Malwarebytes

JULY 19, 2022

A new phishing campaign targeting PayPal users aims to get extensive data from potential victims. PayPal phishing sites are a dime a dozen due to the number of people and companies using it as another form of payment method. This was evident after Akamai found an attacker had planted a phishing kit on its WordPress honeypot.

Phishing 109

Phishing Social Engineering Accountability Engineering 109

SecureWorld News

JANUARY 20, 2023

Popular email marketing service MailChimp recently fell victim to another data breach, this time caused by a successful social engineering attack on its employees and contractors. Such information could be exploited by threat actors in phishing attacks.

Social Engineering 84

Social Engineering Data breaches Engineering Accountability 84

SecureList

MAY 6, 2024

A significant share of scam, phishing and malware attacks is about money. Methodology In this report, we present an analysis of financial cyberthreats in 2023, focusing on banking Trojans and phishing pages that target online banking, shopping accounts, cryptocurrency wallets and other financial assets. million in 2022.

Phishing 109

Phishing Banking Mobile Scams 109

SecureWorld News

JUNE 17, 2024

The CISA warning explicitly states that its employees "will never contact you with a request to wire money, cash, cryptocurrency, or use gift cards and will never instruct you to keep the discussion secret." While the exact perpetrators are unclear, he suggested nation-state actors or "phishing-as-a-service" groups could be involved.

Social Engineering 90

Social Engineering Scams Artificial Intelligence Engineering 90

Security Boulevard

AUGUST 2, 2022

Current threat actor activity is incentivized by a broad attack surface represented through high volumes of users and systems, and high potential profits represented through the variety of cryptocurrency offerings. It is easy to detect and block things like malicious cryptocurrency apps or crypto-phishing websites.

Cryptocurrency 98

Cryptocurrency Ransomware Government Risk 98

Security Affairs

AUGUST 16, 2023

A phishing campaign employing QR codes targeted a leading energy company in the US, cybersecurity firm Cofense reported. “Beginning in May 2023, Cofense has observed a large phishing campaign utilizing QR codes targeting the Microsoft credentials of users from a wide array of industries.” com (Cloudflare’s Web3 services).

Phishing 88

Phishing Energy and Utilities Insurance Manufacturing 88

Malwarebytes

APRIL 19, 2022

A new advisory issued by the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the US Treasury Department (Treasury), highlights the cyberthreats associated with cryptocurrency thefts and tactics used by a North Korean state-sponsored advanced persistent threat (APT) group since at least 2020.

Social Engineering 121

Social Engineering Cryptocurrency Computers and Electronics Engineering 121

CyberSecurity Insiders

APRIL 5, 2023

North Korea has established a hacking group named APT43 to fund its cybercrime activities, aimed at advancing Pyongyang’s geopolitical interests. On April 3 of this year, Google’s Threat Analysis Group (TAG) announced that APT43 was in-volved in cryptocurrency theft and digital currency laundering.

Hacking 105

Hacking Social Engineering Cryptocurrency Manufacturing 105

Krebs on Security

AUGUST 19, 2020

The COVID-19 epidemic has brought a wave of email phishing attacks that try to trick work-at-home employees into giving away credentials needed to remotely access their employers’ networks. The employee phishing page bofaticket[.]com. Image: urlscan.io.

Phishing 359

Phishing VPN Social Engineering Media 359

CyberSecurity Insiders

AUGUST 17, 2022

The aim behind the said social engineering attack is simple, one to trap employees with fake job offers and second to lure customers in signing up the page and then steal their currency. All these days, they were busy launching phishing emails on corporate networks.

Social Engineering 117

Social Engineering Cryptocurrency Education Cybercrime 117

Security Affairs

MAY 18, 2022

Microsoft researchers warn of the rising threat of cryware targeting non-custodial cryptocurrency wallets, also known as hot wallets. Microsoft warns of the rise of cryware, malicious software used to steal info an dfunds from non-custodial cryptocurrency wallets, also known as hot wallets. Ransomware. Password and info stealers.

Cryptocurrency 96

Cryptocurrency Social Engineering Malware Cybercrime 96

SecureWorld News

JULY 3, 2023

This means that most cyberattacks could be prevented by following simple cybersecurity best practices, such as using strong passwords, updating software, and avoiding phishing emails. Phishing emails are more common than you know. According to PurpleSec, 98% of cybercrime relies on social engineering to accomplish it.

