Data Breach Today

JANUARY 18, 2024

Also: FBI Warning About Androxgh0st; eBay Pays a $3 Million Fine for Cyberstalking This week, Microsoft expanded plans to store EU citizens' data locally, shipping-themed phishing spam is a threat, the British Library overcame a ransomware setback, the FBI warned of Androxgh0st malware, Remcos RAT targeted South Korea, and eBay was fined $3 million (..)

Libraries 308

Libraries Phishing Ransomware 308

Security Affairs

DECEMBER 17, 2023

Threat actors launched a phishing attack against a former employee obtaining his credentials and access to the Ledger’s NPMJS account. ledger library confirmed compromised and replaced with a drainer. The malicious npm module (2e6d5f64604be31) has been removed from the repository. that included a crypto drainer malware.

Phishing 348

Phishing Libraries Authentication Access 348

Security Affairs

AUGUST 3, 2018

Industrial sector hit by a surgical spear-phishing campaign aimed at installing legitimate remote administration software on victims’ machines. Attackers personalized the content of each phishing email reflecting the activity of the target organization and the type of work performed by the employee to whom the email is sent.

Phishing 170

Phishing Libraries Passwords Archiving 170

Security Affairs

NOVEMBER 2, 2022

According to the advisory published by Dropbox, the company was the target of a phishing campaign that resulted in access to the GitHub repositories. Dropbox uses CircleCI for select internal deployments, and in early October, a phishing campaign targeted multiple Dropboxers using messages impersonating CircleCI. Pierluigi Paganini.

Access 333

Access Phishing Passwords Authentication 333

Security Affairs

SEPTEMBER 12, 2019

Iran-linked Cobalt Dickens APT group carried out a spear-phishing campaign aimed at tens of universities worldwide. This operation is similar to the threat group’s August 2018 campaign , using compromised university resources to send library-themed phishing emails.” ” continues the report.

Phishing 251

Phishing Libraries File names Metadata 251

Security Affairs

APRIL 14, 2020

PaloAlto Networks experts warn of malicious Coronavirus themed phishing campaigns targeting government and medical organizations. The attacks against the Canadian healthcare organizations were discovered between March 24 and March 26, they started with coronavirus -themed phishing campaigns that were carried out in the last months.

Ransomware 361

Ransomware Phishing Government File names 361

Security Affairs

DECEMBER 27, 2023

. “In our ongoing investigation, Barracuda has determined that a threat actor has utilized an Arbitrary Code Execution (ACE) vulnerability within a third party library, Spreadsheet::ParseExcel, to deploy a specially crafted Excel email attachment to target a limited number of ESG devices.” ” reads the advisory.

Libraries 349

Libraries Access Cybersecurity Security 349

Security Affairs

AUGUST 12, 2024

Threat actors sent phishing emails with RAR archive attachments containing a Windows shortcut to install malware. “Attackers use the classic DLL sideloading technique: when the desktop.exe file is launched, the malicious VERSION.dll library is loaded into the corresponding process” reads the report published by Kaspersky.

Libraries 340

Libraries Encryption Cloud Archiving 340

Security Affairs

JANUARY 7, 2023

Cyber researchers warn of a modified Zoom app that was used by threat actors in a phishing campaign to deliver the IcedID Malware. Cyble researchers recently uncovered a phishing campaign targeting users of the popular video conferencing and online meeting platform Zoom to deliver the IcedID malware. ” concludes the report.

Phishing 246

Phishing Libraries Cybersecurity IT 246

Security Affairs

APRIL 8, 2021

To see if your email address has been exposed in this data leak or other security breaches, use our personal data leak checker with a library of 15+ billion breached records. The data from the leaked files can be used by threat actors against LinkedIn users in multiple ways by: Carrying out targeted phishing attacks. Next steps.

Passwords 361

Passwords Phishing Personal data Libraries 361

Security Affairs

OCTOBER 6, 2020

The e-skimmer was first spotted by researchers at Malwarebytes’ Threat Intelligence Team, the researchers noticed a single line of code that is used to load an external JavaScript library from paypal-debit[.]com/cdn/ga.js. us, had been injected with a one-liner that contains a Base64 encoded URL loading an external JavaScript library.”

Libraries 271

Libraries Phishing Analytics Security 271

Security Affairs

SEPTEMBER 24, 2023

BBTok is written in Delphi and uses the Visual Component Library (VCL) to dynamically generate interfaces. The payload is being delivered via phishing emails that use multiple file types. The phishing messages include a malicious link.

