Security Affairs

SEPTEMBER 4, 2021

FIN7 cybercrime gang used weaponized Windows 11 Alpha-themed Word documents to drop malicious payloads, including a JavaScript backdoor. Anomali Threat Research experts have monitored recent spear-phishing attacks conducted by financially motivated threat actor FIN7. ” reads the analysis published by Anomali.

Cybercrime 145

Cybercrime Retail Phishing Hacking 145

Krebs on Security

JULY 25, 2023

Malware-based anonymity networks are a major source of unwanted and malicious web traffic directed at online retailers, Internet service providers (ISPs), social networks, email providers and financial institutions. SocksEscort began in 2009 as “ super-socks[.]com SocksEscort began in 2009 as “ super-socks[.]com com, super-socks[.]com,

Malware 211

Malware VPN Internet Internet 211

Security Affairs

OCTOBER 20, 2021

The incident was disclosed after threat actors have advertised the sale of more than 60 GB of data on an underground cybercrime forum. The threat actors now claim to have breached the servers of Acer Taiwan on October 15th and have stolen internal data, including employee and product information.

Data breaches 141

Data breaches Retail Cybercrime Hacking 141

Security Affairs

JUNE 10, 2021

Group-IB, a global threat hunting and adversarial cyber intelligence company specializing in the investigation and prevention of high-tech cybercrime, has published a comprehensive analysis of fraud cases on a global scale. . Over the past year, an average of over 100 phishing websites were created per insurer.

Scams 138

Scams Banking Retail Insurance 138

Security Affairs

JANUARY 9, 2019

Early 2014, the high-end retailer confirmed a data breach, the incident happened a few weeks after the clamorous data breach at US giant retailer Target. Security Affairs – settlement, cybercrime ). million settlement with Neiman Marcus appeared first on Security Affairs. billion in the Q4 2013.

Data breaches 93

Data breaches Retail Advertising Cybercrime 93

Security Affairs

NOVEMBER 4, 2020

“A forensic investigation of the incident has concluded, and no exfiltration of any sensitive business data or retail customer, supplier, consumer, or employee data was identified. Mattel contained the attack and, although some business functions were temporarily impacted, Mattel restored its operations.”

Ransomware 144

Ransomware Advertising Retail Malware 144

Security Affairs

APRIL 25, 2024

Skanlog, a critical distributor for Systembolaget, the Swedish government-owned retail chain suffered a ransomware attack. It operates stores across Sweden and is responsible for the retail sale of wine, spirits, and strong beer. “It Systembolaget has a monopoly on the sale of alcoholic beverages containing more than 3.5%

Ransomware 141

Ransomware Retail Cyber Attacks Backups 141

Security Affairs

JULY 9, 2024

The financial organization confirmed that certain personal information may have been compromised. An update published on June 26, 2024 12:00pm confirmed that the company’s retail banking customers’ debit cards, online, and digital banking credentials do not appear to be impacted. reads the notice of Cybersecurity Incident.

Banking 138

Banking Data breaches Retail Technology 138

Security Affairs

JUNE 11, 2021

The US Department of Justice seized the servers and domains of the popular cybercrime marketplace SlilPP. In the past, law enforcement shut down other cybercrime marketplace focused on the sale of login credentials, such as xDedic and DEER.IO. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Cybercrime 129

Cybercrime Accountability Retail Cyber threats 129

Security Affairs

NOVEMBER 12, 2019

The analysis of a malicious email revealed a possible raising interest of the TA505 cybercrime gang in system integrator companies. The infrastructure used in the attacks suggests the involvement of the cybercrime group TA505. TA505 hacking group has been active since 2014 focusing on Retail and banking sectors. Introduction.

Cybercrime 62

Cybercrime Computers and Electronics Penetration Testing Malware 62

Security Affairs

OCTOBER 14, 2021

The incident was disclosed after threat actors have advertised the sale of more than 60 GB of data on an underground cybercrime forum. The threat actors shared a link to stolen files and databases, stolen information includes customer data, financial information, login details for Acer retailers and distributors from India.

Computers and Electronics 108

Computers and Electronics Retail Media Cybercrime 108

Security Affairs

APRIL 21, 2024

PoC publicly available Linux variant of Cerber ransomware targets Atlassian servers Ivanti fixed two critical flaws in its Avalanche MDM Researchers released exploit code for actively exploited Palo Alto PAN-OS bug Cisco warns of large-scale brute-force attacks against VPN and SSH services PuTTY SSH Client flaw allows of private keys recovery A renewed (..)

