Tag: dark-web
-
Ransomware-Spitze: Anstieg gegenüber Februar 2024 um 126 Prozent
Opportunistische Auswahl der Opfer manuell durchgeführter Angriffe. Der vergangene Februar 2025 war laut Experten der Bitdefender Labs ein Rekordmonat. Für Ihre Analyse im Rahmen des monatlichen Bitdefender Threat Debriefs werteten die Bitdefender-Experten, die von über 70 Ransomware-Banden betriebenen Internet-Seiten zu Dateneinbrüchen im Dark Web Dedicated Leak-Sites (DLS) und Informationen aus öffentlich verfügbaren… First seen on…
-
Ransomware Developer Extradited, Admits Working for LockBit
Law enforcement discovered admin credentials on the suspect’s computer for an online repository hosted on the Dark Web that stored source code for multiple versions of the LockBit builder. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/lockbit-developer-extradited-admits-working-ransomware-group
-
The most notorious and damaging ransomware of all time
Tags: access, android, attack, backdoor, backup, banking, botnet, breach, communications, computer, control, credentials, cryptography, cyber, cybercrime, dark-web, data, defense, detection, email, encryption, endpoint, exploit, extortion, finance, flaw, framework, germany, google, government, group, hacker, hacking, healthcare, infection, infrastructure, international, jobs, korea, law, lazarus, leak, linux, malicious, malware, microsoft, mobile, msp, network, north-korea, office, open-source, oracle, password, phishing, phone, powershell, ransom, ransomware, russia, service, software, spam, switch, technology, threat, tool, ukraine, update, usa, virus, vulnerability, windowsConti: History: First appearing in May 2020, the Conti RaaS platform is considered the successor to the Ryuk ransomware. As of January 2021, Conti is believed to have infected over 150 organizations and earned millions of dollars for its criminal developers and their affiliates. At least three new versions have been found since its inception.How it works: Conti uses the…
-
Februar war Rekordmonat für Ransomware
Der vergangene Februar 2025 war laut Experten der Bitdefender Labs ein Rekordmonat. Für ihre Analyse im Rahmen des monatlichen Bitdefender-Threat-Debriefs werteten die Bitdefender-Experten, die von über 70 Ransomware-Banden betriebenen Internet-Seiten zu Dateneinbrüchen im Dark-Web Dedicated-Leak-Sites (DLS) und Informationen aus öffentlich verfügbaren Quellen (OSINT) aus. Im Vergleich zu 425 Opfern im Februar 2024 erhöhte […] First…
-
Smashing Security podcast #408: A gag order backfires, and a snail mail ransom demand
What happens when a healthcare giant’s legal threats ignite a Streisand Effect wildfire”¦ while a ransomware gang appears to ditch the dark web for postage stamps? First seen on grahamcluley.com Jump to article: grahamcluley.com/smashing-security-podcast-408/
-
360 Privacy Raises $36 Million for Digital Executive Protection Platform
360 Privacy has raised $36 million in equity investment to scour the surface and dark web for leaked PII and remove it. The post 360 Privacy Raises $36 Million for Digital Executive Protection Platform appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/360-privacy-raises-36-million-for-digital-executive-protection-platform/
-
What is Rootkit Detection and Prevention
The intricacy of cyberattacks is growing. Imagine a stealthy cyberattack that infiltrates your network, computers, etc, hides malicious software, and silently dismantles your defenses without detection. This is how the rootkit works. Another aspect that makes rootkits a serious problem is that they are now easily available on the dark web, once exclusive only to……
-
Email Phishing and Online Anonymity: Can You Completely Hide from Attackers on the Darknet?
