Security Affairs

NOVEMBER 2, 2022

Dropbox disclosed a security breach, threat actors gained unauthorized access to 130 of its source code repositories on GitHub. File hosting service Dropbox announced that threat actors gained unauthorized access to 130 of its source code repositories on GitHub. ” reads the advisory published by the company. Pierluigi Paganini.

Access 336

Access Phishing Passwords Authentication 336

Security Affairs

OCTOBER 23, 2023

Hundreds of millions of PII records belonging to Indian residents, including Aadhaar cards, are being offered for sale on the Dark Web. Resecurity’s HUNTER investigators identified two threat actors brokering access to Indian PII and Aadhaar records on Breach Forums, a leading cybercriminal hub.

Sales 361

Sales e-Discovery Data breaches Risk 361

Collaboration 2.0

OCTOBER 28, 2024

Right now, you can save $49 on an annual Walmart+ membership and get benefits like free delivery, early sale access, and more, just ahead of the retailer's Black Friday Deals event.

Sales 184

Sales Access Retail 184

Security Affairs

JULY 27, 2020

The malware implements banking Trojan capabilities such as the use of overlay attacks, the ability to intercept SMS messages and access to the contact list. In February, the authors implemented the ability to steal 2FA code from the Google Authenticator app abusing the Accessibility Privileges. ” reported BleepingComputer.

Sales 345

Sales Authentication Access Security 345

Security Affairs

FEBRUARY 4, 2024

Resecurity identified bad actors offering a significant number of AnyDesk customer credentials for sale on the Dark Web. Such data could be extremely valuable for both initial access brokers and ransomware groups familiar with AnyDesk, often abused as one of the tools following successful network intrusions.

Sales 355

Sales Passwords Phishing Cybersecurity 355

Krebs on Security

MARCH 9, 2023

A Croatian national has been arrested for allegedly operating NetWire , a Remote Access Trojan (RAT) marketed on cybercrime forums since 2012 as a stealthy way to spy on infected systems and siphon passwords. The arrest coincided with a seizure of the NetWire sales website by the U.S. Federal Bureau of Investigation (FBI).

Access 315

Access Passwords Sales Retail 315

Security Affairs

NOVEMBER 11, 2022

An initial access broker claims to have hacked Deutsche Bank and is offering access to its systems for sale on Telegram. A threat actor ( 0x_dump ) claims to have hacked the multinational investment bank Deutsche Bank and is offering access to its network for sale online. FTP , Shells , root , SQL-inj, DB, Servers.

Access 246

Access Sales Communications Insurance 246

Collaboration 2.0

DECEMBER 3, 2024

While it doesn't flip, fold, or have a built-in S Pen stylus, the Galaxy S24 FE offers all the essentials at a relatively accessible price. Although Cyber Monday sales are over, deals for the phone are still live on Best Buy.

Sales 264

Sales Access IT 264

Security Affairs

AUGUST 3, 2024

A Russia-linked APT used a car for sale as a phishing lure to deliver a modular Windows backdoor called HeadLace. Unit 42 pointed out that other threat groups, like Cloaked Ursa , in 2023 used an advertisement for a BMW for sale to target diplomatic missions within Ukraine. ” concludes the report.

Sales 336

Sales Phishing Military Archiving 336

Security Affairs

NOVEMBER 29, 2022

Cyble observed Initial Access Brokers (IABs) offering access to enterprise networks compromised via a critical flaw in Fortinet products. Customers that are not able to upgrade their systems should restrict access to their devices to a specific set of IP addresses. Pierluigi Paganini. SecurityAffairs – hacking, Fortinet).

Access 260

Access Authentication Sales Cybersecurity 260

Krebs on Security

OCTOBER 25, 2021

But sometime over the past 48 hours, the cybercriminal syndicate updated its victim shaming blog to indicate that it is now selling access to many of the organizations it has hacked. It’s also not obvious why they would advertise having hacked into companies if they plan on selling that access to extract sensitive data going forward.

