Security Affairs

DECEMBER 5, 2023

Microsoft warns that the Russia-linked APT28 group is actively exploiting the CVE-2023-23397 Outlook flaw to hijack Microsoft Exchange accounts. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, APT28) ” reads trhe announcement published by DKWOC.

Accountability 128

Accountability Government Phishing Passwords 128

Security Affairs

JANUARY 10, 2019

The social media platform Reddit has notified users that some of them have been locked out of their accounts after detecting suspicious activity. Reddit locked down a large number of user accounts after due to a security concern after detecting suspicious activity on them. . ” reads a post published by one of the Reddit admins.

Accountability 107

Accountability Data breaches Passwords Advertising 107

Security Affairs

NOVEMBER 3, 2020

The scripts developed by the cyber criminal were used to parse log data collected from botnet and searched for personally identifiable information (PII) and account credentials. Brovko was involved in the illegal practice between 2007 and 2019. SecurityAffairs – hacking, Aleksandr Brovko). Pierluigi Paganini.

Accountability 121

Accountability Banking Advertising Data collection 121

Krebs on Security

AUGUST 1, 2018

In a post to Reddit, the social news aggregation platform said it learned on June 19 that between June 14 and 18 an attacker compromised a several employee accounts at its cloud and source code hosting providers. “We point this out to encourage everyone here to move to token-based 2FA.”

Authentication 227

Authentication Mobile Passwords Accountability 227

Security Affairs

NOVEMBER 10, 2018

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. The post Symantec shared details of North Korean Lazarus’s FastCash Trojan used to hack banks appeared first on Security Affairs.

Banking 112

Banking Hacking Malware Advertising 112

Security Affairs

JANUARY 11, 2021

court on Thursday sentenced the Russian hacker Andrei Tyurin to 12 years in prison for his role in an international hacking campaign. The man was arrested in Georgia at the request of US authorities, he was charged with multiple conspiracy counts, including wire fraud, aggravated identity theft and four counts of computer hacking.

Hacking 124

Hacking Marketing Identity Theft Banking 124

Security Affairs

MARCH 20, 2020

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. It is unclear why APT28 is using compromised email accounts of (mostly) defense companies in the Middle East.

Phishing 145

Phishing Accountability Advertising DNS 145

Security Affairs

JUNE 30, 2024

Russia-linked APT group, reportedly APT29, is suspected to be behind a hack of TeamViewer ‘s corporate network. The unauthorized access to the IT infrastructure of the company occurred on June 26, threat actors used the credentials of a standard employee account within its IT environment.

Accountability 140

Accountability Hacking Architecture Malware 140

Security Affairs

AUGUST 6, 2019

The STRONTIUM APT group (aka APT28 , Fancy Bear , Pawn Storm , Sofacy Group , and Sednit ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. SecurityAffairs – Russia APT, hacking). link] #MSFTatBlackHat — Security Response (@msftsecresponse) August 5, 2019.

IoT 98

IoT Hacking Advertising Government 98

Security Affairs

DECEMBER 2, 2020

The Turla APT group (aka Snake , Uroburos , Waterbug , Venomous Bear and KRYPTON ) has been active since at least 2007 targeting diplomatic and government organizations and private businesses in the Middle East, Asia, Europe, North and South America, and former Soviet bloc nations. SecurityAffairs – hacking, Crutch).

Malware 145

Malware Accountability Hacking Government 145

Security Affairs

SEPTEMBER 10, 2022

Since at least 2007, the MOIS coordinated a series of cyber operation against government entities and private organizations around the world. We join in Prime Minister Rama’s call for Iran to be held accountable for this unprecedented cyber incident. SecurityAffairs – hacking, Albania cyberattack). “Today, the U.S. “The

Government 143

Government Cyber Attacks Hacking Cyber threats 143

Security Affairs

MARCH 3, 2020

“ Two Chinese nationals were charged with laundering over $100 million worth of cryptocurrency from a hack of a cryptocurrency exchange. The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFT attacks in 2016, and the Sony Pictures hack. million from another exchange.

