Naked Security

FEBRUARY 21, 2023

Another day, another "sophisticated" attack. This time, the company has handily included some useful advice along with its mea culpa.

Social Engineering 113

Social Engineering Engineering Cryptocurrency 113

SecureWorld News

SEPTEMBER 9, 2021

Then there was the money laundering, the cryptocurrency, the digital wallets. Business email compromise scheme and social engineering. Social engineering—in person—was the next part of the scheme. Those are some of the highlights, now let's look at a few specifics. Too many do.

Social Engineering 71

Social Engineering Engineering Banking Cybercrime 71

Security Boulevard

APRIL 14, 2023

Cryptocurrency-related phishing attacks are on the rise, with a report from Kaspersky recording an increase of 40% in 2022 compared to the previous year. The post Cryptocurrency Phishing Threats Luring New Victims appeared first on Security Boulevard.

Cryptocurrency 98

Cryptocurrency Phishing Threat Reports Social Engineering 98

Security Boulevard

DECEMBER 9, 2021

A crypto support bot scam discovered in May has now increased and widened its breadth of targeted cryptocurrency users. If the user falls for it, the scammer then works on the user, using social engineering to obtain the recovery phrase for the user’s cryptocurrency account.

Cryptocurrency 78

Cryptocurrency Scams Social Engineering Engineering 78

SecureWorld News

APRIL 21, 2022

Treasury Department warning of a North Korean state-sponsored advanced persistent threat (APT) known as the Lazarus Group targeting cryptocurrency and blockchain companies. The threat actors use social engineering to encourage individuals to download trojanized cryptocurrency applications on Windows or macOS operating systems.

Cryptocurrency 81

Cryptocurrency Computers and Electronics Social Engineering System Administration 81

eSecurity Planet

DECEMBER 21, 2021

Cryptocurrency Fuels Ransomware. One constant in all this will be cryptocurrency, the coin of the realm when it comes to ransomware. Cryptocurrency really is fueling this in a sense. … If you were to take cryptocurrency away from that, they don’t have a convenient digital platform.

Cryptocurrency 134

Cryptocurrency Ransomware Cybercrime Social Engineering 134

Security Boulevard

APRIL 30, 2021

Are you investing in cryptocurrency or thinking about it? Be sure to listen or watch our April monthly show for our top 3 ways to keep your cryptocurrency safe! ** Links mentioned on the show ** 10 Ways to Keep Your Cryptocurrency Safe [link] Beware of These Top Bitcoin Scams [link] 9 Best Crypto Wallets […].

Cryptocurrency 116

Cryptocurrency Scams Social Engineering Engineering 116

Trend Micro

AUGUST 8, 2021

We found a new social engineering-based malvertising campaign targeting Japan that delivered a malicious application. The malicious application abused sideloading vulnerabilities to load and start the Cinobi banking trojan.

Banking 128

Banking Social Engineering Cryptocurrency Engineering 128

Bleeping Computer

JULY 20, 2023

GitHub is warning of a social engineering campaign targeting the accounts of developers in the blockchain, cryptocurrency, online gambling, and cybersecurity sectors to infect their devices with malware. [.]

Social Engineering 92

Social Engineering Cryptocurrency Engineering Accountability 92

Security Affairs

JULY 19, 2022

FBI has warned of crooks developing malicious cryptocurrency-themed apps to steal crypto assets from the users. Federal Bureau of Investigation (FBI) has warned of crooks creating malicious cryptocurrency-themed apps to steal crypto assets from investors. SecurityAffairs – hacking, cryptocurrency-themed apps). million. .”

Cryptocurrency 103

Cryptocurrency Mobile Hacking Accountability 103

Security Boulevard

NOVEMBER 20, 2023

Crypto phishing scams are fraudulent activities designed to steal your cryptocurrency assets, typically by tricking you into revealing your private keys or sending your cryptocurrencies to the scammer’s wallet. These scams often involve deception, social engineering, and manipulation.

Scams 72

Scams Phishing Social Engineering Cryptocurrency 72

Malwarebytes

JULY 19, 2022

Together with the Department of Homeland Security (DHS) and the Cybersecurity and Infrastructure Security Agency (CISA), the FBI has released a warning about cybercriminals creating fraudulent cryptocurrency investment apps in order to defraud cryptocurrency investors. Stay safe, everyone!

