For cybercriminals, information represents money, an access point, and also a tool for committing new crimes. This is why personal and sensitive or private data, such as full names, contact information, credit card numbers and banking credentials, health data, social media and service login credentials, among others, have become one of the most coveted targets for malicious actors. ESET, a leading international company in proactive threat detection, analyzes what cybercriminals do once they obtain stolen information.

Most common actions

Selling it on underground forums: One of the main benefits cybercriminals derive from stolen information is simply money. Personal data has significant value for the criminal ecosystem. They primarily sell it on underground forums and Dark Web marketplaces, where personal data, login credentials, banking and financial information, corporate passwords, and any other sensitive information are sought after by other cybercriminals for use in various illegal activities.

Other crimes

• Identity theft: The more information cybercriminals obtain about a person, the more tools they have to create a fake digital profile and thus scam their contacts or commit cybercrimes in their name. • Financial fraud: Certain personal data facilitates access to financial resources, allowing cybercriminals to obtain illicit gains. This can range from making purchases to applying for credit cards.
• Personalized phishing attacks: Stolen information allows cybercriminals to create much more credible and targeted phishing emails. Data such as the victim’s work email address or the company where they work can lend a false sense of authenticity to an email with malicious intent.
• Extortion of victims: Information is a very powerful tool that, in the wrong hands, can be used for extortion and blackmail. Cybercriminals often use it to pressure their victims, from a concrete threat to making confidential data public, selling it to competitors, or simply causing reputational damage. In most of these cases, their goal is to obtain money.
• Espionage and sabotage: In the business or government sector, a simple stolen password can be the gateway to internal networks, critical infrastructure, and even confidential information belonging to clients, suppliers, allies, or business partners—and that’s just the beginning.

In contrast to the points mentioned above, in these cases the objective is not monetary, but rather to spy undetected, accessing networks, emails, and internal communications, altering production or logistics processes, and even deleting, modifying, or corrupting key information.

In this context, it becomes essential to take concrete actions to protect sensitive and confidential data, whether personal, corporate, or institutional.

ESET Latin America shares recommendations to significantly reduce the risk of data being exposed or falling into the wrong hands

• Protect your information: avoid sharing personal data online.
• Use strong passwords: they should be robust and unique for each account.
• Activate two-factor authentication on every account that allows it.
• Keep both devices and software up to date.
• Have a robust and reliable security solution.
• Stay up-to-date on the latest cybersecurity news.

For other useful data and preventative information, visit https://www.eset.com/ve/and follow them on social media @eset_ve. Also on Instagram (@esetla) and Facebook (ESET).

Information and image provided by ESET and Comstat Rowland       

Follow our news on Google! For current, interesting, and accurate information, click here to see all the content on Bitfinance.news. You can also find us on X/Twitter and Instagram

La entrada Let’s reduce risks: How cybercriminals use stolen information apareció primero en Bitfinance.

Cryptocurrency scams increased during the first quarter of this year, exceeding $500 million.

The information comes from a new report from the cybersecurity company CertiK, where it details that the thefts through digital currencies occurred through exploits and hacks in related apps.

Certik points out that “January was the month with the most cybersecurity incidents. Of the 223 cases recorded, at least 78 occurred during said period, resulting in losses of more than USD 193 million.”

The ethereum ecosystem accounted for the majority of the thefts, for “some 132 incidents that resulted in the theft of USD $139 million during this first quarter.”

On the other hand, through the hack, funds were stolen from Ripple co-founder Chris Larsen, who a few weeks ago lost about USD 112 million in XRP tokens from his personal wallet.

The report from the cybersecurity company highlighted that during the month of March there were more than 30 attacks, where the most notable is the “exploit perpetrated against the Munchables gaming platform, which led to the theft of about USD $62.8 millions that were later returned.”

M.Pino

Source: diariobitcoin

(Reference image source: FlyD in Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Cryptocurrency scams increased between January and March apareció primero en Bitfinance.

The Yu-Gi-Oh! cards are expensive and criminals know it. Two men were recently arrested in Japan for a theft amounting to USD 33,000 in these entertainment cards.

Those involved in the incident are Sora Takashino and Kanta Sanmi, two Japanese men, who tried to steal the cards from the popular franchise.

This is an incident that occurred on March 13 in the town of Akihabara, Japan. As the events have been described, “one of the 22-year-old men entered the Fukufuku store”, specializing in collectible cards. “He asked to see an expensive letter outside the display case, and that’s when he tried to escape.”

