Operation Endgame 2: 15 Millionen E-Mail-Adressen und 43 Millionen Passwörter | Security https://www.heise.de/news/Operation-Endgame-2-15-Millionen-E-Mail-Adressen-und-43-Millionen-Passwoerter-10396199.html #HaveIBeenPwned #Malware #Ransomware #Hacking #CyberCrime #Bumblebee #Latrodectus #Qakbot #DanaBot #HijackLoader #Warmcookie #Trickbot #Prolock #Doppelpaymer #REvil #Conti #BlackBasta #Cactus #OperationEndgame2

Operation Endgame 2.0: 20 Haftbefehle, Hunderte Server außer Gefecht gesetzt | Security https://www.heise.de/news/Operation-Endgame-2-0-20-Haftbefehle-Hunderte-Server-ausser-Gefecht-gesetzt-10394215.html #OperationEndgame #OperationEndgame2 #Malware #Ranswomware #Hacking #CyberCrime #Bumblebee #Latrodectus #Qakbot #DanaBot #HijackLoader #Warmcookie #Trickbot #Prolock #Doppelpaymer #REvil #Conti #BlackBasta #Cactus

🔥 Operation Endgame is BACK! This time targeting #BumbleBee, #Latrodectus, #DanaBot, #WarmCookie, #Qakbot and #Trickbot!

Once again this is a HUGE win, with a truly international effort! 💪

As with phase one of #OperationEndgame, Spamhaus are providing remediation support - those affected will be contacted in due course with steps to take.

For more information, read our write-up here:
👉 https://www.spamhaus.org/resource-hub/malware/botnets-disrupted-worldwide-operation-endgame-is-back/

U.S. Trades Cybercriminals to Russia in Prisoner Swap

https://krebsonsecurity.com/2024/08/u-s-trades-cybercriminals-to-russia-in-prisoner-swap/

#Russia'sWaronUkraine #Ne'er-Do-WellNews #VladislavKlyushin #AlexanderVinnik #EvanGershkovich #AlsuKurmasheva #MaximMarchenko #GermanMoyzhes #RomanSeleznev #VadimKrasikov #VladimirPutin #IvanErmakov #Ransomware #PaulWhelan #trickbot #Mt.Gox #BTC-e

U.S. Trades 5 Cybercriminals to Russia in Prisoner Swap - Twenty-four prisoners were freed today in an international prisoner swap between R... https://krebsonsecurity.com/2024/08/u-s-trades-5-cybercriminals-to-russia-in-prisoner-swap/ #russiaswaronukraine #vladislavklyushin #neer-do-wellnews #alexandervinnik #evangershkovich #alsukurmasheva #maximmarchenko #germanmoyzhes #romanseleznev #vadimkrasikov #vladimirputin #ivanermakov #ransomware #paulwhelan #trickbot #mt.gox #btc-e

#Europol blockt rund 600 in kriminellen Aktivitäten gefundene IPs und Domains | Security https://www.heise.de/news/Europol-Operation-Morpheus-Rund-600-IPs-und-Domains-hops-genommen-9789103.html #CobaltStrike #Conti #Trickbot #Ryuk #RAT

「 #ユーロポール 、 #IcedID 、 #TrickBot 、その他のマルウェアに関連した100台以上のサーバーを #シャットダウン 」： The Hacker News

「ユーロポールは木曜日、 #Operation #Endgame というコード名で行われる法執行機関の連携活動の一環として、IcedID、 #SystemB C、 #PikaBo t、 #SmokeLoader 、 #Bumblebee 、TrickBotなどのいくつかのマルウェアローダー操作に関連するインフラストラクチャを停止したと発表した 。
この措置は5月27日から5月29日までの間に行われ、 #アルメニア 、 #オランダ 、 #ポルトガル の16か所にわたる捜索の結果、世界中で100台以上のサーバーが解体され、アルメニアで1人、ウクライナで3人の計4人が #逮捕 された。 、そして #ウクライナ 。 」

戦禍のウクライナでも、ややこしいことをしている奴がいる。

https://thehackernews.com/2024/05/europol-dismantles-100-servers-linked.html

#prattohome #TheHackerNews

Today we celebrate a major cybersecurity victory. 👏 Operation Endgame, a global law enforcement effort supported by insights from experts at Proofpoint and other industry vendors, resulted in:

• The disruption of major botnets
• Four arrests
• Over 100 servers taken down across 10 countries
• Over 2,000 domains brought under the control of law enforcement
• Illegal assets frozen

Proofpoint’s mission is to provide the best human-centric protection for our customers against advanced threats. Whenever possible and appropriate to do so, Proofpoint uses its team’s knowledge and skills to help protect a wider audience against widespread malware threats.

For #OperationEndgame, Proofpoint threat researchers lent their expertise in reverse engineering malware, botnet infrastructure, and identifying patterns in how the threat actors set up their servers to help authorities understand the malware and safely remediate the bot clients.

