Krebs on Security

JUNE 29, 2023

.” FACCT says on its website that it is a “Russian developer of technologies for combating cybercrime,” and that it works with clients to fight targeted attacks, data leaks, fraud, phishing and brand abuse. A 2009 census found that Russians make up about 24 percent of the population of Kazakhstan.

Cybersecurity 297

Cybersecurity Cybercrime Hacking Government 297

Security Affairs

JULY 6, 2021

According to Group-IB’s Threat Intelligence team, the suspect, dubbed Dr HeX by Group-IB based on one of the nicknames that he used, has been active since at least 2009 and is responsible for a number of cybercrimes, including phishing, defacing, malware development, fraud, and carding that resulted in thousands of unsuspecting victims.

Cybercrime 104

Cybercrime Phishing Banking Telecommunications 104

Security Affairs

OCTOBER 1, 2019

The experts found an unprotected Elasticsearch cluster that was containing personally identifiable information on Russian citizens spanning from 2009 to 2016. “The first database contained more than 14 million personal and tax records from 2010 to 2016, and the second included over 6 million from 2009 to 2015.”

Identity Theft 105

Identity Theft Scams Advertising Risk 105

CyberSecurity Insiders

MAY 6, 2021

Report released by the firm says that the discovered flaw is actually an amalgamation of 5 different flaws that are present on the Dell BIOS Utility Driver called DBUtil and has been in place since 2009.

DDOS 113

DDOS Phishing Malware Software 113

SecureList

FEBRUARY 23, 2022

SpyEye, developed in 2009 and described as a “bank Trojan with a form grabbing capability”, surged from the eighth most common banking malware tool with a 3.4% We look at phishing threats commonly encountered by users and companies as well as the prevalence of various Windows and Android-based financial malware.

Banking 141

Banking Phishing Cryptocurrency Malware 141

SecureWorld News

FEBRUARY 14, 2023

According to a blog post by Group-IB , the company detected and blocked malicious phishing emails originating from Tonto Team that were targeting its employees. The threat actor has been targeting government, military, energy, financial, educational, healthcare, and technology sector companies since 2009.

Phishing 117

Phishing Cybersecurity Threat Detection Healthcare 117

Security Affairs

JUNE 18, 2020

Qbot , aka Qakbot , is a data stealer worm with backdoor capabilities that was first detected by Symantec back in 2009. ” The malware is distributed through phishing attacks that attempt to trick victims into visiting websites that use exploits to inject Qbot via a dropper. The campaign targets 36 different U.S.

Banking 138

Banking Malware Advertising Financial Services 138

Krebs on Security

JUNE 7, 2021

federal prison for his role in the theft of $9 million from RBS WorldPay in 2009. enabling them to engage in disruptive ransomware attacks and phishing campaigns,” reads a Treasury assessment from April 2021. Horohorin’s BadB carding store, badb[.]biz, biz, circa 2007. .

Antivirus 328

Antivirus VPN Encryption Malware 328

Malwarebytes

MARCH 31, 2022

Calendar to spam in 2009. Calendar app spam leads to phishing pages. According to Bleeping Computer, it’s been abused to send phishing missives. The phish routine ends with that time honoured process of redirecting the phished individual to a real website afterwards.

Phishing 103

Phishing Password Management Passwords 103

Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. North Korea-linked APT group posed as Samsung recruiters is a spear-phishing campaign that targeted South Korean security companies that sell anti-malware solutions, Google TAG researchers reported.

Malware 144

Malware Phishing Antivirus Hacking 144

Security Affairs

SEPTEMBER 15, 2018

The group has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide.

Media 107

Media Advertising Malware Phishing 107

Security Affairs

OCTOBER 5, 2018

The group has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide.

Advertising 110

Advertising Manufacturing Healthcare Malware 110

Security Affairs

JULY 6, 2020

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems.

Retail 136

Retail Advertising Malware Hacking 136

SecureList

FEBRUARY 1, 2022

Number of data leaks from medical organizations, 2009–2020. With the active development of telehealth, medicine will only become a more commonly used bait, just as the digitalization of banks has turned banking phishing into one of the most popularly used types of phishing. Source: HIPAA Journal.

Phishing 145

Phishing Healthcare IoT Authentication 145

Malwarebytes

AUGUST 29, 2023

During the attack, the cybercriminals may have had access to names, addresses, and Social Security Numbers (SSNs) of current and former OHC employees (from 2009 to 2023). Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device can’t be phished.

Ransomware 97

Ransomware Data breaches Passwords Phishing 97

Security Affairs

APRIL 20, 2021

BMP) image files in a recent spear-phishing campaign targeting entities in South Korea. . Experts from Malwarebytes have uncovered a spear-phishing attack conducted by a North Korea-linked Lazarus APT group that obfuscated a malicious code within a bitmap (.BMP) North Korea-linked Lazarus APT group is abusing bitmap (.BMP)

Phishing 101

Phishing Hacking Cryptocurrency Malware 101

Security Affairs

JUNE 7, 2021

Watch out for incoming spam emails, unsolicited texts, and phishing messages. An example of leaked passwords included in the RockYou2021 compilation: With a collection that exceeds its 12-year-old namesake by more than 262 times, this leak is comparable to the Compilation of Many Breaches (COMB) , the largest data breach compilation ever.

Passwords 122

Passwords Data breaches Accountability Password Management 122

Security Affairs

FEBRUARY 25, 2021

The attack chain starts with COVID19-themed spear-phishing messages that contain either a malicious Word attachment or a link to one hosted on company servers. . The experts discovered the custom backdoor while investigating an incident, it was used by attackers for lateral movements and data exfiltration.