Cryptocurrency 87

Cryptocurrency Mobile Banking Internet 87

Heimadal Security

APRIL 19, 2022

CISA, the FBI, and the US Treasury Department have recently issued a warning that firms in the cryptocurrency and blockchain industries are being targeted by the North Korean Lazarus hacking gang. It seems that the threat actors are using trojanized cryptocurrency applications in this wave of cyberattacks.

Social Engineering 117

Social Engineering Cryptocurrency Engineering Hacking 117

SecureList

JANUARY 13, 2022

Also, we have previously reported on cryptocurrency-focused BlueNoroff attacks. It appears that BlueNoroff shifted focus from hitting banks and SWIFT-connected servers to solely cryptocurrency businesses as the main source of the group’s illegal income. Note, this is no proof that the companies listed were compromised.

Cryptocurrency 128

Cryptocurrency Malware Accountability Banking 128

Malwarebytes

APRIL 19, 2022

A new advisory issued by the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the US Treasury Department (Treasury), highlights the cyberthreats associated with cryptocurrency thefts and tactics used by a North Korean state-sponsored advanced persistent threat (APT) group since at least 2020.

Social Engineering 121

Social Engineering Cryptocurrency Computers and Electronics Engineering 121

Security Boulevard

APRIL 13, 2021

The post Shashi Prakash Chats about Cryptocurrency and NFT Fraud appeared first on TechSpective. The post Shashi Prakash Chats about Cryptocurrency and NFT Fraud appeared first on Security Boulevard.

Cryptocurrency 97

Cryptocurrency Technology Social Engineering Engineering 97

Malwarebytes

MARCH 19, 2024

SIM swapping can be done in a number of ways, but perhaps the most common involves a social engineering attack on the victim’s carrier. However, if you have a telecoms manager on your payroll then there’s no need for social engineering—they can just do the SIM swap for you. Katz pleaded guilty before Chief U.S.

Social Engineering 138

Social Engineering Computers and Electronics Mobile Identity Theft 138

Threatpost

NOVEMBER 23, 2020

‘Vishing’ attack on GoDaddy employees gave fraudsters access to cryptocurrency service domains NiceHash, Liquid.

Cryptocurrency 121

Cryptocurrency Social Engineering VPN Engineering 121

Security Affairs

NOVEMBER 13, 2023

The APT group’s campaigns focus on cryptocurrency exchanges, venture capital firms, and banks. Microsoft researchers warn of a new social engineering campaign aimed at IT job seekers that relied on a new cluster of bogus skills assessment portals. ” warns Microsoft through a series of posts on X.

Social Engineering 117

Social Engineering Cryptocurrency Engineering Malware 117

Security Boulevard

AUGUST 2, 2022

Current threat actor activity is incentivized by a broad attack surface represented through high volumes of users and systems, and high potential profits represented through the variety of cryptocurrency offerings. It is easy to detect and block things like malicious cryptocurrency apps or crypto-phishing websites.

Cryptocurrency 98

Cryptocurrency Ransomware Government Risk 98

Malwarebytes

OCTOBER 27, 2023

Octo Tempest is believed to be a group of native English speaking cybercriminals that uses social engineering campaigns to compromise organizations all over the world. This can be done in a number of ways, but the most common ones involve social engineering attacks on the victim's carrier.

Social Engineering 101

Social Engineering Engineering Ransomware Backups 101

Security Through Education

MARCH 22, 2023

They all use psychology and social engineering skills to convince their victims to take an action that is detrimental to them. Prey on Emotions Scammers have become experts in using social engineering techniques to their advantage. What does a government scam, an IT support scam and a romance scam have in common?

Scams 122

Scams Social Engineering Engineering Media 122

Heimadal Security

FEBRUARY 23, 2023

A new S1deload Stealer malware campaign infects YouTube and Facebook users as hackers try to use their devices for cryptocurrency mining. The Malware Attack Explained Threat actors use social engineering […] The post Warning! New Malware Hijacks YouTube and Facebook Accounts appeared first on Heimdal Security Blog.

Accountability 89

Accountability Malware Social Engineering Cryptocurrency 89

Bleeping Computer

SEPTEMBER 15, 2023

Software company Retool says the accounts of 27 cloud customers were compromised following a targeted and multi-stage social engineering attack. [.]

Social Engineering 144

Social Engineering Authentication Engineering Accountability 144

The Hacker News

MARCH 30, 2022

A nascent information stealer called Mars has been observed in campaigns that take advantage of cracked versions of the malware to steal information stored in web browsers and cryptocurrency wallets.

