Remove File names Remove Financial Services Remove Security
article thumbnail

BlackCocaine Ransomware, a new malware in the threat landscape

Security Affairs

Recently Cyber researchers for Cyble investigated an attack suffered by on May 30, 2021, by Nucleus Software, an India-based IT company in the Banking and Financial Services sector. The company reported the security breach to the Bombay Stock Exchange (BSE) and the National Stock Exchange of India (NSEI). Pierluigi Paganini.

article thumbnail

China-linked Budworm APT returns to target a US entity

Security Affairs

defense contractors , financial services firms, and a national data center in Central Asia. Masqueraded names included securityhealthservice.exe, secu.exe, vfhost.exe, vxhost.exe, vx.exe, and v.exe.” “In some cases, the HyperBro backdoor was loaded with its own HyperBro loader (file names: peloader.exe, 12.exe).

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Group-IB uncovers PerSwaysion – sophisticated phishing campaign targeting executives worldwide

Security Affairs

ybercriminals behind the PerSwaysion campaign gained access to many confidential corporate MS Office365 emails of mainly financial service companies, law firms, and real estate groups. The post Group-IB uncovers PerSwaysion – sophisticated phishing campaign targeting executives worldwide appeared first on Security Affairs.

Phishing 341
article thumbnail

Emissary Panda updated its weapons for attacks in the past 2 years

Security Affairs

defense contractors , financial services firms, and a national data center in Central Asia. WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36” It downloads a file named m.bin using the HTTP GET method and injects this file into a new svchost.exe process without saving the file to disk.”

IT 252
article thumbnail

I've Just Added 2,844 New Data Breaches With 80M Records To Have I Been Pwned

Troy Hunt

The file named "Alpari.com.txt" was full of Chinese addresses and constantly showed hits against the NetEase and Aipai.com breaches. Given that alpari.com is a financial services site located in the Caribbean, something doesn't add up here so I removed that one as well.

article thumbnail

6 Best Threat Intelligence Feeds to Use in 2023

eSecurity Planet

Here are our picks for the top threat intelligence feeds that security teams should consider adding to their defensive arsenal: AlienVault Open Threat Exchange: Best for community-driven threat feeds FBI InfraGard: Best for critical infrastructure security abuse.ch

article thumbnail

CyberheistNews Vol 13 #22 [Eye on Fraud] A Closer Look at the Massive 72% Spike in Financial Phishing Attacks

KnowBe4

That's right – the financial services industry, at least according to cybersecurity vendor Armorblox's 2023 Email Security Threat Report. Blog post with links: [link] [Live Demo] Ridiculously Easy Security Awareness Training and Phishing Old-school awareness training does not hack it anymore. Yup – shoe store.

Phishing 105