Krebs on Security

JANUARY 30, 2024

authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. 12 blog post , the attackers used their access to Mailchimp employee accounts to steal data from 214 customers involved in cryptocurrency and finance. 9, 2024, U.S.

Social Engineering 358

Social Engineering Mobile Passwords Cybercrime 358

SecureList

JANUARY 13, 2022

Also, we have previously reported on cryptocurrency-focused BlueNoroff attacks. It appears that BlueNoroff shifted focus from hitting banks and SWIFT-connected servers to solely cryptocurrency businesses as the main source of the group’s illegal income. Note, this is no proof that the companies listed were compromised.

Cryptocurrency 145

Cryptocurrency Malware Accountability Banking 145

Malwarebytes

APRIL 19, 2022

A new advisory issued by the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the US Treasury Department (Treasury), highlights the cyberthreats associated with cryptocurrency thefts and tactics used by a North Korean state-sponsored advanced persistent threat (APT) group since at least 2020.

Cryptocurrency 137

Cryptocurrency Social Engineering Computers and Electronics Engineering 137

SecureList

AUGUST 23, 2021

billion USD in 2021, which is slightly less than the total revenue in 2020 but still significantly above the pre-pandemic figures. This rapid growth owes a lot to the surge in mobile gaming and focus on social interaction during the pandemic. Pandemic-related statistics cover the period of January 2020 through June 2021.

Mobile 139

Mobile Adware Malware Phishing 139

Krebs on Security

APRIL 20, 2023

This ongoing North Korean espionage campaign using LinkedIn was first documented in August 2020 by ClearSky Security , which said the Lazarus group operates dozens of researchers and intelligence personnel to maintain the campaign globally. Microsoft Corp.

Malware 334

Malware Software Technology Accountability 334

Malwarebytes

FEBRUARY 15, 2021

The UK’s National Crime Agency (NCA)—working alongside the US Secret Service, Homeland Security, the FBI, Europol, and the District Attorney’s Office of Santa Clara California—spearheaded the arrest of eight British citizens in the UK and Scotland, aged between 18 to 26, for a string of SIM swapping attacks that occurred in 2020.

Social Engineering 139

Social Engineering Cryptocurrency Accountability Authentication 139

The Last Watchdog

APRIL 14, 2022

The email specifies that the HR manager should include the codes associated with each card, which the scammer behind the scenes then sells online for cash or cryptocurrency. billion in annual losses during 2020, resulting from 19,369 incidents. Scenario 3. Prevention is the cure.

Phishing 247

Phishing Accountability Scams Social Engineering 247

Krebs on Security

AUGUST 30, 2022

4 it became aware of unauthorized access to information related to a limited number of Twilio customer accounts through a sophisticated social engineering attack designed to steal employee credentials. On that last date, Twilio disclosed that on Aug. ” On July 28 and again on Aug. According to an Aug. In an Aug. ”

Mobile 344

Mobile Phishing Authentication Accountability 344

SecureWorld News

MAY 11, 2023

RELATED: Famous Twitter Accounts Hacked: Insider Threat or Social Engineering Attack? ] Lastly, the DOJ says that O'Connor stalked and threatened a minor victim in June and July 2020, orchestrating a series of swatting attacks on this third victim. Now, the U.S.

Accountability 98

Accountability Social Engineering Media Hacking 98

Security Boulevard

AUGUST 2, 2022

Widespread implementation of decentralized finance (DeFi) systems since 2020 has created new fertile ground for a variety of threat actors to shift the development of cyberattack tactics, techniques, and procedures (TTPs). It is easy to detect and block things like malicious cryptocurrency apps or crypto-phishing websites.

Cryptocurrency 98

Cryptocurrency Ransomware Government Risk 98

SecureList

AUGUST 10, 2022

In late August 2020, we published an overview of DeathStalker’s profile and malicious activities, including their Janicab, Evilnum and PowerSing campaigns ( PowerPepper was later documented in 2020). Meanwhile, in August 2020, we also released a private report on VileRAT to our threat intelligence customers for the first time.

Cryptocurrency 116

Cryptocurrency Encryption Social Engineering Passwords 116

Security Boulevard

FEBRUARY 12, 2021

They say these attacks targeted "numerous victims throughout 2020, including well-known influencers, sports stars, musicians, and their families." Ireland-based hacker Conor Freeman, aged 20, was charged in that case for seven SIM-swaps that led to the theft of $2,416,352 worth of cryptocurrency.

