The Last Watchdog

FEBRUARY 6, 2019

This week civil liberties groups in Europe won the right to challenge the UK’s bulk surveillance activities in the The Grand Chamber of the European Court of Human Rights. Related: Snowden on unrestrained surveillance. Ubiquitous surveillance. It’s a healthy thing that a captain of industry can see this. Advanced use cases.

Surveillance 157

Surveillance Technology Retail Artificial Intelligence 157

Security Affairs

AUGUST 7, 2022

Greek intelligence service used surveillance malware to spy on a journalist, Reuters reports Slack resets passwords for about 0.5% of its users due to the exposure of salted password hashes Twitter confirms zero-day used to access data of 5.4

Spyware 139

Spyware Manufacturing Small Business Surveillance 139

Security Affairs

SEPTEMBER 2, 2019

Login details of more than 36 million Poshmark accounts are available for sale in the cybercrime underground. The company discovered unauthorized access to its servers, the intruders stole personal information of the users, including usernames , hashed passwords, first and last names, gender information, and city of residenc.

Accountability 93

Accountability Data breaches Passwords Advertising 93

Krebs on Security

SEPTEMBER 30, 2024

A California man accused of failing to pay taxes on tens of millions of dollars allegedly earned from cybercrime also paid local police officers hundreds of thousands of dollars to help him extort, intimidate and silence rivals and former business partners, the government alleges.

Cryptocurrency 267

Cryptocurrency Government Internet Internet 267

Krebs on Security

AUGUST 15, 2024

On July 21, 2024, denizens of the cybercrime community Breachforums released more than 4 terabytes of data they claimed was stolen from nationalpublicdata.com, a Florida-based company that collects data on consumers and processes background checks. billion rows of records — they claimed was taken from nationalpublicdata.com.

Hacking 336

Hacking Data breaches Identity Theft Accountability 336

Security Affairs

DECEMBER 4, 2022

” Privacy advocates are raising the alarm on surveillance activities operated by law enforcement by collecting data from connected systems in modern cars. “New cars are surveillance on wheels, sending sensitive passenger data to carmakers and police.

Surveillance 107

Surveillance Technology Mobile Hacking 107

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4

Artificial Intelligence 115

Artificial Intelligence Data breaches Scams Insurance 115

Security Affairs

MAY 6, 2023

Twitter confirmed that a security incident publicly exposed Circle tweets FBI seized other domains used by the shadow eBook library Z-Library WordPress Advanced Custom Fields plugin XSS exposes +2M sites to attacks Fortinet fixed two severe issues in FortiADC and FortiOS Pro-Russia group NoName took down multiple France sites, including the French (..)

Data breaches 98

Data breaches Malware Mobile Spyware 98

Security Affairs

DECEMBER 18, 2019

“Through proactive surveillance, LifeLabs recently identified a cyber-attack that involved unauthorized access to our computer systems with customer information that could include name, address, email, login, passwords, date of birth, health card number and lab test results.” ” said Brown.

Data breaches 68

Data breaches Identity Theft Insurance Advertising 68

Malwarebytes

SEPTEMBER 27, 2021

Last week on Malwarebytes Labs.

Phishing 58

Phishing Surveillance Malware Backups 58

Naked Security

AUGUST 10, 2023

Latest episode – listen now! Full transcript inside.)

Passwords 75

Passwords Surveillance Cryptocurrency Cybercrime 75

Krebs on Security

NOVEMBER 15, 2022

Wanted Ukrainian cybercrime suspect Vyacheslav “Tank” Penchukov (right) was arrested in Geneva, Switzerland. Ultimately, Penchukov’s political connections helped him evade prosecution by Ukrainian cybercrime investigators for many years. This was enough to positively identify Tank as Penchukov, Warner said.

Banking 285

Banking Small Business Accountability Cybercrime 285

Identity IQ

MAY 22, 2023

Dark web monitoring is a service that scans the dark web for stolen personal information, such as credit card numbers, Social Security numbers, passwords, and other sensitive data. You can then take proactive steps to protect your information, such as changing passwords, canceling credit cards, or contacting relevant authorities.

