The State of Security

MAY 5, 2021

Human nature has shown that people re-use passwords, at least for non-work accounts that aren’t requiring quarterly changes. How can it affect your current security that you’ve reused an old password or passphrase from 2012? Surprisingly, quite a lot.

Passwords 112

Passwords Accountability 112

Krebs on Security

APRIL 18, 2023

According to cyber intelligence firm Flashpoint , MrMurza has been active in the Russian underground since at least September 2012. 2012, from an Internet address in Magnitogorsk, RU. The password chosen by this user was “ 1232.” relied on the passwords asus666 and 01091987h. also used the password 24587256.

Malware 274

Malware Passwords Accountability Advertising 274

Krebs on Security

NOVEMBER 26, 2021

And virtually all IRRs have disallowed its use since at least 2012, said Adam Korab , a network engineer and security researcher based in Houston. “LEVEL 3 is the last IRR operator which allows the use of this method, although they have discouraged its use since at least 2012,” Korab told KrebsOnSecurity.

Internet 72

Internet Internet Authentication Telecommunications 72

Krebs on Security

FEBRUARY 24, 2023

BHProxies has authored 129 posts on Black Hat World since 2012, and their last post on the forum was in December 2022. BHProxies initially was fairly active on Black Hat World between May and November 2012, after which it suddenly ceased all activity. The website BHProxies[.]com

Accountability 269

Accountability Advertising Marketing Malware 269

Security Affairs

MARCH 21, 2019

News problems for Facebook that admitted to have stored the passwords of hundreds of millions of users in plain text. Facebook revealed to have stored the passwords of hundreds of millions of users in plain text, including passwords of Facebook Lite, Facebook, and Instagram users. Password manager apps can help.

Passwords 22

Passwords Advertising Accountability Password Management 22

Thales Cloud Protection & Licensing

NOVEMBER 14, 2017

The tsunami of passwords that exist across every aspect of our digital life means that there’s a thriving underground industry of cyber-criminals trying to get at them. This time passwords were lightly protected by the 1970s-era DES algorithm. Taking a password dump from a server isn’t, of course, the only route to compromise.

Passwords 99

Passwords Internet Internet Data breaches 99

Schneier on Security

JULY 9, 2019

Original report : Based on the data available to us, Operation Soft Cell has been active since at least 2012, though some evidence suggests even earlier activity by the threat actor against telecommunications providers. The attack was aiming to obtain CDR records of a large telecommunications provider.

Hacking 261

Hacking Telecommunications Malware Passwords 261

Security Affairs

JULY 11, 2020

The Russian hacker Yevgeniy Nikulin found guilty for LinkedIn, Dropbox, and Formspring data breach back in 2012 and the sale of their users’ data. A jury found Russian hacker Yevgeniy Nikulin guilty for the hack of LinkedIn, Dropbox, and Formspring back in 2012 and for the sale of the stolen data on cybercrime black marketplaces.

Hacking 125

Hacking Cybercrime Data breaches Advertising 125

Krebs on Security

DECEMBER 3, 2021

More commonly, that access is purchased from a cybercriminal broker who specializes in acquiring remote access credentials — such as usernames and passwords needed to remotely connect to the target’s network. All of these domains date back to between 2012 and 2013. com , and portalsagepay[.]com.

Ransomware 324

Ransomware Passwords Accountability Cybercrime 324

Security Affairs

SEPTEMBER 30, 2020

Russian national Yevgeniy Aleksandrovich Nikulin was sentenced to 88 months in prison for hacking LinkedIn, Dropbox, and Formspring in 2012. The Russian national Yevgeniy Aleksandrovich Nikulin was sentenced to 88 months in prison in the United States for hacking LinkedIn, Dropbox, and Formspring in 2012. Source: US Defense Watch.com.

Identity Theft 118

Identity Theft Cybercrime Advertising Hacking 118

Security Affairs

APRIL 1, 2020

In malspam attacks, attackers could encrypt the Excel file by setting up a password, then when the victims receive the email, hackers trick them into opening the attachment using a password included in the content of the message. Excel attempts to decrypt and open the file and run any macros it contains.

Malware 132

Malware Passwords Encryption Advertising 132

Krebs on Security

JUNE 25, 2019

com 2012-11-26 ALIBABA CLOUD COMPUTING (BEIJING) CO., com 2012-11-26 ALIBABA CLOUD COMPUTING (BEIJING) CO., com 2012-12-09 ALIBABA CLOUD COMPUTING (BEIJING) CO., com 2012-11-26 ALIBABA CLOUD COMPUTING (BEIJING) CO., com 2012-11-26 ALIBABA CLOUD COMPUTING (BEIJING) CO., 2333youxi[.]com blazefire[.]com blazefire[.]net

Mobile 257

Mobile Technology Manufacturing Malware 257

SiteLock

AUGUST 27, 2021

Seems like every few months another blogger or security maven laments the passing of the password, a security tool that has outlived its usefulness and should now be replaced with something more of the times, more effective, more secure. And while the password might be on life-support, it’s not quite gone. That’s right.