Access 315

Access Ransomware Sales IT 315

Security Affairs

DECEMBER 16, 2022

The database seems to be available for sale since September when a seller was offering it for roughly 520,000 worth of bitcoin. Users are recommended to activating two-factor authentication (2FA) protection use hardware security keys to access their accounts. Follow me on Twitter: @securityaffairs and Facebook and Mastodon.

Sales 246

Sales Phishing Authentication Security 246

Security Affairs

NOVEMBER 19, 2024

” The Russian national was allegedly involved in the development, sale, distribution, and operations of the ransomware. Threat actors behind Phobos attacks were observed gaining initial access to vulnerable networks by leveraging phishing campaigns. ” reads the press release published by DoJ.

Ransomware 287

Ransomware Education Sales Government 287

Security Affairs

JUNE 1, 2024

ShinyHunters, the current administrator of BreachForums , recently claimed the hack of Ticketmaster and offered for sale 1.3 Stolen data includes names, emails, addresses, phone numbers, ticket sales, and order details. On May 27, 2024, a criminal threat actor offered what it alleged to be Company user data for sale via the dark web.

Data breaches 343

Data breaches Sales Cloud Access 343

Data Breach Today

MAY 28, 2022

higher education sector about compromised sensitive credentials and network access information advertised for sale across various public and Dark Web forums. The agency states that this access to credentials could potentially lead to a cyberattack.

Education 363

Education Sales Access 363

Security Affairs

MAY 27, 2022

The FBI warns organizations in the higher education sector of credentials sold on cybercrime forums that can allow threat actors to access their networks. In late 2020, credentials for US-based universities were found for sale on the dark web. ” reads the alert published by the FBI.

Sales 363

Sales Education Phishing Passwords 363

Security Affairs

MAY 31, 2024

The threat actor ShinyHunters claims breach of Santander and is offering for sale bank data, including information for 30 million customers. A notorious threat actor ShinyHunters is offering a huge trove of data allegedly stolen from the Santander Bank for sale. ShinyHunters claimed the hack of Ticketmaster and offered for sale 1.3

Sales 322

Sales Data breaches Passwords Access 322

Security Affairs

MARCH 7, 2023

Recently a threat actor announced the availability for sale of 160 GB of data allegedly stolen from the Taiwanese multinational hardware and electronics corporation Acer. We have recently detected an incident of unauthorized access to one of our document servers for repair technicians.

Data breaches 246

Data breaches Sales Access IT 246

Data Breach Today

SEPTEMBER 6, 2021

Revenue, Size, Geography and Level of Access Help Determine Sale Price for Access The most sought-after type of victim for ransomware-wielding attackers is a large, U.S.-based

Ransomware 345

Ransomware Education Sales Access 345

Security Affairs

MAY 9, 2024

Cybersecurity firm Zscaler is investigating claims of a data breach after hackers offered access to its network. Cybersecurity firm Zscaler is investigating allegations of a data breach following reports that threat actors are offering for sale access to its network. Revenue: $1.8 Revenue: $1.8

Data breaches 319

Data breaches Sales Access Cybersecurity 319

Security Affairs

MAY 11, 2024

SIRIUS is an EU-funded project that helps law enforcement and judicial authorities access cross-border electronic evidence in the context of criminal investigations and proceedings. This week IntelBroker also announced on a Breach Forums the sale of the access to “one of the largest cyber security companies.” Revenue: $1.8

Data breaches 313

Data breaches Sales Access Security 313

Security Affairs

AUGUST 5, 2022

The threat actor offered for sale the stolen data on the popular hacking forum Breached Forums. The post Twitter confirms zero-day used to access data of 5.4 At the end of July, a threat actor leaked data of 5.4 million Twitter accounts that were obtained by exploiting a now-fixed vulnerability in the popular social media platform.

Access 273

Access Data breaches Authentication Privacy 273

Security Affairs

JANUARY 5, 2021

The alarm was raised by the threat intelligence firm Kela that reported the availability for sale of the credentials in multiple hacking forums and criminal marketplace. “KELA found nearly 1 million compromised accounts pertaining to gaming clients and employees, with 50% of them offered for sale during 2020.”

