#infostealer
#infostealer
[ follow ]
#cybersecurity #malware #ransomware #phishing #cybercrime #hacking #data-theft #credential-theft #data-breach
Artificial intelligence
fromFuturism
1 month agoAI Tools Are Supercharging Hackers
AI systems are increasingly weaponized for cybercrime, enabling hackers to exploit vulnerabilities at scale with minimal technical expertise, as demonstrated by recent attacks on Mexican government networks and global firewall systems.
Privacy professionals
fromComputerworld
1 month agoCyber criminals too are working from home... your home
The FBI warns that cybercriminals use residential proxies to mask illegal activities by hijacking IoT devices, smartphones, and routers, threatening both consumers and enterprises, particularly older devices.
fromSecurityWeek
3 days agoMITRE Releases Fight Fraud Framework
"These incidents involve the intentional use of deceptive or illegal practices to fraudulently obtain money, assets, or information from individuals or institutions, and include actions carried out over cyber channels."
Information security
#phishing-attack
Information security
fromSecurityWeek
4 weeks agoSecurity Firm Executive Targeted in Sophisticated Phishing Attack
A C-level executive at Outpost24 was targeted by a sophisticated phishing attack using the Kratos phishing-as-a-service kit that exploited legitimate services like Cisco and Nylas to bypass security defenses.
Information security
fromSecuritymagazine
4 weeks agoTargeted Phishing Attack Breaches Biotech Company Data
Intuitive Surgical suffered a phishing attack compromising employee credentials, exposing customer and corporate data, though operational systems and customer networks remained unaffected due to network segmentation.
Information security
fromComputerWeekly.com
1 month agoInterpol obliterates cyber criminal infrastructure | Computer Weekly
Interpol's Operation Synergia III neutralized 45,000 malicious IP addresses and servers across 72 countries, resulting in 94 arrests and over 100 investigations targeting cyber fraud, phishing, malware, and ransomware infrastructure.
fromPCWorld
1 month agoPhishing scammers weaponize ICE ragebait
The email seen by at least some customers of the Emma email platform was a phishing scam. Hackers hoped to inspire instant panic with the words, 'As part of our commitment to supporting U.S. Immigration and Customs Enforcement (ICE), we will be adding a Support ICE donation button to the footer of every email sent through our platform.'
Information security
Information security
fromTheregister
1 month agoDouble whammy: Steaelite RAT bundles data theft, ransomware
Steaelite, a new remote access trojan sold on cybercrime networks, enables double extortion attacks on Windows machines through ransomware, data theft, credential stealing, and live surveillance controlled via a centralized browser-based dashboard.
fromZDNET
2 months agoThis new 'sleeperware' doesn't set off alarms or crash your system - it sneaks in and waits
In its annual Red Report, a body of research that analyzes real-world attacker techniques using large-scale attack simulation data, Picus Labs warns cybersecurity professionals that threat actors are rapidly shifting away from ransomware encryption to parasitic "sleeperware" extortion as their means to loot organizations for millions of dollars per attack. Released today and now in its sixth year, the 278-page Red Report gets its name from Picus-organized cybersecurity exercises that take the perspective of the attacker's team, otherwise known as the "red team."
Information security
fromArs Technica
2 months agoOnce-hobbled Lumma Stealer is back with lures that are hard to resist
A core part of the resurgence is the use of CastleLoader, a separate piece of malware that's installed initially. It runs solely in memory, making it much harder to detect than malware that resides on a hard drive. Its code is heavily obfuscated, making it hard to spot its malice even when malware scanners can see it. CastleLoader also provides a flexible and full-featured command-and-control communication mechanism that users can customize to meet their specific needs.
Information security
[ Load more ]