Security Affairs

APRIL 13, 2020

The crew behind the Sodinokibi Ransomware plans to stop accepting Bitcoin and switched on Monero cryptocurrency to hide the money trail. The gang behind the Sodinokibi Ransomware has started accepting the Monero cryptocurrency instead of Bitcoin to make it harder investigation by law enforcement agencies.

Ransomware 115

Ransomware Cryptocurrency Advertising Hacking 115

Security Affairs

MARCH 17, 2020

Coronavirus -themed attacks continue to increase, experts observed new Coronavirus ransomware that acts as a cover for Kpot Infostealer. In this campaign, crooks are exploiting the interest in the Coronavirus (COVID-19) outbreak to deliver a couple of malware, the CoronaVirus Ransomware and the Kpot information-stealing Trojan.

Ransomware 100

Ransomware Advertising Cryptocurrency Passwords 100

Security Affairs

JULY 8, 2020

Good news for the victims of the ThiefQuest (EvilQuest) ransomware, they can recover their encrypted files for free. The victims of the ThiefQuest (EvilQuest) ransomware victims can recover their encrypted files without needing to pay the ransom due to the availability of a free decryptor. macOS ransomware #decryptor ( #EvilQuest )!

Ransomware 108

Ransomware Encryption Malware InfoSec 108

Krebs on Security

APRIL 7, 2022

and Germany moved to decapitate “ Hydra ,” a billion-dollar Russian darknet drug bazaar that also helped to launder the profits of multiple Russian ransomware groups. ” In Dragonfly’s second iteration between 2014 and 2017, the hacking group spear-phished more than 3,300 people at more than 500 U.S.

Marketing 245

Marketing Energy and Utilities Malware Ransomware 245

Security Affairs

MAY 1, 2023

The previously undetected LOBSHOT malware is distributed using Google ads and gives operators VNC access to Windows devices. Threat actors are using an elaborate scheme of fake websites through Google Ads to spread their malware, the backdoors are embedded in installers for apparently legitimate applications, such as AnyDesk.

Malware 91

Malware Cybercrime Banking Software 91

Security Affairs

JUNE 3, 2020

REvil /Sodinokibi ransomware operators launch an auction site to sell data stolen from victims that have chosen to not pay the ransom. The Sodinokibi ransomware operators have launched an eBay-like auction site for stolen data where they plan to sell data stolen from the victims. Source BleepingComputer.

Ransomware 104

Ransomware Advertising Cryptocurrency Malware 104

Security Affairs

MARCH 11, 2019

Experts observed the STOP ransomware installing the Azorult password-stealing Trojan to steal account credentials, cryptocurrency wallets, and more. The STOP ransomware made the headlines because it is installing password-stealing Trojans on the victims’ machines. SecurityAffairs – STOP ransomare , malware).

Encryption 86

Encryption Ransomware Cryptocurrency Passwords 86

Security Affairs

APRIL 5, 2019

Researchers at AT&T Alien Labs have spotted a malware called Xwo that is actively scanning the Internet for exposed web services and default passwords. Experts at AT&T Alien Labs discovered a new piece of malware called Xwo that is actively scanning the Internet for exposed web services and default passwords.

Internet 92

Internet Internet Passwords Malware 92

Security Affairs

NOVEMBER 16, 2020

The activity of the Lazarus APT group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks. The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFT attacks in 2016, and the Sony Pictures hack. ” reads the analysis published by ESET.

Malware 104

Malware Software Cryptocurrency Financial Services 104

Security Affairs

APRIL 24, 2020

The popular SeaChange video platform is the latest victim of the Sodinokibi Ransomware gang, which is threatening to leak the stolen data. SeaChange International, the multinational supplier of video delivery software solutions, was the victim of the Sodinokibi Ransomware gang. SecurityAffairs – Sodinokibi Ransomware, hacking).

Software 104

Software Ransomware VPN Advertising 104

Security Affairs

APRIL 12, 2019

Hackers are using the EternalBlue exploit and leveraging advantage of Living off the Land ( LotL ) obfuscated PowerShell-based scripts to deliver malware and a Monero cryptocurrency. “The malware also uses the pass the hash method, wherein it authenticates itself to remote servers using the user’s hashed password.

Malware 78

Malware Cryptocurrency Passwords Advertising 78

SC Magazine

FEBRUARY 17, 2021

billion in currency and cryptocurrency and further other strategic interests for the North Korean government. The charges captures years-worth of North Korean hacking, including the widely publicized 2014 Sony hack, the 2016 hack of the Central Bank of Bangladesh, the 2017 WannaCry ransomware attack and others.

