eSecurity Planet

FEBRUARY 22, 2022

Most attacks make would-be victims click to install malware or redirect them to a phishing page to steal their credentials. NSO Group’s Pegasus software has been routinely in the headlines in recent years for using zero-click attacks to install its spyware. Spyware and Zero-Days: A Troubling Market.

Spyware 114

Spyware Software Government Social Engineering 114

Security Affairs

APRIL 4, 2023

Proofpoint researchers recently reported that a Russian hacking group, tracked as Winter Vivern (aka TA473), has been actively exploiting vulnerabilities ( CVE-2022-27926 ) in unpatched Zimbra instances to gain access to the emails of NATO officials, governments, military personnel, and diplomats.

Phishing 91

Phishing Spyware Government Passwords 91

eSecurity Planet

JUNE 16, 2022

Cisco Umbrella , analyzing the threat environment for 2022, found that 86% of organizations experienced phishing, 69% experienced unsolicited crypto mining, 50% were affected by ransomware, and 48% experienced some form of information-stealing malware. Mobile attacks. Also read: Mobile Malware: Threats and Solutions. Ransomware.

Backups 141

Backups Ransomware Firewall Malware 141

Webroot

OCTOBER 25, 2021

Even strong security can’t prevent an account from being hacked if account credentials are stolen in a phishing attack, one of the most common causes of identity theft. In 2020, phishing scams spiked by 510 percent between January and February alone. Web-borne malware remains widespread.

Identity Theft 120

Identity Theft Spyware Phishing Antivirus 120

Security Affairs

JUNE 26, 2022

SecurityAffairs – hacking, newsletter). SecurityAffairs awarded as Best European Personal Cybersecurity Blog 2022 Crooks are using RIG Exploit Kit to push Dridex instead of Raccoon stealer Flagstar Bank discloses a data breach that impacted 1.5 Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Small Business 79

Small Business Spyware Data breaches Surveillance 79

Security Affairs

APRIL 24, 2022

T-Mobile confirms Lapsus$ had access its systems Are you using Java 15/16/17 or 18 in production? SecurityAffairs – hacking, newsletter). Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here.

Cyber Insurance 75

Cyber Insurance Spyware Firmware Insurance 75

Security Affairs

DECEMBER 20, 2020

Hacked Subway UK marketing system used in TrickBot phishing campaign Pay2Key hackers stole data from Intels Habana Labs PgMiner botnet exploits disputed CVE to hack unsecured PostgreSQL DBs Security Affairs Newsletter is back! SecurityAffairs – hacking, newsletter). Details for 1.9M Details for 1.9M Details for 1.9M

Spyware 88

Spyware Hacking Marketing Ransomware 88

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 94

Data breaches Malware Mobile Spyware 94

Adam Levin

FEBRUARY 25, 2020

The anti-virus company’s annual mobile malware report said stalkerware reports increased from 40,286 in 2019 to 67,500 in 2019, figures derived from data gleaned from Kaspersky product users that consented to provide statistical data for research purposes. This is thought to be the way Amazon founder and CEO Jeff Bezos was hacked in 2019.

Mobile 236

Mobile Malware Phishing Authentication 236

Security Affairs

NOVEMBER 10, 2020

Now the experts from Kaspersky’s Global Research and Analysis Team (GReAT) gathered further evidence that demonstrates that malware operators behind Tetrade, tracked as Guildma, have expanded their tactics to infect mobile devices with spyware. SecurityAffairs – hacking, Ghimob). SecurityAffairs – hacking, Ghimob).

Banking 101

Banking Mobile Malware Spyware 101

Security Affairs

APRIL 9, 2019

In the last weeks, a new Android surveillance malware dubbed Exodus made the headlines, now expert found the iOS version of the government spyware. So far, this software (along with the Android version) has been made available through phishing sites that imitated Italian and Turkmenistani mobile carriers.”

Surveillance 70

Surveillance Spyware Phishing Malware 70

SecureList

NOVEMBER 22, 2022

Despite these uncovered campaigns, attackers were still more likely to hunt for cryptocurrency using phishing, offering dubious cryptocurrency exchange platforms, and launching cryptojacking to illicitly mint cryptocurrency. More cryptocurrency-related threats: fake hardware wallets, smart contract attacks, DeFi hacks, and more.

Cryptocurrency 87

Cryptocurrency Mobile Ransomware Banking 87

Responsible Cyber

APRIL 8, 2020

Phishing and Spear Phishing. Despite constant warnings from the cyber security industry, people still fall victim to phishing every day. As cybercrime has become well-funded and increasingly sophisticated, phishing remains one of the most effective methods used by criminals to introduce malware into businesses.

