Tag: banking
-
U.S. Banking Associations Petition SEC to Rescind Cyber Breach Reporting Mandate
Five major banking associations have formally petitioned the U.S. Securities and Exchange Commission (SEC) to repeal a rule that mandates public companies to disclose material cybersecurity incidents within four business days. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/banks-urge-sec-to-end-cyber-disclosure-mandate/
-
Operation Endgame 2.0: DanaBusted
Tags: access, attack, backup, banking, breach, business, cloud, communications, control, crypto, cybercrime, data, defense, detection, email, espionage, firewall, fraud, government, group, Hardware, infection, intelligence, international, law, malicious, malware, middle-east, network, programming, ransomware, russia, service, supply-chain, switch, threat, tool, ukraine, update, windowsIntroductionOn May 22, 2025, international law enforcement agencies released information about additional actions that were taken in conjunction with Operation Endgame, an ongoing, coordinated effort to dismantle and prosecute cybercriminal organizations, including those behind DanaBot. This action mirrors the original Operation Endgame, launched in May 2024, which disrupted SmokeLoader, IcedID, SystemBC, Pikabot, and Bumblebee. Zscaler…
-
Operation Endgame Crushes DanaBot Malware, Shuts Down 150 C2 Servers and Halts 1,000 Daily Attacks
Operation Endgame II has delivered a devastating strike against DanaBot, a notorious malware that has plagued systems since its emergence in 2018. Initially designed as a banking trojan targeting financial credentials, DanaBot evolved into a multi-purpose threat, facilitating information theft and enabling secondary attacks like ransomware through payloads such as Latrodectus. At its peak in…
-
Securing Open Banking: How Fintechs Can Defend Against Automated Fraud API Abuse
Open Banking is accelerating innovation, and fraud”, with API abuse, credential stuffing, and fake account creation now among the top threats fintechs must defend against in real time. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/securing-open-banking-how-fintechs-can-defend-against-automated-fraud-api-abuse/
-
CTM360 maps out real-time phishing infrastructure targeting corporate banking worldwide
A phishing operation that targets corporate banking accounts across the globe has been analyzed in a new report by CTM360. The campaign uses fake Google ads, advanced … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/19/ctm360-cyberheist-phish-report/
-
Threat Actors Leverage Weaponized HTML Files to Deliver Horabot Malware
A recent discovery by FortiGuard Labs has unveiled a cunning phishing campaign orchestrated by threat actors deploying Horabot malware, predominantly targeting Spanish-speaking users in Latin America. This high-severity threat, detailed in the 2025 Global Threat Landscape Report, exploits malicious HTML files embedded in phishing emails to steal sensitive information, including email credentials and banking data,…
-
States push WeChat for answers over money laundering allegations
According to a letter sent to the company on Monday, Chinese underground banking networks use WeChat to “orchestrate cash pickups in U.S. cities, arrange currency swaps between fentanyl traffickers and Chinese money brokers,” and more. First seen on therecord.media Jump to article: therecord.media/states-push-wechat-for-money-laundering-answers
-
How Escape Enabled Deeper Business Logic Testing for Arkose Labs
Arkose Labs is a global cybersecurity company that specializes in account security, including bot management, device ID, anti-phishing and email intelligence. Its unified platform helps the world’s biggest enterprises across industries, including banking, gaming, e-commerce and social media, protect user accounts and digital ecosystems from malicious automation, credential First seen on securityboulevard.com Jump to article:…
-
Opening Up Open Banking: The CFPB’s Personal Financial Data Rights Rule
Tags: access, automation, banking, compliance, container, control, credit-card, data, finance, identity, monitoring, privacy, regulation, service, software, switch, toolOpening Up Open Banking: The CFPB’s Personal Financial Data Rights Rule andrew.gertz@t“¦ Tue, 05/06/2025 – 18:23 Explore the impact of the CFPB’s new Personal Financial Data Rights rule and how it aims to empower consumers, drive competition, and reshape open banking in the U.S. Ammar Faheem – Director Product Marketing (CIAM) More About This Author…
