Search results

Diebold Nixdorf experts have warned of a new variation of the black box attacks on ATMs, which began to be used by attackers in Belgium. Black box attacks are a form of jackpotting attacks in which cybercriminals literally force an ATM to spit out money. Such an attack can be carried out using...

A previously harmless Linux botnet has been updated to include a suite of malicious and exploitative components. The unimaginatively named "P2PInfect" is a worm that leverages the Redis in-memory database application to spread across networks in a peer-to-peer, worm-like manner, creating a...

The U.S. Department of Justice has officially charged two individuals, whom investigators refer to as administrators of the WWH forum. They are Kazakhstan citizen Alexander Khodyrev and Russian Pavel Kublitsky. "They are charged with conspiracy to commit fraud using access devices and...

Even if you disable the activity tracking function in the web and applications in the settings, Google still monitors activity. Google captures user interactions with applications, even if they set their...

A number of cybercriminal innovations are making it easier for scammers to cash in on your upcoming travel plans. This story examines a recent spear-phishing campaign that ensued when a California hotel had its booking.com credentials stolen. We’ll also explore an array of cybercrime services...

A new malicious package called SteelFox mines for cryptocurrency and steals credit card data by using the “bring your own vulnerable driver” technique to get SYSTEM privileges on Windows machines. The malware bundle dropper is distributed through forums and torrent trackers as a crack tool that...

The business contact information for 122 million people circulating since February 2024 is now confirmed to have been stolen from a B2B demand generation platform. The data comes from DemandScience (formerly Pure Incubation), a B2B demand generation company that aggregates data. Data aggregation...

Albanian law enforcement has seized the Rydox cybercrime marketplace and arrested three administrators in collaboration with international partners. Kosovo nationals Ardit Kutleshi, Jetmir Kutleshi, and Shpend Sokoli were arrested on Thursday by Kosovo law enforcement and Albania's Special...

In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as “Wazawaka,” a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top ransomware purveyor a year later, offering $10...

Researchers at cybersecurity company ESET have identified malware masquerading as cryptocurrency trading applications and distributed among macOS users. twitter.com Attackers copied the interface of the...

Europol announced the dismantling of the Manson Market and the arrest of two of its leaders. During a joint operation involving law enforcement from 6 countries, more than 50 servers used by the marketplace, as well as associated fake online stores involved in phishing campaigns, were seized...

Eight members of an international cybercrime network that stole millions of Euros from victims and set up Airbnb fraud centers were arrested in Belgium and the Netherlands. The action was announced by Europol, which coordinated the operation, involving 17 simultaneous searches in the two...

A global law enforcement operation targeting the Phobos ransomware gang has led to the arrest of four suspected hackers in Phuket, Thailand, and the seizure of 8Base’s dark web sites. The suspects are accused of conducting cyberattacks on over 1,000 victims worldwide. The arrested individuals...

Two Russian citizens have been arrested in Thailand for their involvement in over 1,000 ransomware attacks. Their detention occurred as part of the special operation Phobos Aetor, named after the ransomware used by the criminals. The operation involved law enforcement from 14 countries around...

Carding — the underground business of stealing, selling and swiping stolen payment card data — has long been the dominion of Russia-based hackers. Happily, the broad deployment of more secure chip-based payment cards in the United States has weakened the carding market. But a flurry of...

A new variant of the Vo1d malware botnet has grown to 1,590,299 infected Android TV devices across 226 countries, recruiting devices as part of anonymous proxy server networks. This is according to an investigation by Xlab, which has been tracking the new campaign since last November, reporting...

An active campaign from a threat actor potentially linked to Russia is targeting Microsoft 365 accounts of individuals at organizations of interest using device code phishing. The targets are in the government, NGO, IT services and technology, defense, telecommunications, health, and energy/oil...

A hacker claims to have stolen thousands of internal documents with user records and employee data after breaching the systems of Orange Group, a leading French telecommunications operator and digital service provider. The threat actor published on a hacker forum details about the stolen data...

The man operated under the aliases ALTDOS, DESORDEN, GHOSTR, and 0mid16B, and had been one of the most active cybercriminals in the Asia-Pacific region since 2021. According to Group-IB, the attacks resulted in the leak of over 90 databases containing 13 terabytes of confidential information...

Indian authorities arrested Aleksej Besciokov, the co-founder and one of the administrators of the Russian Garantex crypto-exchange while vacationing with his family in Varkala, India. As infosec journalist Brian Krebs first reported on Tuesday, the 46-year-old Lithuanian national and Russian...