Security Affairs

FEBRUARY 4, 2025

Threat actors target Brazilian users by stealing financial data, the malware can harvest sensitive information from over 70 financial applications and numerous websites. The Coyote Banking Trojan supports multiple malicious functions, including keylogging, capturing screenshots, and displaying phishing overlays to steal sensitive credentials.

Banking 116

Banking Malware Antivirus Cyber threats 116

Webroot

MARCH 3, 2025

During this time, many government agencies and consumer protection organizations come together to help educate consumers on how to keep their personal and financial information secure. How to protect yourself and your data Smart ways to secure your devices Strong passwords – Make them long, random, and unique.

Consumer Protection 97

Consumer Protection Identity Theft Scams Social Engineering 97

Security Affairs

APRIL 9, 2020

Group-IB’s CERT-GIB analyzed hundreds of coronavirus -related phishing emails and discovered top malware strains in COVID-19 campaigns. Group-IB’s Computer Emergency Response Team ( CERT-GIB ) analyzed hundreds of coronavirus-related phishing emails between February 13 and April 1, 2020. Spyware: the most likely COVID-19 payload.

Phishing 141

Phishing Malware Spyware DDOS 141

Security Affairs

AUGUST 19, 2019

Phishing is one of the oldest methods of cyberattacks. People fell prey for these manipulative emails and provide confidential details like passwords and bank information in their negligence. This information is then used for unauthorized and illegal activities, which could have a devastating impact on individuals and organizations.

Phishing 111

Phishing Accountability Authentication Passwords 111

Security Affairs

SEPTEMBER 20, 2019

Cofense researchers spotted a phishing campaign that is targeting taxpayers in the United States to infect them with the Amadey malware. Security experts at Cofense uncovered a phishing campaign that is targeting taxpayers in the United States attempting to infect them with a new piece of malware named Amadey. The post U.S.

Phishing 108

Phishing Social Engineering Malware Advertising 108

Security Affairs

JUNE 7, 2021

Ukraine warned of a “massive” spear-phishing campaign carried out by Russia-linked threat actors against its government and private businesses. This is the third massive spear-phishing campaign that the Ukrainian government attributed to Russia-linked threat actors this year. Follow me on Twitter: @securityaffairs and Facebook.

Phishing 106

Phishing Government Antivirus Passwords 106

Security Boulevard

JANUARY 16, 2022

Norton 360, a popular antivirus product, has installed a cryptocurrency mining program on its customers’ computers, some cities in Texas have been hit with a phishing scam designed to get users to pay through fraudulent QR code stickers on public parking meters, and how Facebook is still collecting data about you even if you deactivate […].

Accountability 122

Accountability Antivirus Cryptocurrency Scams 122

The Last Watchdog

JANUARY 28, 2019

Why we’re in the ‘Golden Age’ of cyber espionageThe fact is cyber criminals are expert at refining and carrying out phishing, malvertising and other tried-and-true ruses that gain them access to a targeted victim’s Internet-connected computing device. Yes, adopting better security habits requires giving up some convenience.

Passwords 196

Passwords Password Management Internet Internet 196

SecureWorld News

DECEMBER 30, 2024

Antivirus solutions, monitoring systems, and endpoint detection and response (EDR) tools play a critical role in combating these threats. However, experts point out that attackers heavily rely on phishing email campaigns. Social engineering techniques enable them to bypass technical security measures effectively.

Data breaches 113

Data breaches Social Engineering Passwords Accountability 113

Security Affairs

AUGUST 23, 2020

enabling bad actors to perform spear-phishing attacks comparatively with a high success rate. An attacker could exploit the weakness to carry out spear-phishing campaigns using messages that include links to malicious files hosted on Google Drive. ” reads the post published by THN.

Malware 145

Malware Phishing Advertising Antivirus 145

Security Affairs

SEPTEMBER 18, 2024

The AutoIt script does not directly steal the credentials but works in combination with other malware, such as StealC, to extract the information. The malware is distributed via the Amadey loader ( [link] ), which can be spread through phishing e-mails or downloads from compromised sites. 11 and executes them.

Passwords 125

Passwords Identity Theft Education Authentication 125

Security Affairs

APRIL 30, 2021

The state-sponsored hackers sent spear-phishing messages to a general director working at the Rubin Design Bureau , in Saint Petersburg, which is one of three main Russian centers of submarine design. The spear-phishing messages used a malicious Rich Text File (RTF) document that included descriptions of an autonomous underwater vehicle. .”