-
Quantum supremacy: Cybersecurity’s ultimate arms race has China way in front
Tags: ai, authentication, automation, backup, banking, breach, business, china, ciso, computing, control, crypto, cryptography, cybersecurity, data, encryption, finance, government, healthcare, identity, infrastructure, jobs, military, ml, nist, risk, service, skills, technology, threat, update, vulnerability, zero-dayThe DeepSeek/Qwen factor: What we learned from recent AI advances, such as DeepSeek and Qwen, that caught the world by surprise is that China’s technology is much more advanced than anyone anticipated. I’d argue that this is a leading indicator that China’s quantum computing capabilities are also in absolute stealth-mode development and ahead of the…
-
Popular Instagram Blogger’s Account Hacked to Phish Users and Steal Banking Credentials
A high-profile Russian Instagram blogger recently fell victim to a sophisticated cyberattack, where scammers hijacked her account to orchestrate a fake $125,000 cash giveaway. The attackers employed advanced techniques, including AI-generated deepfake videos and meticulously crafted phishing campaigns, to deceive followers into surrendering sensitive banking information. This incident highlights the growing threat of cyber fraud…
-
ANZ Bank to Eliminate Passwords for Digital Banking Services
Tags: authentication, banking, breach, credentials, cybercrime, finance, hacker, malware, mfa, password, serviceHackers Bypass MFA to Steal Australians’ Banking Credentials. Melbourne-based ANZ Bank will introduce passwordless authentication for digital banking services amid news that hackers have stolen the banking credentials of tens of thousands of Australians. Cybercriminals used infostealer malware to steal the credentials of more than 30,000 Australians. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/anz-bank-to-eliminate-passwords-for-digital-banking-services-a-28288
-
Banking Customer Data Exposed Following Ransomware Attack on Vendor
First seen on scworld.com Jump to article: www.scworld.com/native/banking-customer-data-exposed-following-ransomware-attack-on-vendor
-
JPMorgan Chase CISO Decries Poor SaaS Cybersecurity
‘Providers Must Urgently Reprioritize Security, Writes Patrick Opet. Banking giant JPMorgan Chase called on software as a service providers to improve cybersecurity practices in an open letter accusing them of quietly enabling cyberattackers. An attack on one major SaaS or PaaS provider can immediately ripple through its customers, wrote CISO Patrick Opet. First seen on…
-
Infostealers Harvest Over 30,000 Australian Banking Credentials
Dvuln researchers highlighted the growing impact of infostealers on the cybercrime landscape, enabling attackers to bypass traditional defenses First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/infostealers-harvest-banking/
-
Ukrainian state and banking services restored after data center outage
A Ukrainian cloud provider said it had restored services after a power outage disrupted operations for customers including government agencies and major companies over the weekend. First seen on therecord.media Jump to article: therecord.media/ukraine-state-and-banking-services-restored
-
Lesson from huge Blue Shield California data breach: Read the manual
read the documentation of any third party service you sign up for, to understand the security and privacy controls;know what data is being collected from your organization, and what you don’t want shared.”It’s important to understand these giant platforms make it easy for you to share your data across their various services,” he said. “So…
-
PlayPraetor Reloaded: CTM360 Uncovers a Play Masquerading Party
Overview of the PlayPraetor Masquerading Party VariantsCTM360 has now identified a much larger extent of the ongoing Play Praetor campaign. What started with 6000+ URLs of a very specific banking attack has now grown to 16,000+ with multiple variants. This research is ongoing, and much more is expected to be discovered in the coming days.…
-
Waski verbreitet Banking-Trojaner: auch deutsche Nutzer betroffen
