exfiltration – PossibleThreat Articles

Security Sophos

Everything Everywhere All At Once: The 2023 Active Adversary Report for Business Leaders

April 25, 2023 0 Comments active adversary playbook, coinminer, conti, data breach, exfiltration, extortion, featured, Incident Response, loader, lockbit, Ransomware, sophos x-ops, threat research, web shells

Credit to Author: Angela Gunn| Date: Tue, 25 Apr 2023 10:00:03 +0000

A deep dive into over 150 incident-response cases reveals both attackers and defenders picking up the pace

Security Sophos

COVID-bit: the wireless spyware trick with an unfortunate name

December 13, 2022 0 Comments airgap, ben-gurion university, data loss, exfiltration, Privacy

Credit to Author: Paul Ducklin| Date: Tue, 13 Dec 2022 17:58:30 +0000

It’s not the switching that’s the problem, it’s the switching of the switching!

MalwareBytes Security

Raccoon Stealer returns with a new bag of tricks

June 30, 2022 0 Comments Cybercrime, data theft, exfiltration, malware, malware-as-a-service, raccoon stealer, raccoon stealer 2.0

Credit to Author: Christopher Boyd| Date: Thu, 30 Jun 2022 13:33:23 +0000

Infamous malware Raccoon Stealer is reportedly back in business after a break.

The post Raccoon Stealer returns with a new bag of tricks appeared first on Malwarebytes Labs.

Security Sophos

Poisoned Python and PHP packages purloin passwords for AWS access

May 28, 2022 0 Comments exfiltration, malware, php, python, secops, supply chain, vulnerability, XDR

Credit to Author: Paul Ducklin| Date: Wed, 25 May 2022 18:04:17 +0000

More supply chain trouble – this time with clear examples so you can learn how to spot this stuff yourself.

QuickHeal Security

A sloppy click can exfiltrate your important data!

February 3, 2020 0 Comments 90daydemopurplecdr2019-analysis-software.exe, cdo library, data breach, email, exfiltration, gjs.tmp, info-stealer, information stealer, jumpshare, keylogger, malware, mshtinr.dll, mshtinr.exe, online privacy, phishing, port 465, Privacy, Security, smtps protocol, Spam, stp media, stpmedia.exe, totallyanonymous.com’

Credit to Author: Anant Pulgam| Date: Mon, 03 Feb 2020 09:17:12 +0000

Phishing email still remains one of the top malware propagation medium. Recently, we came across an interesting phishing email containing couple of Jumpshare links pointing to malicious components. Jumpshare is an online file sharing service and often cyber criminals abuse these kind of file sharing services. Upon clicking on one of the links in…

MalwareBytes Security

No man’s land: How a Magecart group is running a web skimming operation from a war zone

July 19, 2019 0 Comments bulletproof, Cybercrime, exfiltration, gate, hosting, IDN, luhansk, Magecart, magento, skimmers, sniffers, swipers, ukraine

Credit to Author: Threat Intelligence Team| Date: Thu, 18 Jul 2019 15:00:13 +0000

We take a look into a Magecart group’s web skimming activities, which are relying on a bulletproof-friendly host in battle-scarred Luhansk, Ukraine to provide cover for their activities, safe from the reach of law enforcement and the security community.

Categories:

Cybercrime

Tags: bulletproof exfiltration gate hosting IDN luhansk Magecart magento skimmers sniffers swipers ukraine

(Read more…)

The post No man’s land: How a Magecart group is running a web skimming operation from a war zone appeared first on Malwarebytes Labs.