Fake DarkSide gang demands 100 BTC from companies

By Waqas The original DarkSide ransomware gang had quit operating last month after the attack on Colonial Pipeline. This is a post from HackRead.com Read the original post: Fake DarkSide gang demands 100 BTC from companies...

Faux ‘DarkSide’ Gang Takes Aim at Global Energy, Food Sectors

Several organizations in the oil, gas and food sectors have received threatening emails from cybercriminals posing as DarkSide – the ransomware gang behind the Colonial Pipeline hack. According to researchers at Trend Micro, threat actors are taking advantage of the notoriety around the pipeline...

‘Fancy Lazarus’ Cyberattackers Ramp up Ransom DDoSes

A distributed denial-of-service DDoS extortion group has blazed back on the cybercrime scene, this time under the name of “Fancy Lazarus.” It’s been launching a series of new attacks that may or may not have any teeth, researchers said. The new name is a tongue-in-cheek combination of the...

Beef Supplier JBS Paid Hackers $11 Million Ransom After Cyberattack

Meat processing company JBS on Wednesday confirmed it paid extortionists $11 million in bitcoins to regain access to its systems following a destructive ransomware attack late last month. "In consultation with internal IT professionals and third-party cybersecurity experts, the company made the...

U.S. Recovers $2.3 Million Ransom Paid to Colonial Pipeline Hackers

In a major blow, the U.S. Department of Justice on Monday said it has recovered 63.7 bitcoins currently valued at $2.3 million paid by Colonial Pipeline to the DarkSide ransomware extortionists on May 8, pursuant to a seizure warrant that was authorized by the Northern District of California. The...

Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang

The U.S. Department of Justice said today it has recovered $2.3 million worth of Bitcoin that Colonial Pipeline paid to ransomware extortionists last month. The funds had been sent to DarkSide, a ransomware-as-a-service syndicate that disbanded after a May 14 farewell message to affiliates saying...

bitcoin-core:autofile: Crash in FuzzedFileProvider::seek

Detailed Report: https://oss-fuzz.com/testcase?key=6016172087705600 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: autofile Job Type: libfuzzerasani386bitcoin-core Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffe007 Crash State: FuzzedFileProvider::seek IOdowrite...

bitcoin-core:crypto: Use-of-uninitialized-value in ReadBE32

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=5672930884321280 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: crypto Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

bitcoin-core:coins_view: Use-of-uninitialized-value in MoneyRange

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=5484813229359104 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: coinsview Job Type: libfuzzermsanbitcoin-core Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

The Rapid Resurgence of DDoS Extortion (That Didn't Take Long)

Just when we thought DDoS extortion was fading into the rearview mirror, it's time to circle up the trucks again gas tanks full. Starting last week and rapidly accelerating, we began seeing in our data and hearing firsthand from organizations about a new wave of extortion activity -- new Bitcoin...

WordPress Bitcoin Payments - Blockonomics < 3.3 - Reflected Cross-Site Scripting (XSS)

The plugin does not properly sanitise its filter action when viewing Orders before outputting it back in an attribute, leading to a reflected Cross-Site Scripting vulnerability. v alert/XSS/...

WordPress Bitcoin Payments - Blockonomics < 3.3 - Reflected Cross-Site Scripting (XSS)

The plugin does not properly sanitise its filter action when viewing Orders before outputting it back in an attribute, leading to a reflected Cross-Site Scripting vulnerability. PoC v...

bitcoin-core:system: Heap-buffer-overflow in UniValue::write

Project: https://github.com/bitcoin/bitcoin.git Detailed Report: https://oss-fuzz.com/testcase?key=6009146823540736 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: system Job Type: libfuzzerasanbitcoin-core Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

DarkSide Ransomware Gang Extorted $90 Million from Several Victims in 9 Months

DarkSide, the hacker group behind the Colonial Pipeline ransomware attack earlier this month, received $90 million in bitcoin payments following a nine-month ransomware spree, making it one of the most profitable cybercrime groups. "In total, just over $90 million in bitcoin ransom payments were...

Bizarro: a banking Trojan full of nasty tricks

Researchers have discovered a new banking Trojan that has been found targeting customers of European and South American banks. They have dubbed the new Trojan Bizarro. How does Bizarro spread? The Bizarro malware spreads via Microsoft Installer MSI packages. Identified sources so far have been sp...

Bizarro Banking Trojan Sports Sophisticated Backdoor

A never-before-documented Brazilian banking trojan, dubbed Bizarro, is targeting customers of 70 banks scattered throughout Europe and South America, researchers said. According to an analysis from Kaspersky released Monday, Bizarro is a mobile malware, aimed at capturing online-banking credentia...

CVE-2021-3195

bitcoin is vulnerable to privilege escalation. An attacker is able to exploit the vulnerability by creating a new file in an arbitrary directory...

U.S. Pipeline Ransomware Attackers Go Dark After Servers and Bitcoin Are Seized

Just as Colonial Pipeline restored all of its systems to operational status in the wake of a crippling ransomware incident a week ago, DarkSide, the cybercrime syndicate behind the attack, claimed it lost control of its infrastructure, citing a law enforcement seizure. All the dark web sites...

DarkSide ransomware call it quits after Bitcoin, servers are seized

By Habiba Rashid DarkSide Ransomware gang was behind the recent Colonial Pipeline cyberattack. This is a post from HackRead.com Read the original post: DarkSide ransomware call it quits after Bitcoin, servers are seized...

DarkSide Ransomware Gang Quits After Servers, Bitcoin Stash Seized

The DarkSide ransomware affiliate program responsible for the six-day outage at Colonial Pipeline this week that led to fuel shortages and price spikes across the country is running for the hills. The crime gang announced it was closing up shop after its servers were seized and someone drained th...