Security Affairs

JULY 27, 2022

Researchers uncovered an ongoing operation, codenamed DUCKTAIL that targets Facebook Business and Ad Accounts. Researchers from WithSecure (formerly F-Secure Business) have discovered an ongoing operation, named DUCKTAIL, that targets individuals and organizations that operate on Facebook’s Business and Ads platform.

Accountability 130

Accountability Malware Media Marketing 130

Security Affairs

DECEMBER 25, 2024

In 2018, the Lazarus APT group targeted several cryptocurrency exchanges , including the campaign tracked as Operation AppleJeus discovered in August 2018. The company assured customers their Bitcoin (BTC) deposits would be fully guaranteed. ” reads the press release published by FBI. FBI concludes.

Cryptocurrency 120

Cryptocurrency Social Engineering Hacking Cybercrime 120

Security Affairs

APRIL 28, 2021

The malware remained undetected for years while threat actors were employing it in attacks to harvest and exfiltrate sensitive information from infected devices. The name RotaJakiro comes from the fact that the family uses rotate encryption and behaves differently for root/non-root accounts when executing. Pierluigi Paganini.

Encryption 103

Encryption Malware IoT Accountability 103

Security Affairs

NOVEMBER 15, 2020

million Pluto TV user accounts on a hacking forum for free, he claims they were stolen by ShinyHunters threat actor. Bleeping Computer, which has validated the authenticity of the archive, reported that the latest record in the database was created on October 12th, 2018. accounts exposed appeared first on Security Affairs.

Accountability 126

Accountability Hacking Data breaches Passwords 126

Security Affairs

AUGUST 19, 2020

Chinese hackers have hacked thousands of Taiwan Government email accounts belonging at least 10 Taiwan government agencies, officials said. Chinese hackers have gained access to around 6,000 email accounts belonging to at least 10 Taiwan government agencies, officials said. Pierluigi Paganini. SecurityAffairs – hacking, Taiwan).

Government 144

Government Hacking Accountability Advertising 144

Security Affairs

FEBRUARY 23, 2021

Twitter removed dozens of accounts allegedly used by Russia-linked threat actors to disseminate disinformation and target western countries. Twitter has removed dozens of accounts used by Russia-linked threat actors that were used to disseminate disinformation and to target the European Union, the United States, and the NATO alliance.

Accountability 120

Accountability Government Internet Internet 120

Security Affairs

FEBRUARY 10, 2022

Spanish National Police has arrested eight alleged members of a crime organization who were able to steal money from the bank accounts of the victims through SIM swapping attacks. Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts.

Banking 123

Banking Accountability Mobile Cryptocurrency 123

Security Affairs

MAY 24, 2019

Social network giant Facebook revealed it recently disabled billions of accounts operated by “bad actors” and that five percent of active accounts are fake. billion accounts in the first quarter of 2019, the number if doubled respect the number of accounts blocked in the prior quarter. Pierluigi Paganini.

Accountability 107

Accountability Advertising Technology Cybersecurity 107

Security Affairs

SEPTEMBER 2, 2019

Login details of more than 36 million Poshmark accounts are available for sale in the cybercrime underground. Earlier in August, Poshmark , a social commerce marketplace where people in the United States can buy and sell new or used clothing, shoes, and accessories, disclosed a data breach that took place in May 2018.

Accountability 108

Accountability Data breaches Passwords Advertising 108

Security Affairs

SEPTEMBER 1, 2021

Securities and Exchange Commission (SEC) announced sanctions against several organizations over email account hacking. Securities and Exchange Commission (SEC) announced sanctions against eight entities belonging to three companies over email account hacking due to cybersecurity failures. Pierluigi Paganini.

Accountability 106

Accountability Hacking Financial Services Cybersecurity 106

Security Affairs

APRIL 2, 2025

It can steal accounts, send messages, steal crypto, monitor browsing, intercept SMS, and more. ” To protect against malware, experts recommend buying smartphones from authorized distributors and installing security solutions like Kaspersky for Android immediately. .” 231 banking malware.

Malware 119

Malware Cryptocurrency Mobile Firmware 119

Security Affairs

JUNE 4, 2020

The Japanese cryptocurrency exchange Coincheck announced that threat actors have accessed their account at the Oname.com domain registrar and hijacked one of its domain names. “The domain registration information has been amended at around 20:52 on June 1, 2020, and there is no impact on the customer’s assets at this time.”

Accountability 128

Accountability Phishing DNS Cryptocurrency 128

Security Affairs

DECEMBER 23, 2024

Will Cathcart of WhatsApp called the ruling a major privacy victory, emphasizing accountability for spyware firms after a five-year legal battle. We spent five years presenting our case because we firmly believe that spyware companies could not hide behind immunity or avoid accountability for their unlawful actions.