Proofpoint’s unmatched threat telemetry and researcher knowledge played a crucial role in the operation, providing key insights in identifying the new botnets that are most likely to grow and become the dominant threats affecting the most number of people around the world.

More information on the takedown and Proofpoint’s involvement can be found in our blog: https://www.proofpoint.com/us/blog/threat-insight/major-botnets-disrupted-global-law-enforcement-takedown.

#IcedID #SystemBC #Pikabot #SmokeLoader #Bumblebee #Trickbot #Europol

‘Operation Endgame’ Hits Malware Delivery Platforms

https://krebsonsecurity.com/2024/05/operation-endgame-hits-malware-delivery-platforms/

#Ne'er-Do-WellNews #OperationEndgame #TheComingStorm #MattBurgess #Smokeloader #Ransomware #trickbot #Europol #LockBit #IcedID #911S5

‘Operation Endgame’ Hits Malware Delivery Platforms - Law enforcement agencies in the United States and Europe today announced Operation... https://krebsonsecurity.com/2024/05/operation-endgame-hits-malware-delivery-platforms/ #neer-do-wellnews #operationendgame #thecomingstorm #mattburgess #smokeloader #ransomware #trickbot #europol #lockbit #icedid #911s5

📬 Operation Endgame ein voller Erfolg: Großoffensive gegen Malware-Familien
#Malware #Rechtssachen #BKA #Bumblebee #DrBenjaminKrause #MartinaLink #Smokeloader #Trickbot https://sc.tarnkappe.info/6f8f6a

Ach guck an, keine Festnahmen in Russland, keine #Vorratsdatenspeicherung nötig gewesen:

BKA: Bisher größter Schlag gegen weltweite Cyberkriminalität

#Trickbot #Pikabot #Ransomware
https://www.br.de/nachrichten/deutschland-welt/bka-bisher-groesster-schlag-gegen-weltweite-cyberkriminalitaet,UEEG6Di

Trickbot malware developer jailed for five years https://www.bitdefender.com/blog/hotforsecurity/trickbot-malware-developer-jailed-for-five-years/ #Ransomware #ransomware #Guestblog #Law&order #TrickBot #Malware

Trickbot malware developer jailed for five years - A 40-year-old Russian man has been sentenced to five years and four months in prison by a... https://www.bitdefender.com/blog/hotforsecurity/trickbot-malware-developer-jailed-for-five-years/ #ransomware #guestblog #lawℴ #trickbot #malware

A #TrickBot #malware developer sentenced to 64 months in prison
https://securityaffairs.com/158194/cyber-crime/trickbot-dev-sentenced-64-months-jail.html
#securityaffairs #hacking #Russia

Russian hacker pleads guilty to Trickbot malware conspiracy - A 40-year-old Russian man faces a lengthy prison sentence in the United States after plea... https://www.bitdefender.com/blog/hotforsecurity/russian-hacker-pleads-guilty-to-trickbot-malware-conspiracy/ #guestblog #lawℴ #trickbot #malware

Russian hacker pleads guilty to Trickbot malware conspiracy https://www.bitdefender.com/blog/hotforsecurity/russian-hacker-pleads-guilty-to-trickbot-malware-conspiracy/ #Guestblog #Law&order #TrickBot #Malware

A developer of TrickBot has pleaded guilty to developing malware used in many attacks. he Trickbot malware has been used in attacks against hospitals, companies and individuals worldwide, and has led to stolen personal info and stolen funds from victim bank accounts. The developer is facing a maximum of 36 years in prison. It is good to see someone being held accountable, but unfortunately It is a constant cat and mouse game.

#cybersecurity #law #trickbot

https://www.bleepingcomputer.com/news/security/trickbot-malware-dev-pleads-guilty-faces-35-years-in-prison/

The exact same protocol, but without RC4 encryption, was also reverse engineered by Vitali Kremez (RIP 💜) in his ”Let’s Learn: Trickbot Socks5 Backconnect Module In Detail” blog post from 2017.
#TrickBot #TeamSpy #Socks5Systemz
https://vk-intel.org/2017/11/21/lets-learn-trickbot-socks5-backconnect-module-in-detail/

We just published our Netskope #Cloud and #Threat Report focused on Top Adversary Tactics and Techniques. Some highlights:

- #Spearphishing links and attachments are the top initial access techniques.
- User execution is the top execution technique
- Adversaries are favoring the use of HTTP and HTTPS for C2 connections
- The majority of adversary activity comes from criminal adversaries, with the most activity attributable to Wizard Spider, the Russian group responsible for creating the #TrickBot malware.
Finance and healthcare have the highest percentage of activity attributable to geopolitical adversary groups

https://www.netskope.com/netskope-threat-labs/cloud-threat-report/top-adversary-tactics-and-techniques

#cloudsecurity #cybersecurity