Officers from Investigation Division 3 of the Tokyo Metropolitan Police Department foiled the criminal act and managed to arrest those involved in the attempted theft of one of the “rarest and most sought-after cards in the franchise: the Blue-Eyes White Dragon”, which was offered in Fukufuku in exchange for YSD 33,000.

The subject who tried to steal the card argued that he decided to commit the crime because he needed money to cover his basic and entertainment needs. His accomplice, who was waiting for him in a vehicle to escape from the scene, defended himself by saying that he did not know his friend’s intentions.

M.Pino

Source: levelup

(Reference image source: Erik Mclean en Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Two men arrested in Japan for trying to steal Yu-Gi-Oh! cards valued at more than USD 33,000 apareció primero en Bitfinance.

Some researchers and cybersecurity experts have linked LastPass security flaws reported last year to the theft of more than $35 million in cryptocurrency.

This online password manager reported at the end of August 2022 about a bug that an external actor took advantage of to access the platform’s development environment, at which time he indicated that this had not affected the data saved by other users. .

Later, in December, the company detailed that the attacker did use that vulnerability to steal part of the code and technical information and access information stored in its cloud storage service.

Now, cybersecurity experts have gathered evidence showing that data recorded in some of the then-exploited LastPass password vaults may have been used in several malicious attacks to steal cryptocurrency.

Specifically, this evidence details that the cyberattackers would have stolen more than 35 million dollars in cryptocurrencies, an operation that would have affected more than 150 users. Specifically, between two and five robberies have been carried out per month since December 2022.

This has been detailed by cybersecurity experts such as Brian Krebs, who has compiled this research in a post on his blog, as well as other specialists in the cryptocurrency sector, such as the product manager of the crypto wallet company MetaMask, Taylor Monahan, who has published his findings through X (Twitter).

According to him, the main people affected by these attacks would be experienced cryptocurrency investors who are aware of the security measures necessary in this sector. This suggests that the victims were not attacked through their email account or mobile phone, the most common means in these cases.

Source: dpa

(Referential image source: Aleksi Räisä, Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Theft of more than $35 million in crypto is linked to LastPass apareció primero en Bitfinance.

The Instagram account of Bored Ape Yacht Club, a community of non-fungible tokens (NFT) owned by Yuga Labs, was the victim of a cyber attack that has resulted in the theft of several assets valued at 2.8 million dollars.

Yuga Labs, parent company of Bored Ape Yacht Club, is investigating a “phishing” attack that left the Instagram profile of this NFT collection missing several of its pieces, as it acknowledged through its official Twitter account.

The attacker used the technique of phishing to, after hacking access to the Bored Ape Yacht Club account on Instagram, publish an ad about a fake Airdrop, a technique according to which companies send newly minted tokens for free to boost their commitment to some cause.

This promised access to an upcoming Bored Ape project by asking users to connect their MetaMask wallets. Once done, the site stole their digital assets, which were eventually transferred to the attacker’s wallet.

The account, which has already been identified, had a total of 91 NFTs, of which only some were from Bored Ape, according to specialized media The Block. Zerion, a DeFi aggregator for cryptocurrency investors, estimates the total value of the stolen NFTs to be $2.8 million based on the minimum price of the respective collections.

Source: dpa

La entrada NFT collection valued at $ 2.8 million stolen apareció primero en Bitfinance.

Supreme Court of the United Kingdom imposed an injunction on Binance for the search of 2.6 million dollars in digital assets stolen from the Fetch.ai account, which was violated by a hacker, who transferred the assets to another exchange address for a very low value. The hacker was able to evade the withdrawal prohibitions established by the company to its users for this type of transaction.

The exchange was responsible for informing the user of the operation and being able to validate that it was an irregularity. The procedure used by the hacker to violate the account and carry out the operation, circumventing the security protocols for these movements, is still unknown. However, previous research points to phishing.

Binance is obliged, by the court order, “to track the stolen assets and block them if they are still on its platform.” The company assured that it made the complaint as a standard requirement to initiate investigations.

For his part, the user confirmed that they have days working together with the exchange house and the city authorities to try to identify the hacker and rescue the funds.

The situation of the exchange in the United Kingdom is very particular due to the ruling issued, at the end of June by the FCA, which prohibits Binance from continuing to operate within that country. However, this ban “affects Binance Markets Limited, allowing investors to continue trading from Binance.com.“

In 2021, transactions with digital assets have increased notably and the global and local market has developed considerably, which translates into more users and volume of movements within the ecosystem, an this creates more opportunities for hackers to carry out robberies and thefts.

M. Rodríguez

Source: Bitcoin.es

La entrada Binance forced to investigate digital asset theft apareció primero en Bitfinance.