Passwords 75

Passwords Data breaches Banking Accountability 75

Security Affairs

MAY 15, 2020

Data appears to come from past data breaches, the oldest one dates back as 2012 while the latest one dates April 2020. million April 2018 Netlog.com (Twoo.com) 57 million November 2012 Dubsmash.com Phone numbers 47.1 million September 2012 Bukalapak.com 13 million February 2018 Bookmate.com 8 million July 2018 ReverbNation.com 7.9

Data breaches 139

Data breaches Advertising Passwords Hacking 139

Krebs on Security

JUNE 1, 2023

.” Constella Intelligence , a company that tracks exposed databases, finds that 774748@gmail.com was used in connection with just a handful of passwords, but most frequently the password “ featar24 “ Pivoting off of that password reveals a handful of email addresses, including akafitis@gmail.com. ru in 2008.

Malware 283

Malware Cybercrime Software Accountability 283

Krebs on Security

APRIL 30, 2024

Kivimäki and other HTP members were involved in mass-compromising web servers using known vulnerabilities, and by 2012 Kivimäki’s alias Ryan Cleary was selling access to those servers in the form of a DDoS-for-hire service. Kivimäki was 15 years old at the time.

DDOS 279

DDOS Cybercrime Hacking Passwords 279

Security Affairs

DECEMBER 29, 2023

On Christmas Eve, Resecurity’s HUNTER unit spotted the author of perspective password stealer Meduza has released a new version (2.2). Presently, Meduza password stealer supports Windows Server 2012/2016/2019/2022 and Windows 10/11.

Password Management 145

Password Management Cryptocurrency Passwords Authentication 145

Security Affairs

NOVEMBER 22, 2019

The banking trojan is able to record keystrokes, to steal passwords stored on the PC, and take screenshots and videos from the victims’ machine. Lisov operated the infrastructure behind the NeverQuest malware between June 2012 and January 2015, the managed a network of servers containing lists of millions of stolen login credentials.

Banking 133

Banking Malware Advertising Passwords 133

Krebs on Security

SEPTEMBER 17, 2018

14, KrebsOnSecurity alerted GovPayNet that its site was exposing at least 14 million customer receipts dating back to 2012. Until this past weekend it was possible to view millions of customer records simply by altering digits in the Web address displayed by each receipt. On Friday, Sept.

Mobile 251

Mobile Government Identity Theft Telecommunications 251

Security Affairs

JANUARY 4, 2021

The US authorities also accuse Assange of having conspired with Army intelligence analyst Chelsea Manning to crack a password hash for an Army computer to access classified documents that were later published on the WikiLeaks website.

Government 144

Government Risk Passwords Hacking 144

Krebs on Security

MARCH 22, 2021

Flushed with venture capital funding in 2012, Norse’s founders started hiring dozens of talented cybersecurity professionals. Victims of those breaches lost a lot of private data including passwords, and Frigg will help them secure their private data in the future.

Surveillance 300

Surveillance Computers and Electronics Internet Internet 300

Krebs on Security

FEBRUARY 9, 2023

Initially a stealthy trojan horse program delivered via email and used to steal passwords, Trickbot evolved into “a highly modular malware suite that provides the Trickbot Group with the ability to conduct a variety of illegal cyber activities, including ransomware attacks,” the Treasury Department said.

Hacking 208

Hacking Cybercrime Ransomware Government 208

Security Affairs

JUNE 25, 2024

The US authorities also accuse Assange of having conspired with Army intelligence analyst Chelsea Manning to crack a password hash for an Army computer to access classified documents that were later published on the WikiLeaks website.

Passwords 128

Passwords Hacking Government Information Security 128

Krebs on Security

SEPTEMBER 30, 2024

KrebsOnSecurity has learned that many of the man’s alleged targets were members of UGNazi , a hacker group behind multiple high-profile breaches and cyberattacks back in 2012. A photo released by the government allegedly showing Iza posing with several LASD officers on his payroll.

Cryptocurrency 290

Cryptocurrency Government Internet Internet 290

eSecurity Planet

JANUARY 29, 2024

Dashlane is a password management software that’s popular for business and personal uses alike. The company was founded in 2009, and the first software edition was released in 2012. Like many other password managers, Dashlane makes it easy for users to create new passwords and store existing ones in a secure vault.