Sales 319

Sales Access Passwords Phishing 319

Data Breach Today

SEPTEMBER 10, 2021

Threat Actors Offered Credentials for UN's ERP Software; NATO Hit as Well The United Nations says on Thursday that its networks were accessed by intruders earlier this year, which lead to follow-on intrusions. Cybercrime analysts say they warned the agency when access credentials to a U.N.

IT 320

IT Sales Access 320

Security Affairs

OCTOBER 4, 2020

Visa revealed that two unnamed North American hospitality merchants have been infected with some strains of point-of-sale (POS) malware. ”In these incidents, criminals targeted the merchants’ point-of-sale (POS) terminals in an effort to harvest and exfiltrate payment card data. . ” reads the VISA security alert.”In

Sales 363

Sales Access Phishing Security 363

Security Affairs

MARCH 15, 2024

District Court sentenced the Moldovan national (31) Sandu Boris Diaconu to 42 months in federal prison for conspiracy to commit access device and computer fraud and possession of 15 or more unauthorized access devices. Authorities reported that over 350,000 credentials were advertised for sale on the marketplace.

Sales 330

Sales Access Passwords Ransomware 330

Data Breach Today

SEPTEMBER 10, 2021

Brokers With Ransomware Ties Advertised Access to UN ERP and Also NATO Systems The United Nations says its networks were accessed by attackers earlier this year, leading to follow-on intrusions.

IT 292

IT Sales Ransomware Access 292

Security Affairs

SEPTEMBER 15, 2023

In February 2023, Pankov was charged with conspiracy, access device fraud, and computer fraud. The stolen login credentials were available on a dark web website that specialized in the purchase and sale of access to compromised computers. The Russian national Dariy Pankov (28), aka dpxaker, is the author of the NLBrute malware.

Sales 313

Sales Marketing Passwords Access 313

Security Affairs

FEBRUARY 12, 2024

Justice Department (DoJ) seized the infrastructure that was used to sell the remote access trojan (RAT) Warzone RAT. The Justice Department announced the seizure of internet domains used to sell the remote access Trojan Warzone RAT (www.warzone[.]ws). “Federal authorities in Boston seized www.warzone.ws ” concludes DoJ.

Sales 327

Sales Access Passwords Information Security 327

Security Affairs

APRIL 20, 2020

Over 267 million Facebook profiles are offered for sale on dark web sites and hacker forums, the dump is offered for £500 ($623) and doesn’t include passwords. Hackers are offering for sale over 267 million Facebook profiles for £500 ($623) on dark web sites and hacker forums, the archive doesn’t include passwords.

Sales 364

Sales Data breaches Archiving Passwords 364

The Last Watchdog

DECEMBER 16, 2024

Organizations must adopt adaptive, automated identity security and fine-grained access controls, like the solutions Oleria is developing, to stay protected. LLMs grant access to private data and take actions on behalf of users. Legacy IAM systems cant keep up as AI-powered phishing and deepfakes grow more sophisticated.

Security 264

Security Phishing IoT Risk 264

Security Affairs

AUGUST 16, 2021

T-Mobile confirms a breach after threat actors claimed to have obtained records of 100 million of its customers and offered them for sale. The seller claims that the data available for sale includes social security numbers, phone numbers, names, physical addresses, unique IMEI numbers, and driver licenses information.

Data breaches 330

Data breaches Sales Personal data Access 330

Security Affairs

FEBRUARY 7, 2021

Threat actors offered for sale an archive containing user details for one million SitePoint users on a cybercrime forum. The total volume of data available for sale is composed of 368.8 The total volume of data available for sale is composed of 368.8 ” “This allowed access through our codebase into our systems.

Data breaches 327

Data breaches Passwords Sales Archiving 327

Data Breach Today

JANUARY 11, 2024

Financially Motivated Actors Targeting US, EU and LATAM Countries Financially motivated Turkish hackers are targeting Microsoft SQL servers in the United States, Europe and Latin America in hacking that ultimately ends with deployment of Mimic ransomware or the sale of access to infected hosts on criminal online markets.

Ransomware 298

Ransomware Sales Marketing Access 298