Phishing 342

Phishing Libraries Archiving IT 342

Krebs on Security

NOVEMBER 14, 2023

” The second zero day this month is CVE-2023-36033 , which is a vulnerability in the “DWM Core Library” in Microsoft Windows that was exploited in the wild as a zero day and publicly disclosed prior to patches being available.

Phishing 310

Phishing Authentication Libraries Access 310

Security Affairs

NOVEMBER 14, 2023

Three of these vulnerabilities are actively exploited in attacks in the wild: – CVE-2023-36033 – Windows DWM Core Library Elevation of Privilege Vulnerability An attacker can trigger this vulnerability to elevate privileges through the Windows Desktop Manager (DWM).

Security 321

Security Cloud Libraries Phishing 321

Security Affairs

NOVEMBER 24, 2019

” The attackers delivered a phishing email to the inbox of an employee of a financial institution, the message was using a theme of a wire transfer to trick victims into opening the Dropbox URL and downloading the malicious file. In this campaign, the actors chose to host the malicious. ” concludes Cofense.

Libraries 306

Libraries Sales Phishing Security 306

Security Affairs

MAY 2, 2024

According to the advisory published by Dropbox, the company was the target of a phishing campaign that resulted in access to the GitHub repositories. Dropbox uses CircleCI for select internal deployments, and in early October, a phishing campaign targeted multiple Dropboxers using messages impersonating CircleCI.

Passwords 329

Passwords Authentication Access Phishing 329

Security Affairs

NOVEMBER 25, 2023

Recently, the Rhysida ransomware gang added the British Library to the list of victims on its Tor leak site. According to the advisory, the threat actors have exploited Zerologon ( CVE-2020-1472 ) in Microsoft’s Netlogon Remote Protocol in phishing attempts.

Ransomware 354

Ransomware Manufacturing Education Libraries 354

Security Affairs

SEPTEMBER 3, 2020

Attackers carried out spear-phishing emails using the Know Your Customer regulations (KYC) as a lure. The second layer of Python code decodes and loads to memory the main RAT and the imported libraries. The new infection chain starts by including just one LNK file in the ZIP archive attached to spear-phishing messages.

Phishing 363

Phishing Encryption File names Metadata 363

Security Affairs

JULY 12, 2021

Even though LinkedIn’s representatives are correct in saying that no private data was exposed, collecting publicly available information on a mass scale can still put users at risk of spam and phishing attacks. In addition, beware of phishing emails and text messages. What’s being sold by the threat actor?

Archiving 360

Archiving Passwords Data collection Sales 360

Security Affairs

APRIL 2, 2019

Visit our online library by clicking here. . GARY BERMAN AND HIS TEAM BELIEVE THAT INFOSEC KNOWLEDGE IS POWERFUL – TAKE YOUR AVERAGE EMPLOYEE AND MAKE THEM A CYBER HERO – YOU WILL EMPOWERED THEM AGAINST THE LATEST SPEAR PHISHING ATTACKS AND RANSOMWARE, IN A FUN EDUCATIONAL WAY. InfoSec Knowledge is Power. BREAKING NEWS.

IT 260

IT Libraries Education Phishing 260

Security Affairs

JUNE 22, 2022

Malwarebytes researchers observed the use of 3 different themes by the threat actor to hide their skimmer, named after JavaScript libraries: hal-data[.]org/gre/code.js Crypto wallets and similar digital assets are extremely valuable and there is no doubt that clever schemes to rob those are in place beyond phishing for them.

Cleanup 321

Cleanup CMS Libraries Phishing 321

Security Affairs

OCTOBER 2, 2020

In February 2020 Belarussian CERT published a security advisory about an ongoing spear-phishing campaign, linked by ESET to XDSpy, targeting several Belarussian ministries and agencies. The malware samples analyzed by the researchers are slightly obfuscated using string obfuscation and dynamic Windows API library loading.

Military 358

Military Phishing Passwords Government 358

Security Affairs

FEBRUARY 16, 2021

The malicious activity starts with a phishing email sent to the target victims in Latin American – Brazil, Mexico, Chile, and Peru – and Europe – Spain and Portugal. In short, the phishing email is received by victims. dll: Windows legitimate DLL for runtime dependencies – MICROSOFT® C RUNTIME LIBRARY.

