Security Affairs

NOVEMBER 20, 2023

The economically motivated APT group used specially crafted archives in phishing attacks against forum users through online trading forum posts. “DarkCasino is an APT threat actor with strong technical and learning ability, who is good at integrating various popular APT attack technologies into its attack process.

Phishing 136

Phishing Financial Services Cryptocurrency Technology 136

Security Boulevard

DECEMBER 29, 2022

When Ackoff wrote his article, computing technology was at the cusp of data and information. With the advent of advanced tools like big data analytics and artificial intelligence, one might make a bold statement that today, computing technology straddles the gap between information and knowledge. Ackoff, R.

Technology 62

Technology Artificial Intelligence Internet Internet 62

Security Affairs

MAY 28, 2021

The NOBELIUM APT is the threat actor that conducted supply chain attack against SolarWinds which involved multiple families of implants, including the SUNBURST backdoor , TEARDROP malware , GoldMax malware , Sibot , and GoldFinder backdoors. ” continues the report. Follow me on Twitter: @securityaffairs and Facebook.

Phishing 93

Phishing Threat Detection Telecommunications Malware 93

Security Affairs

MARCH 6, 2022

Malware based attacks are targeting charities and non-governmental organizations (NGOs) providing support in Ukraine. Charities and non-governmental organizations (NGOs) that in these weeks are providing support in Ukraine are targeted by malware attacks aiming to disrupt their operations. ” reads the post published by Amazon.

Malware 93

Malware Phishing Hacking Government 93

Security Affairs

MARCH 14, 2024

“The phishing campaign employed open redirect URLs from Google Ad technologies to distribute fake Microsoft software installers (.MSI) “The fake installers contained a sideloaded DLL file that decrypted and infected users with a DarkGate malware payload.” MSI) installers. In mid-February, U.S.

Phishing 105

Phishing Malware Software Internet 105

Security Affairs

APRIL 9, 2024

Fortinet researchers observed a threat actor sending out a phishing email containing malicious Scalable Vector Graphics (SVG) files. The campaign is notable for its utilization of the BatCloak malware obfuscation engine and ScrubCrypt to distribute the malware through obfuscated batch scripts.

Engineering 94

Engineering Phishing Malware Hacking 94

Security Affairs

SEPTEMBER 18, 2020

Web-phishing targeting various online services almost doubled during the COVID-19 pandemic , it accounted for 46 percent of the total number of fake web pages. Downloaders , intended for the installation of additional malware,and backdoors , granting cybercriminals remote access to victims’ computers, also made it to top-3.

Phishing 103

Phishing Ransomware Spyware Banking 103

Security Affairs

SEPTEMBER 21, 2022

Russia-linked APT group Sandworm has been observed impersonating telecommunication providers to target Ukrainian entities with malware. Russia-linked cyberespionage group Sandworm has been observed impersonating telecommunication providers to target Ukrainian entities with malware. ” reads the report published by Recorded Future.

Malware 84

Malware Telecommunications DNS Hacking 84

Security Affairs

FEBRUARY 14, 2024

.” The researchers pointed out that at this time the attackers have yet to use LLMs to devise novel attacks, malicious use of LLMs observed by the researchers include: LLM-informed reconnaissance: Employing LLMs to gather actionable intelligence on technologies and potential vulnerabilities.

Social Engineering 112

Social Engineering Artificial Intelligence Phishing Engineering 112

SecureList

OCTOBER 18, 2023

In early September 2022, we discovered several new malware samples belonging to the MATA cluster. The actors behind the attack used spear-phishing mails to target several victims, some were infected with Windows executable malware by downloading files through an internet browser.

Malware 114

Malware Phishing Internet Internet 114

Security Affairs

JULY 7, 2019

Croatia government agencies have been targeted by unknown hackers with a new piece of malware tracked as SilentTrinity. A mysterious group of hackers carried out a series of cyber attacks against Croatian government agencies, infecting employees with a new piece of malware tracked as SilentTrinity. ” reads one of the alerts.

Government 82

Government Malware Computers and Electronics Advertising 82

Security Affairs

DECEMBER 17, 2023

Threat actors launched a phishing attack against a former employee obtaining his credentials and access to the Ledger’s NPMJS account. that included a crypto drainer malware. Ledger’s technology and security teams were alerted and a fix was deployed within 40 minutes of Ledger becoming aware.” and 1.1.7).”

Phishing 119

Phishing Accountability Malware Authentication 119

Security Affairs

JULY 26, 2023

According to Netenrich, this generative AI bot was trained for offensive purposes, such as creating spear phishing emails, conducting BEC attacks, cracking tools, and carding. The author claims that FraudGPT can develop undetectable malware and find vulnerabilities in targeted platforms. ” concludes the report.

