Cyber Security Informer

Google Disrupts Blockchain-based Glupteba Botnet; Sues Russian Hackers

The Hacker News

DECEMBER 8, 2021

Google on Tuesday said it took steps to disrupt the operations of a sophisticated "multi-component" botnet called Glupteba that approximately infected more than one million Windows computers across the globe and stored its command-and-control server addresses on Bitcoin's blockchain as a resilience mechanism.

Security Affairs newsletter Round 460 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

FEBRUARY 25, 2024

Iran Crisis Russia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaign U.S.

Spyware

Spyware Cyber Insurance Hacking Advertising

Mar 06- Mar 12 Ukraine – Russia the silent cyber conflict

Security Affairs

MARCH 13, 2022

March 8 – Google TAG: Russia, Belarus-linked APTs targeted Ukraine. Google TAG observed Russian, Belarusian, and Chinese threat actors targeting Ukraine and European government and military orgs. March 6 – Anonymous offers $52,000 worth of Bitcoin to Russian troops for surrendered tank. Is it fake news?

Hacking

Hacking DDOS Phishing Malware

Google disrupts the Glupteba botnet

Security Affairs

DECEMBER 7, 2021

TAG also partnered with CloudFlare and others take down servers. Google researchers believe that the operators of Glupteba botnet will likely attempt to regain control of the malicious infrastructure by using the C2 backup mechanism that leverages the Bitcoin blockchain. users were warned via Safe Browsing.

Backups

Backups Advertising Accountability Malware

Security Affairs newsletter Round 357 by Pierluigi Paganini

Security Affairs

MARCH 13, 2022

Is it fake news? CVE-2022-0492 flaw in Linux Kernel cgroups feature allows container escape Charities and NGOs providing support in Ukraine hit by malware.

Data breaches

Data breaches Firmware Hacking Ransomware

Cyber News Rundown: Cryptomining Malware Resurgent

Webroot

JANUARY 25, 2021

Skyrocketing Bitcoin prices prompt resurgence in mining malware. As the price of the cryptocurrency Bitcoin pushes record highs, there’s been a corresponding resurgence in cryptomining malware. The data was leaked in an October data breach, which Nitro confirmed, and was bundled for auction with a high price tag.

Malware

Malware Cryptocurrency Ransomware Data breaches

US arrested Latvian woman who developed part of Trickbot malware

Security Affairs

JUNE 5, 2021

She previously hosted even TrickBot "red" group tag payload on her own website -> see URLhaus [link] [link] pic.twitter.com/qG977wjgLN — Vitali Kremez (@VK_Intel) June 4, 2021. Once infected a system, the ransomware informed victims that their files were encrypted demanded the payment of a Bitcoin ransom to decrypt them.

Malware

Malware Banking Ransomware Encryption

Google won a lawsuit against the Glupteba botnet operators

Security Affairs

NOVEMBER 21, 2022

The Glupteba malware, however, instructs infected computers to look for the addresses of its C2 servers by referencing transactions associated with specific accounts on the Bitcoin blockchain. The blockchain is not controlled by any central authority, and each transaction is disseminated to and viewable by any user on the blockchain.”

Cybercrime

Cybercrime IoT Cryptocurrency Malware

Mortal Kombat ransomware forms tag team with crypto-stealing malware

Malwarebytes

FEBRUARY 17, 2023

The tag-team campaign serves up ransomware known as Mortal Kombat, which borrows the name made famous by the video game, and Laplas Clipper malware, a clipboard stealer. It’s also able to generate imitation addresses for a wide variety of cryptocurrencies including Monero, Bitcoin, Ethereum, Solana, and even Steam trading URLs.

Ransomware

Ransomware Malware Cryptocurrency Encryption

GUEST ESSAY: Why online supply chains remain at risk — and what companies can do about it

The Last Watchdog

JUNE 30, 2021

Today’s websites integrate dozens of third-party service providers, from user analytics to marketing tags, CDNs , ads, media and these third-party services load their code and content into the browser directly. Due to optimized speeds and improved computing capacity on client devices, the architecture has evolved over the last few years.

Risk

Risk Architecture Hacking Marketing

Voice Phishers Targeting Corporate VPNs

Krebs on Security

AUGUST 19, 2020

All of the security researchers interviewed for this story said the phishing gang is pseudonymously registering their domains at just a handful of domain registrars that accept bitcoin, and that the crooks typically create just one domain per registrar account. PROPER ADULT MONEY-LAUNDERING.