Cybersecurity 98

Cybersecurity DDOS Small Business Phishing 98

Security Boulevard

SEPTEMBER 30, 2021

A look at the nature and effects of legal, advanced spyware on application security. Pegasus is an advanced spyware that exploits vulnerable mobile apps to gain a foothold on iPhone and Android devices. The spyware allows governments to crack citizen’s mobile devices, track them, and observe their communications.

Spyware 52

Spyware Government Surveillance Mobile 52

Malwarebytes

SEPTEMBER 27, 2021

Stay safe, everyone! The post A week in security (Sept 20 – Sept 26) appeared first on Malwarebytes Labs.

Phishing 58

Phishing Surveillance Malware Backups 58

The Last Watchdog

JANUARY 28, 2019

Why we’re in the ‘Golden Age’ of cyber espionageThe fact is cyber criminals are expert at refining and carrying out phishing, malvertising and other tried-and-true ruses that gain them access to a targeted victim’s Internet-connected computing device. Apps from other sources can carry malware or spyware.

Passwords 196

Passwords Password Management Antivirus Internet 196

Security Affairs

SEPTEMBER 2, 2018

Stopping a big botnet targeting USA, Canada and Italy. · What Happens to Whistleblowers After They Blow the Whistle?

Spyware 41

Spyware Banking Data breaches Mobile 41

SecureWorld News

APRIL 11, 2023

When hackers trick people into using their fake Wi-Fi networks and power stations, they can compromise devices, install malware/spyware and steal data. Any connection to a device (power, Wi-Fi, texts) can be used by threat actors to add malware, exfiltrate data, or be used as a phishing attack.

Computers and Electronics 89

Computers and Electronics Malware IoT Spyware 89

SecureWorld News

AUGUST 8, 2022

Cybercriminals often use malware to gain access to a computer or mobile device to deploy viruses, worms, Trojans, ransomware, spyware, and rootkits. FormBook FormBook is an information stealer advertised in hacking forums. AZORult's developers are constantly updating its capabilities.

Malware 87

Malware Banking Healthcare Penetration Testing 87

Identity IQ

JULY 17, 2023

Here are a few common ways that online scammers can gain access to your usernames and passwords: Phishing : Cybercriminals trick you into revealing your usernames, passwords, or other sensitive information by posing as trustworthy entities. Stay vigilant against phishing attempts, as they frequently impersonate genuine emails or websites.

Identity Theft 52

Identity Theft Password Management Passwords Authentication 52

Identity IQ

JULY 17, 2023

Here are a few common ways that online scammers can gain access to your usernames and passwords: Phishing : Cybercriminals trick you into revealing your usernames, passwords, or other sensitive information by posing as trustworthy entities. Stay vigilant against phishing attempts, as they frequently impersonate genuine emails or websites.

Identity Theft 52

Identity Theft Password Management Passwords Authentication 52

Security Affairs

APRIL 21, 2019

Attackers hacked support agent to access Microsoft Outlook email accounts. Scranos – A Cross Platform, Rootkit-Enabled Spyware rapidly spreading. RCE flaw in Electronic Arts Origin client exposes gamers to hack. Broadcom WiFi Driver bugs expose devices to hack. A new round of the weekly SecurityAffairs newsletter arrived!

Computers and Electronics 62

Computers and Electronics Spyware Data breaches Advertising 62

Security Affairs

AUGUST 25, 2019

5 Common Phishing Attacks and How to Avoid Them? 5 Ways to Protect Yourself from IP Address Hacking. App tainted with Ahmyst Open-source spyware appeared on Google Play Store twice. Lenovo Solution Centre flaw allows hacking Windows laptop in 10 minutes. Galaxy S10 is the first 5G phone that can be used by US DoD.

Small Business 50

Small Business Spyware Data breaches Advertising 50

SecureList

MAY 27, 2022

Non-mobile statistics. Mobile statistics. The group uses various malware families, including Wroba, and attack methods that include phishing, mining, smishing and DNS poisoning. One of the things you can do to protect yourself from advanced mobile spyware is to reboot your device on a daily basis. Targeted attacks.

Phishing 103

Phishing Spyware Firmware Malware 103

Security Affairs

MAY 8, 2020

Group-IB, a Singapore-based cybersecurity company, observed the growth of the lifespan of phishing attacks in the second half of 2019. Figure 1 The distribution of web-phishing among target categories . CERT-GIB’s findings indicate that phishing attack perpetrators have revised their so-called target pool. Target reshuffle.

Phishing 56

Phishing Spyware Banking Malware 56

SecureList

MAY 3, 2021

Banking phishing: new version of an old scheme. Clients of several Dutch banks faced a phishing attack using QR codes. The fraudsters invited the victim to scan a QR code in an email, ostensibly to unblock mobile banking. The link redirected them to a phishing page requesting their Microsoft account credentials.

