Search results

Researchers at cybersecurity company ESET have identified malware masquerading as cryptocurrency trading applications and distributed among macOS users. twitter.com Attackers copied the interface of the...

Europol announced the dismantling of the Manson Market and the arrest of two of its leaders. During a joint operation involving law enforcement from 6 countries, more than 50 servers used by the marketplace, as well as associated fake online stores involved in phishing campaigns, were seized...

Eight members of an international cybercrime network that stole millions of Euros from victims and set up Airbnb fraud centers were arrested in Belgium and the Netherlands. The action was announced by Europol, which coordinated the operation, involving 17 simultaneous searches in the two...

A global law enforcement operation targeting the Phobos ransomware gang has led to the arrest of four suspected hackers in Phuket, Thailand, and the seizure of 8Base’s dark web sites. The suspects are accused of conducting cyberattacks on over 1,000 victims worldwide. The arrested individuals...

Two Russian citizens have been arrested in Thailand for their involvement in over 1,000 ransomware attacks. Their detention occurred as part of the special operation Phobos Aetor, named after the ransomware used by the criminals. The operation involved law enforcement from 14 countries around...

Carding — the underground business of stealing, selling and swiping stolen payment card data — has long been the dominion of Russia-based hackers. Happily, the broad deployment of more secure chip-based payment cards in the United States has weakened the carding market. But a flurry of...

A new variant of the Vo1d malware botnet has grown to 1,590,299 infected Android TV devices across 226 countries, recruiting devices as part of anonymous proxy server networks. This is according to an investigation by Xlab, which has been tracking the new campaign since last November, reporting...

An active campaign from a threat actor potentially linked to Russia is targeting Microsoft 365 accounts of individuals at organizations of interest using device code phishing. The targets are in the government, NGO, IT services and technology, defense, telecommunications, health, and energy/oil...

A hacker claims to have stolen thousands of internal documents with user records and employee data after breaching the systems of Orange Group, a leading French telecommunications operator and digital service provider. The threat actor published on a hacker forum details about the stolen data...

The man operated under the aliases ALTDOS, DESORDEN, GHOSTR, and 0mid16B, and had been one of the most active cybercriminals in the Asia-Pacific region since 2021. According to Group-IB, the attacks resulted in the leak of over 90 databases containing 13 terabytes of confidential information...

Indian authorities arrested Aleksej Besciokov, the co-founder and one of the administrators of the Russian Garantex crypto-exchange while vacationing with his family in Varkala, India. As infosec journalist Brian Krebs first reported on Tuesday, the 46-year-old Lithuanian national and Russian...

According to Telegram Info, the messaging app Telegram will soon be able to block the accounts of violators. During the imposition of restrictions, users will be able to log into their accounts but will not be able to send messages or perform other actions within the service. In the source code...

An invisible web of nodes has ensnared thousands of devices worldwide... Since July 2024, cybercriminals have been conducting an active phishing campaign targeting users in Poland and Germany. The attacks are organized by a financially motivated group that uses malware such as Agent Tesla...

The Black Basta ransomware operation created an automated brute-forcing framework dubbed 'BRUTED' to breach edge networking devices like firewalls and VPNs. The framework has enabled BlackBasta to streamline initial network access and scale ransomware attacks on vulnerable internet-exposed...

Hacker forums Cracked, Nulled, MySellIX and StarkRDP are seized by the FBI, Europol and international law enforcement as part of ‘Operation Talent’. A large ‘‘Operation Talent’ seizure poster was splashed across most of the shady websites by Wednesday afternoon. “This website, as well as...

LastPass is warning users of a campaign that targets macOS users with malicious software impersonating popular products delivered through fraudulent GitHub repositories. The fake apps deliver the Atomic (AMOS) info-stealing malware in ClickFix attacks, and are promoted through search engine...

The operators of the SystemBC proxy botnet are hunting for vulnerable commercial virtual private servers (VPS) and maintain an average of 1,500 bots every day that provide a highway for malicious traffic. Compromised servers are located all over the world and have at least one unpatched critical...

Hackers have been spotted using SEO poisoning and search engine advertisements to promote fake Microsoft Teams installers that infect Windows devices with the Oyster backdoor, providing initial access to corporate networks. The Oyster malware, also known as Broomstick and CleanUpLoader, is a...

Researchers monitoring for larger .ICS calendar attachments found that a flaw in Zimbra Collaboration Suite (ZCS) was used in zero-day attacks at the beginning of the year. ICS files, also known as iCalendar files, are used to store calendar and scheduling information (meetings, events, and...

The 'Crimson Collective' threat group has been targeting AWS (Amazon Web Services) cloud environments for the past weeks, to steal data and extort companies. The hackers claimed responsibility for the recent Red Hat attack, saying that they exfiltrated 570 GB of data from thousands of private...