article thumbnail

BlackCocaine Ransomware, a new malware in the threat landscape

Security Affairs

Recently Cyber researchers for Cyble investigated an attack suffered by on May 30, 2021, by Nucleus Software, an India-based IT company in the Banking and Financial Services sector. Nucleus Software declared that it does not store customers’ financial data. BlackCocaine ” to the filenames of encrypted files.

article thumbnail

China-linked Budworm APT returns to target a US entity

Security Affairs

defense contractors , financial services firms, and a national data center in Central Asia. “In some cases, the HyperBro backdoor was loaded with its own HyperBro loader (file names: peloader.exe, 12.exe). This is the first time that Symantec researchers have observed the Budworm group targeting a U.S-based

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Emissary Panda updated its weapons for attacks in the past 2 years

Security Affairs

defense contractors , financial services firms, and a national data center in Central Asia. WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36” It downloads a file named m.bin using the HTTP GET method and injects this file into a new svchost.exe process without saving the file to disk.”

IT 80
article thumbnail

6 Best Threat Intelligence Feeds to Use in 2023

eSecurity Planet

OTX prides itself on being a completely open community for threat intelligence, extending access to threat research and shared expertise from security professionals to any and all users. Dashboards clearly state the quantity and types of indicators of compromise (IoCs) and also provide Pulses to quickly summarize threats and their impact.

article thumbnail

Group-IB uncovers PerSwaysion – sophisticated phishing campaign targeting executives worldwide

Security Affairs

ybercriminals behind the PerSwaysion campaign gained access to many confidential corporate MS Office365 emails of mainly financial service companies, law firms, and real estate groups. PerSwaysion campaign is a series of Malware-as-a-Service-based operations. Not brute force but only PerSwaysion. Who are “The PerSwayders”?

article thumbnail

I've Just Added 2,844 New Data Breaches With 80M Records To Have I Been Pwned

Troy Hunt

It then links directly through to 8.8GB worth of easily downloadable data breaches, all obtainable in a single ZIP file. In total, there were 2,889 text files in the archive but it's what's inside them which I found particularly interesting. This is interesting in that it's reminiscant of the Explouit.In But there's 18.6M

article thumbnail

CyberheistNews Vol 13 #22 [Eye on Fraud] A Closer Look at the Massive 72% Spike in Financial Phishing Attacks

KnowBe4

That's right – the financial services industry, at least according to cybersecurity vendor Armorblox's 2023 Email Security Threat Report. According to the report, the financial services industry as a target has increased by 72% over 2022 and was the single largest target of financial fraud attacks, representing 49% of all such attacks.