Hacking 103

Hacking Cryptocurrency Banking Malware 103

Security Affairs

NOVEMBER 4, 2019

Security experts warn of a new piece of malware dubbed QSnatch that already infected thousands of QNAP NAS devices worldwide. A new piece of malware dubbed QSnatch is infecting thousands of NAS devices manufactured by the Taiwanese vendor QNAP. At the time of writing, it is still unclear how threat actor will use the malware (i.e.

Malware 66

Malware Firmware Advertising Encryption 66

Security Affairs

AUGUST 18, 2020

Ukrainian authorities arrested the members of a cybercrime gang who ran 20 cryptocurrency exchanges involved in money laundering. Police in Ukraine announced the arrest of the members of a cybercrime gang composed of three individuals who ran 20 cryptocurrency exchanges used in money laundering activities. Pierluigi Paganini.

Cryptocurrency 106

Cryptocurrency Computers and Electronics Cybercrime Digital transformation 106

Security Affairs

AUGUST 15, 2020

A new Mac malware, tracked as XCSSET, spreads through Xcode projects and exploits two zero-day vulnerabilities, experts warn. XCSSET is a new Mac malware that spreads through Xcode projects and exploits two zero-day vulnerabilities to steal sensitive information from target systems and launch ransomware attacks.

Spyware 126

Spyware Malware Advertising Cryptocurrency 126

Security Affairs

AUGUST 30, 2020

A Google Drive weakness could allow attackers to serve malware Adobe released open- source tool Stringlifier to identify randomly generated strings Canadian delivery company Canpar Express suffered a ransomware attack Cybercriminal greeners from Iran attack companies worldwide for financial gain Dark web Empire Market still down after 3 days.

DDOS 98

DDOS Scams Malware Advertising 98

Security Affairs

SEPTEMBER 27, 2020

fitness chains Town Sports leaked online Group-IB detects a series of ransomware attacks by OldGremlin HOW DO PROVIDERS IMPLEMENT INTERNET BLOCKING IN BELARUS? fitness chains Town Sports leaked online Group-IB detects a series of ransomware attacks by OldGremlin HOW DO PROVIDERS IMPLEMENT INTERNET BLOCKING IN BELARUS?

IoT 102

IoT Banking Advertising Ransomware 102

Security Affairs

MAY 1, 2019

Threat actors are exploiting a recently patched critical Oracle WebLogic Server vulnerability to deliver the Sodinokibi ransomware to organizations. Threat actors are delivering a new piece of malware, tracked as Sodinokibi, by exploiting a recently patched Oracle WebLogic Server vulnerability. Pierluigi Paganini.

Ransomware 64

Ransomware Advertising Cryptocurrency Malware 64

Security Affairs

DECEMBER 25, 2020

The activity of the Lazarus APT group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks. The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFT attacks in 2016, and the Sony Pictures hack. ” continues Kaspersky. ” concludes Kaspersky.

Cryptocurrency 127

Cryptocurrency Malware Hacking Phishing 127

Security Affairs

MAY 9, 2020

The Sodinokibi ransomware gang stolen gigabytes of legal documents from the law firm of the stars, Grubman Shire Meiselas & Sacks (GSMLaw). The Sodinokibi ransomware gang has published a screenshot of the folders they have stolen from the law firm. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Hacking 118

Hacking Ransomware Advertising Cryptocurrency 118

Security Affairs

DECEMBER 1, 2019

After 1 Million of malware samples analyzed. Livingston School District hit by a ransomware attack. Upbit cryptocurrency exchange hacked, crooks stole $48.5 A Ransomware infected the network of the cybersecurity firm Prosegur. Dutch National Cyber Security Centre warns ransomware infected thousands of businesses.

Advertising 93

Advertising Ransomware Cryptocurrency Government 93

Security Affairs

SEPTEMBER 23, 2020

Researchers from threat hunting and intelligence firm Group-IB have detected a successful attack by a ransomware gang tracked as OldGremlin. Group-IB , a global threat hunting and intelligence company headquartered in Singapore, has detected a successful attack by a ransomware gang, codenamed OldGremlin. Up-to-date phishing.

Ransomware 104

Ransomware Phishing Banking Advertising 104

Security Affairs

JANUARY 26, 2020

A new piece of the Ryuk malware has been improved to steal confidential files related to the military, government, financial statements, and banking. It is not clear if the malware was developed by the threat actors behind Ryuk Ransomware for data exfiltration. ” reported BleepingComputer. .

Government 114

Government Banking Malware Advertising 114

Security Affairs

NOVEMBER 19, 2019

Ransomware accounted for over half of all malicious mailings in H1 2019, Troldesh aka Shade being the most popular tool among cybercriminals. The report’s findings reveal that email remains the main method of delivering ransomware, banking Trojans, and backdoors. Another trend was disguising malware in emails.

