Remove 11
article thumbnail

FIN7 group leverages Windows 11 Alpha-Themed docs to drop Javascript payloads

Security Affairs

FIN7 cybercrime gang used weaponized Windows 11 Alpha-themed Word documents to drop malicious payloads, including a JavaScript backdoor. The attacks took space between late June and late July 2021, experts noticed that the infection process stops when detecting Russian, Ukrainian, or several other Eastern European languages.

Retail 109
article thumbnail

Group-IB Hi-Tech Crime Trends 2020/2021 report

Security Affairs

Group-IB , a global threat hunting and intelligence company, has presented its annual Hi-Tech Crime Trends 2020/2021 report. It was also marked by the rise of the underground market for selling access to corporate networks and an over two-fold growth of the carding market.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Threat actor has been targeting the aviation industry since at least 2018

Security Affairs

. — Microsoft Security Intelligence (@MsftSecIntel) May 11, 2021. ” Our research shows that this actor has been targeting the aviation industry since at least 2018, with files mentioning both “Trip Itinerary Details” and “Bombardier” at the time using the URL akconsult[.]linkpc[.]net.”

article thumbnail

Ransomware Protection in 2021

eSecurity Planet

” Or you might see a readme.txt stating, “Your files have been replaced by these encrypted containers and aren’t accessible; you will lose your files on [enter date] unless you pay $2500 in Bitcoin.” Also Read: Best Encryption Tools & Software for 2021. How ransomware works. Screenshot example.

article thumbnail

EnemyBot malware adds new exploits to target CMS servers and Android devices

Security Affairs

It uses a list of hardcoded username/password combinations to login into devices in the attempt to access systems using weak or default credentials. LFI CVE-2018-16763 Fuel CMS 1.4.1 LFI CVE-2018-16763 Fuel CMS 1.4.1 LFI CVE-2018-16763 Fuel CMS 1.4.1 ” states the report published by AT&T Alien Labs.

CMS 138
article thumbnail

RaidForums Gets Raided, Alleged Admin Arrested

Krebs on Security

Department of Justice (DOJ) said today it seized the website and user database for RaidForums , an extremely popular English-language cybercrime forum that sold access to more than 10 billion consumer records stolen in some of the world’s largest data breaches since 2015. Coelho landed on the radar of U.S.

Sales 233
article thumbnail

List of data breaches and cyber attacks in May 2021 – 116 million records breached

IT Governance

Edinburgh mental health clinic in probe after client information accessed in scam (unknown) Iranian Hackers Hit H&M Israel (unknown) South Africa’s VirginActive goes offline after cyber attack (unknown) B.C. Data breaches. Financial information. Malicious insiders and miscellaneous incidents. In other news…. Cyber attacks.