Wenn du in den letzten Tagen und Wochen eine Spam-E-Mail mit einer ZIP-Datei im Anhang bekommen hast, könnte es durchaus sein, dass es sich um eine Schadsoftware handelt, die es auf die Zugangsdaten deines Onlinebanking-Accounts abgesehen hat. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2015/03/26/waski-verbreitet-banking-trojaner-auch-deutsche-nutzer-betroffen/
-
Emotet: Banking-Malware bedroht deutsche Nutzer
Wie Microsoft berichtet, bedroht eine neue Variante einer bekannten Malware, die es auf Zugangsdaten zu Banking-Accounts abgesehen hat, vor allem deutschsprachige Nutzer. Die Malware namens Emotet, von ESET als Win32/Emotet erkannt, wurde bereits im Juni letzten Jahres entdeckt. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2015/01/08/emotet-banking-malware-bedroht-deutsche-nutzer/
-
Emotet: ESET-Experten analysieren Banking-Malware
Die Zahl an Malware, die es auf die Zugangsdaten von Onlinebanking-Kunden abgesehen hat, ist in der Vergangenheit stark angestiegen. Zu diesen schädlichen Codes gehört auch Emotet, eine gefährliche Malware, über die wir bereits Anfang des Jahres berichtet haben. ESET erkennt die Bedrohung unter der Signatur Win32/Emotet.AB. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2015/02/17/emotet-eset-experten-analysieren-banking-malware/
-
Hackers Stole ‘Highly Sensitive’ US Banking Regulator Emails
Microsoft Reportedly Alerted Office of the Comptroller of the Currency to Breach. For nearly two years, hackers reportedly spied on 150,000 highly sensitive emails sent and received by America’s banking regulator, the Office of the Comptroller of the Currency. The OCC said it’s continuing to probe the major information security incident. First seen on govinfosecurity.com…
-
US banking regulator reports on ‘major’ cyber incident involving senior officials’ emails
The U.S. Office of the Comptroller of the Currency told Congress that a breach of its email systems reported in February involved “highly sensitive information” in the accounts of high-ranking officials. First seen on therecord.media Jump to article: therecord.media/office-comptroller-currency-email-hack-report
-
Digital Threats Targeting India – Banking Financial Services and Insurance Insurance (BFSI) Sector
First seen on resecurity.com Jump to article: www.resecurity.com/blog/article/digital-threats-targeting-india-banking-financial-services-and-insurance-insurance-bfsi-sector
-
Threat Actors Use VPS Hosting Providers to Deliver Malware and Evade Detection
Cybercriminals are intensifying phishing campaigns to spread the Grandoreiro banking trojan, targeting users primarily in Mexico, Argentina, and Spain. A detailed analysis by Forcepoint X-Labs reveals the sophisticated techniques employed by these attackers to evade detection and deliver malware. Phishing Tactics and Infrastucture The campaign begins with phishing emails purportedly from tax agencies, containing high-importance…
-
FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites
The financially motivated threat actor known as FIN7 has been linked to a Python-based backdoor called Anubis (not to be confused with an Android banking trojan of the same name) that can grant them remote access to compromised Windows systems.”This malware allows attackers to execute remote shell commands and other system operations, giving them full…
-
Grandoreiro banking trojan revived in new attacks against Latin America, Europe
First seen on scworld.com Jump to article: www.scworld.com/brief/grandoreiro-banking-trojan-revived-in-new-attacks-against-latin-america-europe
-
‘Crocodilus’ Android Banking Trojan Allows Device Takeover, Data Theft
The newly identified Android banking trojan Crocodilus takes over devices, enabling overlay attacks, remote control, and keylogging. The post ‘Crocodilus’ Android Banking Trojan Allows Device Takeover, Data Theft appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/crocodilus-android-banking-trojan-allows-device-takeover-data-theft/
-
New Android Malware “TsarBot” Targeting 750 Banking, Finance Crypto Apps
Tags: android, attack, banking, credentials, credit-card, crypto, cyber, finance, intelligence, login, malware, threatA newly identified Android malware, dubbed TsarBot, has emerged as a potent cyber threat targeting over 750 applications across banking, finance, cryptocurrency, and e-commerce sectors. Discovered by Cyble Research and Intelligence Labs (CRIL), this banking Trojan employs sophisticated overlay attacks to steal sensitive user credentials, including banking details, login information, and credit card data. Global…