article thumbnail

Fake Lawsuit Threat Exposes Privnote Phishing Sites

Krebs on Security

The disclosure revealed a profitable network of phishing sites that behave and look like the real Privnote, except that any messages containing cryptocurrency addresses will be automatically altered to include a different payment address controlled by the scammers. co showing the site did indeed swap out any cryptocurrency addresses.

Phishing 275
article thumbnail

REvil Ransom Arrest, $6M Seizure, and $10M Reward

Krebs on Security

million in cryptocurrency sent to another REvil affiliate, and that the U.S. su, and that forum’s database says a user by the name “Damnating” registered with the forum in 2008 using the email address damnating@yandex.ru. The DOJ also said it had seized $6.1 Among those was carder[.]su,

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Canada Charges Its “Most Prolific Cybercriminal”

Krebs on Security

According to cyber intelligence firm Intel 471 , that dark_cl0ud6@hotmail.com address has been used in conjunction with the handle “ DCReavers2 ” to register user accounts on a half-dozen English-language cybercrime forums since 2008, including Hackforums , Blackhatworld, and Ghostmarket.

article thumbnail

Malicious Actors Hijacked Bitcoin.org

Heimadal Security

Bitcoin.org is an information portal for the top cryptocurrency, founded in August 2008 by Bitcoin’s pseudonymous founder Satoshi Nakamoto, containing information on Bitcoin, including the original whitepaper and developer documentation. Bitcoin.org was hijacked by hackers and got altered in order to push a scam.

article thumbnail

First Cyber Attack ‘Mass Exploiting’ BlueKeep RDP Flaw Spotted in the Wild

Security Affairs

Experts have spotted the first mass-hacking campaign exploiting the BlueKeep exploit , crooks leverage the exploit to install a cryptocurrency miner. Security researchers have spotted the first mass-hacking campaign exploiting the BlueKeep exploit , the attack aims at installing a cryptocurrency miner on the infected systems.

article thumbnail

Beapy Cryptojacking campaign leverages EternalBlue exploit to spread

Security Affairs

Security experts at Symantec have uncovered a new cryptojacking campaign tracked as Beapy that leverages the NSA’s DoublePulsar backdoor and the EternalBlue exploit to spread a cryptocurrency malware on enterprise networks in Asia. exploit that could trigger an RCE in older versions of Windows (Windows XP to Server 2008 R2). .”

article thumbnail

Smominru Botnet continues to rapidly spread worldwide

Security Affairs

In February 2018, researchers from Proofpoint discovered a huge botnet dubbed ‘Smominru’ that was using the EternalBlue exploit to infect Windows computers and recruit them in Monero cryptocurrency mining activities. Countries with several thousands of infected machines include China, Taiwan, Russia, Brazil and the US.”