Security Affairs

APRIL 18, 2021

The Ukrainian national Fedir Hladyr (35), aka “das” or “AronaXus,” was sentenced to 10 years in prison for having served as a manager and systems administrator for the financially motivated group FIN7 , aka Carbanak. Between 2014 and 2016 the group used a new custom malware dubbed Carbanak that is considered a newer version of Anunak.

System Administration 136

System Administration Penetration Testing Malware Hacking 136

Krebs on Security

SEPTEMBER 30, 2023

.” New York City-based cyber intelligence firm Flashpoint said the Snatch ransomware group was created in 2018, based on Truniger’s recruitment both on Russian language cybercrime forums and public Russian programming boards. “The command requires Windows system administrators,” Truniger’s ads explained.

Ransomware 281

Ransomware Accountability Cybercrime Backups 281

Security Affairs

APRIL 23, 2019

The Carbanak gang (aka FIN7 , Anunak or Cobalt ) stole over a billion euros from banks across the world, the name “Carbanak” comes with the name of the malware they used to compromise computers at banks, other financial institutions, restaurants, and other industries. Hladyr is suspected to be a system administrator for the group.

Malware 93

Malware Penetration Testing Banking System Administration 93

Security Affairs

MARCH 10, 2020

Microsoft is warning of human-operated ransomware, this kind of attack against businesses is becoming popular in the cybercrime ecosystem. Human-operated ransomware is a technique usually employed in nation-state attacks that is becoming very popular in the cybercrime ecosystem. ” reads the post published by Microsoft.

Ransomware 144

Ransomware Cybercrime Social Engineering Banking 144

Security Affairs

AUGUST 9, 2021

Synology’s security researchers believe the botnet is primarily driven by a malware family called “StealthWorker.” ” At present, Synology PSIRT has seen no indication of the malware exploiting any software vulnerabilities.” ” reads the security advisory published by the vendor. Pierluigi Paganini.

Ransomware 140

Ransomware System Administration Malware Authentication 140

Security Affairs

APRIL 23, 2019

The Carbanak gang (aka FIN7 , Anunak or Cobalt ) stole over a billion euros from banks across the world, the name “Carbanak” comes with the name of the malware they used to compromise computers at banks, other financial institutions, restaurants, and other industries. Hladyr is suspected to be a system administrator for the group.

Malware 80

Malware Penetration Testing Banking System Administration 80

Malwarebytes

APRIL 19, 2022

These days, financial cybercrimes often involve Bitcoin and other cryptocurrencies. Since 2018, one of the Lazarus Group’s tactics has been to disguse AppleJeus malware as cryptocurrency trading platforms for both Windows and Mac. Use endpoint protection to detect exploits and stop malware. Spearphishing campaigns.

Cryptocurrency 133

Cryptocurrency Social Engineering Computers and Electronics Engineering 133

Security Affairs

MARCH 18, 2022

Mandiant researchers discovered a new Unix rootkit named Caketap, which is used to steal ATM banking data, while investigating the activity of the LightBasin cybercrime group (aka UNC1945 ). Experts spotted a new Unix rootkit, called Caketap, that was used to steal ATM banking data. ” concludes the report.

Banking 144

Banking Telecommunications System Administration Hacking 144

Security Affairs

OCTOBER 13, 2023

AvosLocker operators already advertised in the past a Linux variant, dubbed AvosLinux, of their malware claiming it was able to support Linux and ESXi servers. AvosLocker affiliates use legitimate software and open-source remote system administration tools to compromise the victims’ networks.

Ransomware 131

Ransomware System Administration Antivirus Malware 131

Security Affairs

MAY 2, 2021

A new cryptocurrency stealer dubbed WeSteal is available on the cybercrime underground, unlike other commodity cryptocurrency stealers, its author doesn’t masquerade its purpose and promises “the leading way to make money in 2021.”. There is the name of the malware itself. ” reads the post published by Palo Alto Networks.