Data breaches 138

Data breaches Phishing Ransomware Malware 138

Security Affairs

NOVEMBER 11, 2020

Kvashuk is a Ukrainian citizen living in Renton, Washngton, was responsible for helping test Microsoft’s online retail sales platform. The man was involved in the testing of Microsoft’s online retail sales platform and abused testing access to steal “currency stored value” (CSV) such as digital gift cards.

Identity Theft 138

Identity Theft Retail Engineering Software 138

Security Affairs

OCTOBER 24, 2020

The company owns and operates eleven properties and an outdoor lifestyle equipment/apparel retail division with stores in cities throughout Michigan. In June, security experts from Symantec reported that at least 31 organizations in the United States have been targeted with the recently discovered WastedLocker ransomware.

Ransomware 132

Ransomware Telecommunications Banking Advertising 132

Security Affairs

OCTOBER 18, 2020

Mandiant researchers highlighted an important with operations conducted by the TA505 cybercrime gang (aka Evil Corp ), which has been active since 2014 focusing on retail and banking sectors. Experts also reported that the threat actor modified the macros in Office documents used as bait and also added geofencing techniques.

Ransomware 143

Ransomware Malware Telecommunications Advertising 143

Security Affairs

JUNE 27, 2024

Evolve Bank & Trust this week published a notice on its website to confirm the security breach and announced it has launched an investigation into the incident. The financial organization confirmed that certain personal information may have been compromised. ” reads the notice of Cybersecurity Incident.

Hacking 123

Hacking Banking Retail Ransomware 123

Security Affairs

OCTOBER 1, 2021

Luxury retail company Neiman Marcus Group has announced this week that it has suffered a data breach that impacted customer information. The attack against Neiman Marcus Group took place in May 2020, as a result of the attack, threat actors had access to customers’ information, including payment card data.

Data breaches 133

Data breaches Retail Passwords Accountability 133

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4

Artificial Intelligence 132

Artificial Intelligence Data breaches Scams Insurance 132

eSecurity Planet

SEPTEMBER 21, 2024

Each of these regulations addresses different aspects of cybersecurity and data protection, making it essential for businesses and organizations to stay informed and proactive. The act also covers various forms of cybercrime, including malware distribution and data theft.

Cybersecurity 117

Cybersecurity Computers and Electronics Cyber threats Healthcare 117

Security Affairs

NOVEMBER 8, 2021

Electronics retail giant MediaMarkt was hit by a ransomware attack that disrupted store operations in the Netherlands and Germany. Media Markt is a German multinational chain of stores selling consumer electronics with over 1000 stores in Europe.

Computers and Electronics 140

Computers and Electronics Ransomware Retail Spyware 140

Security Affairs

AUGUST 21, 2019

As people have growing opportunities to shop online, the chances for hackers to carry out lucrative cyberattacks in the retail sector also go up. Statistics from 2016 showed that the average cost per compromised retail record was $172. People are becoming less tolerant of retailers that have widescale data breaches.

Cybersecurity 105

Cybersecurity Retail Manufacturing Advertising 105

Security Affairs

SEPTEMBER 3, 2023

ransomware builder used by multiple threat actors Cisco fixes 3 high-severity DoS flaws in NX-OS and FXOS software Cybercrime Unpacking the MOVEit Breach: Statistics and Analysis Cl0p Ups The Ante With Massive MOVEit Transfer Supply-Chain Exploit FBI, Partners Dismantle Qakbot Infrastructure in Multinational Cyber Takedown U.S.

Social Engineering 133

Social Engineering Spyware Data breaches Surveillance 133

Security Affairs

MARCH 24, 2024

During the month of Ramadan, Resecurity observed a significant increase in fraudulent activities and scams, coinciding with a surge in retail and online transactions. Middle Eastern enterprises, facing this heightened risk, are urged to bolster consumer protection and reinforce their brand security.

Scams 140

Scams Consumer Protection Retail Government 140

Security Affairs

SEPTEMBER 1, 2020

The Iranian hacker group has been attacking corporate VPNs over the past months, they have been hacking VPN servers to plant backdoors in companies around the world targeting Pulse Secure , Fortinet , Palo Alto Networks , and Citrix VPNs. ” reads the report published by Crowdstrike. Pierluigi Paganini.

