Krebs on Security

DECEMBER 29, 2022

Here’s a look at some of the more notable cybercrime stories from the past year, as covered by KrebsOnSecurity and elsewhere. Super Bowl Sunday watchers are treated to no fewer than a half-dozen commercials for cryptocurrency investing. I will also continue to post on LinkedIn about new stories in 2023. agencies]. .”

Cryptocurrency 270

Cryptocurrency Cybercrime Computers and Electronics Scams 270

Krebs on Security

JULY 29, 2022

These services can be used in a legitimate manner for several business purposes — such as price comparisons or sales intelligence — but they are massively abused for hiding cybercrime activity because they can make it difficult to trace malicious traffic to its original source.

Cybercrime 302

Cybercrime Software VPN Backups 302

SecureList

OCTOBER 20, 2021

Having been in the field for so long, we have witnessed some major changes in the cybercrime world’s modus operandi. This report shares our insights into the Russian-speaking cybercrime world and the changes in how it operates that have happened in the past five years. Conclusion: cybersecurity and cybercrime have matured.

Cybercrime 145

Cybercrime Banking Malware Ransomware 145

Krebs on Security

JULY 29, 2021

Earlier this month, customers of the soccer jersey retailer classicfootballshirts.co.uk 22, 2020, when cryptocurrency wallet company Ledger acknowledged that someone had released the names, mailing addresses and phone numbers for 272,000 customers. started receiving emails with a “cash back” offer.

Passwords 362

Passwords Password Management Phishing Scams 362

SecureList

NOVEMBER 23, 2021

The COVID-19 pandemic is likely to cause a massive wave of poverty, and that invariably translates into more people resorting to crime, including cybercrime. We should expect more fraud, targeting mostly BTC , because this cryptocurrency is the most popular. Cracking down hard on the cybercrime world.

Cryptocurrency 142

Cryptocurrency Banking Cybercrime Ransomware 142

Krebs on Security

NOVEMBER 6, 2018

that has been tracking down individuals engaged in unauthorized “SIM swaps” — a complex form of mobile phone fraud that is often used to steal large amounts of cryptocurrencies and other items of value from victims. Samy Tarazi is a sergeant with the Santa Clara County Sheriff’s office and a REACT supervisor.

Mobile 243

Mobile Cryptocurrency Accountability Passwords 243

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4

Artificial Intelligence 132

Artificial Intelligence Data breaches Scams Insurance 132

Security Affairs

AUGUST 20, 2021

The retailer also reported that its main databases were not impacted. . At the time of this writing, it is unclear if the retailer has suffered a data breach, the leak site of the RansomExx gang has yet to include the Brazilian group among the list of targeted organizations. ” reads a statement from the company.

Ransomware 123

Ransomware Retail Cryptocurrency Data breaches 123

SecureList

NOVEMBER 10, 2022

Cryptocurrency prices were dropping from the end of 2021 and throughout the first half of 2022. Although finance experts and retail investors estimate crypto to have a solid chance of recovery in the long term, at the time of writing this report the prices remain low. In fact, cybercriminals hunting for crypto can target anyone.

Cryptocurrency 142

Cryptocurrency Malware Software Ransomware 142

SecureList

NOVEMBER 22, 2022

Cryptocurrency targeted attacks. The cryptocurrency business continues to grow, and people continue to invest their money in this market because it’s a digital asset and all transactions occur online. These are attractive aspects that cybercrime groups will be unable to resist. It also offers anonymity to users.

Cryptocurrency 112

Cryptocurrency Mobile Ransomware Banking 112

Security Affairs

SEPTEMBER 23, 2018

New XBash malware combines features from ransomware, cryptocurrency miners, botnets, and worms. Magecart cybercrime group stole customers credit cards from Newegg electronics retailer. Hackers stole $60 Million worth of cryptocurrencies from Japanese Zaif exchange. Sustes Malware: CPU for Monero. Ngrok Mining Botnet.

Computers and Electronics 91

Computers and Electronics Cryptocurrency Spyware Data breaches 91

Security Affairs

DECEMBER 13, 2019

Shopin founder charged by SEC for running $42 million scam cryptocurrency ICO. Eyal launched an Initial Coin Offerings (ICOs) to raise funding to create universal shopper profiles, maintained on the blockchain , that would track customer purchase histories across online retailers and recommend products based on the collected data.

