Security Affairs

JULY 11, 2020

The Russian hacker Yevgeniy Nikulin found guilty for LinkedIn, Dropbox, and Formspring data breach back in 2012 and the sale of their users’ data. A jury found Russian hacker Yevgeniy Nikulin guilty for the hack of LinkedIn, Dropbox, and Formspring back in 2012 and for the sale of the stolen data on cybercrime black marketplaces.

Hacking 116

Hacking Cybercrime Data breaches Advertising 116

Security Affairs

JANUARY 28, 2021

The APT group has been active since 2012, experts linked the group to the Hezbollah militant group. ClearSky experts linked the Lebanese Cedar group to intrusions at telco companies, internet service providers, hosting providers, and managed hosting and applications companies. CVE-2012-3152).

Internet 141

Internet Internet Hacking Malware 141

Security Affairs

MARCH 1, 2020

Ireland is a strategic place for intercontinental communications because it represents the place where undersea cables which carry internet traffic connect to Europe. Despite the Cable & Wireless bought by Vodafone in July 2012, the Nigella surveillance access point remained active as of April 2013. Source [link].

Wireless 145

Wireless Surveillance Telecommunications Advertising 145

Security Affairs

JANUARY 31, 2021

Shadowsocks is a free and open-source encryption protocol project, widely used in China to circumvent Internet censorship. It was created in 2012 by a Chinese programmer named “ clowwindy “, and multiple implementations of the protocol have been made available since.

Firewall 144

Firewall Surveillance Internet Internet 144

The Last Watchdog

JUNE 21, 2020

The above-mentioned AIDS Trojan hailing from the distant pre-Internet era was the progenitor of the trend, but its real-world impact was close to zero. FBI spoofs 2012 – 2013. It surfaced in November 2012 and was making thousands of victims a day. None of these early threats went pro.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Security Affairs

FEBRUARY 17, 2020

The Russian government asks all Internet service providers and VPN providers operating in the country to provide information about their users. The blockage of the Tutanota service has been verified by the OONI Explorer, an open data resource on internet censorship around the world. reported the Associated Press.

Encryption 113

Encryption VPN Government Internet 113

Security Affairs

JULY 11, 2024

An attacker can exploit the flaw to bypass protections for a previous vulnerability, CVE-2012-1823, using specific character sequences. The malware was designed to targets Internet of Things (IoT) devices and Linux servers for cryptomining and DDoS purposes. The bot also connects to the command and control domain p.findmeatthe[.]top,

Malware 138

Malware DDOS Internet Internet 138

Security Affairs

DECEMBER 6, 2022

Curry and his team scanned the internet to find domains owned by SiriusXM and perform reverse-engineering of the mobile apps of SiriusXM customers to figure out how the service works. The experts began investigating the domain “ [link] ” handling services for enrolling vehicles in the SiriusXM remote management functionality.

Hacking 131

Hacking Engineering Mobile Internet 131

Security Affairs

AUGUST 18, 2021

North Korea-linked InkySquid group leverages two Internet Explorer exploits to deliver a custom implant in attacks aimed at a South Korean online newspaper. APT37 has been active since at least 2012, it mainly targeted government, defense, military, and media organizations in South Korea. ” reads the post published by Volexity.

Internet 119

Internet Internet Media Engineering 119

Schneier on Security

JUNE 6, 2023

Could agents take control of my computer over the Internet if they wanted to? Those of us in the information security community had long assumed that the NSA was doing things like this. This was in 2016, when Poitras built a secure room in New York to house the documents. Very probably. Definitely. And Edward Snowden?

Surveillance 349

Surveillance Computers and Electronics Government Encryption 349

Security Affairs

JULY 19, 2021

This isn’t the first attack suffered by the Oil giant, in 2012 Saudi Aramco suffered a major cyber attack, alleged nation-state actors used the Shamoon wiper to destroy over 30,000 computers of the company. ZeroX is also offering a 1 GB sample for US$2,000 that could be paid in Monero (XMR) virtual currency.

Engineering 144

Engineering Data breaches Telecommunications Wireless 144

Security Affairs

JULY 29, 2021

The flaw resides in Microsoft Hyper-V’s network switch driver ( vmswitch.sys ), it affects Windows 10 and Windows Server 2012 through 2019. Such OID requests include, for example, hardware offloading, Internet Protocol security (IPsec) and single root I/O virtualization (SR-IOV) requests.”