Phishing

Phishing VPN Social Engineering Media

Lab Walkthrough?—?The WannaCry Ransomware

Pentester Academy

FEBRUARY 23, 2023

It targets the Windows operating system by encrypting data and demanding ransom payments in the form of cryptocurrency (Bitcoin). cp -rf /root/Desktop/tools/html-templates/* /var/www/html/ls /var/www/html/ Modify the index.html file and paste the below code under the HTML <body> tag. <script>

Ransomware

Ransomware Encryption Cryptocurrency Banking

Another NFT explainer, with a bonus look at the data security implications

Webroot

MAY 12, 2021

“What Bitcoin was to 2011, NFTs are to 2021.”. A distributed group of devices does the work to vouch for the authenticity of the token the same way it does for a bitcoin. NFTs’ massive price tags and novel technological backing make them attractive target for cybercriminals.

Cryptocurrency

Cryptocurrency Marketing Phishing Authentication

Why Predator is the ultimate CISO movie

Javvad Malik

OCTOBER 29, 2020

But hold on, Dillon is tagging along. If the predator represented a new strain of ransomware developed by China / Russia / Iran / other nation-state, then they would have been forking over a few Bitcoins by the end of the movie. You make a plan, go in, save the data, get out. The kind of stuff the SAS excel at.

CISO

CISO InfoSec Banking Backups

Cyberthreats to financial organizations in 2022

SecureList

NOVEMBER 23, 2021

We might see certain economies crashing and local currencies plummeting, which would make Bitcoin theft a lot more attractive. In addition, bitcoin ended 2020 at around $28,000 and quickly rose to a peak of $40,000 in January 2021. We should expect more fraud, targeting mostly BTC , because this cryptocurrency is the most popular.

Cryptocurrency

Cryptocurrency Banking Cybercrime Ransomware

A deep dive into Saint Bot, a new downloader

Malwarebytes

APRIL 6, 2021

Contained within the zip file was a PowerShell script masquerading as a link to a Bitcoin wallet. It comes with a ZIP attachment: bitcoin.zip , luring the victim with a chance of getting access to a Bitcoin wallet. Sample result: API calls tagged with TinyTracer. The Saint Bot delivery roadmap.

Malware

Malware Phishing Passwords Architecture

BlackCat ransomware

CyberSecurity Insiders

FEBRUARY 25, 2022

Prices are indicated in Bitcoin and Monero, the latest has a discount over Bitcoin. Alien Labs is tracking IOCs associated with the geo-political conflict in Eastern Europe, through tagged pulses that track incident and related threat intelligence. Recommended actions. Maintain software with the latest security updates.

Ransomware

Ransomware Encryption Malware Backups

The Hacker Mind Podcast: Fuzzing Crypto

ForAllSecure

FEBRUARY 2, 2022

You crack a hash and it has to have a certain amount of zeros and once that's done, you will have mined a Bitcoin or Ethereum or something like that. Vamosi: So the different currencies -- Bitcoin, Ethereum -- are different softwares built on top of a concept known as a blockchain. So it takes a lot of computing power to do this.

Cryptocurrency

Cryptocurrency InfoSec Software Encryption

How to trace ransomware payments end-to-end

Elie

AUGUST 31, 2017

has developed a new methodology and a set of technologies to trace bitcoin ransom payments at scale. Once the victim is able to visit the TOR website, they end up on a page that provides them with instructions on how many bitcoin to pay, where to buy them, and which bitcoin wallet to pay into. Bitcoin buyout.

Ransomware

Ransomware Backups Encryption Scams

MY TAKE: Can Project Wildland’s egalitarian platform make Google, Facebook obsolete?

The Last Watchdog

OCTOBER 19, 2021

Yet Bitcoin, Ethereum and other cryptocurrencies are mere pieces of the puzzle. In essence, paths in Wildland are like tags, which allow you to organize, sort, search through, etc., On the technology front, blockchain systems signal the type of shifts that need to fully unfold. your data in many ways.

Internet

Internet Internet Cryptocurrency Software

Ransomware Protection in 2021

eSecurity Planet

FEBRUARY 16, 2021

.” Or you might see a readme.txt stating, “Your files have been replaced by these encrypted containers and aren’t accessible; you will lose your files on [enter date] unless you pay $2500 in Bitcoin.” Adaptive Monitoring and Tagging.