Identity Theft 52

Identity Theft Cyber threats Surveillance Passwords 52

Security Affairs

MAY 14, 2023

ransom Dragon Breath APT uses double-dip DLL sideloading strategy International Press Cybercrime San Bernardino County pays $1.1-million ransom Dragon Breath APT uses double-dip DLL sideloading strategy International Press Cybercrime San Bernardino County pays $1.1-million

Data breaches 98

Data breaches DDOS Ransomware Artificial Intelligence 98

Security Affairs

OCTOBER 18, 2018

Among other malicious features, LuminosityLink allowed Grubbs’ customers to record the keys that victims pressed on their keyboards, surveil victims using their computers’ cameras and microphones, view and download the computers’ files, and steal names and passwords used to access websites.” Pierluigi Paganini.

Computers and Electronics 79

Computers and Electronics Cybercrime Advertising Marketing 79

Krebs on Security

MARCH 29, 2022

” On April 5, 2021, Everlynn posted a new sales thread to the cybercrime forum cracked[.]to In other cases, KT said, hackers will try to guess the passwords of police department email systems. But KT said each time Everlynn gets released from police custody, they go right back to committing the same cybercrimes.

Accountability 284

Accountability Government Hacking Social Engineering 284

SecureList

NOVEMBER 17, 2021

Last year, we foresaw the APT and cybercrime worlds becoming more porous on an operational level. This year, the use of surveillance software developed by private vendors has come under the spotlight, as discussed above. Let’s start by looking at the predictions we made for 2021. And now, we turn our attention to the future.

Mobile 141

Mobile Surveillance Ransomware Government 141

SecureWorld News

AUGUST 8, 2022

ForrmBook is capable of key logging and capturing browser or email client passwords, but its developers continue to update the malware to exploit the latest Common Vulnerabilities and Exposures (CVS), such as CVE-2021-40444 Microsoft MSHTML Remote Code Execution Vulnerability. AZORult's developers are constantly updating its capabilities.

Malware 88

Malware Banking Healthcare Penetration Testing 88

SecureList

NOVEMBER 23, 2021

Governments in many countries push for easier identification of Internet users to fight cybercrime, as well as “traditional” crime coordinated online. Citizens, for their part, are increasingly concerned with surveillance capitalism , a lack of anonymity and dependence on online services.

Government 118

Government Internet Internet Technology 118

Malwarebytes

DECEMBER 7, 2021

For lateral movement the DCU saw Nickel actors using Mimikatz, WDigest, NTDSDump, and other password dumping tools during attacks. For initial access, the DCU noticed Nickel using older, and patched, vulnerabilities in Microsoft products like Microsoft Exchange and SharePoint, but also compromised VPN suppliers or obtained stolen credentials.

Hacking 100

Hacking Malware Surveillance Data collection 100

Malwarebytes

NOVEMBER 2, 2023

Unlike other generations whose privacy fears are deeply entangled with concerns of traditional cybercrimes like identity and credit card theft, Gen Z worries most about the exposure of their private information because of the chance of harassment, bullying, and lost friendships. But it isn’t that Gen Z, wholesale, doesn’t care about privacy.

Identity Theft 121

Identity Theft Data breaches Hacking Surveillance 121

SecureList

FEBRUARY 26, 2021

The Coalition Against Stalkerware warns that stalkerware “may facilitate intimate partner surveillance, harassment, abuse, stalking, and/or violence.” This is possible if the device either has no pin, pattern, or password to protect it or alternatively, the abuser knows the victim/survivor personally.

Mobile 97

Mobile Surveillance Software Passwords 97

Security Affairs

SEPTEMBER 21, 2018

He intended to wire upward of $1 million to the seller of the property but was unaware that his conversations were under surveillance by scammers. These measures include a frequent change in passwords, using mismatched and uncommon characters to avoid predictability. Security Affairs – Money Transfer Scam, cybercrime).

Scams 87

Scams Advertising Accountability Surveillance 87

Malwarebytes

DECEMBER 7, 2021

For lateral movement the DCU saw Nickel actors using Mimikatz, WDigest, NTDSDump, and other password dumping tools during attacks. For initial access, the DCU noticed Nickel using older, and patched, vulnerabilities in Microsoft products like Microsoft Exchange and SharePoint, but also compromised VPN suppliers or obtained stolen credentials.

Hacking 77

Hacking Malware Surveillance Data collection 77

eSecurity Planet

DECEMBER 19, 2023

Cybercrime will go to the next level: Cyberattackers will implement improved skills, “shift left” attacks, and shifting strategies to adjust to evolving cyberdefense. AI-Powered Cybercrime Despite the advancements in using AI to improve security, cybercriminals also have access to AI and LLMs.

