article thumbnail

Russian national sentenced to 40 months for selling stolen data on the dark web

Security Affairs

The marketplace had been active since 2012, it was allowing sellers to offer stolen login credentials, including usernames and passwords for bank accounts, online payment accounts, mobile phone accounts, retailer accounts, and other online accounts. Kavzharadze pleaded guilty to conspiracy to commit bank and wire fraud on February 16, 2024.

Sales 315
article thumbnail

Operator of Scan4You Malware-Scanning sentenced to 14 Years in prison

Security Affairs

Bondars is one of the two hackers found to have been running Scan4you from 2009 to 2016, its service was very popular in the cybercrime community and was used by malware developers to test their malicious codes. The man pleaded guilty to the same Bondars’s charges in March 2018. billion. .

Retail 279
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Hidden Cobra APT used the new ATM cash-out scheme FASTCash to hit banks worldwide

Security Affairs

The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFT attacks in 2016, and the Sony Pictures hack. According to the report published by the US-CERT, Hidden Cobra has been using the FASTCash technique since at least 2016, the APT group targets bank infrastructure to cash out ATMs.

Retail 278
article thumbnail

Wipro Intruders Targeted Other Major IT Firms

Krebs on Security

The subdomains listed above suggest the attackers may also have targeted American retailer Sears ; Green Dot , the world’s largest prepaid card vendor; payment processing firm Elavon ; hosting firm Rackspace ; business consulting firm Avanade ; IT provider PCM ; and French consulting firm Capgemini , among others. internal-message[.]app.

IT 233
article thumbnail

FIN8 group used a previously undetected Sardonic backdoor in a recent attack

Security Affairs

The group has been active since 2016, it leverages known malware such as PUNCHTRACK and BADHATCH to infect PoS systems and steal payment card data. The group focuses on organizations in the insurance, retail, technology, and chemical industries in the U.S., Canada, South Africa, Puerto Rico, Panama, and Italy.

Retail 340
article thumbnail

Oracle critical patch advisory addresses 284 flaws, 33 critical

Security Affairs

The advisory fixed the CVE-2016-1000031 flaw, a remote code execution (RCE) bug in the Apache Commons FileUpload, disclosed in November last year. The Commons FileUpload library is the default file upload mechanism in Struts 2, the CVE-2016-1000031 was discovered two years ago by experts at Tenable.

article thumbnail

The Cost of Dealing With a Cybersecurity Attack in These 4 Industries

Security Affairs

As people have growing opportunities to shop online, the chances for hackers to carry out lucrative cyberattacks in the retail sector also go up. Statistics from 2016 showed that the average cost per compromised retail record was $172. People are becoming less tolerant of retailers that have widescale data breaches.