cybercrime

$700 cybercrime software turns Raspberry Pi into an evasive fraud tool

by

March 26, 2024 at 04:45PM Cybercriminals are selling GEOBOX, a custom Raspberry Pi software, on Telegram for $80/month or $700/lifetime in cryptocurrency. The tool, discovered by Resecurity, enables anonymous cyberattacks using mini-computers, complicating tracking and investigation. GEOBOX provides fraud and anonymization capabilities, including GPS spoofing, network setting emulation, anti-fraud tools, routing through proxies, and user-friendly … Read more

Researchers Discover 40,000-Strong EOL Router, IoT Botnet 

by

March 26, 2024 at 02:42PM Lumen Technologies’ Black Lotus Labs discovered a 40,000-strong botnet comprised of end-of-life routers and IoT devices, used by a cybercriminal group to power the Faceless proxy service. The botnet, in operation since 2014, has grown to 40,000 bots from 88 countries. Researchers urge network defenders to watch for attacks on … Read more

Free VPN apps on Google Play turned Android phones into proxies

by

March 26, 2024 at 12:40PM Multiple free VPN apps on Google Play were found incorporating a malicious software development kit, transforming Android devices into residential proxies for potential cybercrime and shopping bots. These apps, originally promoting as VPN software, utilized the Proxylib SDK to convert devices into proxies without users’ knowledge. Google has taken action … Read more

Chinese State-Sponsored Hackers Charged, Sanctions Levied by US

by

March 25, 2024 at 05:30PM Seven Chinese nationals have been charged by the US and the UK for their involvement in the activities of threat group APT31. Based on the meeting notes, the key takeaways are: 1. The US and the UK have jointly charged seven Chinese nationals for operating as part of threat group … Read more

German Police Seize ‘Nemesis Market’ in Major International Darknet Raid

by

March 24, 2024 at 01:33AM German authorities seized the digital infrastructure of Nemesis Market, an underground marketplace selling narcotics, stolen data, and cybercrime services. The operation, conducted with support from the U.S. and Lithuania, recovered €94,000 in cryptocurrency assets. Investigations are ongoing, but no arrests have been made. This follows recent law enforcement actions against … Read more

German Authorities Shut Down Online Marketplace for Drugs, Data and Cybercrime Services

by

March 22, 2024 at 11:00PM German authorities dismantled a major online marketplace for drugs, cybercrime services, and fraudulently obtained credit card data. The Nemesis Market platform’s server infrastructure and 94,000 euros in cryptocurrency were seized in Germany and Lithuania. The platform operated on the darknet and had over 150,000 user accounts and 1,100 seller accounts. … Read more

Darknet marketplace Nemesis Market seized by German police

by

March 22, 2024 at 12:19PM German police seized infrastructure for the Nemesis Market cybercrime marketplace in Germany and Lithuania, disrupting the site’s operation. The platform allowed illegal transactions, except for child abuse material, contract killings, weapons, and Fentanyl-based substances. Investigations began in October 2022, involving multiple agencies. Recent seizures of similar darknet marketplaces by German … Read more

It’s 2024 and North Korea’s Kimsuky gang is exploiting Windows Help files

by

March 21, 2024 at 01:39AM Kimsuky cyber crime gang, also known as Black Banshee, Thallium and APT 43, is employing new tactics to conduct their operations, particularly targeting South Korea. Rapid7 suspects their approach involves distributing malicious files, including CHM, ISO, VHD, ZIP, and RAR, and utilizing innovative techniques to execute arbitrary commands and harvest … Read more

Serial extortionist of medical facilities pleads guilty to cybercrime charges

by

March 20, 2024 at 10:41AM Robert Purbeck, a cyberattacker and extortionist of a medical center, pleaded guilty to federal computer fraud and abuse charges in the US. Using aliases “Lifelock” and “Studmaster,” he stole personal data from over 132,000 people and targeted 18 organizations, including medical clinics, for ransom. He is due to pay $1 … Read more

New BunnyLoader Malware Variant Surfaces with Modular Attack Features

by

March 20, 2024 at 06:24AM Cybersecurity researchers have identified the advanced BunnyLoader 3.0 malware, capable of stealing information and cryptocurrency, while delivering additional malware to victims. The malware, developed by Player, has seen frequent updates aimed at evading detection and expanding its functionalities. It is part of the evolving landscape of malware-as-a-service. Based on the … Read more