Cybersecurity 140

Cybersecurity CISO Government Technology 140

Identity IQ

FEBRUARY 8, 2024

But the dark web is also associated with illegal activities including the trafficking of drugs, weapons, and illegal pornography, hacking and cybercrime, terrorism, and the sale of stolen data or personal information. Surveillance and monitoring initiatives that enable authorities to track and identify individuals on the dark web.

Identity Theft 98

Identity Theft Cryptocurrency Government Engineering 98

Krebs on Security

NOVEMBER 6, 2018

The force was originally created to tackle a range of cybercrimes, but Tarazi says SIM swappers are a primary target now for two reasons. Soon after, the attackers were able to use their control over his mobile number to reset his Gmail account password.

Mobile 239

Mobile Cryptocurrency Accountability Passwords 239

SecureList

NOVEMBER 29, 2021

The victim was infected by PowerShell malware and we discovered evidence that the actor had already stolen data from the victim and had been surveilling this victim for several months. It contains a password-protected RAR archive with the password shown in the email body. The RAR file contains a malicious Word document.

Surveillance 134

Surveillance Malware Phishing Encryption 134

SecureList

NOVEMBER 26, 2021

At the end of September, at the Kaspersky Security Analyst Summit , our researchers provided an overview of FinSpy , an infamous surveillance toolset that several NGOs have repeatedly reported being used against journalists, political dissidents and human rights activists. logins, passwords, etc.), Grandoreiro and Melcoz arrests.

Malware 105

Malware Banking Energy and Utilities Accountability 105

SecureList

JANUARY 20, 2022

Revisiting the current state of the art in persistent attacks. In the last year, there have been several public accounts on the ongoing trend of UEFI threats. Removal of artefacts from the system: cmd /C "C: & cd & dir $temp /od" cmd /C "C: & cd & dir $temp*.hive" hive" cmd /C "C: & cd & del $temp*.hive"

Firmware 145

Firmware Malware Encryption Passwords 145

SecureList

APRIL 27, 2022

We have previously seen DustSquad use third-party post-exploitation tools, such as the password dumping utility fgdump; but we have now observed new custom C modules, a first for DustSquad, and Delphi downloaders acting as post-exploitation facilitators, able to gather documents of interest for the actor.

Malware 139

Malware Firmware Government Phishing 139

Security Affairs

NOVEMBER 26, 2023

North Korea-linked APT Diamond Sleet supply chain attack relies on CyberLink software New InfectedSlurs Mirai-based botnet exploits two zero-days SiegedSec hacktivist group hacked Idaho National Laboratory (INL) CISA adds Looney Tunables Linux bug to its Known Exploited Vulnerabilities catalog Enterprise software provider TmaxSoft leaks 2TB of data (..)

Data breaches 107

Data breaches Surveillance Cryptocurrency Ransomware 107

eSecurity Planet

OCTOBER 26, 2021

The Russian-based cybercrime group responsible for the high-profile attack on software maker SolarWinds last year is continuing to take aim at the global supply chain, according to a warning issued by Microsoft this week. 19 that they had been attacked a total of 22,868 times. See also: Best Third-Party Risk Management (TPRM) Tools of 2021.

Government 120

Government Cybercrime Accountability Software 120

Schneier on Security

DECEMBER 28, 2020

We don’t know how, but last year the company’s update server was protected by the password “solarwinds123” — something that speaks to a lack of security culture.) Users who downloaded and installed that corrupted update between March and June unwittingly gave SVR hackers access to their networks.

Hacking 361

Hacking Government Internet Internet 361

eSecurity Planet

OCTOBER 21, 2022

For example, once it infects your device, a keylogger will start tracking every keystroke you make and sending a log of those keystrokes to the hacker, allowing them to reconstruct any sensitive information you might have entered after infection, such as your PIN, password, or social security number.

Malware 75

Malware Adware Spyware Antivirus 75

SecureList

JULY 29, 2021

For further surveillance of the victim, the malware operator may also deploy additional tools. Passwordstate is a password management tool for enterprises, and on 20 April, for a period of about 28 hours, a malicious DLL was included in the software updates. We observed several types of backdoor.

Malware 144

Malware Phishing Password Management Social Engineering 144

SecureList

OCTOBER 17, 2023

This strategic shift signals its intent to intensify its surveillance capabilities and expand its range of targets. In its most recent wave of attacks, BlindEagle has once again adapted, embracing yet another open-source RAT, Agent Tesla. The initial attack vector was a phishing email disguised as an email from a government entity or service.

Government 122

Government Malware VPN Manufacturing 122