Explore the challenges of online anonymity and email phishing. Learn how tools like VPNs and Tor enhance privacy but aren’t foolproof. Stay safe and anonymous online. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/email-phishing-and-online-anonymity-can-you-completely-hide-from-attackers-on-the-darknet/
-
Ransomware-Attacke auf Willms Fleisch
Der Lebensmittelproduzent Willms Fleisch wurde vermutlich von Hackern angegriffen.Willms zählt zu den größten Fleischproduzenten in Deutschland. Die Ransomware-Gruppe Safepay hat das Unternehmen nun auf ihre Opferliste im Darknet gesetzt. Die Hacker behaupten, zwei Terabyte Daten gestohlen zu haben. Um was für Informationen es sich dabei genau handelt, ist jedoch unklar. Der Lebensmittelhersteller hat den Angriff…
-
US-Behörden beschlagnahmen Webseite der russische Kryptobörse Garantex
Die Kryptobörse Garantex wurde lange von russischen Ransomware-Gangs, Darknet-Marktplatz-Nutzern und andere Cyberkriminellen zum Waschen von Kryptogeld benutzt. Der US-Geheimdienst hat die Domain der sanktionierten russischen Kryptowährungsbörse Garantex in Zusammenarbeit mit der Strafabteilung des Justizministeriums, dem FBI und Europol beschlagnahmt. Auf … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/07/us-behoerden-beschlagnahmen-webseite-der-russische-kryptoboerse-garantex/
-
U.S. Cracks Down on Nemesis Darknet Admin with New Treasury Sanctions
The U.S. Department of the Treasury has intensified its global campaign against darknet-facilitated drug trafficking by sanctioning Behrouz Parsarad, the Iran-based administrator of the notorious Nemesis Marketplace. The move, announced on March 5, 2025, follows a 2024 international law enforcement operation that dismantled the platform, which enabled over $30 million in illicit drug sales”, including…
-
US Sanctions Iranian Administrator of Nemesis Darknet Marketplace
Iranian national Behrouz Parsarad sanctioned for running Nemesis, a marketplace used for narcotics trafficking and cybercrime. The post US Sanctions Iranian Administrator of Nemesis Darknet Marketplace appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/us-sanctions-iranian-administrator-of-nemesis-darknet-marketplace/
-
Enhancing security with Microsoft’s expanded cloud logs
Nation-state-sponsored hacking stories are a big part of everyone’s favourite Hollywood movies”‰”, “‰that is, until it becomes a real-life story of our own compromised personal or corporate sensitive data ending up on the dark web or in hackers’ hands. In real life, cyber espionage groups’ activities trigger stringent security enforcement. First in the government sector,…
-
Treasury sanctions Iranian national behind defunct Nemesis darknet marketplace
The Iran-based administrator behind a darknet marketplace was sanctioned by the Treasury Department on Tuesday, one year after the platform was taken down in a law enforcement operation. First seen on therecord.media Jump to article: therecord.media/iran-national-sanctioned-nemesis-marketplace
-
Ransomware access playbook: What Black Basta’s leaked logs reveal
Tags: access, breach, credentials, cybercrime, dark-web, data, data-breach, extortion, group, login, malware, password, ransomware, service, software, theft, threat, toolFrom infostealer to ransomware: Infostealers are malware programs designed to scrape login information stored inside browser password stores and other applications. These threats are increasingly being offered as a service on cybercriminal forums, and according to a recent study, their prevalence has increased three-fold over the past year. The information stolen by such tools, known…
-
Practical Advice for Effective Threat Exposure Detection Across the Clear and Dark Web Enterprise Security Tech
First seen on scworld.com Jump to article: www.scworld.com/native/practical-advice-for-effective-threat-exposure-detection-across-the-clear-and-dark-web-enterprise-security-tech
-
‘Termite’ Gang Leaks Australian Fertility Clinic Records
Researchers: Ransomware Group Emerged Last Fall; Variant of Babuk Malware. A new ransomware gang, Termite, has started leaking on the dark web samples of sensitive data stolen in an attack on Australian fertility clinic Genea. A court has issued a restraining order in hopes of preventing the threat actor or others from further disseminating, using…
-
Man Jailed 24 Years for Running Dark Web CSAM Sites from Coffee Shop
Tags: dark-webLouis Donald Mendonsa, 62, was sentenced following a guilty plea for distributing child sexual abuse materials (CSAM) via… First seen on hackread.com Jump to article: hackread.com/man-jailed-ran-dark-web-csam-sites-from-coffee-shop/
-