Cryptocurrency 119

Cryptocurrency Accountability Scams Social Engineering 119

SC Magazine

APRIL 8, 2021

For the uninitiated, NFTs are unique tokens that accompany original and collectible digital artwork or videos that can be sold or traded as a form of cryptocurrency, with transactions registered on the blockchain. billion in 2020. “We For instance, a collage created by digital artist Mike Winkelmann, aka Beeple, recently earned $69.4

Scams 137

Scams Cryptocurrency Phishing Marketing 137

Security Affairs

SEPTEMBER 17, 2023

The North Korea-linked APT group Lazarus has stolen more than $240 million worth of cryptocurrency since June 2023, researchers warn. The group is also suspected to have recently stolen $31 million from the professional global cryptocurrency exchange CoinEx. “Fast forward to today, and approximately $291.3

Cryptocurrency 141

Cryptocurrency Social Engineering Hacking Engineering 141

SecureWorld News

FEBRUARY 7, 2022

Cyberattacks targeting cryptocurrency exchanges were on a roll in 2021 and have continued into 2022. The panel also said one cybersecurity firm anonymously reported that North Korean "cyber-actors stole a total of $400 million worth of cryptocurrency through seven intrusions into cryptocurrency exchanges and investment firms.".

Cryptocurrency 98

Cryptocurrency Cybercrime Social Engineering Engineering 98

SecureWorld News

MARCH 22, 2021

Here is the report's opening paragraph: "In 2020, while the American public was focused on protecting our families from a global pandemic and helping others in need, cyber criminals took advantage of an opportunity to profit from our dependence on technology to go on an Internet crime spree. Business Email Compromise 2020.

Cybercrime 68

Cybercrime Scams Banking Accountability 68

Security Affairs

FEBRUARY 27, 2021

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. The criminals could hijack social media accounts and bypass 2FA services based on SMS used by online services, including financial ones. .

Mobile 134

Mobile Data breaches Telecommunications Identity Theft 134

Krebs on Security

JULY 22, 2020

Voku’s cooperation with authorities led them to bust up a conspiracy involving at least nine individuals who stole millions of dollars worth of cryptocurrency and other items of value from their targets. The script would replace the term with “I do not condone illegal activities.” ” “Are you still swimping?”

Hacking 332

Hacking Accountability Scams Media 332

eSecurity Planet

SEPTEMBER 14, 2022

billion in reported losses, up from 2020’s 791,790 complaints and $4.2 In 2020 alone, 79 ransomware attacks were conducted against government entities in the U.S., Then, we’ll go over the basic, foundational techniques most scammers find themselves using, such as social engineering and phishing. Social Tactics.

Social Engineering 121

Social Engineering Energy and Utilities Phishing Internet 121

SecureList

NOVEMBER 22, 2022

Cryptocurrency targeted attacks. The cryptocurrency business continues to grow, and people continue to invest their money in this market because it’s a digital asset and all transactions occur online. More cryptocurrency-related threats: fake hardware wallets, smart contract attacks, DeFi hacks, and more.

Cryptocurrency 106

Cryptocurrency Mobile Ransomware Banking 106

Spinone

MAY 8, 2020

On the world scene, 2020 has already been a challenging year for businesses across the board with COVID-19. Coupled with the current pandemic and the cybersecurity threats that have been very prevalent and growing in recent years such as ransomware, there are many different cyber risk types n 2020 that your business needs to prepare for.

Cyber Attacks 78

Cyber Attacks Phishing Backups Ransomware 78

Webroot

JANUARY 7, 2022

2020 may have been the year of establishing remote connectivity and addressing the cybersecurity skills gap, but 2021 presented security experts, government officials and businesses with a series of unpresented challenges. Cryptocurrency. There was no shortage of discussion surrounding cryptocurrency and its security flaws.

Cybercrime 116

Cybercrime Ransomware Phishing Cryptocurrency 116

SC Magazine

MAY 17, 2021

Attendees and workers chat beneath a ‘5G’ logo at the Quectel booth at CES 2020, January 8, 2020. The project is based on work Baines did for Europol’s Cyber Crimes Center, Project 2020, which made a similar series of predictions in 2013 targeting last year. AI could impact more than just social engineering.

Manufacturing 95

Manufacturing IoT Technology Artificial Intelligence 95

Malwarebytes

MARCH 1, 2023

Prodaft researchers describe how they noticed RIG EK RIG dropping multiple types of malware, including stealers, Remote Access Trojans (RATs), cryptocurrency miners, and banking malware. RIG EK has also introduced some newer vulnerabilities while Internet Explorer's market share has continued to drop. xyz (185.220.35.26).

Internet 98

Internet Internet Social Engineering Malware 98

Webroot

FEBRUARY 11, 2021

As we mentioned in a previous blog , hackers come in many forms, but their methods can generally be classified into three distinct types of cybercriminals: The Impersonator – Hackers that pretend to be others, often using social engineering and human psychology to trick users. Let’s look at a few primary examples.