Spyware 108

Spyware Surveillance Software Hacking 108

Krebs on Security

APRIL 14, 2019

The ne’er-do-well who set up the account below has been paying $550 a month for a Land Lordz “basic plan” subscription at landlordz[.]site The site looks exactly like the real Airbnb, includes pictures of the requested property, and steers visitors toward signing in or to creating a new account. co.uk , airbnb.pt-anuncio[.]com

Scams 273

Scams Advertising Accountability Phishing 273

Security Affairs

JULY 7, 2019

Yesterday, July 6, 2019, hackers breached the GitHub account of Canonical Ltd., On July 6, 2019, hackers have breached the GitHub account of Canonical Ltd., Hackers at least created 11 new GitHub repositories in compromised Canonical account. the company behind the Ubuntu Linux distribution. ” states the Canonical team.

Accountability 111

Accountability Advertising Cryptocurrency Hacking 111

Security Affairs

JULY 8, 2019

The UK Information Commissioner’s Office (ICO) fined British Airways with £183 million for failing to protect the personal information of roughly 500,000 customers during 2018 security breach. “The proposed fine relates to a cyber incident notified to the ICO by British Airways in September 2018. .

Data breaches 101

Data breaches Advertising Hacking Mobile 101

Security Affairs

DECEMBER 17, 2024

The threat actors attempted to exploit multiple vulnerabilities in DVRs, including CVE-2017-7921, CVE-2018-9995 , CVE-2020-25078, CVE-2021-33044 , and CVE-2021-36260. In March 2024, threat actors behind this campaign started targeting Internet of Things (IoT) devices in the US, Australia, Canada, New Zealand, and the United Kingdom.

Architecture 106

Architecture Internet Internet Malware 106

Security Affairs

NOVEMBER 28, 2020

A credible threat actor is offering access to the email accounts of hundreds of C-level executives for $100 to $1500 per account. Access to the email accounts of hundreds of C-level executives is available on the Exploit.in for $100 to $1500 per account. Exploit.in ” reported ZDNet. Pierluigi Paganini.

Accountability 115

Accountability Cybercrime Hacking Retail 115

Security Affairs

NOVEMBER 18, 2024

The security breach impacted a limited number of customers, only 836 individuals. The carrier states that personal financial account information and call records were not affected by the security breach. In 2018, data breach exposed personal information of up to 2 million customers.

Mobile 111

Mobile Telecommunications Data breaches Hacking 111

Security Affairs

JANUARY 20, 2023

Bad news for T-Mobile, the company disclosed a new data breach that resulted in the theft of data belonging to 37 customer accounts. T-Mobile suffered a new data breach, threat actor stole the personal information of 37 million current postpaid and prepaid customer accounts.

Data breaches 98

Data breaches Mobile Accountability Telecommunications 98

Security Affairs

FEBRUARY 11, 2020

Unauthorized use of customer information by Woori Bank, ‘crime act’ for customers. The bank changed 23,000 passwords in 2018 without consent. It is controversial that Woori Bank changed the p assword s of 23,000 customer dormant accounts without consent in July 2018. About the author: ???

Banking 129

Banking Passwords Accountability Advertising 129

Security Affairs

DECEMBER 3, 2024

Launched in 2018, the platform allows users to trade various cryptocurrencies, including Bitcoin, Ethereum, and Ripple, through spot trading and leverage trading services. SBI VC Trade published a notice regarding the basic agreement on the transfer of accounts and assets held by DMM Bitcoin. billion yen), from its wallets.

Cryptocurrency 61

Cryptocurrency Financial Services Accountability Hacking 61

Security Affairs

MARCH 23, 2020

107 million records include personal data and basic account information such as the user ID, number of Weibo tweets, number of followers and accounts users are following, account gender, geographic location and more. When we found the security vulnerability we took measures to fix it. 5.38??????????????

Accountability 144

Accountability Passwords Advertising Internet 144

The Last Watchdog

OCTOBER 29, 2018

The headlines immediately attempted to lay the blame, in large part, on the fact that Equifax’s chief information security officer was a music major and did not have a background in technology. The technologies existing in 2018 will undoubtedly differ from those that exist in 2020. Equifax was not special in this regard.

