article thumbnail

Perfectl Malware

Schneier on Security

Perfectl in an impressive piece of malware: The malware has been circulating since at least 2021. The researchers are calling the malware Perfctl, the name of a malicious component that surreptitiously mines cryptocurrency. North Korea is the government we know that hacks cryptocurrency in order to fund its operations.

Malware 258
article thumbnail

Feds Charge Five Men in ‘Scattered Spider’ Roundup

Krebs on Security

technology companies between 2021 and 2023, including LastPass , MailChimp , Okta , T-Mobile and Twilio. According to prosecutors, the group mainly sought to steal cryptocurrency from victim companies and their employees. A visual depiction of the attacks by the SMS phishing group known as Scattered Spider, and Oktapus.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

U.S. Offered $10M for Hacker Just Arrested by Russia

Krebs on Security

Daryna Antoniuk at TheRecord reports that a security researcher said on Sunday they had contacted Wazawaka, who confirmed being charged and said he’d paid two fines, had his cryptocurrency confiscated, and is currently out on bail pending trial. Wazawaka claimed he zealously adhered to this rule as a personal and professional mantra.

article thumbnail

Cryptocurrency Attacks to be Aware of in 2021

Digital Shadows

It’s been a pretty big year so far for cryptocurrency. After it reached an all-time high in April 2021, new. The post Cryptocurrency Attacks to be Aware of in 2021 first appeared on Digital Shadows.

article thumbnail

500M Avira Antivirus Users Introduced to Cryptomining

Krebs on Security

In January 2021, Avira was acquired by Tempe, Ariz.-based For example, it doesn’t specify how much NortonLifeLock gets out of the deal (NortonLifeLock keeps 15 percent of any cryptocurrency mined by Norton Crypto). Even with compatible hardware, mining cryptocurrencies on your own can be less rewarding.

Antivirus 362
article thumbnail

New SteelFox Trojan mimics software activators, stealing sensitive data and mining cryptocurrency

SecureList

This is quite an old driver, vulnerable to CVE-2020-14979 and CVE-2021-41285 , and allowing the actor to elevate privileges to NTSYSTEM as soon as the direct unchecked communication with the driver is allowed and the attacker controls input forwarded to the driver.

Software 123
article thumbnail

The top 3 cryptocurrency scams of 2021

Tech Republic Security

Kaspersky says that fake exchanges, fake mining hardware and wallet phishing are the most popular crypto scams of the year, many of which it said have a higher-than-usual level of detail.

Scams 183