users with one of the most recent versions of the Agent Tesla remote access Trojan (RAT). Active for over seven years, Agent Tesla has been used frequently in phishing campaigns seeking to steal user credentials, passwords and sensitive information.

Phishing 105

Phishing Malware Spyware Software 105