Cybercrime 85

Cybercrime Social Engineering Data breaches Education 85

SecureWorld News

MARCH 22, 2021

These criminals used phishing, spoofing, extortion, and various types of Internet-enabled fraud to target the most vulnerable in our society—medical workers searching for personal protective equipment, families looking for information about stimulus checks to help pay bills, and many others.". IC3's Recovery Asset Team (RAT).

Cybercrime 54

Cybercrime Scams Banking Accountability 54

SecureWorld News

AUGUST 29, 2023

An advisory from the company states that a "highly sophisticated" SIM swapping attack targeted one of Kroll's employees, resulting in unauthorized access to personal information related to bankruptcy claimants associated with cryptocurrency firms FTX, BlockFi, and Genesis.

Cryptocurrency 81

Cryptocurrency Phishing Social Engineering Accountability 81

SecureList

NOVEMBER 23, 2021

The COVID-19 pandemic is likely to cause a massive wave of poverty, and that invariably translates into more people resorting to crime, including cybercrime. We should expect more fraud, targeting mostly BTC , because this cryptocurrency is the most popular. Cracking down hard on the cybercrime world.

Cryptocurrency 121

Cryptocurrency Banking Cybercrime Ransomware 121

Security Affairs

AUGUST 6, 2023

Reptile Rootkit employed in attacks against Linux systems in South Korea New PaperCut flaw in print management software exposes servers to RCE attacks A cyberattack impacted operations of multiple hospitals in several US states Married couple pleaded guilty to laundering billions in cryptocurrency stolen from Bitfinex in 2016 Malicious packages in (..)

Malware 79

Malware Cybercrime Cryptocurrency Social Engineering 79

eSecurity Planet

SEPTEMBER 14, 2022

Cybercrime is a growth industry like no other. Phishing complaints were reported over 300,000 times in 2021 to IC3, the only Internet crime to crack 100,000+ complaints. Phishing complaints were reported over 300,000 times in 2021 to IC3, the only Internet crime to crack 100,000+ complaints. billion in reported losses.

Social Engineering 120

Social Engineering Energy and Utilities Phishing Scams 120

SC Magazine

APRIL 8, 2021

And yet, it’s become such a hot trend that scammers have taken notice and are attempting to lure current and prospective traders onto NFT-themed phishing and fraud websites. For example, “Scammers could build fake NFT user interfaces that steal cryptocurrency without providing the value they claim,” said Spiro. billion in 2020.

Scams 137

Scams Cryptocurrency Phishing Marketing 137

Security Affairs

JUNE 4, 2023

Xplain hack impacted the Swiss cantonal police and Fedpol Zyxel published guidance for protecting devices from ongoing attacks Kimsuky APT poses as journalists and broadcast writers in its attacks New Linux Ransomware BlackSuit is similar to Royal ransomware CISA adds Progress MOVEit Transfer zero-day to its Known Exploited Vulnerabilities catalog (..)

Spyware 88

Spyware Hacking Malware Social Engineering 88

Malwarebytes

SEPTEMBER 11, 2023

Until now, DarkGate was typically distributed via phishing emails. A cybercriminal who goes by the handle RastaFarEye has been advertising DarkGate Loader on cybercrime forums since June 16, 2023. A cybercriminal who goes by the handle RastaFarEye has been advertising DarkGate Loader on cybercrime forums since June 16, 2023.

Malware 118

Malware Social Engineering Cryptocurrency Cybercrime 118

SecureList

NOVEMBER 9, 2022

Phishing attacks are going to become even more sophisticated, since a lot of basic tactics have already been tried this year, and businesses learned to repel those. We can therefore expect that cybercrime groups from either block will feel safe to attack companies from the opposing side.

Cybersecurity 135

Cybersecurity Cyber Insurance Cybercrime IoT 135

Security Affairs

SEPTEMBER 26, 2023

This new version of the malware adds many new capabilities to an already feature rich Android Banker, most notably the introduction of a very extensive runtime engine powered by Accessibility services , which is used by actors to implement a complete ATS framework. reads the report published by Threat Fabric. “In

Malware 118

Malware Banking Phishing Engineering 118

Security Affairs

DECEMBER 17, 2023

CISA and ENISA enhance their Cooperation CISA adds Qlik bugs to exploited vulnerabilities catalog Report: 2.6

Data breaches 88

Data breaches Cybercrime Firewall Artificial Intelligence 88

Security Affairs

JANUARY 3, 2024

According to the Hunter Unit from Resecurity, previously, the “GXC Team” gained notoriety for creating a wide array of online fraud tools, ranging from compromised payment data checkers to sophisticated phishing and smishing kits. The use of Artificial Intelligence in cybercrime is not a completely novel concept.