Password Management 109

Password Management Passwords Authentication Accountability 109

Troy Hunt

JUNE 10, 2019

Increasingly, I was writing about what I thought was a pretty fascinating segment of the infosec industry; password reuse across Gawker and Twitter resulting in a breach of the former sending Acai berry spam via the latter. And while I'm on Sony, the prevalence with which their users applied the same password to their Yahoo!

Data breaches 278

Data breaches Passwords InfoSec Accountability 278

The Last Watchdog

FEBRUARY 3, 2020

Historical context There was strong anti-American sentiment woven into the Shamoon “wiper” virus that devastated Saudi oil company Aramaco in August of 2012. The report goes on to describe how a group of state-sponsored hackers, referred to as Elfin or APT33 , carried out extensive “password-spraying” attacks.

Energy and Utilities 330

Energy and Utilities Malware Hacking Passwords 330

Security Affairs

FEBRUARY 21, 2024

Mustang Panda has been active since at least 2012, it targeted American and European entities such as government organizations, think tanks, NGOs , and even Catholic organizations at the Vatican. Past campaigns were focused on Asian countries, including Taiwan, Hong Kong, Mongolia, Tibet, and Myanmar.

Malware 144

Malware Phishing Government Passwords 144

CyberSecurity Insiders

DECEMBER 23, 2021

The announcement was made as the said guy was found guilty of stealing over 100 million password credentials belonging to users related to LinkedIn, Dropbox and Automatic. As per the latest court briefing, Nikulin gained fraudulent access to LinkedIn database to get the admin password of LinkedIn Engineer Nick Berry.

Passwords 103

Passwords Engineering Malware Cybersecurity 103

Security Affairs

DECEMBER 25, 2018

Threat actors are attempting to exploit a flaw in Orange LiveBox ADSL modems to retrieve their SSID and WiFi password in plaintext. The flaw tracked as CVE-2018-20377 is known at least since 2012 when Rick Murray described it in a blog post. . . Mursch also reported that many exposed devices use default credentials (i.e.

Passwords 110

Passwords Wireless Advertising Firmware 110

Security Affairs

JUNE 25, 2020

In 2012, Assange communicated directly with a leader of the hacking group LulzSec (who by then was cooperating with the FBI), and provided a list of targets for LulzSec to hack. “In 2010, Assange gained unauthorized access to a government computer system of a NATO country. Department of Defense computer.”

Hacking 108

Hacking Advertising Passwords Government 108

Security Affairs

AUGUST 16, 2024

The marketplace had been active since 2012, it was allowing sellers to offer stolen login credentials, including usernames and passwords for bank accounts, online payment accounts, mobile phone accounts, retailer accounts, and other online accounts.

Banking 133

Banking Accountability Retail Mobile 133

Security Affairs

MARCH 22, 2020

The expert Bob Diachenko has discovered an unsecured Elasticsearch install belonging to a UK security firm that contained 5 billion records of data leaked in previous incidents that took place between 2012 and 2019. ” wrote Security Discovery’s researcher Bob Diachenko.

Data breaches 111

Data breaches Advertising DNS Engineering 111

CyberSecurity Insiders

MARCH 23, 2022

Meanwhile, a report released by security experts from Cybersecurity firm Bulletproof states that all Raspberry Pi users using Linux operating system should change their default passwords as there is a possibility that they can be hijacked through bots. And if the users do not change such credentials, then they can be hacked at any moment.

Authentication 113

Authentication Retail Media Marketing 113

SecureWorld News

MARCH 24, 2022

What was compromised: names, email addresses, and passwords. A majority of the passwords were protected by the weak SHA-1 hashing algorithm, which resulted in 99% of the credentials being posted by LeakSource.com in 2016. What was compromised: email addresses, usernames, and passwords for some but not all affected accounts.

Data breaches 121

Data breaches Passwords Accountability Government 121

The Last Watchdog

JUNE 21, 2020

The Archiveus Trojan from 2006 was the first one to use RSA cipher, but it was reminiscent of a proof of concept and used a static 30-digit decryption password that was shortly cracked. FBI spoofs 2012 – 2013. It surfaced in November 2012 and was making thousands of victims a day. None of these early threats went pro.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

eSecurity Planet

JULY 8, 2021

Dashlane is a password management software that’s popular for business and personal uses alike. The company was founded in 2009, and the first software edition was released in 2012. Like many other password managers, Dashlane makes it easy for users to create new passwords and store existing ones in a secure vault.

Password Management 98

Password Management Passwords Authentication Accountability 98