Malware 130

Malware Cryptocurrency Password Management Encryption 130

Security Affairs

MAY 27, 2019

The group has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide.

Advertising 109

Advertising Malware Government Hacking 109

Security Affairs

MAY 13, 2023

Founded in 2009, the company provides luggage and passenger transportation services on many popular hiking routes, including the famous Santiago de Compostela pilgrimage trail. Leaked data might also lead to phishing scams. The services are well-reviewed by their clients, with an overall four-star rating on TripAdvisor.

Passwords 98

Passwords Identity Theft Scams Social Engineering 98

Cisco Security

JANUARY 10, 2023

According to Forrester , the term Zero Trust was born in 2009. Traditionally CISOs have talked about the importance of improving security awareness which has resulted in the growth of those test phishing emails we all know and love so much. How Zero Trust will progress. From Security Awareness to Culture Change.

CISO 142

CISO Insurance Cyber Insurance Phishing 142

Thales Cloud Protection & Licensing

NOVEMBER 14, 2017

The modern era of mass data breaches perhaps began in 2009, with the hack of 32 million account credentials held by software developer RockYou, in which a SQL injection attack revealed that passwords were simple held in cleartext in a database table. Taking a password dump from a server isn’t, of course, the only route to compromise.

Passwords 99

Passwords Internet Internet Data breaches 99

Security Affairs

OCTOBER 3, 2018

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. Experts believe APT threat actors carried out spear-phishing attacks against the bank, malicious messages used Windows executable.

Banking 111

Banking Retail Advertising Malware 111

Security Affairs

JUNE 27, 2019

The group has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide. ” continues the report.

Identity Theft 109

Identity Theft Hacking Advertising System Administration 109

Security Affairs

JULY 31, 2020

The group has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide.

Cyber Attacks 131

Cyber Attacks Hacking Advertising Government 131

Security Affairs

NOVEMBER 5, 2019

The DarkUniverse has been active at least from 2009 until 2017. The DarkUniverse APT carried spear-phishing attacks using weaponized Microsoft Office document, each email was prepared separately for each victim. .” The dump also included an intriguing Pyton script named sigs.py

Malware 73

Malware Advertising Accountability Phishing 73

Security Affairs

DECEMBER 21, 2018

The group has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide.

Computers and Electronics 108

Computers and Electronics Identity Theft Technology Manufacturing 108

Security Affairs

JANUARY 27, 2022

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems.

Malware 98

Malware Hacking Phishing Ransomware 98

SecureWorld News

JULY 8, 2024

The name "RockYou2024" pays homage to the infamous RockYou data breach of 2009, which exposed 32 million passwords due to insecure storage practices. Companies need to make it a priority to set up strong MFA and real-time phishing protection to reduce the risks that come with compromised passwords.

Passwords 127

Passwords Password Management Education Accountability 127

Security Affairs

MARCH 24, 2021

Founded in 2009, FBS is an international online forex broker with more than 400,000 partners and 16 million traders spanning over 190 countries. Scams, Phishing and Malware. Leaked contact information may be used to launch scam, phishing and malware attacks against FBS users. The breach is a danger to both FBS and its customers.

Passwords 137

Passwords Accountability Media Identity Theft 137

Security Affairs

NOVEMBER 16, 2020

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. In August, F-Secure Labs experts observed a spear-phishing campaign targeting an organization in the cryptocurrency industry.

Malware 109

Malware Software Cryptocurrency Financial Services 109

Malwarebytes

DECEMBER 5, 2022

It's been active since 2009 and is responsible for many high profile attacks. In January of 2022 the Malwarebytes Intelligence Team uncovered a campaign where Lazarus conducted spear phishing attacks weaponized with malicious documents that used a familiar job opportunities theme.

Cryptocurrency 98

Cryptocurrency Malware Scams Cybercrime 98

Malwarebytes

APRIL 19, 2021

Lazarus APT is one of the most sophisticated North Korean Threat Actors that has been active since at least 2009. In one of their most recent campaigns Lazarus used a complex targeted phishing attack against security researchers. This attack likely started by distributing phishing emails that were weaponized with a malicious document.

Encryption 145

Encryption Phishing Malware Media 145

Malwarebytes

JULY 14, 2022

Phishing attacks, vulnerability exploits, DDoS attacks, and much more threaten your company’s Macs at any time — and if any of them are successful, it could cost your business millions in lost productivity and information theft. And it’s not just malware you have to worry about with your Mac endpoints.

DNS 134

DNS Adware Malware Antivirus 134

Malwarebytes

DECEMBER 16, 2022

Back in the days of Xbox360, especially around 2009, custom made booter services became very popular with gamers. ” As it turns out, pushing that button to win is a lot less intensive than figuring out how to make people run your executable or set up a working phishing page. Why are booters so popular?

DDOS 98

DDOS Marketing Phishing Risk 98

SecureList

OCTOBER 7, 2022

It was active in the wild for at least for eight years—from 2009 to 2017—and targeted at least 20 civilian and military entities in Syria, Iran, Afghanistan, Tanzania, Ethiopia, Sudan, Russia, Belarus, and the United Arab Emirates. The malware spreads through spear-phishing emails with a malicious Microsoft Office document as attachment.

Malware 145

Malware Computers and Electronics Telecommunications Encryption 145

Security Boulevard

MAY 3, 2021

The Problem with Website Passwords (from Blog Post from 2009). Phishing Scammers imitate Windows logo with HTML Tables to Slip through Email Gateways. An example they give is " RedPantsTree ", which is unlikely to be used anywhere else online. Passwords are and have always been an Achilles Heel in Cybersecurity. Stay safe and secure.

Ransomware 124

Ransomware Passwords Scams Government 124