article thumbnail

Exclusive: Lighting the Exfiltration Infrastructure of a LockBit Affiliate (and more)

Security Affairs

Our investigation revealed that this remote endpoint is associated with criminal activities dating back to 2019, indicating that these hosts were likely under the control of the same technical administration. In 2021, that hostname appeared in SMTP messages reported as a “romance scam” in a popular romance and dating scam tracking forum.

Scams 144
article thumbnail

Who and What is Behind the Malware Proxy Service SocksEscort?

Krebs on Security

The SocksEscort home page says its services are perfect for people involved in automated online activity that often results in IP addresses getting blocked or banned, such as Craigslist and dating scams, search engine results manipulation, and online surveys. md , and that they were a systems administrator for sscompany[.]net.

Malware 236
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Group-IB uncovers PerSwaysion – sophisticated phishing campaign targeting executives worldwide

Security Affairs

The account access could be sold in bulk to other cybercriminals to conduct traditional monetary scams. This group has been conducting various activities ranging from online shopping scams to phishing attacks since 2017. Hence, it opens up a wide range of possibilities. The group is allegedly led by a Nigerian goes by the nickname Sam.

Phishing 136
article thumbnail

Fake Company Sheds Light on Ransomware Group Tactics

eSecurity Planet

They targeted specific profiles such as system administrators who know how to map corporate networks, locate backups and identify users within a system, which are critical steps in ransomware attacks. The recruitment scam included common steps such as job interviews, non-disclosure agreements, and test assignments.

article thumbnail

Russian-speaking cybercrime evolution: What changed from 2016 to 2021

SecureList

To top it off, cybercriminals make use of legitimate services that are meant to help system administrators, such as PSexec, which allows remote execution of programs. System administrators that take care of physical networks are no longer needed — with cloud services management being an easy task. million USD) monthly.

article thumbnail

5 Emotions Used in Social Engineering Attacks [with Examples]

SecureWorld News

He writes about this in his book, "Ghost in the Wires": "I would call the company I'd targeted, ask for their computer room, make sure I was talking to a system administrator, and tell him, 'This is [whatever fictitious name popped into my head at that moment], from DEC support. Mitnick says his favorite emotional tool was fear.

article thumbnail

The Implications of the Uber Breach

Security Boulevard

This means deploying the best cybersecurity technology that implements a zero trust paradigm; developing and implementing policies and procedures that reinforce zero trust and redundancy; and educating users and systems administrators to follow procedures that mitigate risk. Build Strong Policies and Procedures.