Phishing 141

Phishing Malware Encryption Antivirus 141

Security Affairs

APRIL 4, 2020

The attack described by Microsoft begun with a phishing message that was opened by an internal employee, the malware infected its systems and made lateral movements infected other systems in the same network. The virus halted core services by saturating the CPU usage on Windows devices.

Antivirus 144

Antivirus Malware Phishing Advertising 144

Security Affairs

NOVEMBER 26, 2021

Babadeda is able to bypass antivirus solutions. According to the researchers, this crypto-malware was recently employed in several campaigns to deliver information stealers, RATs, and ransomware like LockBit. “In the campaign that we observed, a threat actor took advantage of these features in order to phish victims.

Cryptocurrency 143

Cryptocurrency Malware Antivirus Phishing 143

Security Affairs

SEPTEMBER 20, 2020

.” The NCSC also provided info about the initial infection vectors observed in the ransomware attacks: Insecure Remote Desktop Protocol (RDP) configurations Vulnerable Software or Hardware Phishing emails. backup servers, network shares, servers, auditing devices).

Education 145

Education Ransomware Antivirus Backups 145

Security Affairs

DECEMBER 1, 2021

APT groups from China, India, and Russia have used a new RTF (rich text format) template injection technique in recent phishing attacks. The technique was first reported by the security firm Proofpoint spotted which observed phishing campaigns using the weaponized RTF template injection since March 2021.

Phishing 139

Phishing Engineering Antivirus Hacking 139

Security Affairs

MAY 11, 2021

The ACSC also provided the following recommendations: Patch operating systems and applications, and keep antivirus signatures up to date. Scan emails and attachments to detect and block malware, and implement training and processes to identify phishing and externally-sourced emails.

Ransomware 138

Ransomware Backups Antivirus DDOS 138

Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. According to the Google Threat Horizons report, the state-sponsored hackers sent fake job offers to employees at the security companies. . ” reads the Google Threat Horizons report.

Malware 143

Malware Phishing Antivirus Hacking 143

Webroot

OCTOBER 1, 2024

Turn on multi-factor authentication Using multi-factor authentication adds a layer of security to your passwords by having you prove your identity in multiple ways. This means getting a text or email with a security code or answering a security question. noreply@yourbank.com.) Close your browser and don’t take the bait.

Security Awareness 115

Security Awareness Passwords Backups Password Management 115

Security Affairs

MARCH 7, 2022

SharkBot banking malware was able to evade Google Play Store security checks masqueraded as an antivirus app. The malware was spotted at the end of October by researchers from cyber security firms Cleafy and ThreatFabric, the name comes after one of the domains used for its command and control servers. .”

Banking 98

Banking Antivirus Mobile Malware 98

Security Affairs

SEPTEMBER 7, 2020

Security experts from NVISO Labs recently spotted the activity of a new malware gang, tracked as Epic Manchego, that is actively targeting companies across the world with phishing emails since June. The phishing messages carry weaponized Excel documents that are able to bypass security checks and that had low detection rates.

Cybercrime 134

Cybercrime Phishing Advertising Antivirus 134

Security Affairs

MAY 16, 2020

Experts spotted a new malware dubbed QNodeService that was involved in Coronavirus-themed phishing campaign, crooks promise victims COVID-19 tax relief. Researchers uncovered a new malware dubbed QNodeService that was employed in a Coronavirus-themed phishing campaign. “The use of Node.js

Malware 140

Malware Phishing Advertising Antivirus 140

Security Affairs

NOVEMBER 19, 2022

.” DEV-0569 relies heavily on defense evasion techniques and employed the open-source tool Nsudo to disable antivirus solutions in recent campaigns. The downloader, tracked as BATLOADER , shares similarities with another malware called ZLoader. ” concludes the IT giant.

Ransomware 144

Ransomware Malware Antivirus Phishing 144

Security Affairs

JANUARY 31, 2020

The term malware has been gaining prominence as a result of the wave of malware and phishing campaigns that anyone is subject to”, says Cipher. Portugal still lacks information about compromised Portuguese domains (.pt) “We live in an era where we increasingly hear about malware and the impact it has on companies and people.

Malware 143

Malware Advertising Retail Antivirus 143

Security Affairs

FEBRUARY 22, 2021

APOMacroSploit is a macro builder that was to create weaponized Excel documents used in multiple phishing attacks. Excel documents created with the APOMacroSploit builder are capable of bypassing antivirus software, Windows Antimalware Scan Interface (AMSI), and even Gmail and other email-based phishing detection.

