Cyber Crime

Pierluigi Paganini July 07, 2016
Eleanor malware uses a Tor backdoor to control Macs

A malicious application named EasyDoc Converter.app delivers a sophisticated malware dubbed Eleanor malware that opens a Tor backdoor on the victim’s machine. Experts from security firm Bitdefender have spotted a new malware, dubbed Eleanor malware (Backdoor.MAC.Eleanor), that once compromised Macs set up a backdoor through Tor network. The malicious application, dubbed EasyDoc Converter.app, pretend to be a […]

Pierluigi Paganini July 06, 2016
Yingmob Chinese Ad Company infected 10 million Android devices for click revenue

Chinese Ad company Yingmob ’s developers are allegedly responsible for the infection of approximately 10 million Android devices. Chinese Ad company Yingmob’s developers are allegedly responsible for the infection of approximately 10 million Android devices which is reportedly generating an income of around $300,000 USD per month. CheckPoint, the security company famous for their network […]

Pierluigi Paganini July 06, 2016
Identity theft – Serving up coffee and fraud

Cifas, a leading group in fraud protection, recently released its report on the fraud landscape for 2016 and the numbers are staggering. The first lesson taught to anyone working with classified data is that if someone can get all the little pieces of the picture, they’ll eventually have the whole picture.  Unfortunately, many users of […]

Pierluigi Paganini July 06, 2016
Espionage SBDH Toolkit used to target European Countries

ESET security firm has uncovered an espionage toolkit dubbed SBDH that was used in espionage campaigns targeting government organizations in Europe. Security experts from ESET security firm have spotted an espionage toolkit dubbed SBDH that was used by threat actors in hacking operations targeting government organizations in Europe. The research observed infections in many countries, including […]

Pierluigi Paganini July 05, 2016
Undetectable Adwind RAT used in targeted attacks

Experts from security firm Heimdal Security have detected a malicious spam campaign delivering attachments laced with the Adwind RAT. Experts from cyber security firm Heimdal Security has spotted a spam campaign delivering the Adwind RAT (Remote Access Trojan). The threat is a privileged weapon in the arsenal of criminal organizations, the Adwind RAT is a cross-platform malware that can […]

Pierluigi Paganini July 05, 2016
UN seeking solutions to stopping drug trade on dark web

The United Nation’s Office on Drugs and Crime published its annual report and placed special emphasis on curbing the illicit trade on the Dark Web. The United Nation’s Office on Drugs and Crime (UNODC) published its annual report on Thursday and placed special emphasis on curbing the illicit trade on the Dark Web. According to […]

Pierluigi Paganini July 03, 2016
A Chinese gang in Pakistan specializes in ATM Skimmer attacks

The Federal Investigation Agency in Pakistan is investigating a Chinese organization that is specialized in attacking ATM machines by using skimmer devices. A few days ago I reported the story of the security expert Benjamin Tedesco that has spotted an ATM skimmer during his vacation in Vienna. The ATM skimmer was quite impossible to detect to common people and […]

Pierluigi Paganini July 01, 2016
LizardStresser botnet is using IoT in recent 400Gbps DDoS Attack

The Lizardsquad’s botnet known as LizardStresser is now leveraging on Internet of Things devices, latest waves of DDoS attack reached 400Gbps. The Lizardstresser DDoS botnet has been increasing in popularity throughout 2016 and is being used increasingly to target the Internet of Things. Arbor Networks reported in their blog, a marked increase since the start […]

Pierluigi Paganini July 01, 2016
Oh Canada! – Canucks under attack in the latest wave of banking Trojan scams

Canadian online users appear to be the current target of the latest wave of email-based phishing campaigns used to deliver banking malware. Canadian online banking users appear to be the current target of the latest wave of email-based phishing campaigns. While Canada hasn’t been exempt from banking malware attacks in the past, it appears that […]

Pierluigi Paganini June 30, 2016
Dridex and Locky authors revamped the Bart malware

The authors responsible for Dridex and Locky malware have recently made another appearance, this time with their latest release – Bart malware. Similar to other ransomware, infected users are notified of the compromise with their desktop backgrounds changed with a warning, confirming that their files have been encrypted and offering a number of URLs accessible […]