Weekly Update: 22 February 2023
A weekly report looking at major incidents and developments in the financial services sector. Topics include data breaches, threat actors and TTPs, fraud and anti-money laundering, and the adoption and regulation of cryptocurrency.
Editor’s Pick
A selection of Top Stories picked by our editors.
Fifth of Brits Have Fallen Victim to Online ScammersInfosecurity Today – Feb 21 2023 10:15
Koreans lost nearly W1.7t to phishing scams over past 5 years: dataThe Korea Heald – Feb 21 2023 05:40
Technical Analysis of Rhadamanthys Obfuscation TechniquesZscaler Research – Feb 21 2023 00:00
Decoding the Inner Workings of DarkCloud StealerCyble Blog – Feb 20 2023 12:04
Stealc: a copycat of Vidar and Raccoon infostealers gaining in popularity – Part 1Sekoia Blog – Feb 20 2023 08:22
Microsoft Exchange ProxyShell flaws exploited in new crypto-mining attackBleepingComputer.com – Feb 16 2023 21:03
Multilingual Executive Impersonation AttacksAbnormal Security Blog – Feb 16 2023 14:51
Crypto Scam Revenue Dropped 46% in 2022, While Blockchain Analysis Finds Links Between What Appear to be Distinct ScamsChainalysis Blog – Feb 16 2023 13:00
Threat Actors & TTPs
Discussion and analyses of significant campaigns, incidents, and associated actors in the banking sector.
Cybercrime, the Remcos bank-themed campaign changes templateDifesa & Sicurezza – Feb 22 2023 06:40
Cybercrime, BluStealer is back with a campaign on Purchase OrderDifesa & Sicurezza – Feb 22 2023 06:35
Fake Ethereum Denver website linked to notorious phishing walletCointelegraph – Feb 20 2023 14:25
mBank. Scammers impersonate mBank, send a fake e-mailPolishNews.co.uk – Feb 20 2023 06:24
eSentire Threat Intelligence Malware Analysis: Icarus Stealer #icarusstealerSeifreed – Twitter – Feb 18 2023 05:03
The Many Faces of Qakbot Malware: A Look at Its Diverse Distribution MethodsCyble Blog – Feb 17 2023 11:09
PhishPal: How PayPal Became a Hackers’ HavenAvanan – Blog – Feb 16 2023 14:00
Nvidia users attacked by malware hidden in fake ads for driversUKDaily.News – Feb 15 2023 19:58
Magecart Attack Disguised as Google Tag ManagerThe Akamai Blog – Feb 15 2023 14:39
Leaks & Breaches
Leaks and breaches, discussion and actions.
LockBit #ransomware group added La Segunda Seguros CLSG, an Insurance company based in #Argentina, to their victim list. They claim to have access to Personal data of customers including passports, info about the insured property, etc. #DarkWeb #DeepWeb #cyberrisk #DataBreachFalconFeedsio – Twitter – Feb 22 2023 05:11
RT @SOSIntel: A threat actor on breached has shared a link to an alleged VeraCrypt archive from what is believed to be a UK Financial Organisation with over $100m in revenue. They have yet to share any passwords or further information.ximad – Twitter – Feb 21 2023 21:56
Social Engineering – A Coinbase Case StudyDinosn – Twitter – Feb 18 2023 17:40
DexibleApp aggregator hacked for $2M via ‘selfSwap’ functionCointelegraph – Feb 17 2023 21:10
Zachxbt reports phishing scammer “Loyalist” has stolen more than $4 million since early 2022Web3 Is Going Just Great – Feb 17 2023 18:15
BlockTower Capital Loses $1.5M in DeFi Market Aggregator Dexible Exploit: Blockchain DataCoinDesk – Feb 17 2023 17:29
Platypus Finance hacked for $9M on AvalancheCryptoSlate – Feb 17 2023 09:10
Mysterious Team Bangladesh, hackers group claims to have targeted banks in Israel. They also claims that their current targets are #netherlands & #Israel in a recent telegram post. #cyberattack #cyberrisk #ThreatIntelligence #DDoS #DDoSattack #cybersecurityFalconFeedsio – Twitter – Feb 17 2023 07:15
#AnonymousSudan, hacking group claims to have targeted Electronic payment companies in #Sweden. They also threatens to conduct strong attacks on coming Sunday. #cyberattack #cyberrisk #ThreatIntelligence #DDoS #DDoSattackFalconFeedsio – Twitter – Feb 17 2023 06:41
Norway finds a way to recover crypto North Korea pinched in Axie heistThe Register – Security – Feb 17 2023 05:15
Fraud & Anti-Money Laundering
Incidents and actions related to fraud and anti-money laundering.
Almost 25% Of New Crypto In 2022 Could Have Been ‘Pump And Dumps’, Study FindsBitcoinist – Feb 18 2023 09:04
UK’s FCA to clamp down on digital currency ATMs operating without permitsCoinGeek – Feb 18 2023 08:10
Europol busts ‘CEO fraud’ gang that stole €38M in a few daysBleeping Computer – Feb 17 2023 18:47
Two men appear in court in connection with R26m Standard Bank fraudNews24 – Feb 17 2023 08:30
Ayrshire man scams £7m from top US bitcoin broker as fraud cases soar in ScotlandSTV.tv – Feb 17 2023 06:48
California regulator launches complaint-based crypto scam trackerCointelegraph – Feb 17 2023 04:15
SEC Charges Terraform and CEO Do Kwon with Defrauding Investors in Crypto SchemesUS Securities and Exchange Commission – Press Releases – Feb 16 2023 19:11
CFTC Charges California-based Company and Its CEO with Fraudulent Solicitation and Misappropriation of Digital Asset CommoditiesCFTC.gov – Feb 16 2023 18:49
Former Beulah Bank President Sentenced to Two Counts of Bank FraudJusticeGov – Press Release – Feb 16 2023 05:00
Chinese crypto scams targeting Filipinos to work for them: officialHindustan Times – Feb 15 2023 03:56
Cryptosphere – Adoption & Regulation
Adoption and regulation of cryptocurrency in the financial sector.
Hong Kong to crypto exchanges: get a securities broker’s licence, or go homeTheRegister.com – Feb 21 2023 04:11
EU calls for fast-track crypto capital rules for banksReuters Business & Finance – Feb 20 2023 13:28
Bank of Japan to start new test of digital currency in AprilJapan Times – Feb 18 2023 05:39
South Korea goes after digital currency staking services following Kraken’s debacle: reportCoinGeek – Feb 18 2023 04:31
Oman to establish regulatory framework for virtual assetsCointelegraph – Feb 17 2023 07:26
Global Standard Setters Will Team Up to Tackle DeFi Regulation: FSBCoinDesk – Feb 16 2023 09:00
Europe Is Working on a Digital Currency to Avoid a ‘Sandwich Position’ Between the U.S. and ChinaNBC Los Angeles – Feb 16 2023 00:36
Revolut poised for clash with Treasury over high-risk crypto tradesYahoo! Finance UK and Ireland – Feb 15 2023 19:00
ECB Advises Banks Comply With Conservative Cap on Bitcoin ExposureYahoo! Finance – Feb 15 2023 14:19
Warren pledges to reintroduce crypto anti-money laundering billTheBlockCrypto.com – Feb 15 2023 00:03
The content in this report was compiled by the use of our award-winning intelligence product Silobreaker Online. Silobreaker cannot guarantee the accuracy, completeness, integrity or quality of any content in this report and no responsibility is accepted by Silobreaker in respect of such content. Readers must determine for themselves what reliance they should place on the compiled content in the report.
