eSecurity Planet

NOVEMBER 6, 2024

Following a July 18 attack by the Rhysida ransomware group — believed to have Russian affiliations — Columbus is still reeling from the exposure of vast amounts of sensitive resident data. This data reportedly includes everything from names and addresses to Social Security numbers and bank account details. With over 6.5

Ransomware 116

Ransomware Authentication Identity Theft Penetration Testing 116

Tech Republic Security

FEBRUARY 7, 2021

Data loss is the number one result of a fruitful phishing campaign, but account compromises and ransomware attacks can threaten your organization as well, says Proofpoint.

Phishing 217

Phishing Ransomware Accountability 217

Krebs on Security

JUNE 9, 2020

that their information technology systems had been infiltrated by hackers who specialize in deploying ransomware. Nevertheless, on Friday, June 5, the intruders sprang their attack, deploying ransomware and demanding nearly $300,000 worth of bitcoin. The average ransomware payment by ransomware strain.

Ransomware 363

Ransomware System Administration Backups Technology 363

Krebs on Security

DECEMBER 13, 2021

The consulting firm PricewaterhouseCoopers recently published lessons learned from the disruptive and costly ransomware attack in May 2021 on Ireland’s public health system. The unusually candid post-mortem found that nearly two months elapsed between the initial intrusion and the launching of the ransomware.

Healthcare 325

Healthcare Ransomware Antivirus Hacking 325

Malwarebytes

JANUARY 10, 2025

The RansomHub ransomware group claims to have exfiltrated an enormous 1.5 Here, the ransomware group lays blame on the company itself. This isn’t rare for a ransomware group, as the tactics and vernacular are often based around shame, guilt, and a pre-teen-like arrogance. 2FA that relies on a FIDO2 device cant be phished.

Ransomware 95

Ransomware Data breaches Passwords Phishing 95

Krebs on Security

AUGUST 9, 2019

A ransomware outbreak that hit QuickBooks cloud hosting firm iNSYNQ in mid-July appears to have started with an email phishing attack that snared an employee working in sales for the company, KrebsOnSecurity has learned. “I take full responsibility for this. .”

Phishing 229

Phishing Backups Ransomware Encryption 229

Malwarebytes

JANUARY 27, 2025

In May, UnitedHealth CEO Andrew Witty estimated that the ransomware attack compromised the data of a third of US individuals when he testified before the Senate Finance Committee on Capitol Hill. The ALPHV/BlackCat ransomware group claimed the initial attack. 2FA that relies on a FIDO2 device cant be phished. Take your time.

Data breaches 125

Data breaches Healthcare Passwords Insurance 125

Malwarebytes

MARCH 17, 2025

The FBI warned specifically about that malware leading to ransomware attacks, but we’ve also seen similar sites that install browser hijackers, adware, and potentially unwanted programs (PUPs). Work with them to take the necessary steps to protect your identity and your accounts. com (phishing) convertitoremp3[.]it

Malware 139

Malware Adware Education Phishing 139

Digital Shadows

JANUARY 22, 2025

Phishing Remains Top Tactic, Fueled by Teams Abuse Figure 1: Top attack techniques in true-positive customer incidents for finance & insurance sector, H2 2024 vs H2 2023 Phishing dominated cyber attacks in H2 2024, accounting for over 90% of incidents across industries due to its simplicity and effectiveness.

Insurance 64

Insurance Phishing Social Engineering Engineering 64

The Last Watchdog

FEBRUARY 4, 2025

Identity security vendors have focused narrowly on securing corporate accounts, leaving organizations vulnerable to cybercriminals exploiting the broader identity exposures of employees, consumers, and suppliers. A shift to an identity-centric perspective is needed, particularly as the scope of identity exposures continues to grow. .

Cybercrime 124

Cybercrime Phishing Accountability Malware 124

Security Affairs

JANUARY 22, 2025

Two ransomware groups exploiting Microsoft 365 services and default settings to target internal enterprise users. Sophos researchers started investigating two distinct clusters of activity, tracked as STAC5143 and STAC5777, in response to customer ransomware attacks in November and December 2024.

Ransomware 98

Ransomware Malware Social Engineering Engineering 98

Malwarebytes

NOVEMBER 4, 2024

A ransomware attack against the City of Columbus, Ohio—which drew public scrutiny following the city government’s attempt to silence a researcher who told the public about the attack—has received a little more detail from an unexpected source: The Attorney General for the state of Maine. Watch out for fake vendors. Take your time.

Data breaches 113

Data breaches Passwords Ransomware Phishing 113

Bleeping Computer

SEPTEMBER 12, 2023

Microsoft says an initial access broker known for working with ransomware groups has recently switched to Microsoft Teams phishing attacks to breach corporate networks. [.]