Retail 90

Retail Scams Cryptocurrency Advertising 90

Security Affairs

JANUARY 13, 2019

” The TA505 group was first spotted by Proofpoint back 2017, it has been active at least since 2015 and targets organizations in financial and retail industries. “On December 13, 2018, we observed another large ServHelper “downloader” campaign targeting retail and financial services customers.” The support for “.bit”

Malware 111

Malware Financial Services DNS Retail 111

Security Affairs

APRIL 26, 2021

Attackers are exploiting the ProxyLogon flaws in Microsoft Exchange to recruit machines in a cryptocurrency botnet tracked as Prometei. Attackers are exploiting the ProxyLogon flaws in Microsoft Exchange to recruit machines in a cryptocurrency botnet tracked as Prometei. ” concludes the report.

Malware 102

Malware Cryptocurrency Retail Insurance 102

SecureWorld News

OCTOBER 19, 2021

Ransomware burnout might be creeping in for many cybersecurity professionals, but cybercrime organizations do not show any signs of slowing down, according to a new report. In all of 2020, the total cost was $416 million, which shows how cybercrime ransoms are on trajectory to nearly triple from last year. The findings?

Ransomware 92

Ransomware Cryptocurrency Cybercrime Cybersecurity 92

Security Affairs

JANUARY 15, 2022

“Hundreds of millions of payment card details have been stolen from online retailers, banks and payments companies before being sold for cryptocurrency on online marketplaces such as UniCC.” ” reads the analysis published by Elliptic Threat Intel.

Marketing 123

Marketing Retail Cryptocurrency Banking 123

Security Affairs

FEBRUARY 10, 2022

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. Authenticate calls from third party authorized retailers requesting. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, SIM swapping).

Banking 133

Banking Accountability Mobile Cryptocurrency 133

Security Affairs

OCTOBER 20, 2020

Group-IB assisted Paxful, an international peer-to-peer cryptocurrency marketplace, in countering web-bot and social engineering attacks. The combination of advanced anti-fraud technologies and intelligence protects both banking and retail customers. The figure suggests that bitcoin platforms remain of great interest to threat actors.

Cryptocurrency 95

Cryptocurrency Social Engineering eCommerce Engineering 95

Security Affairs

MARCH 30, 2023

The most recent version of AlienFox, Version 4, shows a totally different structure, it has added WordPress, Joomla, Drupal, Prestashop, Magento, and Opencart targeting, an Amazon.com retail site account checker. “The AlienFox toolset demonstrates another stage in the evolution of cybercrime in the cloud.” Tool1, Tool2).

Retail 98

Retail Cybercrime Cryptocurrency Malware 98

SecureList

FEBRUARY 23, 2022

For the purposes of this report, “financial malware” refers to malicious software targeting entities within the financial services sector, including online banking, payment systems, e-money services, online stores and cryptocurrency services. A noticeable development was the prominence of cryptocurrency-related phishing scams.

Banking 134

Banking Phishing Cryptocurrency Malware 134

Security Affairs

FEBRUARY 6, 2022

LockBit ransomware gang claims to have stolen data from PayBito crypto exchange FBI issued a flash alert on Lockbit ransomware operation CISA orders federal agencies to fix actively exploited CVE-2022-21882 Windows flaw Over 500,000 people were impacted by a ransomware attack that hit Morley Ransomware attack hit Swissport International causing delays (..)

Social Engineering 98

Social Engineering Cryptocurrency Small Business Ransomware 98

SecureWorld News

JUNE 17, 2021

For decrypting the information, the attackers received a 'ransom' in cryptocurrency. Together, law enforcement has managed to shut down the infrastructure from which the virus spreads and block channels for legalizing criminally acquired cryptocurrencies.". The total damage reaches $500 million. Clop used in other ransomware attacks.

Ransomware 98

Ransomware Encryption Cryptocurrency Retail 98

SecureWorld News

MAY 30, 2024

The cybercrime gang RansomHub has claimed responsibility and is threatening to release "a massive trove of sensitive personal information" belonging wealthy clients of Christie's unless their ransom demand is met. The world-renowned auction house Christie's has become the latest major corporation to fall victim to a ransomware attack.

Identity Theft 97

Identity Theft Hacking Ransomware Data breaches 97

Security Affairs

MAY 1, 2023

While investigating the malware distribution, the researchers noticed the use of an infrastructure known to belong to cybercrime group TA505. Russian TA505 hacking group , aka Evil Corp , has been active since 2014 focusing on Retail and banking sectors. Upon executing the MSI file, a PowerShell command is launched.

Malware 98

Malware Cybercrime Banking Software 98

Security Affairs

JANUARY 22, 2023

PoC Exploit for CVE-2022-47966 will be released soon Fortinet observed three rogue PyPI packages spreading malware Managing Asset Risks During Healthcare M&As Avast researchers released a free BianLian ransomware decryptor for some variants of the malware Experts spotted a backdoor that borrows code from CIA’s Hive malware T95 Android TV Box sold (..)

