Security Affairs

MARCH 8, 2025

Authorities recovered $31 Million Related to 2021 Uranium Finance cyber heist Serbian student activists phone hacked using Cellebrite zero-day exploit Qilin ransomware gang claimed responsibility for the Lee Enterprises attack Meta fired 20 employees for leaking information, more firings expected International Press Newsletter Cybercrime U.S.

Data breaches 67

Data breaches Hacking Artificial Intelligence Cybercrime 67

Security Affairs

FEBRUARY 11, 2024

Gov imposes visa restrictions on individuals misusing Commercial Spyware HPE is investigating claims of a new security breach Experts warn of a surge of attacks targeting Ivanti SSRF flaw How to hack the Airbus NAVBLUE Flysmart+ Manager Crooks stole $25.5

Spyware 124

Spyware Surveillance DDOS Identity Theft 124

Malwarebytes

FEBRUARY 12, 2021

Threat actors involved in tech support scams have been running a browser locker campaign from November 2020 until February 2021 on the world’s largest adult platforms including PornHub. In all, we detected close to 100 decoy domain names set up as “advertising landing pages” used to redirect victims to browser locker scams.

Scams 100

Scams Advertising Spyware Mobile 100

Security Affairs

SEPTEMBER 14, 2024

CISA adds SonicWall SonicOS, ImageMagick and Linux Kernel bugs to its Known Exploited Vulnerabilities catalog Electronic payment gateway Slim CD disclosed a data breach impacting 1.7M

Data breaches 121

Data breaches Computers and Electronics Spyware Cybercrime 121

Security Affairs

MARCH 24, 2024

Cybersecurity US holds conference on military AI use with dozens of allies to determine ‘responsible’ use DFSA’s Cyber Risk Management Guidelines: A Blueprint for Cyber Resilience?

Malware 124

Malware Cybercrime Hacking Cyber threats 124

Security Affairs

APRIL 9, 2020

Spyware turned out to be the most common malware class hiding in fraudulent COVID-19 emails, with AgentTesla topping the list of phishers’ favorite strains. Spyware: the most likely COVID-19 payload. Most COVID-19-related phishing emails analyzed had different spyware strains embedded as attachments. Source: CERT-GIB.

Phishing 141

Phishing Malware Spyware DDOS 141

Security Affairs

JULY 7, 2024

GootLoader is still active and efficient Hackers stole OpenAI secrets in a 2023 security breach Hackers leak 170k Taylor Swift’s ERAS Tour Barcodes Polyfill.io

Data breaches 120

Data breaches Hacking Banking Spyware 120

Security Affairs

JUNE 25, 2023

Someone is sending mysterious smartwatches to the US Military personnel CISA orders govt agencies to fix recently disclosed flaws in Apple devices VMware fixed five memory corruption issues in vCenter Server Fortinet fixes critical FortiNAC RCE, install updates asap More than a million GitHub repositories potentially vulnerable to RepoJacking New Mirai (..)

DDOS 98

DDOS Cybercrime Spyware Malware 98

Security Affairs

NOVEMBER 11, 2023

Virtual Kidnapping: AI Tools Are Enabling IRL Extortion Scams How a ‘Refund Fraud’ Gang Stole $700,000 From Amazon Info from 5.6 Virtual Kidnapping: AI Tools Are Enabling IRL Extortion Scams How a ‘Refund Fraud’ Gang Stole $700,000 From Amazon Info from 5.6

DDOS 127

DDOS Data breaches Ransomware Marketing 127

Security Boulevard

JANUARY 25, 2022

Folks, Who wants to dive deep into some of my latest commercially available research and stay on the top of their OSINT/cybercrime research and threat intelligence gathering game that also includes their team and organization? Dancho Danchev’s “Intell on the Criminal Underground – Who’s Who in Cybercrime for ” Presentation – [PDF].

Cybercrime 96

Cybercrime Hacking Scams Ransomware 96

Security Affairs

SEPTEMBER 1, 2024

CISA adds Apache OFBiz bug to its Known Exploited Vulnerabilities catalog Critical flaw in WPML WordPress plugin impacts 1M websites China-linked APT Volt Typhoon exploited a zero-day in Versa Director Researchers unmasked the notorious threat actor USDoD The Dutch Data Protection Authority (DPA) has fined Uber a record €290M Google addressed the tenth (..)

Malware 118

Malware Surveillance Firewall Phishing 118

Security Affairs

SEPTEMBER 23, 2018

NSO mobile Pegasus Spyware used in operations in 45 countries. Magecart cybercrime group stole customers credit cards from Newegg electronics retailer. Homebuyers Being Targeted by Money Transfer Scam. Cracked Windows installations are serially infected with EternalBlue exploit code. Sustes Malware: CPU for Monero.