Libraries 329

Libraries Communications Phishing Encryption 329

Security Affairs

OCTOBER 6, 2020

Emotet is a modular malware, its operators could develop new Dynamic Link Libraries to update its capabilities. “Since August, CISA and MS-ISAC have seen a significant increase in malicious cyber actors targeting state and local governments with Emotet phishing emails. ” reads that alert published by CISA.

Government 355

Government Libraries Cybersecurity Phishing 355

Security Affairs

JULY 10, 2022

The company highlight the risks of identity theft or phishing attacks in case their data have been compromised. Recent incidents attributed to the group include attacks on a Foxconn factory, a Canadian fighter jet training company, and a popular German library service. Follow me on Twitter: @securityaffairs and Facebook.

Ransomware 279

Ransomware Personal data Libraries Phishing 279

Security Affairs

JANUARY 22, 2021

It also appeared on the home page of the Kindle with a cover image of our choice, which makes phishing attacks much easier.”

Authentication 359

Authentication Libraries Phishing Security 359

Security Affairs

APRIL 6, 2021

China-linked APT group LuckyMouse (aka Cycldek, Goblin Panda , Hellsing, APT 27, and Conimes) is targeting government and military organizations in Vietnam with spear-phishing. The threat actors are sending out spear-phishing messages to compromise diplomatic targets in Southeast Asia, India, and the U.S. at least since 2013.

Military 294

Military Government Phishing Libraries 294

Security Affairs

OCTOBER 3, 2018

“HIDDEN COBRA actors most likely deployed ISO 8583 libraries on the targeted switch application servers. Malicious threat actors use these libraries to help interpret financial request messages and properly construct fraudulent financial response messages.” ” continues the report.

Retail 277

Retail Libraries Government Phishing 277

Security Affairs

MAY 23, 2024

However, the researchers determined that one of methods used by the threat actors to regaining access to the target organizations are spear-phishing emails. The experts observed multiple spear-phishing attempts between March and May 2023. The messages use specially crafted archives containing LNK files disguised as regular documents.

Archiving 329

Archiving Military Communications Phishing 329

Security Affairs

JANUARY 15, 2023

Most internet-exposed Cacti servers exposed to hacking French CNIL fined Tiktok $5.4

Security 246

Security Ransomware Libraries Phishing 246

Security Affairs

NOVEMBER 29, 2023

Recently, the Rhysida ransomware gang added the British Library and China Energy Engineering Corporation to the list of victims on its Tor leak site. According to the advisory, the threat actors have exploited Zerologon ( CVE-2020-1472 ) in Microsoft’s Netlogon Remote Protocol in phishing attempts.

Ransomware 346

Ransomware Manufacturing Education Libraries 346

Security Affairs

DECEMBER 26, 2023

The group also claimed the hack of the British Library and China Energy Engineering Corporation. According to the advisory, the threat actors have exploited Zerologon ( CVE-2020-1472 ) in Microsoft’s Netlogon Remote Protocol in phishing attempts. The gang will publicly release the data over the seven days following the announcement.

Ransomware 345

Ransomware Manufacturing Education Libraries 345

Security Affairs

MAY 6, 2023

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 246

Security Libraries Data breaches Ransomware 246

Security Affairs

APRIL 13, 2023

The attack chain commences with a spear-phishing email containing a weaponized document, which contains a link leading to the download of an HTML file. The HTLM files are hosted on a legitimate online library website that was likely compromised by the threat actors sometime between the end of January 2023 and the beginning of February 2023.

Libraries 246

Libraries Military Education Government 246

Security Affairs

JANUARY 22, 2021

“ To see if any of your online accounts were leaked, use our personal data leak checker with a library of 15+ billion breached records.” The company pointed out that no financial data was stolen in the attack and added that it did not have evidence that user data was actually compromised as part of the incident.

Sales 287

Sales Passwords Marketing Libraries 287

KnowBe4

JULY 19, 2023

KnowBe4 offers the world’s largest library of always-fresh security awareness and compliance training content that includes assessments, interactive training modules, videos, games, posters and newsletters via the KnowBe4 ModStore.

Libraries 98

Libraries Security awareness Compliance Security 98

Security Affairs

OCTOBER 4, 2022

Threat actors sent spear-phishing emails using malicious Amazon-themed documents as lures. The experts spotted a dynamically linked library, codenamed FudModule.dll, that tries to disable various Windows monitoring features. The library modify kernel variables and remove kernel callbacks in the attempt to disable the features.

Libraries 246

Libraries Phishing Security IT 246