Cryptocurrency 116

Cryptocurrency Malware Advertising System Administration 116

Security Affairs

OCTOBER 21, 2021

The United States Department of Justice sentenced two individuals that were providing bulletproof hosting to various malware operations. The two individuals, Aleksandr Skorodumov (33) of Lithuania, and Pavel Stassi (30) of Estonia, administrated the bulletproof hosting service between 2009 and 2015.

System Administration 123

System Administration Malware Accountability Marketing 123

Security Affairs

OCTOBER 3, 2023

Our investigation revealed that this remote endpoint is associated with criminal activities dating back to 2019, indicating that these hosts were likely under the control of the same technical administration. This hostname connection is particularly heterogeneous, but it technically makes sense.

Scams 145

Scams Ransomware System Administration Malware 145

Security Affairs

DECEMBER 7, 2019

US DoJ charged two Russian citizens for deploying the Dridex malware and for their involvement in international bank fraud and computer hacking schemes. The Bugat malware a multifunction malware package designed to automate the theft of confidential personal and financial information. Attorney Brady.

Banking 97

Banking Malware Accountability Cybercrime 97

Malwarebytes

APRIL 20, 2021

In 2018 three high-ranking members of a sophisticated international cybercrime group operating out of Eastern Europe were arrested and taken into custody by US authorities. The Carbanak campaign first made international headlines in 2015 as one of the first malware campaigns that specialized in remote ATM robberies. The malware.

System Administration 88

System Administration Banking Malware Penetration Testing 88

Security Affairs

APRIL 26, 2021

European law enforcement has conducted an operation aimed at performing a mass-sanitization of computers infected with the infamous Emotet Windows malware. European law enforcement agencies automatically wiped the infamous Emotet malware from infected systems across the world as part of a mass sanitization operation.

Malware 111

Malware Banking System Administration Hacking 111

eSecurity Planet

JULY 13, 2023

They found a tool called WormGPT “through a prominent online forum that’s often associated with cybercrime,” Kelley wrote in a blog post. WormGPT can be used for “everything blackhat related,” its developer claimed in the cybercrime forum. Promotion of jailbreaks for AI platforms.

Cybercrime 98

Cybercrime Phishing Marketing System Administration 98

Security Affairs

AUGUST 2, 2018

Three members of the cybercrime group tracked as FIN7 and Carbanak have been indicted and charged with 26 felony counts. Three members of the notorious cybercrime gang known as FIN7 and Carbanak have been indicted and charged with 26 felony counts of conspiracy, wire fraud, computer hacking, access device fraud and aggravated identity theft.

Banking 70

Banking Cybercrime Identity Theft Penetration Testing 70

Security Affairs

APRIL 1, 2019

The popular expert unixfreaxjp analyzed a new China ELF DDoS’er malware tracked as “Linux/DDoSMan” that evolves from the Elknot malware to deliver new ELF bot. But what kind of malware is this Elknot Trojan? This malware is an update and reuse from the Elknot’s malware source code.

DDOS 110

DDOS Malware Encryption Penetration Testing 110

SecureWorld News

APRIL 19, 2021

Being a systems administrator can be a fulfilling job with a lot of rewards. Some were hackers, others developed the malware installed on computers, and still others crafted the malicious emails that duped victims into infecting their company systems.

System Administration 98

System Administration Hacking Malware Encryption 98

Malwarebytes

AUGUST 27, 2021

Indeed, while many people are looking forward to catching up with friends and family this Labor Day weekend, cybercrime gangs are likely huddling, too, planning to attack somebody. . You never think you’re gonna be hit by ransomware,” says Ski Kacoroski , a system administrator with the Northshore School District in Washington state.

Ransomware 115

Ransomware System Administration Encryption Cybercrime 115

Security Affairs

SEPTEMBER 23, 2023

At the time, BleepingComputer reported that the City’s court system canceled all jury trials and jury duty for several days starting from May 2nd. CBS News Texas obtained an image the ransomware note dropped by the malware on the infected systems.