Artificial Intelligence 125

Artificial Intelligence Banking Scams Cybercrime 125

The Last Watchdog

SEPTEMBER 7, 2022

They could be on the other side of the globe, part of a cybercrime regime that will never be discovered, much less brought to justice. Likewise, lookalike and spoofed web domains and well-crafted phishing emails now easily trick employees into thinking they’re dealing with trustworthy sources. But the situation isn’t hopeless.

Ransomware 124

Ransomware Education Financial Services Phishing 124

SecureList

NOVEMBER 22, 2022

Cryptocurrency targeted attacks. The cryptocurrency business continues to grow, and people continue to invest their money in this market because it’s a digital asset and all transactions occur online. These are attractive aspects that cybercrime groups will be unable to resist. It also offers anonymity to users.

Cryptocurrency 96

Cryptocurrency Mobile Ransomware Banking 96

Security Affairs

FEBRUARY 6, 2022

Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, newsletter). The post Security Affairs newsletter Round 352 appeared first on Security Affairs.

Social Engineering 81

Social Engineering Cryptocurrency Small Business Ransomware 81

SecureList

JANUARY 30, 2023

Just as any other business, cybercrime needs labor. The highest median salary of $4,000 could be found in ads for reverse engineers. Changes on the market, layoffs, and pay cuts, too, often prompt them to look for a job on cybercrime websites. The median levels of pay offered to IT professionals varied between $1,300 and $4,000.

Cybercrime 127

Cybercrime Marketing Encryption Risk 127

Webroot

FEBRUARY 11, 2021

As we mentioned in a previous blog , hackers come in many forms, but their methods can generally be classified into three distinct types of cybercriminals: The Impersonator – Hackers that pretend to be others, often using social engineering and human psychology to trick users.

Scams 107

Scams Phishing Firewall Social Engineering 107

SecureList

DECEMBER 6, 2022

There are two main types of online fraud aimed at stealing user data and money: phishing and scams. Phishers primarily seek to extract confidential information from victims, such as credentials or bank card details, while scammers deploy social engineering to persuade targets to transfer money on their own accord.

Scams 109

Scams Phishing Social Engineering Banking 109

Security Affairs

DECEMBER 3, 2021

Threat actors stole $120 million in cryptocurrencies from multiple wallets connected to the decentralized finance platform BadgerDAO. As Badger engineers investigate this, all smart contracts have been paused to prevent further withdrawals. million in crypto funds, blockchain security firm PeckShield reported. — ? .

Hacking 103

Hacking Phishing Authentication Cryptocurrency 103

SecureWorld News

JUNE 8, 2021

Department of Justice (DOJ) made a surprise announcement this week: it was able to recover more than $2 million worth of ransom money Colonial Pipeline paid to a cybercrime gang. After all, the conventional wisdom is that ransomware gangs demand cryptocurrency so they can move the funds anonymously and with impunity. just got $2.3

Ransomware 111

Ransomware Passwords VPN Accountability 111

Security Affairs

OCTOBER 31, 2022

In the early afternoon of Friday 12 May 2017, the media broke the news of a global computer security attack carried out through a malicious code capable of encrypting data residing in information systems and demanding a ransom in cryptocurrency to restore them, the Wannacry ransomware. About the author: Salvatore Lombardo.

Malware 102

Malware Computers and Electronics Encryption Ransomware 102

SecureList

SEPTEMBER 6, 2022

Additionally, we looked at the phishing activity around gaming, specifically that related to cybersports tournaments, bookmakers, gaming marketplaces, and gaming platforms, and found numerous examples of scams that target gamers and esports fans. Launching the malware resulted in decryption and activation of a Trojan-stealer dubbed Taurus.

Mobile 112

Mobile Passwords Software Accountability 112

Security Affairs

SEPTEMBER 2, 2018

The Loki Bot attacks started in July and aimed at stealing passwords from browsers, messaging applications, mail and FTP clients, and cryptocurrency wallets. Loki Bot operators employ various social engineering technique to trick victims into opening weaponized attachments that would deploy the Loki Bot stealer.

Social Engineering 55

Social Engineering Cryptocurrency Advertising Malware 55

SiteLock

AUGUST 27, 2021

This makes stealthy attacks incredibly popular in the cybercrime community. Websites hosting malicious links are often blacklisted by search engines, which prevents users from accessing your web content. To help protect your site, here are some of the most common stealthy cybersecurity threats to be aware of: Phishing.

Small Business 98

Small Business Cybersecurity Phishing DDOS 98

Security Affairs

SEPTEMBER 2, 2018

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Spyware 41

Spyware Banking Data breaches Mobile 41