Internet 133

Internet Internet Hacking Ransomware 133

Security Affairs

SEPTEMBER 8, 2019

Ministry of Internal Affairs announced that Belarusian police have seized and shutdown XakFor, one of the largest hacking forums on the internet. XakFor has been active since 2012, most of its visitors were Russian-speaking hackers and crooks. Belarusian police have seized the servers of XakFor (xakfor[.]net),

Advertising 104

Advertising Malware Cybercrime Hacking 104

Security Affairs

MARCH 10, 2020

Necurs botnet is one of the largest spam botnet , it has been active since at least 2012 and was involved in massive campaigns spreading malware such as the Locky ransomware , the Scarab ransomware , and the Dridex banking Trojan. The Necurs botnet is active since at least 2012, it is operated by the cybercrime gang tracked as TA505.

Advertising 107

Advertising Malware Cybercrime Government 107

Security Affairs

MARCH 27, 2020

The vulnerabilities could not be exploited through Internet Explorer or the Outlook preview pane. The security patches developed by 0patch address the issues for Windows 7 and Windows Server 2008 R2 without ESU. and Windows Server 2012. The flaws impact all supported versions of Windows.

Advertising 142

Advertising Risk Internet Internet 142

Security Affairs

DECEMBER 1, 2022

ScarCruft has been active since at least 2012, it made the headlines in early February 2018 when researchers revealed that the APT group leveraged a zero-day vulnerability in Adobe Flash Player to deliver malware to South Korean users. The Dolphin backdoor was used as the final payload of a multistage watering-hole attack in early 2021.

Accountability 131

Accountability Malware Cyber Attacks Media 131

Security Affairs

MARCH 10, 2023

The NetWire Remote Access Trojan (RAT) is available for sale on cybercrime forums since 2012, it allows operators to steal sensitive data from the infected systems. DomainTools further shows this email address was used to register one other domain in 2012: wwlabshosting[.]com, ” reads the press release published DoJ.

Malware 98

Malware Cybercrime Data breaches Internet 98

Security Affairs

MARCH 25, 2020

The APT41 has been active since at least 2012, it was involved in both state-sponsored espionage campaigns and financially-motivated attacks since 2014. The campaign was uncovered by FireEye , threat actor targeted many organizations worldwide the world by exploiting vulnerabilities in Citrix, Cisco and Zoho ManageEngine products.

Telecommunications 145

Telecommunications Healthcare Education Advertising 145

Security Affairs

AUGUST 14, 2019

The list of flaws addressed by the tech giant doesn’t include zero-days or publicly disclosed vulnerabilities, 29 issues were rated as ‘Critical’ and affect Microsoft’s Edge and Internet Explorer web browsers, Windows, Outlook and Office. Unlike BlueKeep, the flaws cannot be exploited via the Remote Desktop Protocol (RDP).

Authentication 109

Authentication Advertising Internet Internet 109

Security Affairs

FEBRUARY 10, 2022

Technological advancements have come a long way – from when internet utility was very limited to when internet connection was achieved only through internet protocol (IP) version 4 (IPv4) addresses to this modern age where IPv6 is the next big thing. This helps to provide necessary security and anonymity for the internet user.

Internet 100

Internet Internet Data privacy Technology 100

Daniel Miessler

FEBRUARY 1, 2020

People talk about it like it’s the Internet Demogorgon. and in 2012 the New York Times said they had the largest commercial database on customers. Acxiom collects, analyzes and sells customer and business information used for targeted advertising campaigns. Among those, Acxiom is particularly interesting.

Advertising 103

Advertising InfoSec Password Management Education 103

Security Affairs

JUNE 13, 2022

Researchers from Palo Alto Networks defined the PingPull RAT as a “difficult-to-detect” backdoor that leverages the Internet Control Message Protocol (ICMP) for C2 communications. However, the group has been active at least since 2012.

Telecommunications 98

Telecommunications Government Internet Internet 98

Security Affairs

JANUARY 11, 2021

Andrei Tyurin is accused of being the mastermind of the organization that targeted the US financial institution from 2012 to mid-2015. and foreign companies in furtherance of various criminal enterprises operated by Shalon and his co-conspirators, including unlawful internet gambling businesses and international payment processors.

Hacking 124

Hacking Marketing Identity Theft Banking 124

Security Affairs

NOVEMBER 8, 2022

“JAMES ZHONG pled guilty to committing wire fraud in September 2012 when he unlawfully obtained over 50,000 Bitcoin from the Silk Road dark web internet marketplace. The man funded nine fraudulent accounts with an initial deposit of 200 to 2,000 bitcoin and then triggered 140 withdrawal transactions in rapid succession.