Ransomware 71

Ransomware Antivirus Malware Banking 71

Security Affairs

MARCH 31, 2019

Malware Static Analysis. Anubis II – malware and afterlife. Free Tools: spotting APTs through Malware streams. PewDiePie ransomware oblige users subscribe to PewDiePie YouTube channel. How to get back files encrypted by the Hacked Ransomware for free. Malware researchers decrypted the Qrypter Payload.

Cryptocurrency 70

Cryptocurrency Banking Malware Data breaches 70

Security Affairs

NOVEMBER 29, 2018

DoJ charges two Iranian men over their alleged role in creating and spreading the infamous SamSam ransomware. Two Iranian men, Faramarz Shahi Savandi (34) and Mohammad Mehdi Shah Mansouri (27) have been charged by DoJ for their role in creating and distributing the dreaded SamSam ransomware. ” reads the DoJ indictment. .

Ransomware 85

Ransomware Encryption Advertising Backups 85

Security Affairs

FEBRUARY 17, 2021

Department of Justice charged Park over WannaCry and 2014 Sony Pictures Entertainment Hack. billion of money and cryptocurrency from financial institutions and companies, to create and deploy multiple malicious cryptocurrency applications, and to develop and fraudulently market a blockchain platform.” sanctions.

Cryptocurrency 74

Cryptocurrency Banking Hacking Ransomware 74

Security Affairs

APRIL 19, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Scams 84

Scams Phishing Advertising DDOS 84

Security Affairs

JUNE 28, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

DDOS 89

DDOS Spyware Advertising Healthcare 89

Security Affairs

APRIL 12, 2020

Million ransom to restore after a ransomware attack CVE-2020-3952 flaw could allow attackers to hack VMware vCenter Server DoppelPaymer crew leaked internal confidential documents belonging to aerospace companies Hacker stole $250K from decentralized Bitcoin exchange Bisq Sophos Sandboxie is now available as an open-source tool Tails OS version 4.5

Hacking 87

Hacking Advertising Surveillance Phishing 87

Security Affairs

JUNE 17, 2021

Russian national Oleg Koshkin was convicted for charges related to the operation of a malware crypting service used by the Kelihos botnet to obfuscate malware and evade detection. “Levashov provided the Kelihos malware to Crypt4U personnel for crypting before distributing it to his victims.

Antivirus 104

Antivirus Malware Cryptocurrency Software 104

Security Affairs

MARCH 8, 2020

Nemty ransomware LOVE_YOU malspam campaign. Nemty ransomware operators launch their data leak site. US officials charge two Chinese men for laundering cryptocurrency for North Korea. Visser Precision, a part maker for Tesla, Boeing, and Lockheed Martin hit with data-stealing ransomware. Pierluigi Paganini.

Data breaches 69

Data breaches Mobile Advertising Ransomware 69

Security Affairs

JUNE 20, 2020

This is the second cyber attack is a few days, last week the systems at Lion were infected with the REvil ransomware and attackers demanded a ransom of reportedly $1 million last week. ” According to the media, the Lion’s IT staff is now focusing on defence efforts over restoration from the previous ransomware attack. .

Cyber Attacks 102

Cyber Attacks Media Advertising Manufacturing 102

Security Affairs

OCTOBER 19, 2020

The Russian citizen Alexander Vinnik goes on trial in Paris for having defrauded nearly 200 victims across the world of 135 million euros using ransomware. The Russian man Alexander Vinnik goes on trial in Paris for having defrauded nearly 200 victims across the world of 135M euros using ransomware. million withdrawn.

Advertising 120

Advertising Cybercrime Hacking Cryptocurrency 120

Security Affairs

FEBRUARY 25, 2021

. “Once the malicious document is opened, the malware is dropped and proceeds to the next stage of the deployment process. The ThreatNeedle malware used in this campaign belongs to a malware family known as Manuscrypt, which belongs to the Lazarus group and has previously been seen attacking cryptocurrency businesses.”

Malware 95

Malware Cryptocurrency Password Management Encryption 95

Security Affairs

JANUARY 6, 2019

Malware-based attack hit delivery chain of the major US newspapers. Experts show that is easy to hack Hardware-based Cryptocurrency Wallets. Cloud Hosting Provider DataResolution.net hit by the Ryuk ransomware?. Did Aurora Ransomware infect you? Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Advertising 76

Advertising Cryptocurrency Hacking Ransomware 76

Security Affairs

JANUARY 13, 2019

Proofpoint analyzed two strains of malware tracked as ServHelper and FlawedGrace distributed through phishing campaigns by the TA505 crime gang. Security researchers at Proofpoint researchers discovered two strains of malware tracked as ServHelper and FlawedGrace distributed through phishing campaigns by the TA505 crime gang.

Malware 94

Malware Financial Services DNS Retail 94