Data leak - Security Ticks

Sensitive Information Stolen in LetMeSpy Stalkerware Hack

Android, data breach, Data Breaches, Data leak, spyware / SecurityTicks

Sensitive Information Stolen in LetMeSpy Stalkerware Hack 28/06/2023 at 14:17 By Ionut Arghire Emails, phone numbers, calls logs, and collected messages stolen in data breach at Android stalkware LetMeSpy. The post Sensitive Information Stolen in LetMeSpy Stalkerware Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React […]

React to this headline:

Sensitive Information Stolen in LetMeSpy Stalkerware Hack Read More »

Mallox Ransomware Implements New Infection Strategy

Automotive, Base64, Batch Script, BATloader, Construction, Consumer Goods, cybercrime, darkweb, data breach, Data leak, education, Energy & Utilities, Entertainment, Food and Beverages, healthcare, Infection chain, IT & ITES, Loader, Mallox, Mallox Ransomware, Malware, Manufacturing, Media, MSBuild.exe, Organization, Payload, PowerShell, Professional Services, Quasar RAT, Ransomware, Real Estate, Retail, Technology, Threat Activity, United States / SecurityTicks

Mallox Ransomware Implements New Infection Strategy 22/06/2023 at 14:12 By cybleinc Cyble analyzes Mallox Ransomware’s new infection chain, leveraging BatLoader to execute ransomware payloads. The post Mallox Ransomware Implements New Infection Strategy appeared first on Cyble. This article is an excerpt from Cyble View Original Source React to this headline:

React to this headline:

Mallox Ransomware Implements New Infection Strategy Read More »

Unmasking the Critical Risk of Internet-Exposed Assets to Public and Private Organizations

Aria Operations, Cl0P Ransomware, CLOP, Command Injection, CVE-2023-20877, CVE-2023-34362, CVE-2023-35063, CVE-2023-35708, cybercrime, darkweb, data breach, Data leak, Fortinet, Malware, MOVEit, Moveit Transfer, Oil & Gas, OSINT, Shell, SSL-VPN, Threat Intelligence, United States, vulnerability / SecurityTicks

Unmasking the Critical Risk of Internet-Exposed Assets to Public and Private Organizations 20/06/2023 at 16:11 By cybleinc Cyble investigates the Current vulnerability Threat landscape and observes distribution of Proof Of Concepts over Darkweb. The post Unmasking the Critical Risk of Internet-Exposed Assets to Public and Private Organizations appeared first on Cyble. This article is an

React to this headline:

Unmasking the Critical Risk of Internet-Exposed Assets to Public and Private Organizations Read More »

A third MOVEit vulnerability fixed, Cl0p lists victim organizations (CVE-2023-35708)

Data leak, Don't miss, extortion, file-sharing, Hot stuff, News, Progress, USA, vulnerability, WithSecure / SecurityTicks

A third MOVEit vulnerability fixed, Cl0p lists victim organizations (CVE-2023-35708) 19/06/2023 at 15:09 By Zeljka Zorz Progress Software has asked customers to update their MOVEit Transfer installations again, to fix a third SQL injection vulnerability (CVE-2023-35708) discovered in the web application in less that a month. Previously, the Cl0p cyber extortion gang exploited CVE-2023-34362 to

React to this headline:

A third MOVEit vulnerability fixed, Cl0p lists victim organizations (CVE-2023-35708) Read More »

New Malware Campaign Targets LetsVPN Users

account hijacking, backdoor, Backdoor.Farfli, BlackMoon, cybercrime, Data leak, Farfli, Farfli Backdoor, Gaming, Keylogging, KingSoft, LetsGo, LetsGo Network, LetsVPN, Malware, Microsoft, phishing, remote access, spyware, surveillance, Threat Intelligence, VPN, Web Injection, Windows / SecurityTicks

New Malware Campaign Targets LetsVPN Users 16/06/2023 at 16:07 By cybleinc Cyble analyzes a malware campaign that infects users via fake LetsVPN Phishing pages to deliver multiple malware strains. The post New Malware Campaign Targets LetsVPN Users appeared first on Cyble. This article is an excerpt from Cyble View Original Source React to this headline:

React to this headline:

New Malware Campaign Targets LetsVPN Users Read More »

Cloud Mining Scam Distributes Roamer Banking Trojan

AB Ditizen, ACB One, and NFTS, Android, App store, Banking applications, Banking Trojan, Binance, Cloud Mining, CloudMining.apk, crypto mining, Cryptocurrency, cybercrime, darkweb, data breach, Data leak, ETH, Ethereum, fake app, Google Play, HDFC Bank Mobile Banking App, infostealer, Malware, MB Bank, Monero, MSB mBank, phishing, PV Mobile Banking, Roamer, SCB Mobile Banking, Telegram, Threat Intelligence, VCB Digibank, VietinBank iPay, XMR / SecurityTicks