Data breaches 98

Data breaches Retail Malware VPN 98

SecureList

MARCH 29, 2023

Meanwhile, cryptocurrency became a prominent target for those seeking monetary gain. The amount of cryptocurrency-related phishing grew significantly in 2022, and with an endless array of new coins, NFT and other DeFi projects, scammers are continuously duping users. Now we see that APT actors have also switched to crypto.

Banking 110

Banking Phishing Cryptocurrency Mobile 110

SecureList

DECEMBER 13, 2023

In terms of targets, they choose larger organizations in various industries, such as retail, consumer goods, education, and others. Despite the malware being relatively new, the attackers behind Akira are quite busy with over 60 confirmed infected organizations worldwide.

Ransomware 133

Ransomware Passwords Malware Encryption 133

SecureWorld News

JUNE 17, 2021

For decrypting the information, the attackers received a 'ransom' in cryptocurrency. Together, law enforcement has managed to shut down the infrastructure from which the virus spreads and block channels for legalizing criminally acquired cryptocurrencies.". The total damage reaches $500 million. Clop used in other ransomware attacks.

Ransomware 52

Ransomware Encryption Cryptocurrency Retail 52

SC Magazine

JULY 2, 2021

. “I don’t think it would influence Federal Reserve policy, but what it might do is influence the industry to take additional action through our existing venues and our ability to share the data,” said Trish Supples, advanced subject matter expert in the Retail Payments Office at the Federal Reserve Bank of Atlanta.

Financial Services 71

Financial Services Banking Identity Theft Media 71

Security Affairs

NOVEMBER 14, 2021

Hundreds of thousands of fake warnings of cyberattacks sent from a hacked FBI email server GravityRAT returns disguised as an end-to-end encrypted chat app Intel and AMD address high severity vulnerabilities in products and drivers New evolving Abcbot DDoS botnet targets Linux systems Retail giant Costco discloses data breach, payment card data exposed (..)

Spyware 58

Spyware Data breaches Ransomware Hacking 58

Krebs on Security

DECEMBER 14, 2023

retail giant Target was battling a wide-ranging computer intrusion that compromised more than 40 million customer payment cards over the previous month. That story about the Flashback author was possible because a source had obtained a Web browser authentication cookie for a founding member of a Russian cybercrime forum called BlackSEO.

Cybercrime 265

Cybercrime Accountability Advertising Computers and Electronics 265

Krebs on Security

JANUARY 26, 2024

government says Ermakov and the other actors behind the Medibank hack are believed to be linked to the Russia-backed cybercrime gang REvil. “REvil was among the most notorious cybercrime gangs in the world until July 2021 when they disappeared. How close was the connection between GustaveDore and Mr. Shefel?

Cybercrime 274

Cybercrime Ransomware Retail Insurance 274

Security Affairs

FEBRUARY 10, 2022

Once hijacked a SIM, the attackers can steal money, cryptocurrencies and personal information, including contacts synced with online accounts. Authenticate calls from third party authorized retailers requesting. Authenticate calls from third party authorized retailers requesting. Pierluigi Paganini.

Mobile 108

Mobile Cryptocurrency Accountability Passwords 108

SecureList

FEBRUARY 10, 2022

The botnet can also install proxy servers on infected devices, mine cryptocurrency and conduct DDoS attacks. In addition, the size of the DDoS market is inversely proportional to that of the cryptocurrency market, which we’ve written about several times. Glupteba consists of a million infected IoT devices and Windows computers.

DDOS 139

DDOS Cryptocurrency Marketing Accountability 139

Security Affairs

JUNE 4, 2021

Cryptocurrencies are represented in hacked accounts to trading sites. Monero is the cryptocurrency of choice, instead, and all communications must be PGP encrypted. More retailers accept several forms of online payments. Cryptocurrency trading accounts. Other cryptocurrencies have increased in value as well.

Accountability 142

Accountability Marketing Hacking Cryptocurrency 142

Security Affairs

MARCH 4, 2023

FiXS, a new ATM malware that is targeting Mexican banks BidenCash leaks 2.1M stolen credit/debit cards Pegasus spyware used to spy on a Polish mayor Hundreds of thousands of websites hacked as part of redirection campaign MQsTTang, a new backdoor used by Mustang Panda APT against European entities Trusted Platform Module (TPM) 2.0

Spyware 98

Spyware Data breaches Ransomware Retail 98

Digital Shadows

NOVEMBER 26, 2024

The proliferation of cybercrime guides on forums and a 7% rise in insider threat content, driven by significant financial incentives, highlight the growing complexity of cybersecurity challenges. It’s realistically possible that the rise in phishing attacks during the current reporting period stems from the time of year.

Cyber Attacks 59

Cyber Attacks Phishing Ransomware Cyber Insurance 59