Phishing 108

Phishing Ransomware Accountability 108

eSecurity Planet

FEBRUARY 24, 2025

Over 200,000 internal messages from the notorious ransomware group Black Basta have surfaced online exposing deep divisions, ransom negotiations, and internal dysfunction. Cybersecurity experts are now poring over the data, uncovering a rare inside look at how one of the most feared ransomware groups operates and potentially unravels.

Ransomware 69

Ransomware Phishing Healthcare Cryptocurrency 69

Security Affairs

DECEMBER 2, 2024

Operation HAECHI V (July-Nov 2024) targeted cyber frauds like phishing, romance scams, sextortion, investment fraud, online gambling, BEC, and e-commerce fraud. Korean and Chinese authorities dismantled a voice phishing syndicate that caused $1.1B million to a fake account in Timor Leste, where authorities intercepted USD 39.3

Cryptocurrency 124

Cryptocurrency Phishing Scams Cybercrime 124

The Last Watchdog

MARCH 19, 2025

Holistic Identity: The New Cyber Battleground Organizations have traditionally focused on securing individual account credentials, but SpyClouds research indicates that cybercriminals have expanded their tactics beyond conventional account takeover. ” Additional Report Findings: 17.3

Cyber Risk 113

Cyber Risk Risk Phishing Cybercrime 113

eSecurity Planet

OCTOBER 22, 2024

One of the most concerning tactics currently on the rise is the ClickFix campaign — a sophisticated phishing scheme targeting unsuspecting Google Meet users. ClickFix campaigns represent a new wave of phishing tactics that emerged in May 2024, aimed at exploiting users of popular software applications. What Are ClickFix Campaigns?

Scams 124

Scams Malware Phishing Social Engineering 124

Security Affairs

NOVEMBER 21, 2024

Between September 2021 and April 2023, the hackers carried out phishing attacks to steal login credentials from employees of 12 companies and individuals. Victims included gaming, telecom, and cryptocurrency firms, with losses reaching millions in stolen cryptocurrency and data from hundreds of thousands of accounts.

Cybercrime 108

Cybercrime Identity Theft Cryptocurrency Phishing 108

The Last Watchdog

MAY 5, 2022

Ransomware? Well, the stats are even scarier with over 50% increase in ransomware attacks in 2021, compared to 2020. The media paid close attention to ransomware attacks last year, as they had a significant impact on Colonial Pipeline, the nation’s largest fuel distributor, and JBS, the nation’s largest meat distributor.

Ransomware 247

Ransomware Risk Internet Internet 247

Security Boulevard

DECEMBER 14, 2023

Microsoft seized parts of the infrastructure of a prolific Vietnam-based threat group that the IT giant said was responsible for creating as many as 750 million fraudulent Microsoft accounts that were then sold to other bad actors and used to launch a range of cyberattacks – from ransomware to phishing to identity theft – against.

Accountability 126

Accountability Identity Theft Phishing Ransomware 126

Malwarebytes

OCTOBER 25, 2024

The attack on Change Healthcare, which processes about 50% of US medical claims, was one of the worst ransomware attacks against American healthcare and caused widespread disruption in payments to doctors and health facilities. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. Take your time.

Healthcare 117

Healthcare Data breaches Passwords Identity Theft 117

Adam Levin

MARCH 17, 2022

Unfortunately, brackets create opportunities for a wide array of phishing and hacking campaigns, particularly in workplaces where a lot of brackets are distributed. Sensitive information including passwords and financial information can be exfiltrated and ransomware can be deployed to block access to critical data.

Cyber threats 229

Cyber threats Phishing Passwords Malware 229

Malwarebytes

FEBRUARY 4, 2025

And yet, if artificial intelligence achieves what is called an agentic model in 2025, novel and boundless attacks could be within reach, as AI tools take on the roles of agents that independently discover vulnerabilities, steal logins, and pry into accounts. These are real threats, but they are not novel. That could change in 2025.

Artificial Intelligence 144

Artificial Intelligence Small Business Malware Technology 144

Adam Levin

DECEMBER 23, 2020

The VPN providers services facilitated cybercrimes including ransomware, e-skimming breaches, spear phishing, and account takeovers “at a high price to the criminal underworld,” according to the announcement.

VPN 260

VPN Cybercrime Phishing Ransomware 260

Security Affairs

AUGUST 10, 2022

Cisco discloses a security breach, the Yanluowang ransomware group breached its corporate network in late May and stole internal data. Cisco disclosed a security breach, the Yanluowang ransomware group breached its corporate network in late May and stole internal data. yanluowang ransomware has posted #Cisco to its leaksite.