Scams 119

Scams Phishing Firewall Social Engineering 119

Malwarebytes

FEBRUARY 8, 2023

The Ryuk ransoms, paid in cryptocurrency such as Bitcoin, were split into smaller portions and then forwarded on to multiple cryptocurrency wallets and then placed into exchange accounts for other forms of currency. Eventually, the money would find its way into the hands of other people involved in the various schemes.

Ransomware 94

Ransomware Backups Cryptocurrency Social Engineering 94

SecureList

NOVEMBER 9, 2022

In 2023, we might see a slight decline in ransomware attacks, reflecting the slowdown of the cryptocurrency markets. Finland’s Vastamoo in 2020 & Australia’s Medibank in 2022), as well as highly private personal data (ex. Arthur Laudrain, Strategic Analyst (Cyber Program), The Hague Centre for Strategic Studies.

Cybersecurity 144

Cybersecurity Cyber Insurance Cybercrime IoT 144

SecureList

NOVEMBER 18, 2022

In late August 2020, we published an overview of DeathStalker and its activities, including the Janicab, Evilnum and PowerSing campaigns. Meanwhile, in August 2020, we also released a private report on VileRAT for our threat intelligence customers. The group delivers its malware using social engineering.

Malware 121

Malware Computers and Electronics Adware Cryptocurrency 121

Security Boulevard

MARCH 31, 2022

RedLine is a malware service available for purchase on underground forums that specifically targets the theft of sensitive information: passwords, credit cards, execution environment data, computer name, installed software, and more recently, cryptocurrency wallets and related files. Regular employee training. Email filtering.

Cybersecurity 98

Cybersecurity Social Engineering Passwords Malware 98

SecureWorld News

NOVEMBER 11, 2021

billion in adjusted losses in 2020 and noted an increase in complaints, most likely tied to the work-from-home environment as a result of the pandemic. It's not scary like ransomware and isn't making headlines, but BEC losses are larger than ransomware losses and in 2020 were 40% of all the losses tracked by the IC3.

Scams 98

Scams Social Engineering Accountability Ransomware 98

SecureList

JULY 28, 2022

Our investigation of this activity led us to discover other related campaigns targeting a wide range of entities located in Central Asia, Europe and the Americas since at least May 2020. We discovered a highly active campaign, starting in March 2022, targeting stock and cryptocurrency investors in South Korea. Final thoughts.

Malware 145

Malware Firmware Phishing Cryptocurrency 145

Security Boulevard

AUGUST 23, 2022

To get to their targets, the attackers used social engineering via LinkedIn “hiding behind the ruse of attractive, but bogus, job offers,” ESET said, adding that it was likely part of the Lazarus campaign for Mac and is similar to research done by ESET in May. Lazarus had made a name for itself with cyber-espionage.

Cyber threats 52

Cyber threats Social Engineering Malware Banking 52

SecureList

NOVEMBER 14, 2023

The threat actor used news about the Russo-Ukrainian conflict to trick targets into opening harmful emails that exploited the vulnerabilities (CVE-2020-35730, CVE-2020-12641 and CVE-2021-44026). They advertise on dark web platforms and employ various techniques, including malware, phishing, and other social engineering methods.

Hacking 140

Hacking Energy and Utilities Media Malware 140

Digital Shadows

OCTOBER 29, 2024

Among these experienced affiliates is the “Scattered Spider” group, known for its custom tools and advanced social engineering skills, which helped RansomHub become the most active ransomware group in Q3 2024 (see Figure 1).

Ransomware 88

Ransomware Encryption Technology Malware 88

Pen Test

OCTOBER 10, 2023

Victims are instructed to pay a ransom payment, usually demanded in cryptocurrency, in exchange for the decryption key. Sopra Steria - One of the Largest Reported Ransoms Europe's major IT services firm Sopra Steria was breached in October 2020 by the Ryuk gang, with extensive backups preventing major disruption.

Ransomware 52

Ransomware Backups Insurance Cyber Insurance 52

Digital Shadows

OCTOBER 29, 2024

Among these experienced affiliates is the “Scattered Spider” group, known for its custom tools and advanced social engineering skills, which helped RansomHub become the most active ransomware group in Q3 2024 (see Figure 1).

Ransomware 52

Ransomware Encryption Technology Malware 52

SecureWorld News

OCTOBER 12, 2021

SecureWorld News just analyzed dozens of pages of court documents to understand this story of the Naval Engineer—an insider—who is accused of going rogue in a high-tech and high-stakes operation. Tools involved digital media, encrypted communication, cryptocurrency, and secret data handoffs. Here is how the scheme started. Government.

Social Engineering 98

Social Engineering Engineering Encryption Cryptocurrency 98