Computers and Electronics 83

Computers and Electronics Cryptocurrency Advertising Data breaches 83

SecureList

FEBRUARY 5, 2025

This is the first known case of an app infected with OCR spyware being found in Apple’s official app marketplace. That being said, we have insufficient data to attribute the campaign to a known cybercrime gang. For instance, ComeCome for iOS was infected in the same way as its Android version.

Malware 144

Malware Encryption Mobile Cryptocurrency 144

Security Affairs

MARCH 4, 2023

stolen credit/debit cards Pegasus spyware used to spy on a Polish mayor Hundreds of thousands of websites hacked as part of redirection campaign MQsTTang, a new backdoor used by Mustang Panda APT against European entities Trusted Platform Module (TPM) 2.0 FiXS, a new ATM malware that is targeting Mexican banks BidenCash leaks 2.1M

Data breaches 98

Data breaches Spyware Ransomware Hacking 98

Identity IQ

MAY 7, 2021

Once they have access to an account with sufficient authority, cybercriminals can use that trusted email address to scam other companies into making fraudulent payments or just distribute malware en mass. Research by Verizon has shown that a third of all breaches in the past year involved phishing scams. Install Anti-Malware Software.

Accountability 105

Accountability Data breaches Passwords Social Engineering 105

Security Affairs

JULY 7, 2019

ViceLeaker Android spyware targets users in the Middle East. Updates for Samsung, the scam app with 10M+ downloads. FBI warns on sextortion scams targeting teenagers. Israeli blamed Russia for jamming at Israeli Ben Gurion airport. New variant of Dridex banking Trojan implements polymorphism.

Scams 70

Scams Advertising Spyware DNS 70

IT Security Guru

FEBRUARY 13, 2023

With so many well known banking sites falling short when it comes to blocking fraudsters, cybersecurity experts at VPNOverview have compiled a list of 12 safety tips to keep your money safe from malware and phishing scams. What are the possible dangers of online banking?

Banking 80

Banking Cybersecurity Antivirus Phishing 80

Malwarebytes

SEPTEMBER 27, 2021

Uber scam lures victims with alert from a real Uber number Teaching cybersecurity skills to special needs children with Alana Robinson: Lock and Code S02E18.

Phishing 76

Phishing Surveillance Malware Backups 76

SecureList

NOVEMBER 22, 2022

These are attractive aspects that cybercrime groups will be unable to resist. And not only cybercrime groups, but also state-sponsored groups who have already started targeting this industry. According to the freshest data on DeFi, every hour 15 newly deployed scams against smart contracts are detected.

Cryptocurrency 106

Cryptocurrency Mobile Ransomware Banking 106

Security Affairs

MAY 8, 2020

Thus, the number of phishing attacks on cloud storages nearly doubled last year, while Internet providers have seen the three-fold increase in the number of phishing scams targeting them. They, in turn, let spyware and backdoors move ahead and become the second most popular malware with a 35-percent share.

Phishing 87

Phishing Spyware Banking Malware 87

SecureWorld News

AUGUST 16, 2023

charity and movement by the cybersecurity industry that supports more than 2,000 individuals and sole traders impacted by cybercrime and online harm every month. It encompasses various forms of cybercrime and online harm, including cyberstalking, tracking, hacking accounts and intimate image abuse.

Surveillance 98

Surveillance Technology Accountability Spyware 98

BH Consulting

OCTOBER 6, 2022

Banks and insurance companies are telling customers to be wary of scam messages. Phishing and scam emails are – by some distance – the leading cause of ransomware infections, according to Statista. So with European Cybersecurity Month here, now’s a good time to familiarise ourselves again with a popular cybercrime tactic.

Security Awareness 52

Security Awareness Phishing Scams Social Engineering 52

SecureList

FEBRUARY 5, 2025

This is the first known case of an app infected with OCR spyware being found in Apple’s official app marketplace. That being said, we have insufficient data to attribute the campaign to a known cybercrime gang. For instance, ComeCome for iOS was infected in the same way as its Android version.