Cryptocurrency 139

Cryptocurrency Banking Hacking Accountability 139

Krebs on Security

JANUARY 8, 2024

For example, in 2010 Spamdot and its spam affiliate program Spamit were hacked, and its user database shows Sal and Icamis often accessed the forum from the same Internet address — usually from Cherepovets , an industrial town situated approximately 230 miles north of Moscow. bank accounts. ws was registered to an Andrew Artz.

Cybercrime 265

Cybercrime Banking Computers and Electronics DDOS 265

Security Affairs

JUNE 3, 2024

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , BlueDelta, and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. As expected, Ukraine topped the list, accounting for 40% of the activity.”

Malware 141

Malware Phishing Surveillance Internet 141

Security Affairs

AUGUST 1, 2018

The hacker accessed user data, email addresses, and a 2007 backup database containing hashed passwords managed by the platform. The data breach was discovered on June 19, 2018, according to Reddit, between June 14 and 18, 2018, the attacker compromised some of the employees’ accounts with the company cloud and source code hosting providers.

Data breaches 79

Data breaches Backups Passwords Authentication 79

Security Affairs

OCTOBER 27, 2023

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , BlueDelta, and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. APT28 used the compromised email accounts to send malicious emails and compromised routers to recover exfiltrated data.

Government 139

Government Accountability Phishing Hacking 139

Security Affairs

SEPTEMBER 29, 2019

Zynga Inc is an American social game developer running social video game services founded in April 2007, it primarily focuses on mobile and social networking platforms. Zynga confirmed that the account login information for certain players of Draw Something and Words With Friends that may have been exposed in the data breach.

Data breaches 111

Data breaches Mobile Accountability Passwords 111

CyberSecurity Insiders

APRIL 18, 2023

Afterward, cybercriminals leaked data of thousands of the company’s employees onto the dark web, including social security numbers and bank account details of employees involved in the R&D of infrastructure products.

Cyber Attacks 113

Cyber Attacks Banking Media Retail 113

Security Affairs

OCTOBER 8, 2021

The researchers pointed out that the warning is related to hacking attempts and that not all the attacks have been successful, also thanks to the defense implemented by Google. This specific campaign accounted for 86% of the batch of warnings that the Google team sent out for this month. SecurityAffairs – hacking, spear-phishing).

Phishing 109

Phishing Government Hacking Accountability 109

Security Affairs

FEBRUARY 25, 2021

Next, the attackers logged in to the web interface using a privileged root account. It’s unknown how the attackers were able to obtain the credentials for that account, but it’s possible the credentials were saved in one of the infected system’s browser password managers.” SecurityAffairs – hacking, Lazarus).

Malware 129

Malware Cryptocurrency Password Management Encryption 129

Security Affairs

OCTOBER 14, 2021

Google revealed to have sent roughly 50,000 alerts of state-sponsored phishing or hacking attempts to customers since January. Google announced to have sent roughly 50,000 alerts of state-sponsored phishing or hacking attempts to customers during 2021. SecurityAffairs – hacking, cyber security). Pierluigi Paganini.

Phishing 98

Phishing Hacking Government Malware 98

Security Affairs

JANUARY 29, 2021

Microsoft Threat Intelligence Center (MSTIC) attributes this campaign with high confidence to ZINC, a DPRK-affiliated and state-sponsored group, based on observed tradecraft, infrastructure, malware patterns, and account affiliations.” SecurityAffairs – hacking, Zinc). Pierluigi Paganini.

Malware 137

Malware Antivirus Hacking Accountability 137

Security Affairs

NOVEMBER 28, 2021

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. io ), to share videos of their claimed exploits, and for amplifying and retweeting posts from other accounts under their control.

Malware 144

Malware Phishing Antivirus Hacking 144

Security Affairs

DECEMBER 7, 2023

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , BlueDelta, and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election.

Government 133

Government Telecommunications Accountability Phishing 133

Security Affairs

OCTOBER 3, 2018

The US-CERT has released a joint technical alert from the DHS, the FBI, and the Treasury warning about a new ATM cash-out scheme, dubbed “ FASTCash ,” being used by the prolific North Korean APT hacking group known as Hidden Cobra (aka Lazarus Group and Guardians of Peace).