Artificial Intelligence 94

Artificial Intelligence Cybercrime Phishing Advertising 94

Cisco Security

FEBRUARY 15, 2022

Cisco helped the NFL achieve a strong, continuously available and protected Super Bowl enterprise network through a mix of cloud and on-premises security technology, up-to-the-minute threat intelligence, and some of the industry’s most talented cybersecurity professionals. Integrated technology and intelligence .

Firewall 117

Firewall Technology Malware Network Security 117

The Last Watchdog

NOVEMBER 28, 2023

The study, conducted by independent research firm Propeller Insights, dives into how IT business leaders feel about their security posture in a world where the technologies they embrace to grow and thrive are also vulnerable to constant and increasing threats. Human error is among the top causes of security breaches.

Cyber Risk 113

Cyber Risk Risk B2B Social Engineering 113

Security Affairs

AUGUST 17, 2023

Russia-linked APT29 used the Zulip Chat App in attacks aimed at ministries of foreign affairs of NATO-aligned countries EclecticIQ researchers uncovered an ongoing spear-phishing campaign conducted by Russia-linked threat actors targeting Ministries of Foreign Affairs of NATO-aligned countries. ” concludes the report.

Phishing 91

Phishing Small Business Malware Government 91

Security Boulevard

APRIL 10, 2022

Plus, details on a new attack using fake shopping apps and how a new malware toolkit called “Borat RAT” is […]. The post Truths and Myths of Privacy, Fake Shopping Apps, Borat RAT Malware appeared first on The Shared Security Show.

Malware 98

Malware Social Engineering Scams Engineering 98

The Last Watchdog

JANUARY 8, 2023

And when malware, ransomware, or other cyber threats get in the way, the focus shifts from forward progress to focused co-operation. A security strategy should clear obstacles and enable every part of a business operation to run smoothly. Business initiatives demand faster, more efficient outcomes and technology responds.

Risk 214

Risk Cybersecurity Technology CISO 214

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 88

Spyware Hacking Malware Social Engineering 88

Security Affairs

JULY 16, 2023

WormGPT is advertised on underground forums as a perfect tool to carry out sophisticated phishing campaigns and business email compromise (BEC) attacks. Bard imposes almost no restrictions on the creation of phishing emails, leaving room for potential misuse and exploitation of this technology. ” concludes the report.

Artificial Intelligence 93

Artificial Intelligence Cybercrime Phishing Technology 93

Security Affairs

APRIL 20, 2023

The researchers from Google TAG are warning of Russia-linked threat actors targeting Ukraine with phishing campaigns. Russia-linked threat actors launched large-volume phishing campaigns against hundreds of users in Ukraine to gather intelligence and aimed at spreading disinformation, states Google’s Threat Analysis Group (TAG).

Phishing 88

Phishing Education Accountability Telecommunications 88

Security Affairs

MARCH 22, 2023

During the period covered by the report, the expert identified the following prime threats: ransomware attacks (38%), data related threats (30%), malware (17%), denial-of-service (DoS), distributed denial-of-service (DDoS) and ransom denial-of-service (RDoS) attacks (16%), phishing / spear phishing (10%), supply-chain attacks (10%).

Ransomware 85

Ransomware DDOS Cyber threats Phishing 85

Security Affairs

DECEMBER 11, 2020

Facebook has suspended some accounts linked to APT32 that were involved in cyber espionage campaigns to spread malware. Facebook has suspended several accounts linked to the APT32 cyberespionage that abused the platform to spread malware. APT32 also carried out watering hole attacks through compromised websites or their own sites.

Retail 127

Retail Malware Mobile Accountability 127

Security Affairs

MAY 19, 2022

A previously unknown Chinese cyberespionage group, tracked as ‘Space Pirates’, targets enterprises in the Russian aerospace industry with spear-phishing attacks. The attacks were first discovered by researchers at Positive Technologies in 2019, the phishing messages contained a link to previously undetected malware.

Malware 128

Malware Phishing Government Hacking 128

Security Affairs

DECEMBER 20, 2022

Ukraine’s CERT-UA revealed the national Delta military intelligence program has been targeted with a malware-based attack. The spear phishing messages were sent from a compromised e-mail address belonging to an employee of the Ministry of Defense, as well as messengers. . ” states the Ukrainian military.

