article thumbnail

Ransomware en masse on the wane: top threats inside web-phishing in H1 2020

Security Affairs

Every third email, meanwhile, contained spyware , which is used by threat actors to steal payment data or other sensitive info to then put it on sale in the darknet or blackmail its owner. Another 17 percent contained downloaders, while backdoors and banking Trojans came third with a 16- and 15-percent shares, respectively.

Phishing 103
article thumbnail

Evilnum Group targets European and British fintech companies

Security Affairs

The JS script would also act as a dropper for additional payloads, including a C# spyware, Golden Chickens components, and Python-based applications. Older versions of these components were previously used by the FIN6 APT group in attacks on eCommerce merchants. ” concludes ESET.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Payment data of thousands of customers of UK and US online stores could have been compromised

Security Affairs

According to IRP, UK market research firm, a minimum conversion into purchase for fashion and clothing ecommerce is equal to 1%. The list included six ecommerce stores with a total of around 350,000 monthly unique visitors (according to Alexa.com rankings): [link] [.]com According to Alexa.com, the number of fila.co [.]uk

article thumbnail

Phishing trap: security awareness through a different lens

BH Consulting

To pick some recent common examples, a phishing message might appear to be from your local health authority to inform you of a close contact with a Covid case, or from your bank to warn that your account is frozen, or an ecommerce provider saying there’s a problem with your payment details. . spyware, ransomware).”. A message to you.

article thumbnail

Amnesty International employee targeted with NSO group surveillance malware

Security Affairs

. “In June 2018, an Amnesty International staff member received a malicious WhatsApp message with Saudi Arabia-related bait content and carrying links Amnesty International believes are used to distribute and deploy sophisticated mobile spyware. com , and ecommerce-ads[.]org.” com , pine-sales[.]com Country Nexus.

article thumbnail

NullMixer: oodles of Trojans in a single dropper

SecureList

NullMixer is a dropper that includes more than just specific malware families; it drops a wide variety of malicious binaries to infect the machine with, such as backdoors, bankers, downloaders, spyware and many others. NullMixer execution chain. The real infection occurs when the user extracts the ‘win-setup-i864.exe’

Malware 108