Ransomware 133

Ransomware Hacking VPN Phishing 133

Security Affairs

DECEMBER 26, 2023

Researchers at NCC Group reported that in November they observed the return of the infamous banking malware Carbanak in ransomware attacks. The cybersecurity firm NCC Group reported that in November the banking malware Carbanak was observed in ransomware attacks.

Malware 135

Malware Ransomware Banking Healthcare 135

Krebs on Security

APRIL 6, 2022

Many organizations are already struggling to combat cybersecurity threats from ransomware purveyors and state-sponsored hacking groups, both of which tend to take days or weeks to pivot from an opportunistic malware infection to a full blown data breach. “voice phishing” a.k.a. “vishing”).

Social Engineering 289

Social Engineering Phishing Engineering Accountability 289

eSecurity Planet

DECEMBER 4, 2024

With cyberattacks on operating systems, applications, and networks becoming more sophisticated, the tech giant formulated a strategy to enhance the protection of Windows systems, focusing strongly on phishing attacks. Users will be given standard user accounts by default.

Encryption 109

Encryption Phishing Passwords Authentication 109

The Last Watchdog

APRIL 14, 2022

This type of targeted phishing or whaling (executive-level) attack tricks email recipients into believing someone they know and trust is asking them to carry out a specific financial task. The CFO commonly carries out such tasks and arranges a wire transfer using the account information provided on the invoice. Scenario 2. Scenario 3.

Phishing 247

Phishing Accountability Scams Social Engineering 247

Security Affairs

APRIL 21, 2024

Government agencies revealed that Akira ransomware has breached over 250 entities worldwide and received over $42 million in ransom payments. Like other ransomware gangs, the group has developed a Linux encryptor to target VMware ESXi servers. In some attacks, threat actors created an administrative account named itadm.

Ransomware 139

Ransomware Encryption Antivirus VPN 139

IT Security Guru

AUGUST 19, 2024

Ransomware attacks are a growing menace. By recognising early warning indicators and addressing security gaps proactively, entities can prevent themselves from falling victim to ransomware. Despite awareness campaigns, many still fall prey to malicious links, such as phishing emails masquerading as communications from trusted entities.

Ransomware 136

Ransomware Backups Social Engineering Manufacturing 136

Webroot

OCTOBER 31, 2024

This year has seen ransomware groups adapt and innovate, pushing the boundaries of their malicious capabilities and evasiveness from law enforcement. The ransomware sector, in particular, has witnessed the emergence of “business models,” with ransomware-as-a-service (RaaS) dominating the scene.

Malware 104

Malware Ransomware Passwords Healthcare 104

The Last Watchdog

DECEMBER 18, 2024

AI-powered cryptocurrency attacks will automate phishing and exploit vulnerabilities. Dulce Sagie Dulce , VP Research, Zero Networks In 2025, AI will empower both defenders and attackersimproving incident response for the former while accelerating exploits and phishing for the latter.

Risk 173

Risk Threat Detection Technology Phishing 173

IT Security Guru

FEBRUARY 25, 2025

Initial Compromise: Malefactors first gain access to the victims credentials through phishing, brute force attacks, or dark web marketplaces. Lateral Movement: Once inside, crooks may escalate privileges, exfiltrate sensitive data, or deploy ransomware and other malicious tools.

Social Engineering 119

Social Engineering Authentication Risk Accountability 119

SecureList

FEBRUARY 16, 2023

Short-lived phishing sites often offered to see the premieres before the eagerly awaited movie or television show was scheduled to hit the screen. At the beginning of that year, we still observed phishing attacks that used the themes of infection and prevention as the bait. Others offered the coveted Green Pass without vaccination.

Phishing 119

Phishing Scams Accountability Energy and Utilities 119

Malwarebytes

SEPTEMBER 1, 2023

Not long ago I wrote about a recent campaign to hold LinkedIn users' accounts to ransom. Since he doesn’t use the LinkedIn app on his mobile he checked his account on his laptop first thing in the morning. A reset of the account’s password worked, but failed to remove the unwanted active session.

Accountability 137

Accountability Passwords Mobile Authentication 137

Krebs on Security

NOVEMBER 22, 2021

In August, KrebsOnSecurity warned that scammers were contacting people and asking them to unleash ransomware inside their employer’s network, in exchange for a percentage of any ransom amount paid by the victim company. According to the FBI’s Internet Crime Complaint Center ( IC3 ), consumers and businesses reported more than $4.2

Scams 321

Scams Cybercrime Banking Identity Theft 321