Cloud Mining Scam Distributes Roamer Banking Trojan 14/06/2023 at 16:35 By cybleinc Cyble analyzes a cloud mining scam leveraging phishing to distribute the Roamer banking trojan, targeting Android Crypto wallets and banking applications, aiming to steal sensitive information. The post Cloud Mining Scam Distributes Roamer Banking Trojan appeared first on Cyble. This article is an

React to this headline:

Cloud Mining Scam Distributes Roamer Banking Trojan Read More »

Switzerland under cyberattack

Data leak, data theft, DDoS, Don't miss, enterprise, Government, Hot stuff, News, Ransomware, Switzerland / SecurityTicks

Switzerland under cyberattack 14/06/2023 at 14:18 By Helga Labus Swiss government websites are under DDoS attacks, but several ransomware gangs have also turned their sights on Swiss government organizations, cantonal governments, cities and companies in the last few months. Government sites under DDoS attacks “Several Federal Administration websites are/were inaccessible on Monday 12 June 2023,

React to this headline:

Switzerland under cyberattack Read More »

Threat Actor Targets Russian Gaming Community With WannaCry-Imitator

Crypter Ransomware, cybercrime, Darkflow Software, data breach, Data leak, Discord, Encryption, Enlisted, Gaijin Entertainment, GitHub, GitLab, GUI, JSON, Malware, Mutex, phishing, Python, Ransomware, Russia, Threat Intelligence, WannaCry 3.0, WannaCry 3.0 Crypter, Windows / SecurityTicks

Threat Actor Targets Russian Gaming Community With WannaCry-Imitator 13/06/2023 at 19:21 By cybleinc CRIL analyzes WannaCry-Imitator Ransomware, a phishing gaming site targeting the Russian Gaming community The post Threat Actor Targets Russian Gaming Community With WannaCry-Imitator appeared first on Cyble. This article is an excerpt from Cyble View Original Source React to this headline:

React to this headline:

Threat Actor Targets Russian Gaming Community With WannaCry-Imitator Read More »

Data of 8.8 Million Zacks Users Emerges Online

data breach, Data Breaches, Data leak / SecurityTicks

Data of 8.8 Million Zacks Users Emerges Online 13/06/2023 at 14:49 By Ionut Arghire A database containing the personal information of roughly 9 million Zacks users has emerged online. The post Data of 8.8 Million Zacks Users Emerges Online appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Data of 8.8 Million Zacks Users Emerges Online Read More »

Unmasking the Darkrace Ransomware Gang

cybercrime, cybersecurity, Darkrace, Darkrace Ransomware, darkweb, Data leak, Double extortion, Lockbit 3.0, LockBit Ransomware, Malware, Mutex, Ransomware, Threat Actors, Threat Intelligence, Windows / SecurityTicks

Unmasking the Darkrace Ransomware Gang 08/06/2023 at 15:02 By cybleinc New Ransomware Holds Similarities with LockBit Ransomware Ransomware continues to pose the most critical cybersecurity threat to organizations’ infrastructure. This malicious software encrypts victims’ files and extorts payment in return for the decryption key. The consequences of ransomware attacks can be severe, including financial losses,

React to this headline:

Unmasking the Darkrace Ransomware Gang Read More »

‘NoEscape’ Ransomware-as-a-Service (RaaS)

C, ChaCha20, CIS, Commonwealth of Independent States, cybercrime, darkweb, data breach, Data leak, Malware, NoEscape, RaaS, Ransomware, Ransomware Affiliate, Russia, Safe Mode, Server Message Block, Threat Intelligence, Triple-Extortion, Windows, Windows NT 10.0 / SecurityTicks

‘NoEscape’ Ransomware-as-a-Service (RaaS) 01/06/2023 at 18:32 By cybleinc CRIL analyzes the newly advertised ‘NoEscape’ Ransomware-as-a-Service (RaaS) program that claims to facilitate sophisticated extortion operations using an advanced, indigenously developed ransomware strain. The post ‘NoEscape’ Ransomware-as-a-Service (RaaS) appeared first on Cyble. This article is an excerpt from Cyble View Original Source React to this headline:

React to this headline:

‘NoEscape’ Ransomware-as-a-Service (RaaS) Read More »