Malware 97

Malware Internet Internet Technology 97

SecureWorld News

JULY 3, 2023

As we rely increasingly on digital technologies for our work, communication, entertainment, and education, we also expose ourselves to more and more cyber risks. Cyberattacks can devastate individuals, businesses, and even nations, affecting our privacy, security, and economy. Phishing emails are more common than you know.

Cybercrime 86

Cybercrime Social Engineering Data breaches Education 86

Security Affairs

OCTOBER 25, 2021

The NOBELIUM APT ( APT29 , Cozy Bear , and The Dukes) is the threat actor that conducted supply chain attack against SolarWinds, which involved multiple families of implants, including the SUNBURST backdoor , TEARDROP malware , GoldMax malware , Sibot , and GoldFinder backdoors. ” states Microsoft.

Telecommunications 109

Telecommunications Technology Hacking Malware 109

Security Affairs

OCTOBER 18, 2020

Since August, FIN11 started targeting organizations in many industries, including defense, energy, finance, healthcare, legal, pharmaceutical, telecommunications, technology, and transportation. Researchers from FireEye’s Mandiant observed FIN11 hackers using spear-phishing messages distributing a malware downloader dubbed FRIENDSPEAK.

Ransomware 131

Ransomware Malware Telecommunications Advertising 131

Identity IQ

SEPTEMBER 21, 2023

But like we’ve seen with other groundbreaking technology that, on the surface, appears to make our lives better, there can be a dark side. Granting access can lead to the installation of malware on the TV, which can compromise sensitive personal information. Remote access. Gift card payments.

Scams 105

Scams Identity Theft Phishing Software 105

Security Affairs

OCTOBER 17, 2023

With 85% of campaigns targeting victims with phishing emails containing malicious links, another form of a social engineering attack, education and cyber vigiliance remain a high priority. Why should employers educate employees about cyber security? This method was identified as vishing – a voice-based phishing attack.

Social Engineering 113

Social Engineering Ransomware Engineering Phishing 113

SC Magazine

MARCH 15, 2021

The school districts of Rockford, Illinois and Rockingham County, North Carolina learned some very valuable lessons in transparency and communication, timely incident response, access management, data redundancy and disaster recovery after each experienced a debilitating malware attack years ago. Rockingham County, North Carolina.

Malware 78

Malware Backups Education Ransomware 78

Security Affairs

APRIL 26, 2024

Emerging threats Cybercrime often exploits precisely the lack of regulation and centralized controls of cryptocurrencies to deceive investors and embezzle funds through various forms of phishing, investment scams, digital wallet theft, ransomware, and illegal mining. Education improves awareness” is his slogan.

Cryptocurrency 88

Cryptocurrency Cybercrime Education Scams 88

Security Affairs

DECEMBER 4, 2021

. “The FBI has identified, as of early November 2021 that Cuba ransomware actors have compromised at least 49 entities in five critical infrastructure sectors, including but not limited to the financial, government, healthcare, manufacturing, and information technology sectors.” ” states the alert.

Ransomware 138

Ransomware Hacking Malware Encryption 138

Cisco Security

AUGUST 12, 2021

For several years, Cisco Secure provided DNS visibility and architecture intelligence with Cisco Umbrella and Cisco Umbrella Investigate ; and automated malware analysis and threat intelligence with Cisco Secure Malware Analytics (Threat Grid) , backed by Cisco Talos Intelligence and Cisco SecureX. Cisco Technologies.

DNS 137

DNS Firewall Phishing Mobile 137

SecureList

JANUARY 18, 2023

The threat landscape is constantly updated through new malware and spyware, advanced phishing methods, and new social engineering techniques. In addition, the likelihood of the data being used for phishing and social engineering increases. . Malware-as-a-service: a greater number of cookie-cutter attacks, more complex tools.

Media 117

Media Social Engineering Ransomware Hacking 117

Security Affairs

FEBRUARY 28, 2024

“These operations have targeted various industries, including Aerospace & Defense, Education, Energy & Utilities, Governments, Hospitality, Manufacturing, Oil & Gas, Retail, Technology, and Transportation. . ” reads the joint report. The US government operation blocked access to the routers by Russian cyberspies.

Energy and Utilities 98

Energy and Utilities Government Firewall Malware 98

Security Affairs

DECEMBER 6, 2021

The NOBELIUM APT ( APT29 , Cozy Bear , and The Dukes) is the threat actor that conducted supply chain attack against SolarWinds, which involved multiple families of implants, including the SUNBURST backdoor , TEARDROP malware , GoldMax malware , Sibot , and GoldFinder backdoors.

Phishing 94

Phishing Telecommunications Government Accountability 94