Ransomware

Ransomware Backups Software Encryption

Mirror Trading International’s Cornelius Johannes Steynberg and his $3.4 Billion USD Default Judgement

Security Boulevard

MAY 2, 2023

using our tag "CryptoScam" (as of this writing we have 3600+ sites on the list -- hosting companies and registrars, please take action!) The order states that Steynberg must pay $1,733,838,372 USD in restitution and an additional $1,733,838,372 as a civil monetary penalty for defrauding 23,000 Americans of 29,421 Bitcoin. I'm shocked!

Scams

Scams Artificial Intelligence Financial Services Marketing

Report: No ‘Eternal Blue’ Exploit Found in Baltimore City Ransomware

Krebs on Security

JUNE 3, 2019

ET today (June 3), the @Robihkjn account had been taunting the mayor of Baltimore and city council members, who have refused to pay the ransom demand of 13 bitcoin — approximately $100,000. The account also began tagging dozens of reporters and news organizations on Twitter. Until it was suspended at around 3:00 p.m.

Ransomware

Ransomware Accountability Malware Government

Mystic Stealer

Security Boulevard

JUNE 15, 2023

Whether it's Bitcoin, DashCore, Exodus, or any other popular crypto wallet, Mystic Stealer has it covered. Data stolen from the infected system is labeled with specific binary tags that identify the type of information when it is sent to the C2 server. Mystic can also steal Telegram and Steam credentials. Trojan.Mystic.KV

Cryptocurrency

Cryptocurrency Password Management Malware DNS

Ask a Security Professional: DDoS Attacks — Part One: DoS vs DDoS

SiteLock

AUGUST 27, 2021

Many botmasters offer DDoS-for-hire services where customers can inexpensively rent the botmaster’s botnet at hourly rates to besiege a target server, opening access to a devastating DDoS arsenal to anyone with a Paypal account or a little bitcoin. Message @SiteLock and use the #AskSecPro tag!

DDOS

DDOS eCommerce Internet Internet

The Hacker Mind Podcast: Reverse Engineering Smart Meters

ForAllSecure

MAY 13, 2022

There's a little security tag they put to see if someone is tampered with it but they are not locked. So I think that there is a piece that because these aren't because there are no bitcoins waiting inside of smart meters, they assume no one's going to attack them. You click that thing with some wire cutters. I think it is interesting.

Engineering

Engineering Energy and Utilities Computers and Electronics Firmware

The History of Computer Viruses & Malware

eSecurity Planet

NOVEMBER 2, 2022

The CryptoLocker Trojan , launched in 2013, was one of the first major instances of ransomware being used on a large scale, hitting about 250,000 victims and extorting around $27 million in Bitcoin. Copycat ransomware like TorrentLocker and CryptoWall starting springing up.

Malware

Malware Ransomware Antivirus Internet

Cyber Security Informer

Google Disrupts Blockchain-based Glupteba Botnet; Sues Russian Hackers

Security Affairs newsletter Round 460 by Pierluigi Paganini – INTERNATIONAL EDITION

Trending Sources

Mar 06- Mar 12 Ukraine – Russia the silent cyber conflict

Google disrupts the Glupteba botnet

Security Affairs newsletter Round 357 by Pierluigi Paganini

Cyber News Rundown: Cryptomining Malware Resurgent

US arrested Latvian woman who developed part of Trickbot malware

Google won a lawsuit against the Glupteba botnet operators

Mortal Kombat ransomware forms tag team with crypto-stealing malware

GUEST ESSAY: Why online supply chains remain at risk — and what companies can do about it

Voice Phishers Targeting Corporate VPNs

Lab Walkthrough?—?The WannaCry Ransomware

Another NFT explainer, with a bonus look at the data security implications

Why Predator is the ultimate CISO movie

Cyberthreats to financial organizations in 2022

A deep dive into Saint Bot, a new downloader

BlackCat ransomware

The Hacker Mind Podcast: Fuzzing Crypto

How to trace ransomware payments end-to-end

MY TAKE: Can Project Wildland’s egalitarian platform make Google, Facebook obsolete?

Ransomware Protection in 2021

Mirror Trading International’s Cornelius Johannes Steynberg and his $3.4 Billion USD Default Judgement

Report: No ‘Eternal Blue’ Exploit Found in Baltimore City Ransomware

Mystic Stealer

Ask a Security Professional: DDoS Attacks — Part One: DoS vs DDoS

The Hacker Mind Podcast: Reverse Engineering Smart Meters

The History of Computer Viruses & Malware

Stay Connected