Cyber Crime

Pierluigi Paganini June 07, 2016
FBI issued an alert about a rise in extortion email schemes

The FBI has issued a warning that individuals should be on their guard against extortion email scam linked to recent high-profile data breaches. The FBI states that its Internet Crime Complaint Center (IC3) has identified this new variety of extortion through the increased instance of reports to the Centre from individuals who have fallen victim […]

Pierluigi Paganini June 07, 2016
Watch out, Angler Exploit Kit is able to bypass Microsoft EMET defense

Security experts from FireEye have observed attacks leveraging on Angler EK to deliver exploits capable of evading the Microsoft EMET security Tool. Microsoft’s Enhanced Mitigation Experience Toolkit (EMET) is a free security tool designed by Microsoft to implement a supplemental security layer of defense against the exploitation of vulnerabilities affecting applications running on Windows Systems. […]

Pierluigi Paganini June 06, 2016
As of the end of March, 93 percent of all phishing emails contained ransomware

The anti-phishing company PhishMe that observed that as of the end of March 93 percent of all phishing emails contained a ransomware. Ransomware is becoming a privileged instrument of cyber criminals to rapidly earn money, the diffusion of this type of threat is changing the threat landscape scenario, for example, as of the end of March, […]

Pierluigi Paganini June 06, 2016
Mark Zuckerberg hacked by the hacking crew OurMine Team

Facebook CEO Mark Zuckerberg hacked, a group of young hackers known as OurMine Team took over its Pinterest, Twitter, LinkedIn accounts. No one is secure when dealing with cyber security, event the popular Facebook CEO Mark Zuckerberg. His social media accounts Pinterest, Twitter, Instagram and LinkedIn were hacked. On Sunday, A group of hackers using the […]

Pierluigi Paganini June 06, 2016
100 million credentials from the Russian Facebook VK.com go on sale

100 million login credentials belonging to the users of the Russian social networking platform VK.com (VKontakte) are available for sale on the Dark Web. Another day another data breach, this time 100 million login credentials belonging to the users of the Russian social networking platform VK.com (VKontakte) are available for sale. Some experts estimate that the number of […]

Pierluigi Paganini June 06, 2016
It is too easy to find enterprise logins on the Dark Web

Anomali Labs analyzed attacks against the reputation of FTSE 100 companies highlighting the availability in the Dark Web of employees data. Anomali Labs analyzed attacks against the reputation of FTSE 100  companies highlighting the availability in the Dark Web of employees’ data. Brand spoofing is an illegal practice that causes several damages to companies worldwide, […]

Pierluigi Paganini June 05, 2016
Sh0ping.su hacked, stolen card data and accounts available for sale

The notorious crime forum Sh0ping[.]su has been hacked by unknowns that leaked online credit card data and stolen accounts. Data breaches are a common problem also for bad actors, in many cases cyber criminals hack websites of competitors to damage their reputation and push out them from the business. Recently we discussed the hacks of […]

Pierluigi Paganini June 05, 2016
Old CVE-2014-3704 flaw in Drupal still exploited in attacks

More than 19 months after its public disclosure the CVE-2014-3704 is still exploited in attacks against Drupal-based websites. It was October 2014, when Drupal patched a critical SQL injection vulnerability (CVE-2014-3704) that was affecting all Drupal core 7.x versions up to the recently-released 7.32 version, which fixed the issue. The patch issued by Drupal fixed the […]

Pierluigi Paganini June 04, 2016
FastPOS PoS malware implements a quick exfiltration method

Trend Micro experts discovered a new strain of Point-of-Sale (PoS) malware dubbed FastPOS that implements a quick and efficient exfiltration technique. Security experts at Trend Micro have spotted a new strain of PoS malware dubbed FastPOS that is able to quickly exfiltrate harvested data. The malware was used by threat actors to target both enterprises and SMBs […]

Pierluigi Paganini June 03, 2016
Ransomware campaigns … how to net $90,000 per year

Experts at Flashpoint published an interesting analysis of a ransomware campaign organized by a small gang of cyber criminals. Cybercrime is a profitable business, last week we reported that according to security experts at Check Point, the creators of the Nuclear EK are gaining nearly 100K USD each month, most victims are in Europe and […]