Cybercrime & Digital Threats

Few cybercrime groups throughout history have had as much disruptive power and lasting impact as the Lazarus Group. The group has had multiple operations over the years, most of which involve either disruption, sabotage, financial theft or espionage.

A recent campaign was found using social engineering methods to take advantage of the increasing hype and visibility of cryptocurrencies via a fictional cryptocurrency called SpriteCoin, which is used as a ransomware lure for unsuspecting users.

A new Satori variant was found hacking into Claymore mining rigs and changing configurations to mine Ethereum cryptocurrency.

We looked at BEC-related incidents over a span of nine months to see emerging and present trends from BEC incidents, examine the tools and techniques used by cybercriminals, and analyze the data to give us an overall picture of what BEC looks like today.

Cybercriminals are already taking advantage of the news surrounding Meltdown and Spectre. SmokeLoader malware was spotted spreading via a fake patch for the vulnerabilities .

In a recent incident, attackers targeted the Stellar Lumen (XLM) cryptocurrency by compromising the DNS server for BlackWallet.co, a web-based wallet application for XLM.

As Ethereum currently sells for over $1,200 per coin, a new ransomware variant that appears to be the first to accept the currency as ransom payment surfaces.

Security researchers discovered an installer for a Monero miner intended to transmit the cryptocurrency to Kim Il Sung University (KSU), North Korea. Meanwhile, a Reddit user found a Monero miner in the BlackBerry mobile site.

Apparel retailer Forever 21 disclosed its findings on the data breach it reported last November 2017, revealing signs of point-of-sale (PoS) malware and unauthorized network access into affected PoS devices.