Malware 143

Malware Antivirus Phishing Cryptocurrency 143

Daniel Miessler

MAY 8, 2020

There are security/hacker types that maintain massive repositories of passwords. Most home networks get broken into through either phishing or some random device they have with a bad password. Change all default passwords to something unique and strong. This is the most important thing in this article. All 9 Steps as an Infographic.

Passwords 255

Passwords DNS Accountability IoT 255

Security Affairs

OCTOBER 17, 2023

With 85% of campaigns targeting victims with phishing emails containing malicious links, another form of a social engineering attack, education and cyber vigiliance remain a high priority. Why should employers educate employees about cyber security? This method was identified as vishing – a voice-based phishing attack.

Social Engineering 136

Social Engineering Ransomware Engineering Phishing 136

SecureList

OCTOBER 18, 2023

The actors behind the attack used spear-phishing mails to target several victims, some were infected with Windows executable malware by downloading files through an internet browser. Each phishing document contains an external link to fetch a remote page containing a CVE-2021-26411 exploit.

Malware 142

Malware Phishing Internet Internet 142

Security Affairs

DECEMBER 5, 2020

. “In strict accordance with DeathStalker’s traditions, the implant will try to evade detection or sandboxes execution with various tricks such as detecting mouse movements, filtering the client’s MAC addresses, and adapting its execution flow depending on detected antivirus products.”

DNS 121

DNS Phishing Encryption Antivirus 121

Security Affairs

OCTOBER 26, 2021

In recent attacks, the group also exploited known Microsoft Exchange Server vulnerabilities and used phishing messages to target computer networks. Once gained access to the target network, the ransomware gang attempts to locate sensitive data, including customer information, PII related files, and financial records.

Ransomware 143

Ransomware Firmware Antivirus Accountability 143

Security Affairs

FEBRUARY 28, 2023

Antivirus company Bitdefender has released a free decryptor for the recently discovered ransomware family MortalKombat. Good news for the victims of the recently discovered MortalKombat ransomware , the antivirus firm Bitdefender has released a free decryptor that will allow them to recover their file without paying the ransom.

Ransomware 98

Ransomware Antivirus Backups Malware 98

Security Affairs

DECEMBER 3, 2019

The four extensions developed by Avast and its subsidiary AVG are: Avast Online Security AVG Online Security Avast SafePrice AVG SafePrice. Both Avast and AVG Online Security extension alert users to phishing, scam, and malicious sites when a user visits malicious sites. ” reads the report published by Palant.

Antivirus 98

Antivirus Advertising Scams Phishing 98

Security Affairs

DECEMBER 18, 2023

They may use various tactics to evade antivirus and other security measures. Bank logs : These are sets of data containing sensitive information about a bank account. Once installed on a system, info stealers often aim to remain undetected for as long as possible. Do you want to know how do we protect against info stealers?

Banking 131

Banking Cybercrime Malware Accountability 131

Security Affairs

MARCH 1, 2022

” Below is the list of actions recommended to the organizations: • Set antivirus and antimalware programs to conduct regular scans. Enable strong spam filters to prevent phishing emails from reaching end users. Filter network traffic. Update software. Require multifactor authentication.

Antivirus 108

Antivirus Architecture Malware Cybersecurity 108

Spinone

JANUARY 9, 2019

In this article we will discuss how to avoid phishing attacks in G Suite and provide phishing prevention best practices on how companies can enhance G Suite security awareness and protection against phishing scams. What is phishing and what risks are presented by phishing scams? What are Phishing Scams?

Phishing 40

Phishing Scams Firewall Antivirus 40

Security Affairs

APRIL 21, 2024

Akira operators were also observed using external-facing services such as Remote Desktop Protocol (RDP), spear phishing, and the abuse of valid credentials. The operators frequently disable security software to evade detection and for lateral movement. The attackers mostly used Cisco vulnerabilities CVE-2020-3259 and CVE-2023-20269.

Ransomware 139

Ransomware Encryption Antivirus VPN 139

Security Affairs

AUGUST 28, 2022

Twilio hackers also breached the food delivery firm DoorDash Unprecedented cyber attack hit State Infrastructure of Montenegro Threat actor abuses Genshin Impact Anti-Cheat driver to disable antivirus Critical flaw impacts Atlassian Bitbucket Server and Data Center Iran-linked Mercury APT exploited Log4Shell in SysAid Apps for initial access GoldDragon (..)

DDOS 98

DDOS Data breaches Malware Antivirus 98