Ransomware 133

Ransomware Surveillance Healthcare Accountability 133

Security Affairs

MARCH 27, 2023

A technical analysis of NullMixer malware operation revealed Italy and France are the favorite European countries from the attackers’ perspective. Executive Summary Our insights into a recent NullMixer malware operation revealed Italy and France are the favorite European countries from the opportunistic attackers’ perspective.

Malware 98

Malware Social Engineering Encryption Marketing 98

Security Affairs

MAY 21, 2023

Unfortunately, as system administrators seek ways to control access to these platforms, users may seek out alternative ways to gain access.” However, this recent campaign shows malicious ads can still slip by moderators and deliver victims malware.” In this case, the visitors were downloading Midjourney-x64.msix,

System Administration 98

System Administration Advertising Malware Hacking 98

Security Affairs

MARCH 13, 2022

All we do is provide paid training to system administrators around the world on how to properly set up a corporate network. “For us it is just business and we are all apolitical. We are only interested in money for our harmless and useful work.

Hacking 98

Hacking Ransomware Manufacturing Cyber Attacks 98

Krebs on Security

MAY 29, 2020

But new research suggests that as cybercrime has become dominated by pay-for-service offerings, the vast majority of day-to-day activity needed to support these enterprises is in fact mind-numbingly boring and tedious, and that highlighting this reality may be a far more effective way combat cybercrime and steer offenders toward a better path.

Cybercrime 318

Cybercrime System Administration Marketing Malware 318

SecureList

NOVEMBER 14, 2022

This reveals a likely blind spot for defenders and endpoint vendors: in a number of cases, perhaps even the majority, attackers have no need for 0-days and malware deployment to gain access to the information they need. SIGINT-delivered malware. 2023 will very likely be a year of 0-days for all major email software. The next WannaCry.

Firmware 128

Firmware Surveillance Mobile Telecommunications 128

Security Affairs

MARCH 14, 2023

The tool is basically a search engine for local and network shared files inside a Windows environment: unlike the default Windows search, it is designed to locate files and folders by filename instantly, speeding up system information discovery. Its name is YDArk and it is an open-source tool available even on GitHub ( link ).

Ransomware 98

Ransomware Software System Administration Encryption 98

Krebs on Security

AUGUST 5, 2021

It’s nice when ransomware gangs have their bitcoin stolen, malware servers shut down, or are otherwise forced to disband. Reinvention is a basic survival skill in the cybercrime business. REvil’s last big victim was Kaseya , a Miami-based company whose products help system administrators manage large networks remotely.

Ransomware 354

Ransomware Cybercrime Malware System Administration 354

Krebs on Security

APRIL 2, 2019

Canadian police last week raided the residence of a Toronto software developer behind “ Orcus RAT ,” a product that’s been marketed on underground forums and used in countless malware attacks since its creation in 2015. An advertisement for Orcus RAT. Tips from international private cyber security firms triggered the investigation.”.

Advertising 259

Advertising Malware Software Marketing 259

SecureList

AUGUST 12, 2021

We discovered the malware as part of an attack against a high-profile organization in Vietnam. We found the loader for this file so interesting that we decided to base one of the tracks of our Targeted Malware Reverse Engineering course on it. The exploit-chain attempts to install malware in the system through a dropper.

Ransomware 145

Ransomware Malware Banking Encryption 145

eSecurity Planet

DECEMBER 3, 2021

Brian Krebs is an independent investigative reporter known for his coverage of technology, malware , data breaches , and cybercrime developments. Russian software engineer Eugene Kaspersky’s frustration with the malware of the 80s and 90s led to the founding of antivirus and cybersecurity vendor Kaspersky Lab.

Accountability 139

Accountability Cybersecurity Penetration Testing InfoSec 139