SharpPanda APT Campaign Expands its Arsenal Targeting G20 Nations

APT, Argentina, Australia, backdoor, Brazil, Canada, China, CVE-2017-11882, CVE-2018-0798, CVE-2018-0802, cyberattack, cybercrime, data breach, Data leak, DLL Downloader, Equation Editor, France, G20, G7, Germany, Hiroshima, India, Indonesia, Initial access, Italy, Japan, Malware, Microsoft Office, RTF, Saudi Arabia, SharpPanda, South Africa, South Korea, Threat Intelligence, Turkey, United Kingdom, United States, Vulnerabilities / SecurityTicks

SharpPanda APT Campaign Expands its Arsenal Targeting G20 Nations 01/06/2023 at 08:36 By cybleinc Cyble analyzes SharpPanda, a highly sophisticated APT group utilizing spear-phishing tactics to launch cyberattacks on G20 Nation officials. The post SharpPanda APT Campaign Expands its Arsenal Targeting G20 Nations appeared first on Cyble. This article is an excerpt from Cyble View

React to this headline:

SharpPanda APT Campaign Expands its Arsenal Targeting G20 Nations Read More »

Evolving Threat Landscape of Hacktivism in Colombia

#OpColombia, Berghof, Berghof Web Panel, critical infrastructure, cybercrime, darkweb, data breach, Data leak, DDoS Attack, Fueling Systems, GhostSec, GNSS, Government, Hacktivism, HMI, Human Machine Interface, Industrial Control Systems, Israel, Malware, National Critical Infrastructure, OpIsrael, OSINT, Power Supply Controllers, Radio Broadcast, Satellite Receivers, SiegedSec, Threat Intelligence, Zero-Day / SecurityTicks

Evolving Threat Landscape of Hacktivism in Colombia 31/05/2023 at 11:22 By cybleinc CRIL investigates the evolving threat landscape of hacktivism leading to cyberattacks on Colombian Critical Infrastructure and Zero-day Sales by Hacktivists. The post Evolving Threat Landscape of Hacktivism in Colombia appeared first on Cyble. This article is an excerpt from Cyble View Original Source

React to this headline:

Evolving Threat Landscape of Hacktivism in Colombia Read More »

Bl00dy Ransomware Targets Indian University: Actively Exploiting PaperCut Vulnerability

APT, Bl00dy, Bl00dy ransomware, CISA, Conti, CSA, CVE-2023-27350, cybercrime, darkweb, data breach, Data leak, ERP, Helpdesk, Lockbit 3.0, Malware, Moodle, PaperCut, PaperCut MF, PaperCut NG, Port 9191, Port 9192, Ransomware, RDP, Remote Desktop Protocol, Shodan, Telegram, Threat Intelligence, Twitter / SecurityTicks

Bl00dy Ransomware Targets Indian University: Actively Exploiting PaperCut Vulnerability 30/05/2023 at 14:46 By cybleinc CRIL analyzes Bl00dy Ransomware’s recent targeting of an Indian University via exploitation of the PaperCut vulnerability. The post Bl00dy Ransomware Targets Indian University: Actively Exploiting PaperCut Vulnerability appeared first on Cyble. This article is an excerpt from Cyble View Original Source

React to this headline:

Bl00dy Ransomware Targets Indian University: Actively Exploiting PaperCut Vulnerability Read More »

PixBankBot: New ATS-Based Malware Poses Threat to the Brazilian Banking Sector

Android, Android Banking trojan, ATS, ATS Framework, Banco Central do Brasil, Banco Itaú, Bank fraud, Banking Sector, Banking Trojan, BFSI, Brazil, C6 Bank, cybercrime, darkweb, Data leak, fake app, fraud, GoatRAT, Malware, Mercado Pago, NUBank, Nubank: conta, PagBank Banco, PasteBin, PicPay, PIX, PixBankBot, PixPirate, R$, Threat Actors, Threat Intelligence / SecurityTicks

PixBankBot: New ATS-Based Malware Poses Threat to the Brazilian Banking Sector 30/05/2023 at 12:36 By cybleinc Cyble analyzes PixBankBot, a new ATS-based malware that targets Brazilian banks through the popular Pix instant payment platform. The post PixBankBot: New ATS-Based Malware Poses Threat to the Brazilian Banking Sector appeared first on Cyble. This article is an

React to this headline:

PixBankBot: New ATS-Based Malware Poses Threat to the Brazilian Banking Sector Read More »

Obsidian ORB Ransomware Demands Gift Cards as Payment

AES Cryptographic Provider, All, BlackSnake, Chaos Ransomware, cybercrime, darkweb, data breach, Data leak, Gift Card, Malware, Microsoft Enhanced RSA, Obsidian ORB, Obsidian ORB Ransomware, Onyx, Payday, Paysafe, Ransomware, Steam, Threat Intelligence / SecurityTicks

