Security Affairs

JUNE 24, 2024

The cybercrime group ExCobalt targeted Russian organizations in multiple sectors with a previously unknown backdoor known as GoRed. Members of the ExCobalt group have been active since at least 2016, the researchers believe that the group is linked to the notorious Cobalt Gang.

File names 84

File names Communications Mining Archiving 84

Security Affairs

FEBRUARY 28, 2019

Security expert Marco Ramilli analyzed a new piece of malware apparently designed to target PIK-Group that implements ransomware , Trojan, and Miner capabilities. So I clicked on the link (see IOC section) and I’ve downloaded a “pik.zip” file. which according to google translate would be: “PIK Group of Companies order details”.

Ransomware 80

Ransomware Mining File names Encryption 80

Security Affairs

APRIL 28, 2020

The Outlaw Hacking Group is back, malware researchers from Cybaze-Yoroi ZLab have uncovered a new botnet that is targeting European organizations. The Linux malware is the well-known “ Shellbot ”, it is a crimetool belonging to the arsenal of a threat actor tracked as the “Outlaw Hacking Group. ”. Introduction. Technical Analysis.

Mining 104

Mining File names Honeypots IT 104

Security Affairs

MAY 29, 2019

According to the experts, the malicious campaign is being carried out by a Chinese APT group. The payloads used in this campaign were droppers used to deliver a cryptocurrency miner to mine TurtleCoin cryptocurrency. The malicious code aimed at Windows MS-SQL and PHPMyAdmin servers worldwide. ” continues the analysis.

File names 81

File names Mining Security Cybersecurity 81

Security Affairs

FEBRUARY 27, 2019

Cisco Talos experts have reported a spike in the attacks that leverage known flaws to compromise unsecured Elasticsearch clusters and use them to mine crypto-currencies. Security researchers at Cisco Talos are warning of a spike in attacks on unsecured Elasticsearch clusters to drop cryptocurrency miners.

Search queries 87

Search queries Honeypots File names Mining 87

Troy Hunt

AUGUST 13, 2024

records with personal details, including full names, addresses, & SSNs in plain text. link] — Wolf Technology Group (@WolfTech) August 6, 2024 Who knows who "Fenice" is and what role they play, but clearly multiple parties had access to this data well in advance of last week. suffered #databreach.

Data breaches 145

Data breaches Archiving File names Mining 145

Troy Hunt

MARCH 3, 2021

Because I myself have a Gab account which I created when started making commentary on them and Parler in Jan, naturally the first thing I did was to pull out my own record: Looking into the (alleged) @getongab data breach, many records don't have an email address or a password hash (mine has the former, but not the latter). Coincidence?

Passwords 145

Passwords Data breaches Mining Risk 145