Banking 111

Banking Retail Advertising Malware 111

Security Affairs

APRIL 14, 2019

They also activated files that forced infected computers to register email accounts with AOL.” “The defendants registered more than 100,000 email accounts using this method. The defendants would then steal account credentials. . “The defendants used stolen email credentials to copy a victim’s email contacts.

Cryptocurrency 111

Cryptocurrency Identity Theft Advertising Accountability 111

Security Affairs

JUNE 17, 2020

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. SecurityAffairs – Operation In(ter)reception , hacking). “a password-protected RAR archive containing a LNK file.

Advertising 116

Advertising Malware Passwords Accountability 116

Security Affairs

MAY 17, 2019

The Winnti group was first spotted by Kaspersky in 2013, according to the researchers the gang has been active since 2007. A recent article warns, “TeamViewer users have had their bank accounts emptied by hackers gaining full-system access”. SecurityAffairs – TeamViewer, hacking). ” wrote the company. .

Advertising 111

Advertising Architecture Software Cyber Attacks 111

Security Affairs

APRIL 17, 2023

The APT41 group, aka Winnti , Axiom, Barium , Blackfly, HOODOO) is a China-linked cyberespionage group that has been active since at least 2007. The researchers noticed that the most common attack against networks and cloud instances is the account takeover. ” continues the report.

Media 98

Media Accountability Malware Government 98

SecureList

JUNE 26, 2023

Below is a brief description of the most popular types of threats that SMB employees encountered in January–May 2023: Exploits The biggest threat to SMBs in the first five months of 2023 were exploits , which accounted for 483,980 detections. If an employee enters their credentials, the scammers get access to their account.

Cybercrime 123

Cybercrime Phishing Banking Malware 123

Security Affairs

APRIL 30, 2023

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election.

System Administration 98

System Administration Government Phishing Malware 98

Security Affairs

JULY 26, 2018

” The experts discovered that the flaw was first discovered in 2007 and it was publicly disclosed in 2009 during the CanSecWest security conference. The vulnerability is the result of a combination of several arbitrary memory dereference issued and an unbounded memory write vulnerability. ” continues Trustwave.

Advertising 74

Advertising Architecture Authentication Accountability 74

Security Affairs

MARCH 7, 2019

The patch addresses the UPnP memory corruption vulnerability ( CVE-2007-1204 ) that enables a remote attacker to run arbitrary code in the context of a local service account.” SecurityAffairs – UPnP-enabled devices, hacking). Windows XP comes with UPnP functionality that is enabled automatically out of the box.

Cyber Attacks 107

Cyber Attacks Advertising Firmware Data collection 107

Security Affairs

APRIL 19, 2023

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election. .”

Malware 98

Malware Firmware Government Education 98

Cisco Security

OCTOBER 19, 2021

Valid Accounts [ T1178 ]. Account Discovery [ T1087 ]. Valid Accounts [ T1078 ]. Valid Accounts [ T1078 ]. Valid Accounts [ T1078 ]. CVE-2007-1036. Like ShellShock, the exploit for this vulnerability is present in many automated hacking tools. Percent of. organizations. Techniques seen. (in

Firewall 145

Firewall Authentication DNS Accountability 145

ForAllSecure

OCTOBER 29, 2020

Listen to EP 08: Hacking Voting Systems. Vamosi: Back in 2007 the California Secretary of State, Debra Bowen, did the unthinkable: she decertified all the digital voting systems in the state. They invited us and other members of the public to try to hack it. Apple Podcasts. Google Podcasts. Spotify Podcasts. Amazon Music.

Hacking 52

Hacking Mobile Software Technology 52

ForAllSecure

OCTOBER 29, 2020

Listen to EP 08: Hacking Voting Systems. Vamosi: Back in 2007 the California Secretary of State, Debra Bowen, did the unthinkable: she decertified all the digital voting systems in the state. They invited us and other members of the public to try to hack it. Apple Podcasts. Google Podcasts. Spotify Podcasts. Amazon Music.

Hacking 52

Hacking Mobile Software Technology 52