Phishing 102

Phishing Banking Accountability Computers and Electronics 102

Security Affairs

JULY 4, 2023

. “The campaign employs a multi-stage attack strategy, starting with targeted SMS phishing messages distributed across Spain and other countries, using Sender IDs (SIDs) to create an illusion of authenticity and mimicking reputable financial institutions to deceive victims.” ” Thill explained.

Banking 80

Banking Phishing Social Engineering Authentication 80

Security Affairs

MARCH 12, 2019

Malware authors created well-designed fake web pages, replicating all the graphics of the game misleading the user to download the app, as shown in the following image: Figure 1:fake/phishing Apex Legends web page. The third sample is an attempt to hijack the user towards a phishing site. An example is “hxxps://apexhack[.]site/”,

Spyware 81

Spyware Mobile Malware Phishing 81

Security Affairs

AUGUST 16, 2020

gun exchange site on hacking forum Threat Report Portugal: Q2 2020 Emotet malware employed in fresh COVID19-themed spam campaign PoC exploit code for two Apache Struts 2 flaws available online XCSSET Mac spyware spreads via Xcode Projects. SecurityAffairs – hacking, newsletter). Pierluigi Paganini.

Spyware 58

Spyware Hacking Advertising Passwords 58

eSecurity Planet

MARCH 14, 2023

Devices now consist of both corporate devices and uncontrolled BYOD devices consisting of computers, laptops, tablets, and mobile phones. on mobile devices, home and international offices, and much more. For example, hackers can use packet sniffers or a phishing link using a man-in-the-middle attack. or network traffic.

Network Security 84

Network Security Firewall Penetration Testing Encryption 84

Security Boulevard

JANUARY 25, 2022

Dancho Danchev’s “A Qualitative and Technical Collection OSINT-Enriched Analysis of the Iranian Hacking Scene Through the Prism of the Infamous Ashiyane Digital Security Team” Report – [PDF]. Exposing a Currently Active NSO Spyware Group’s Domain Portfolio – WhoisXML API Analysis. Exposing HackPhreak Hacking Group – An OSINT Analysis.

Cybercrime 96

Cybercrime Hacking Scams Ransomware 96

eSecurity Planet

JUNE 7, 2022

Protect your company computers, laptops and mobile devices with security products all managed via a cloud-based management console. It also includes advanced features such as SAML-based single sign-on (SSO) and the company's security architecture has never been hacked. Learn more about NINJIO Cybersecurity Awareness Training.

Cybersecurity 113

Cybersecurity Identity Theft Encryption Antivirus 113

SecureList

MARCH 7, 2024

To get access to the content (or contest), phishing sites prompted the victim to sign in to one of their gaming accounts. If the victim entered their credentials on the phishing form, the account was hijacked. Cryptocurrency scams Phishing aimed at stealing crypto wallet credentials remained a common money-making tool.

Phishing 95

Phishing Scams Cryptocurrency Accountability 95

SecureList

NOVEMBER 18, 2022

Non-mobile statistics. Mobile statistics. We believe DeathStalker to be a group of mercenaries, offering hack-for-hire services, or acting as an information broker to support competitive and financial intelligence efforts. The attackers gained access to the enterprise network using carefully crafted phishing emails.

Malware 100

Malware Computers and Electronics Adware Cryptocurrency 100

SecureWorld News

FEBRUARY 7, 2023

Google Docs comments functionality mishandled for phishing In early 2022, analysts at email security firm Avanan spread the word about a new unorthodox technique for delivering toxic links to numerous users. Criminals have come up with a ridiculously simple yet effective way to pump out phishing messages that fly under the radar.

Cybercrime 86

Cybercrime Phishing Accountability Government 86

SecureList

NOVEMBER 14, 2023

Mail servers become priority targets In June, Recorded Future warned that BlueDelta (aka Sofacy, APT28, Fancy Bear and Sednit) exploited vulnerabilities in Roundcube Webmail to hack multiple organizations including government institutions and military entities involved in aviation infrastructure. Drone hacking!

Hacking 102

Hacking Energy and Utilities Media Malware 102

Security Affairs

NOVEMBER 5, 2023

Kinsing threat actors probed the Looney Tunables flaws in recent attacks ZDI discloses four zero-day flaws in Microsoft Exchange Okta customer support system breach impacted 134 customers Multiple WhatsApp mods spotted containing the CanesSpy Spyware Russian FSB arrested Russian hackers who supported Ukrainian cyber operations MuddyWater has been spotted (..)

Cyber Insurance 102

Cyber Insurance Cryptocurrency Internet Internet 102