Cryptocurrency 98

Cryptocurrency Internet Internet Hacking 98

Security Affairs

NOVEMBER 19, 2020

When targeted by a threat actor, the honeypot system uses their intrusion attempt to gain valuable information about the attacker. In order to capture malware and monitor cyberattacks across the internet in real-time, we run multiple honeypot systems that are contained in isolated execution environments, otherwise known as containers.

DDOS 145

DDOS IoT Malware Internet 145

SC Magazine

APRIL 26, 2021

As critical infrastructure facilities increasingly converge their IT and OT systems, visibility into traditionally isolated operational systems is turning into a key security challenge. Recognizing that the ABCWUA is “ahead of a lot of the water authorities” across the U.S.

CISO 82

CISO IoT VPN InfoSec 82

Security Affairs

FEBRUARY 16, 2023

Below is the list of vulnerabilities exploited by V3G4: CVE-2012-4869 : FreePBX Elastix Remote Command Execution Vulnerability Gitorious Remote Command Execution Vulnerability CVE-2014-9727 : FRITZ!Box

IoT 98

IoT DDOS Encryption Malware 98

Krebs on Security

JULY 18, 2023

.” PicTrace appears to have been a service that allowed users to glean information about anyone who viewed an image hosted on the platform, such as their Internet address, browser type and version number. A copy of pictrace[.]com

Hacking 229

Hacking Accountability Data breaches Marketing 229

Security Affairs

SEPTEMBER 21, 2019

The bad side of all of these adventure is, now I have my research materials scattering around all over the internet during these past three years (smile).

Malware 105

Malware Advertising Security Awareness Media 105

SiteLock

AUGUST 27, 2021

Department of Justice released a report that revealed some weaknesses in Next Gen Cyber, The Federal Bureau of Investigation’s cyber security program begun in 2012. Cybersecurity Bill Could ‘Sweep Away’ Internet Users’ Privacy, Agency Warns. China to Embed Internet Police in Tech Firms. Last week, the U.S.

Cybersecurity 52

Cybersecurity Internet Internet Banking 52

Security Affairs

MAY 16, 2023

MustangPanda has been active since at least 2012, it targeted American and European entities such as government organizations, think tanks, NGOs , and even Catholic organizations at the Vatican. Past campaigns were focused on Asian countries, including Taiwan, Hong Kong, Mongolia, Tibet, and Myanmar.

Firmware 98

Firmware Encryption Government Malware 98

Security Affairs

FEBRUARY 26, 2021

Our online security team has uncovered a massive data breach originating from a misconfigured Amazon Bucket, which was operated by a Turkish Legal advising company, INOVA YÖNETIM & AKTÜERYAL DANI?MANLIK. Inova has been operating since 2012 and has handled thousands of cases since then. How and Why We Discovered the Breach.

Data breaches 122

Data breaches Insurance Identity Theft Education 122

Security Affairs

NOVEMBER 9, 2019

In June 2018, experts at Kaspersky were investigating attacks against government and military entities in South and Southeast Asian countries, The experts tracked the campaign as EasternRoppels, they speculate it may have started as far back as 2012. The malware can also get proxy settings from Internet Explorer.

Encryption 72

Encryption Passwords Malware Software 72

ForAllSecure

JULY 28, 2020

"You sort of sense that the discovery of flaws in SSL stacks is accelerating,” he said, “and so I was curious about [what] the current state of security was with regards to SSL stacks and I went and took a look.". In 2012, a change was made to OpenSSL-- that change allowed for Heartbleed to exist. through 1.0.1f

Encryption 52

Encryption Retail Software Banking 52

ForAllSecure

JULY 28, 2020

"You sort of sense that the discovery of flaws in SSL stacks is accelerating,” he said, “and so I was curious about [what] the current state of security was with regards to SSL stacks and I went and took a look.". In 2012, a change was made to OpenSSL-- that change allowed for Heartbleed to exist. through 1.0.1f

Encryption 52

Encryption Retail Software Banking 52

eSecurity Planet

JANUARY 11, 2022

Information security products , services, and professionals have never been in higher demand, making for a world of opportunities for cybersecurity startups. SpiderSilk offers an impressive proprietary internet scanner that maps out a company’s assets and network attack surface to detect vulnerabilities. SpiderSilk.

Cybersecurity 142

Cybersecurity Threat Detection Artificial Intelligence Risk 142

ForAllSecure

JULY 28, 2020

"You sort of sense that the discovery of flaws in SSL stacks is accelerating,” he said, “and so I was curious about [what] the current state of security was with regards to SSL stacks and I went and took a look.". In 2012, a change was made to OpenSSL-- that change allowed for Heartbleed to exist. through 1.0.1f

Encryption 52

Encryption Retail Software Banking 52