Obsidian ORB Ransomware Demands Gift Cards as Payment 25/05/2023 at 09:16 By cybleinc Cyble Research & Intelligence Labs analyzes Obsidian ORB, a ransomware hybrid that demands ransom payments in the form of gift cards. The post Obsidian ORB Ransomware Demands Gift Cards as Payment appeared first on Cyble. This article is an excerpt from Cyble

React to this headline:

Obsidian ORB Ransomware Demands Gift Cards as Payment Read More »

New Ransomware Wave Engulfs over 200 Corporate Victims

8Base Ransomware, AES, cybercrime, darkweb, data breach, Data leak, Double encryption, Leak site, MalasLocker, Malware, MalwareHunterTeam, Ransomware, Rhysida, Threat Intelligence, Zscaler / SecurityTicks

New Ransomware Wave Engulfs over 200 Corporate Victims 23/05/2023 at 17:34 By cybleinc CRIL analyzes multiple new Ransomware families that have affected over 200 firms, spearheaded by Rhysida, 8Base, and MalasLocker ransomware. The post New Ransomware Wave Engulfs over 200 Corporate Victims appeared first on Cyble. This article is an excerpt from Cyble View Original

React to this headline:

New Ransomware Wave Engulfs over 200 Corporate Victims Read More »

AndoryuBot’s DDOS Rampage

All, AndoryuBot, CGSI, CISA, cybercrime, Cyble Global Sensor Network, darkweb, data breach, Data leak, DDoS, Fortinet, HTTP GET, Malware, Ransomware, RCE, Remote Control Execution, Ruckus Wireless, Telegram, Threat Intelligence / SecurityTicks

AndoryuBot’s DDOS Rampage 17/05/2023 at 18:49 By cybleinc CRIL analyzes AndoryuBot, a new botnet exploiting a critical vulnerability to carry out large-scale DDOS attacks on Ruckus Wireless products. The post AndoryuBot’s DDOS Rampage appeared first on Cyble. This article is an excerpt from Cyble View Original Source React to this headline:

React to this headline:

AndoryuBot’s DDOS Rampage Read More »

Ducktail Malware Focuses on Targeting HR and Marketing Professionals

Avalon Organics, Brave Browser, cybercrime, darkweb, Data leak, Dropbox, DuckTail, fake app, Google Chrome, Human Resources, infostealer, L'Oreal, Malware, Marketing, Microsoft Edge, Mozilla Firefox, NIVEA, Olay / SecurityTicks

Ducktail Malware Focuses on Targeting HR and Marketing Professionals 17/05/2023 at 15:37 By cybleinc CRIL analyzes DuckTail, a malware infostealer actively targeting HR and Marketing executives to exploit their Social Media Business Accounts. The post Ducktail Malware Focuses on Targeting HR and Marketing Professionals appeared first on Cyble. This article is an excerpt from Cyble

React to this headline:

Ducktail Malware Focuses on Targeting HR and Marketing Professionals Read More »

Dissecting Rancoz Ransomware

@siri_urz, Avast, Avira, b95a4443bb8bff80d..., Backups, ChaChapoly, Chrome, Command Line Arguments, Common7, Comodo, cybercrime, darkweb, data breach, Data leak, Dell, Dr.Web, ESET, Install Shield Installation Information, Intel, Kaspersky Lab, Malware, McAfee, Microsoft Help, Microsoft SDKs, Microsoft Shared, Microsoft Visual Studio, Microsoft VS Code, Microsoft.NET, MingGW, MingGW (GCC), MovieMaker, NTRU, NTRU Public Key, NVIDIA Corporation, Onion, Opera, OSINT, Package Cache, Rancoz, Ransomware, RDP, Reference assemblies, Remote Access Trojans, Remote Desktop Protocol, ShadowCopy, ShellExecute, Spytechsoftware, Symantec, Symantec Client Security, System Volume Information, Threat Intelligence, Vice Society, Windows, Windows App Certification Kit, Windows Defender, Windows Mail, Windows Media Player, Windows Multimedia Platform, Windows NT, Windows Phone Silverlight Kits, Windows Photo Viewer, Windows Portable Devices, Windows Security, WindowsApps, WindowsPowerShell, Wsus, Yandex Browser / SecurityTicks

Dissecting Rancoz Ransomware 11/05/2023 at 15:46 By cybleinc CRIL analyzes Rancoz, a new ransomware variant that is leveraging Vice Society’s codebase to target a wider victim base. The post Dissecting Rancoz Ransomware appeared first on Cyble. This article is an excerpt from Cyble View Original Source React to this headline:

React to this headline:

Dissecting Rancoz Ransomware Read More »