Hacking 136

Hacking VPN Advertising Government 136

Security Affairs

AUGUST 16, 2024

Threat actors could exploit this flaw to inject malicious code, execute commands with system privileges, and take over devices, potentially leading to serious cybercrimes and data breaches. The flawed app is called Verizon Retail Demo Mode (“com.customermobile.preload.vzw”) and requires dozens of permissions for its execution.

Hacking 145

Hacking Firmware Mobile Penetration Testing 145

Security Affairs

AUGUST 20, 2021

. “ The teams remain mobilized, executing the protection and recovery plan, with all their control and security protocols, and working to re-establish all company operations.” The retailer also reported that its main databases were not impacted. . ” reads a statement from the company.

Ransomware 123

Ransomware Retail Cryptocurrency Data breaches 123

Security Affairs

FEBRUARY 2, 2022

Cyber security team at retail giant Walmart dissected a new ransomware family dubbed Sugar, which implements a ransomware-as-a-service model. The cyber threat team at retail giant Walmart has analyzed a new ransomware family dubbed Sugar, which is offered through a ransomware-as-a-service (RaaS) model.

Ransomware 118

Ransomware Retail Malware Cyber threats 118

Security Affairs

MAY 16, 2019

“An unprecedented, international law enforcement operation has dismantled a complex, globally operating and organised cybercrime network.” The GozNym has been seen targeting banking institutions, credit unions, and retail banks. ” reads the press release published by the Europol.

Banking 100

Banking Cybercrime Malware Advertising 100

SC Magazine

MAY 1, 2021

Prior to Mastercard, Abdullah was the chief information security officer at Xerox, where she established and led a corporate-wide information risk management program. She also served as the deputy chief information officer of the White House. She is also the host of the Mastering Cyber podcast.

Computers and Electronics 126

Computers and Electronics Technology Education Information Security 126

Security Affairs

NOVEMBER 28, 2020

The news reported by ZDnet is not surprising, I have discovered several times such kind of offer, but it is important to raise awareness on the cybercrime-as-a-service model that could rapidly enable threat actors to carry out malicious activities. Exploit.in ” reported ZDNet.

Accountability 125

Accountability Cybercrime Hacking Retail 125

Security Affairs

OCTOBER 20, 2020

As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com. Luxottica Group S.p.A. Its best known brands are Ray-Ban, Persol, and Oakley.

Ransomware 145

Ransomware Cyber Attacks Advertising Retail 145

Security Affairs

NOVEMBER 19, 2022

Other campaigns observed by the experts invited recipients to claim gift cards from popular retailers like Home Depot. In this case, the spam messages include links to fake online survey pages that have nothing to do with the retailer’s gift card.

Scams 145

Scams Retail Password Management Phishing 145

Security Affairs

JANUARY 30, 2024

In early January, the Cactus ransomware group claimed to have hacked Coop, one of the largest retail and grocery providers in Sweden. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, Schneider Electric)

Ransomware 144

Ransomware Hacking Data breaches Digital transformation 144

Security Affairs

SEPTEMBER 6, 2022

Researchers discovered a previously undocumented software control panel, named TeslaGun, used by a cybercrime gang known as TA505. Researchers from cybersecurity firm PRODAFT have discovered a previously undocumented software control panel, tracked as TeslaGun, used by a cybercrime group known as TA505.

Cybercrime 98

Cybercrime Banking Malware Retail 98

Security Affairs

APRIL 16, 2023

hacking tools and electronics A new round of the weekly SecurityAffairs newsletter arrived!

Data breaches 98

Data breaches Spyware Surveillance Retail 98

Security Affairs

AUGUST 14, 2020

Next, was Retail and Financing, as the most sectors affected in this season. Pedro Tavares is a professional in the field of information security, working as an Ethical Hacker, Malware Analyst, Cybersecurity Analyst and also a Security Evangelist. Threats by Sector. Download: [ PDF ] or [ PNG ].

Threat Reports 145

Threat Reports Phishing Banking Malware 145

Security Affairs

DECEMBER 22, 2019

Justice Department announced that three members of the cybercrime group behind the GozNym banking Trojan have been sentenced to prison. Justice Department announced that three members of the cybercrime group behind the GozNym banking Trojan have been sentenced to prison. Brady announced today.”

Computers and Electronics 91

Computers and Electronics Banking Cybercrime Malware 91