Data privacy 164

Data privacy Data breaches Insurance Information Security 164

Security Affairs

MAY 15, 2020

million phone numbers that are part of Dubsmash data breach that occurred in 2018. million April 2018 Netlog.com (Twoo.com) 57 million November 2012 Dubsmash.com Phone numbers 47.1 million December 2018 Shein.com 42 million June 2018 Fotolog.com 33.5 million December 2018 CafePress.com 23.6

Data breaches 131

Data breaches Advertising Passwords Hacking 131

Security Affairs

APRIL 7, 2021

Attackers are actively exploiting the CVE-2018-13379 flaw in Fortinet VPN to deploy the Cring ransomware to organizations in the industrial sector. Upon compromising the domain administrator account, threat actors could distributee malware to other systems on the same network. ” continues Kaspersky.

VPN 128

VPN Ransomware Antivirus Firmware 128

Security Affairs

AUGUST 7, 2019

Accessing an online account, users could make several actions, such as manage insurance claims and pay bills. “State Farm recently detected an information security incident in which a bad actor used a list of user IDs and passwords obtained from some other source, like the dark web, to attempt access to State Farm online accounts.

Insurance 110

Insurance Data breaches Financial Services Passwords 110

Krebs on Security

JULY 18, 2023

15, 2018, the Royal Canadian Mounted Police (RCMP) charged then 27-year-old Bloom, of Thornhill, Ontario, with selling stolen personal identities online through the website LeakedSource[.]com. LeakedSource was advertised on a number of popular cybercrime forums as a service that could help hackers break into valuable or high-profile accounts.

Hacking 234

Hacking Accountability Data breaches Marketing 234

Security Affairs

NOVEMBER 26, 2019

A Czech intelligence report states that Russian and Chinese cyberspies carried out several attacks against the country during 2018. Cezch intelligence believe s that agents of all the Russian intelligence services were secretly operating on the Czech soil in 2018.

Cyber Attacks 126

Cyber Attacks Advertising Information Security Government 126

Security Affairs

FEBRUARY 27, 2021

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. The criminals could hijack social media accounts and bypass 2FA services based on SMS used by online services, including financial ones. .

Mobile 132

Mobile Data breaches Telecommunications Accountability 132

Security Affairs

DECEMBER 29, 2021

T-Mobile has suffered another security breach, threat actors gained access to the accounts of “a small number of” customers.’. According to The T-Mo Report , which viewed T-Mobile internal documents, there was “unauthorized activity” on some customer accounts. “Affected customers fall into one of three categories. .”

Data breaches 144

Data breaches Mobile Accountability Wireless 144

Krebs on Security

JANUARY 6, 2020

Organizations in the throes of cleaning up after a ransomware outbreak typically will change passwords for all user accounts that have access to any email systems, servers and desktop workstations within their network. ” Security news site Bleeping Computer reported on the T-Systems Ryuk ransomware attack on Dec. In our Dec.

Passwords 255

Passwords Ransomware Password Management Malware 255

Security Affairs

MARCH 3, 2025

CVE-2018-8639 (CVSS score of 7.8) – an elevation of privilege vulnerability that impacts Windows when the Win32k component fails to properly handle objects in memory. ” reads the advisory. “To exploit this vulnerability, an attacker would first have to log on to the system.

Small Business 58

Small Business Authentication Hacking Accountability 58

Security Affairs

MARCH 27, 2020

The number of alerts decreased by 25% when compared to 2018, possible reasons for this drop could be the increased efficiency of defense measures implemented by Google, but we cannot underestimate the risk of an increased level of sophistication of the attacks that allowed nation-state actors to fly under the radar.

Phishing 145

Phishing Accountability Advertising Malware 145

Security Affairs

MARCH 3, 2020

The funds were stolen by North Korean actors in 2018, as detailed in the civil forfeiture complaint also unsealed today.” According to the Treasury and DOJ, Tian and Li received funds from North Korea-controlled accounts in at least two cases. ” reads the press release published by the DoJ. million from another exchange.

Cryptocurrency 138

Cryptocurrency Banking Hacking Accountability 138

Security Affairs

NOVEMBER 18, 2024

The General Data Protection Regulation ( GDPR ), enacted in 2018, has set a new standard for data privacy across the European Union (EU). The Irish Data Protection Commission found that Instagram’s default settings made children’s accounts visible to the public, exposing personal information like phone numbers and email addresses.

Data privacy 126

Data privacy Risk Surveillance Government 126

Security Affairs

JULY 31, 2021

Microsoft Office 365 email accounts of employees at 27 US Attorneys’ offices were breached by the Russia-linked SVR group as part of the SolarWinds hack, DoJ warns. The APT is believed to have access to compromised accounts from approximately May 7 to December 27, 2020. ” reads the update provided by DoJ.

Accountability 126

Accountability Hacking Information Security Government 126