Cyber Crime

Pierluigi Paganini November 27, 2016
Hackers offer a huge Mirai botnet as a DDoS-for-hire service

The hackers Popopret and BestBuy are offering a DDoS-for-hire service leveraging a Mirai botnet composed of around 400,000 compromised devices. We have written a lot about the Mirai botnet after the clamorous attacks against the Dyn DNS service and the OVH hosting, it is a dangerous threat that was designed to target IoT devices that could be used to power massive DDoS […]

Pierluigi Paganini November 27, 2016
Scammers advertise backdoored phishing templates on YouTube

Security experts from Proofpoint firm observed scammers exploiting YouTube to promote their backdoored phishing templates. According to experts from the security firm Proofpoint, scammers are advertising on YouTube backdoored phishing templates offering also “how-to” videos and manuals. It is not a novelty, cyber criminals are switching on legitimate websites to propose their products and services. […]

Pierluigi Paganini November 25, 2016
A massive DDoS attack hit the servers of the European Commission for several hours

The European Commission was the victim of a massive DDoS attack that brought down its internet access for hours on Thursday. A massive DDoS attack targeted the European Commission website, fortunately, according to an official statement from the organization the internal security team repelled the attack without damages. The experts from the European Commission confirmed that some servers […]

Pierluigi Paganini November 25, 2016
ImageGate attack – How to spread malware via poisoned .JPG

Security experts from Checkpoint have discovered a new malware-based campaign through Facebook leveraging an image obfuscation trick dubbed ImageGate. Security experts from Checkpoint have discovered a new malware-based campaign through Facebook. Crooks leverage an image obfuscation trick, dubbed ImageGate, to spread the Locky ransomware via Facebook. Experts highlighted that the image obfuscation trick is able to bypass Facebook’s security checks. “Check […]

Pierluigi Paganini November 25, 2016
Crooks steal millions from European ATMs with jackpotting attacks

Criminal gangs like the Cobalt gang are now focusing their efforts on the banks to steal cash directly from the ATMs with jackpotting attacks. Security experts are assisting a change of tactics for the criminal organizations who target the ATMs and online banking credentials. Crooks are now focusing their efforts on the banks in the attempt to […]

Pierluigi Paganini November 23, 2016
Registral Function of the State Mexico (FREM) hacked. Shad0wS3C is back

The hacker group Shad0wS3C is back and hacked the Institute of the Registral Function of the State Mexico (FREM), it leaked the database. Shad0wS3C is Back and hacked the Institute of the Registral Function of the State Mexico (FREM) and leaked a dump of its database. The hacker leaked the database at the following URL https://t.co/6XgwSf4uWW The […]

Pierluigi Paganini November 23, 2016
Tropic Trooper APT targets Taiwanese Government and companies in the energy sector

The Tropic Trooper APT continues to target Asia, this time government Taiwanese organizations and companies in the energy sector. The Tropic Trooper APT that has been active at least since 2012, it was first spotted last year by security experts at Trend Micro when it targeted government ministries and heavy industries in Taiwan and the military in the Philippines. Now […]

Pierluigi Paganini November 23, 2016
Credit cards stolen from Madison Square Garden venues in the last year

Madison Square Garden Company informed users that their payment card data may have been stolen by cybercriminals Yesterday, the Madison Square Garden Company notified users that their payment card data may have been stolen by cybercriminals. According to the company, crooks have used a PoS malware on its payment processing system and have stolen payment […]

Pierluigi Paganini November 22, 2016
ESET Crysis decryptor to rescue files encrypted by the Crysis ransomware

ESET security firm has included master decryption keys into a decryption tool that allows rescuing the encrypted files without paying the ransom. Good news for the victims of the Crysis ransomware, ESET security firm has included master decryption keys into a tool that allows rescuing the encrypted files. The decryption keys for the CrySis ransomware were posted online on […]

Pierluigi Paganini November 22, 2016
Michigan State University Data Breach, 400,000 Records Exposed

Hackers attempted to extort Michigan State University after they have breached into its database containing 400,000 records of students and employees. Crooks hacked the Michigan State University breaching into a database containing 400,000 student and employee records, then tried to monetize the efforts attempted to extort the organization. Michigan State University reported the data breach occurred on November 13 when an unauthorized […]