Weekly Update: 15 February 2023
A weekly report looking at major incidents and developments in the financial services sector. Topics include data breaches, threat actors and TTPs, fraud and anti-money laundering, and the adoption and regulation of cryptocurrency.
Editor’s Pick
A selection of Top Stories picked by our editors.
Despite its prevalence, Magecart wasn’t the only banking malware to stand out this time: LATAM banking trojans had a strong end of the year; the detections of #Grandoreiro, #Casbaneiro, #Mekotio, and several others spiked significantly in T3. 3/4ESETResearch – Twitter – Feb 15 2023 13:46
EU countries told to step up defence against state hackersReuters Business & Finance – Feb 14 2023 14:19
New MortalKombat ransomware and Laplas Clipper malware threats deployed in financially motivated campaignTalos Intelligence Blog – Feb 14 2023 13:00
January 2023’s Most Wanted Malware: Infostealer Vidar Makes a Return while Earth Bogle njRAT Malware Campaign StrikesCheck Point Blog – Feb 13 2023 11:00
OneKey says it’s fixed the flaw that got its hardware wallet hacked in 1 secondCointelegraph – Feb 13 2023 03:09
Ponzi Schemes Surged in 2022. Many Involved Crypto.Barrons – Feb 10 2023 21:06
Top Malware Trends of January: Cofense Phishing Defense Center (PDC)Cofense – Feb 10 2023 15:00
Malware Monthly – January 2023Sonatype – Feb 10 2023 14:00
Threat Actors & TTPs
Discussion and analyses of significant campaigns, incidents, and associated actors in the banking sector.
Check Point CloudGuard Spectral detects malicious crypto-mining packages on NPM – The leading registry for JavaScript Open-Source packagesCheck Point Blog – Feb 14 2023 11:00
Phylum researchers have discovered >451 unique malicious packages targeting popular PyPI packages as part of a new wave of a crypto wallet address replacement attack in which the actor uses Python infected packages to write a malicious JavaScript extensionvirusbtn – Twitter – Feb 14 2023 10:11
Analysis of YouTube USDT crypto scamsWithSecure Labs – Feb 14 2023 08:17
Cybercrime, massive global Guloader campaignDifesa & Sicurezza – Feb 14 2023 06:40
Lazarus hackers use new mixer to hide $100 million in stolen cryptoBleeping Computer – Feb 13 2023 16:14
Fool’s Gold: dissecting a fake gold market pig-butchering scamSophos – News – Feb 13 2023 11:00
SlowMist: Analysis of Monkey Drainer NFT Phishing GroupMedium.com – Feb 10 2023 07:52
Bogus URL Shorteners Redirect Thousands of Hacked Sites in AdSense Fraud CampaignSucuri Blog – Feb 09 2023 22:27
Enigma Stealer Targets Cryptocurrency Industry with Fake JobsTrend Micro – Feb 09 2023 00:00
Cybercrime, new Lokibot campaign via HSBC payment adviceDifesa & Sicurezza – Feb 08 2023 06:40
Leaks & Breaches
Leaks and breaches, discussion and actions.
NDPB probes banks, telcos, loan sharks over alleged data breachesThe Guardian Nigeria – Feb 14 2023 03:26
Credit Suisse Says Rogue Staffer Took Personnel, Salary DataBloomberg – Feb 14 2023 00:12
Wormhole Bridge Exploiter Supplies $46M to Crypto Lending Platform Maker, Buys Wrapped EtherCoinDesk – Feb 13 2023 11:11
DForce DeFi Protocol Hacked For $3.6 MillionBlockonomi – Feb 13 2023 10:24
Gang hacks into ATM in Delhi, uses malware to siphon off Rs 5 lakhTimes of India – Feb 12 2023 23:29
PCPD issues enforcement notice to Institute of Bankers upon data leakMarketing-interactive.com – Feb 10 2023 02:26
“Now, hundreds of debts have been forgiven. Hundreds of rejections have been accepted:” Claims by hacker of Chile’s General Treasury of the Republic.Securityblog – Twitter – Feb 09 2023 18:13
Fraud & Anti-Money Laundering
Incidents and actions related to fraud and anti-money laundering.
Spain, U.S. dismantle phishing gang that stole $5 million in a yearBleepingComputer.com – Feb 13 2023 17:44
Russian banks and exports set to be hit in new EU sanctionsPolitico.eu – Feb 13 2023 10:39
Proposed SMS registry could block scams that cost Australians over $1m a dayTheAge.com – Feb 12 2023 13:01
Rise in scams prompts consumer warning from financial institutionsIrish Examiner – Feb 10 2023 15:47
Barclays probed by UK regulator over anti-money laundering systemsFT.com – Financials – Feb 10 2023 05:00
How Darknet Markets and Fraud Shops Fought for Users In the Wake of Hydra’s CollapseChainalysis Blog – Feb 09 2023 12:55
Crypto firm fined over €460,000 by FIAU over anti-money laundering breachesTimes of Malta – Feb 08 2023 17:34
Banks receiving APP scam payments pushed to step up standardsFinextra Research Security channel – Feb 08 2023 11:00
Man Convicted for Multimillion-Dollar COVID-19 Relief FraudUnited States Department of Justice – Feb 08 2023 05:00
How US lawyers and bankers aided powerful Haitian tycoons now sanctioned over corruption by Canada ICIJ.org – Feb 08 2023 02:24
Cryptosphere – Adoption & Regulation
Adoption and regulation of cryptocurrency in the financial sector.
Southeast Asia’s Largest Bank DBS Unveils Plan to Expand Crypto Services in Hong KongBitcoin News – Feb 14 2023 23:00
Stablecoins are under threat and this new type of crypto could replace them, says JPMorganYahoo! Finance – Feb 13 2023 18:22
CBDC Rises In The Emirates: Why The UAE Central Bank Is Interested In Issuing A Digital CurrencyBitcoinist.com – Feb 13 2023 12:27
Wirex Becomes Global Partner of Visa and Makes Strong Moves in APACPR Newswire: Financial Services – Feb 13 2023 10:00
Restrictive Crypto Rules for EU Banks Confirmed in Published Legal DraftCoinDesk – Feb 13 2023 09:43
Federal Reserve Governor Reinforces US Regulators’ Preference for Keeping Crypto Apart From BanksCoinDesk – Feb 10 2023 19:04
Banks under pressure from U.S. authorities to cut ties with crypto firmsCOINTELEGRAPH.COM – Feb 09 2023 20:18
Bank of America: Innovation to Expand Decentralized Finance Functionality Over TimeCoinDesk – Feb 09 2023 13:10
Investors “absolutely interested” in digital assets: BNY MellonReuters – Feb 08 2023 16:45
Laos starts digital currency tests with Japan blockchain companyTheCoinRepublic.com – Feb 08 2023 02:27
The content in this report was compiled by the use of our award-winning intelligence product Silobreaker Online. Silobreaker cannot guarantee the accuracy, completeness, integrity or quality of any content in this report and no responsibility is accepted by Silobreaker in respect of such content. Readers must determine for themselves what reliance they should place on the compiled content in the report.
