article thumbnail

Clipminer Botnet already allowed operators to make at least $1.7 Million

Security Affairs

million, according to a report published by security researchers at Symantec. The bot focuses on cryptocurrency mining and cryptocurrency theft via clipboard hijacking. Security Affairs is one of the finalists for the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS. million in illicit gains.

Mining 136
article thumbnail

APT hacked a US municipal government via an unpatched Fortinet VPN

Security Affairs

In April, the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) previously warned of attacks carried out by APT groups targeting Fortinet FortiOS servers using multiple exploits. The post APT hacked a US municipal government via an unpatched Fortinet VPN appeared first on Security Affairs. Pierluigi Paganini.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Guy Fawkes Day – LulzSec Italy hit numerous organizations in Italy

Security Affairs

National Mining Office for Hydrocarbons & Geo-resources. MassaCarrara Web Archives. Administrator Username & Password To Access Archive: [link]. Administrator Username & Password To Access Archive: [link]. State Archive of Palermo. Archive Administrative Usernames & Password: [link].

article thumbnail

New AlienFox toolkit harvests credentials for tens of cloud services

Security Affairs

AlienFox is available for sale and is primarily distributed on Telegram in the form of source code archives. AlienFox collects lists of misconfigured cloud endpoints through security scanning platforms like LeakIX and SecurityTrails. ” concludes the report.

Cloud 95
article thumbnail

The Week in Cyber Security and Data Privacy: 1 – 7 January 2024

IT Governance

LockBit claims responsibility for Capital Health security incident The LockBit ransomware group has claimed responsibility for an attack on Capital Health , a healthcare provider in Pennington, New Jersey, last November. They accessed 41.5 The compromised data allegedly includes names, email addresses and phone numbers.

article thumbnail

WeLeakInfo Leaked Customer Payment Info

Krebs on Security

It’s been a tough few months for denizens of various hacking forums, which are finding themselves on the defensive end of a great many attacks testing the security of their aliases and operational security lately. And the profile link on the auto forum leads to another now-defunct but still-archived personal site for Sergey.

Passwords 287
article thumbnail

North Korea-linked APT37 targets journalists with GOLDBACKDOOR

Security Affairs

The phishing messages sent to the journalists contained a link to ZIP archives containing LNK files, both named ‘Kang Min-chol edits’ (Kang Min-chol is North Korea’s Minister of Mining Industries). The archive was hosted on the domain dailynk[.]us us which impersonates NK News (dailynk[.]com), Pierluigi Paganini.