Malware 136

Malware Encryption Mobile Cryptocurrency 136

SecureWorld News

OCTOBER 31, 2024

Phishing phantoms: masters of disguise Phishing scams have become more sophisticated. Like vampires, malware strains can operate quietly, leeching data or encrypting files without warning, making ransomware and spyware infections incredibly haunting. Spooky fact : Sophos says the average ransom in 2024 is $2.73

IoT 120

IoT Phishing DDOS Backups 120

Security Affairs

APRIL 27, 2025

million patients Crooks exploit the death of Pope Francis WhatsApp introduces Advanced Chat Privacy to protect sensitive communications Android spyware hidden in mapping software targets Russian soldiers Crypto mining campaign targets Docker environments with new evasion technique The popular xrpl.js

Data breaches 63

Data breaches Spyware Malware Retail 63

Security Affairs

MAY 26, 2024

million individuals North Korea-linked Kimsuky used a new Linux backdoor in recent attacks International Press – Newsletter Cybercrime Healthcare company WebTPA discloses breach affecting 2.5

Healthcare 127

Healthcare Spyware Data breaches Banking 127

Security Affairs

FEBRUARY 25, 2024

Iran Crisis Russia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaign U.S.

Spyware 129

Spyware Cyber Insurance Hacking Advertising 129

Security Affairs

AUGUST 11, 2024

CISA adds Apache OFBiz and Android kernel bugs to its Known Exploited Vulnerabilities catalog Russian cyber spies stole data and emails from UK government systems 0.0.0.0

Spyware 117

Spyware Ransomware Hacking Government 117

Security Affairs

JUNE 23, 2024

US government sanctions twelve Kaspersky Lab executives Experts found a bug in the Linux version of RansomHub ransomware UEFICANHAZBUFFEROVERFLOW flaw in Phoenix SecureCore UEFI firmware potentially impacts hundreds of PC and server models Russia-linked APT Nobelium targets French diplomatic entities US bans sale of Kaspersky products due to risks (..)

Firmware 113

Firmware Data breaches Banking Hacking 113

SecureWorld News

FEBRUARY 7, 2023

The cybercrime campaigns below demonstrate how crooks can get a leg up in this cat-and-mouse game. By granting this permission, victims unwittingly give the green light to an influx of pop-up ads that appear outside the browser and include links disseminating rogue extensions or promoting tech support scams.

Cybercrime 98

Cybercrime Phishing Accountability Government 98

SecureList

NOVEMBER 10, 2021

With millions of new users on streaming platforms, cyberattackers have recognized this heightened demand and seek to take advantage of it by distributing streaming phishing scams and spreading malware under the guise of users’ favorite shows. An example of a phishing page mimicking the Netflix login page.

Phishing 126

Phishing Accountability Malware Adware 126

Malwarebytes

OCTOBER 18, 2021

No surreptitious implantation of spyware to collect admin credentials. Online scams already ruin people’s lives by emptying their bank accounts. The breach at the Oldsmar water plant, however, may have involved no malware at all. No spear-phishing attack against an executive’s personal device. No initial breach and lateral movement.

Ransomware 145

Ransomware Firewall Antivirus Cybersecurity 145

Security Affairs

DECEMBER 22, 2024

Vishing via Microsoft Teams Facilitates DarkGate Malware Intrusion Spyware distributed through Amazon Appstore BADBOX Botnet Is Back Supply Chain Attack on Rspack npm Packages Injects Cryptojacking Malware 4.5

Malware 58

Malware Spyware Surveillance Cybercrime 58

Security Affairs

MARCH 2, 2025

from Bybit, it is the largest cryptocurrency heist ever International Press Newsletter Cybercrime Mining Company NioCorp Loses $500,000 in BEC Hack Inside Black Bastas Exposed Internal Chat Logs: A Firsthand Look The Bleeding Edge of Phishing: darcula-suite 3.0

Cybercrime 60

Cybercrime Hacking Ransomware Cryptocurrency 60

Security Affairs

SEPTEMBER 22, 2024

CISA adds new Ivanti Cloud Services Appliance Vulnerability to its Known Exploited Vulnerabilities catalog Ivanti warns of a new actively exploited Cloud Services Appliance (CSA) flaw International law enforcement operation dismantled criminal communication platform Ghost U.S.

Surveillance 118

Surveillance Cryptocurrency Spyware Phishing 118

Security Affairs

DECEMBER 22, 2024

CISA adds Microsoft Windows Kernel-Mode Driver and Adobe ColdFusion flaws to its Known Exploited Vulnerabilities catalog ConnectOnCall data breach impacted over 900,000 individuals Report claims that Serbian authorities abused Cellebrite tool to install NoviSpy spyware Multiple flaws in Volkswagen Group’s infotainment unit allow for vehicle compromise (..)

Data breaches 60

Data breaches Cybercrime Spyware Firmware 60

Security Affairs

APRIL 13, 2025

CISA adds Ivanti Connect Secure, Policy Secure and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog A member of the Scattered Spider cybercrime group pleads guilty The controversial case of the threat actor EncryptHub PoisonSeed Campaign uses stolen email credentials to spread crypto seed scams and and empty wallets EDR-as-a-Service (..)

Data breaches 60

Data breaches Cybercrime Ransomware Hacking 60