Malware 98

Malware Social Engineering Cryptocurrency Engineering 98

The Hacker News

MARCH 21, 2022

Social engineering attacks leveraging a combination of romantic lures and cryptocurrency fraud have been luring unsuspecting victims into installing fake apps by taking advantage of legitimate iOS features like TestFlight and Web Clips.

Scams 96

Scams Social Engineering Mobile Cryptocurrency 96

Krebs on Security

JANUARY 30, 2024

authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. 12 blog post , the attackers used their access to Mailchimp employee accounts to steal data from 214 customers involved in cryptocurrency and finance. 9, 2024, U.S.

Social Engineering 318

Social Engineering Mobile Cybercrime Passwords 318

Adam Levin

MAY 15, 2019

The hacking group, called “The Community” primarily used social engineering (trickery) and SIM card hijacking to steal funds and cryptocurrency from their victims.

Identity Theft 176

Identity Theft Social Engineering Mobile Authentication 176

Krebs on Security

FEBRUARY 26, 2023

GoDaddy described the incident at the time in general terms as a social engineering attack, but one of its customers affected by that March 2020 breach actually spoke to one of the hackers involved. But we do know the March 2020 attack was precipitated by a spear-phishing attack against a GoDaddy employee.

Hacking 268

Hacking Social Engineering Phishing Scams 268

Security Affairs

NOVEMBER 8, 2023

The APT group’s campaigns focus on cryptocurrency exchanges, venture capital firms, and banks. blog, which was chosen by the attackers in an attempt to appear as the legitimate cryptocurrency exchange swissborg.com. The binary is ad-hoc signed that was observed communicating with the domain swissborg[.]blog,

Malware 106

Malware Cryptocurrency Social Engineering Engineering 106

Malwarebytes

JANUARY 20, 2023

The unauthorized actor conducted a social engineering attack on Mailchimp employees and contractors, and obtained access to select Mailchimp accounts using employee credentials compromised in that attack." The blog further asserts the company's compromise had not affected other Intuit systems or other Mailchimp customer data.

Social Engineering 90

Social Engineering Accountability Cryptocurrency Engineering 90

Hacker Combat

AUGUST 8, 2022

North Korean hackers use phoney Coinbase job offers to target cryptocurrency professionals. The renowned North Korean hacking outfit Lazarus has uncovered a new social engineering scheme in which the hackers pose as Coinbase to lure workers into the fintech sector. Lazarus hackers go after cryptocurrency.

Social Engineering 93

Social Engineering Cryptocurrency Engineering Malware 93

Bleeping Computer

NOVEMBER 10, 2023

Microsoft warns that the BlueNoroff North Korean hacking group is setting up new attack infrastructure for upcoming social engineering campaigns on LinkedIn. [.]

Social Engineering 99

Social Engineering Engineering Hacking Cryptocurrency 99

Malwarebytes

DECEMBER 6, 2022

Nicholas Truglia (25) from Florida was sentenced to 18 months on Thursday for his involvement in a digital heist that cost Michael Terpin ( @michaelterpin ), a renowned personality in the cryptocurrency space, $23.8M. According to El Reg , Terpin's cryptocurrency of choice was TRIG, which was worth $7 then.

Cryptocurrency 89

Cryptocurrency Social Engineering Accountability Media 89

SecureWorld News

JULY 11, 2022

Axie Infinity, a video game that utilizes NFTs and Ethereum-based cryptocurrencies, lost $540 million in March of this year after a senior engineer was tricked into opening a PDF of a fake job application, according to a story from The Block. The employee who fell for the social engineering scheme no longer works for Sky Mavis.

Social Engineering 78

Social Engineering Hacking Cryptocurrency Engineering 78

CyberSecurity Insiders

APRIL 5, 2023

According to a study conducted by se-curity firm Mandiant, the group has been in operation since 2018 and has now been tasked with carrying out both espionage and financially motivated attacks such as credential harvesting and social engineering.

Hacking 105

Hacking Social Engineering Cryptocurrency Manufacturing 105

SecureWorld News

JUNE 15, 2023

Seventy-four percent of breaches included the human element, which should be expected given the frequency of social engineering, stolen credentials, and privilege misuse. No surprise, social engineering is mentioned right off the bat. These criminals' methods can be predictable.

Data breaches 87

Data breaches Social Engineering Engineering Cryptocurrency 87