Cyberattack on Australia’s Genea: Stolen Patient Data Hits the Dark Web
The Termite ransomware group has allegedly leaked sensitive patient data following the Genea cyberattack, targeting one of Australia’s leading fertility providers. On February 26, 2025, the Termite ransomware group claimed responsibility for breaching Genea Pty Ltd’s systems. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/genea-cyberattack/
-
5 things to know about ransomware threats in 2025
Tags: access, attack, authentication, awareness, backup, breach, ciso, cloud, control, credentials, cyber, dark-web, data, data-breach, defense, detection, encryption, exploit, extortion, finance, fraud, group, healthcare, identity, incident response, infrastructure, Internet, iot, law, leak, mfa, monitoring, network, password, ransom, ransomware, risk, scam, service, software, sophos, supply-chain, technology, threat, tool, update, vpn, vulnerability, zero-day2. Mid-size organizations are highly vulnerable: Industry data shows mid-size organizations remain highly vulnerable to ransomware attacks. “CISOs need to be aware that ransomware is no longer just targeting large companies, but now even mid-sized organizations are at risk. This awareness is crucial,” says Christiaan Beek, senior director, threat analytics, at Rapid7.Companies with annual revenue…
-
US indicts dark web credential fraudster
First seen on scworld.com Jump to article: www.scworld.com/brief/us-indicts-dark-web-credential-fraudster
-
Stürmer Maschinen von Ransomware-Attacke getroffen
Die Ransomware-Bande Lynx erpresst den Großhändler Stürmer Maschinen mit gestohlenen Daten.Die Ransomware-Bande Lynx hat den Maschinengroßhändler Stürmer Maschinen kürzlich auf ihre Opferliste gesetzt. Auf ihrer Leak-Seite im Darknet behaupten die Cyberkriminellen, einen Datensatz von 800 Gigabyte abgezogen zu haben. Um welche Daten es sich dabei genau handelt ist unklar. Informationen zur Lösegeldforderung und Frist gibt…
-
Michigan Man Indicted for Dark Web Credential Fraud
Michigan man indicted for dark web credential fraud, purchased 2,500 logins from Genesis Market First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/michigan-man-indicted-dark-web/
-
Deutscher IT-Dienstleister im Visier von Ransomware-Angreifern
Die Hackerbande Akira soll Daten von InSyst gestohlen haben.Der IT-Dienstleister InSyst wurde offenbar Ziel einer Ransomware-Attacke. Die Ransomware-Gruppe Akira fügte das Unternehmen kürzlich zu ihrer Opferliste im Darknet hinzu. Die Hacker behaupten, vertrauliche Daten wie NDAs, Führerscheine, Finanzdaten sowie Kontaktdaten von Mitarbeitern und Kunden erbeutet zu haben.Die Angreifer drohen damit, die gestohlenen Informationen zu veröffentlichen.…
-
Ransomware-Attacke auf Gesundheitsdienstleister
Die Ransomware-Gruppe Medusa will den britischen Gesundheitsdienstleister HCRG Care Group um mehr als 2.000 Daten erleichtert haben.Die Ransomware-Bande Medusa behauptet in einem Darknet-Post, mehr als 2.000 sensible Datensätze der HCRG Care Group erbeutet zu haben. Das Unternehmen zählt zu den größten unabhängigen Anbietern von Gesundheits- und Pflegedienstleistungen im Vereinigten Königreich und arbeitet eng mit dem…
-
AI is Making the Dark Web Even Darker
Dark web attacks have existed for years. What’s different now is the scale and sophistication that AI brings to them. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/ai-is-making-the-dark-web-even-darker/
-
Your Social Security Number is on the Dark Web: What Do You Do?
Tags: dark-webBest ways to keep your social security number off the dark web and actionable steps to take if your social security number is compromised. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/your-social-security-number-is-on-the-dark-web-what-do-you-do/
-
Password managers under increasing threat as infostealers triple and adapt
Tags: access, attack, authentication, automation, breach, ceo, cloud, credentials, crypto, cyber, cybercrime, cybersecurity, dark-web, data, data-breach, defense, email, encryption, exploit, finance, hacker, identity, intelligence, least-privilege, login, malicious, malware, mfa, password, phishing, ransomware, risk, service, switch, tactics, theft, threat, tool, vulnerability, zero-trustMalware-as-a-service infostealers: For example, RedLine Stealer is specifically designed to target and steal sensitive information, including credentials stored in web browsers and other applications. It is often distributed through phishing emails or by tricking prospective marks into visiting booby-trapped websites laced with malicious downloaders.Another threat comes from Lumma stealer, offered for sale as a malware-as-a-service,…