#cybercrime-marketplace
#cybercrime-marketplace
[ follow ]
#cybersecurity #malware #north-korea #cybercrime #data-breach #ransomware #cryptocurrency #ai-security #dark-web
#open-source
Information security
fromSilicon Canals
9 hours agoA single maintainer, a fake company, and a three-hour window: inside the Axios supply chain hijack - Silicon Canals
A single maintainer's vulnerability led to a significant security breach in a widely used JavaScript library, exposing thousands of systems to potential credential theft.
Information security
fromSilicon Canals
9 hours agoA single maintainer, a fake company, and a three-hour window: inside the Axios supply chain hijack - Silicon Canals
A single maintainer's vulnerability led to a significant security breach in a widely used JavaScript library, exposing thousands of systems to potential credential theft.
#cybersecurity
Information security
fromSilicon Canals
2 hours agoOne maintainer, one compromised laptop: How North Korean hackers hijacked the Axios open source project - Silicon Canals
North Korean hackers compromised the Axios HTTP library by socially engineering its maintainer, publishing malicious versions that exposed sensitive data.
Cryptocurrency
fromFortune
17 hours agoA quantum threat to Bitcoin has some asking the unthinkable: Is it time to freeze old wallets belonging to Satoshi Nakamoto? | Fortune
Quantum computing poses a significant threat to Bitcoin wallets, particularly those of Satoshi Nakamoto, potentially allowing hackers to access them by 2029.
#ai-security
Privacy professionals
fromWIRED
3 weeks agoIf You Don't Have One, I Recommend a Free Dark Web Monitoring Service
Dark web monitoring services track compromised data across public hacker forums and databases to alert users when their personal information appears in breaches, though most breached data is found on the clear web rather than the dark web itself.
Privacy professionals
fromComputerworld
3 weeks agoCyber criminals too are working from home... your home
The FBI warns that cybercriminals use residential proxies to mask illegal activities by hijacking IoT devices, smartphones, and routers, threatening both consumers and enterprises, particularly older devices.
fromwww.independent.co.uk
2 months agoHow your entire identity could be sold for 30 on the dark web
British identity packages, including an ID scan, a selfie, and a dossier of personal data, can be purchased by criminals on the dark web for as little as 30, new research suggests. As identity theft continues to rise, experts have discovered the sale of national identity documents, driving licences, credit card details and 2,000 UK frequent traveller passports. The information can be exploited in multiple ways and used to apply for credit cards, mortgages, car loans, or to open bank accounts.
UK news
Information security
fromnews.bitcoin.com
6 days agoChainalysis Deploys AI Agents to Counter Criminal Use of Artificial Intelligence in Crypto
Chainalysis introduces AI agents to enhance fraud detection and compliance without requiring deep technical expertise, ensuring data quality and human oversight.
Information security
fromTheregister
3 weeks agoInterpol sinkholes 45,000 IPs linked to global cybercrime
Interpol arrested 94 cybercriminals across multiple countries during Operation Synergia III, seizing 212 devices and sinkholing over 45,000 malicious IP addresses linked to phishing, romance scams, and credit card fraud.
fromTheregister
4 weeks agoCrims hit EV charger firm ELECQ, steal customer contact data
In a notice sent to customers on Monday and seen by The Register, the EV charging outfit said that it detected "unusual activity" on its AWS cloud platform on March 7 and quickly discovered that attackers had launched a ransomware attack against parts of its infrastructure. According to the message, some databases were both encrypted and copied during the intrusion, meaning that the crooks likely walked off with user information before the company pulled the plug.
Information security
fromTechzine Global
1 month agoHow phishing service Tycoon 2FA went under
Tycoon 2FA, a Phishing-as-a-Service (PhaaS) platform, enabled thousands of cybercriminals to steal login credentials and session tokens. Even accounts secured with MFA could be compromised via a single email. The service had been active since at least 2023 and quickly grew to become one of the most widely used phishing platforms in the world.
Information security
fromMashable
1 month agoHackers use this tool to bypass fraud detection and weaponize Google ads
The service, referred to as 1Campaign, provides hackers with a one-stop-shop for running malicious ads and enabling fraud "at scale," a recent report by cybersecurity company Varonis uncovered. Using just a single dashboard, hackers can cloak malicious content from security researchers, ad platform reviewers, and automated scanners - who instead see a benign white page - and target general users with phishing or scam attempts.
Information security
fromDataBreaches.Net
2 months agoShinyHunters group opens new dark web leak site, claims responsibility for OKTA vishing campaign - DataBreaches.Net
BIG - ShinyHunters confirmed to me that they are behind the recent Okta vishing campaign and have published alleged data from three major victims ( Crunchbase, SoundCloud, and Betterment) on their new blog, stating more are coming. 🔽
Information security
[ Load more ]