30 September 2021

This alert was created automatically by our award-winning intelligence product Silobreaker Online. Story selection is determined by an algorithm and based on a set of queries initially set by a Silobreaker user. Contact us here for more information.

FinServ Cyber
New ZE Loader Targets Online Banking UsersSecurityblog – Twitter – Sep 28 2021 08:43New ZE Loader Targets Online Banking Users hxxps://securityintelligence[.]com/posts/new-ze-loader-targets-online-banking/
Newly Discovered ZE Loader Targets Online Banking UsersE Hacking News – Sep 27 2021 14:18IBM Security researchers have discovered a new form of overlay malware targeting online banking users. Dubbed ZE Loader, is a malicious Windows application that attempts to obtain financial data from victims by establishing a back door connection….
Hackers Targeting Brazil’s PIX Payment System to Drain Users’ Bank AccountsTHN : The Hacker News – Sep 29 2021 10:21Two newly discovered malicious Android applications on Google Play Store have been used to target users of Brazil’s instant payment ecosystem in a likely attempt to lure victims into fraudulently transferring their entire account balances into…
PixStealer: a new wave of Android banking Trojans abusing Accessibility ServicesCheckPoint – Research – Sep 29 2021 09:54Research by: Israel Wernik, Bohdan Melnykov Introduction The COVID-19 pandemic has significantly accelerated digital transformation across all industry sectors. For instance, the rapid shift towards digital banking has required the banking industry to…
BrandPost: Three Surefire Ways to Boost the Digital Banking ExperienceCSO Magazine – Sep 27 2021 19:28The year 2020 disrupted just about every industry, including retail banking. Locked down at home, consumers were abruptly forced to do all their banking over the internet. The sudden transition profoundly impacted banks and created unprecedented…
At VB2021 #vblocalhost Eric Loui & Joshua Reynolds discuss one of the most important cybercrime groups, CARBON SPIDER (aka FIN7, Carbanak), looking at its transition from targeting POS systems for credit card data to indiscriminate ransomware operations.virusbtn – Twitter – Sep 29 2021 16:40At VB2021 #vblocalhost Eric Loui & Joshua Reynolds discuss one of the most important cybercrime groups, CARBON SPIDER (aka FIN7, Carbanak), looking at its transition from targeting POS systems for credit card data to indiscriminate ransomware…
WARNING — Two new #Android malware distributed via #Google Play Store has been targeting Brazil’s new PIX Instant Payment system to drain users’ bank accounts. Read details: #infosec #cybersecurityTheHackersNews – Twitter – Sep 29 2021 10:24WARNING — Two new #Android malware distributed via #Google Play Store has been targeting Brazil’s new PIX Instant Payment system to drain users’ bank accounts.

Read details:…

Hackers Targeting Brazil’s PIX Payment System to Drain Users’ Bank Accounts via @TheHackersNewsMetacurity – Twitter – Sep 29 2021 21:30Hackers Targeting Brazil's PIX Payment System to Drain Users' Bank Accounts hxxps://thehackernews[.]com/2021/09/hackers-targeting-brazils-pix-payment.html via @TheHackersNews
New Malware-As-A-Service Targets Gamers’ Accounts And Banking InfoForbes.com – Sep 28 2021 14:53Share to Facebook Share to Twitter Share to Linkedin Just as Microsoft and Google offer subscription-based productivity software and cloud file storage, cybercriminals offer pay-as-you-go malware. One such service that was discovered recently is taking…
The Hacker News – Cybersecurity News and Analysis: PIX Payment SystemInfoSecHotSpot – Twitter – Sep 29 2021 10:59The Hacker News – Cybersecurity News and Analysis: PIX Payment System hxxp://twib[.]in/l/RLM8MqMAj8MG hxxps://twitter[.]com/InfoSecHotSpot/status/1443168464768745480/photo/1
Flubot phone scams ‘explode’ with record-breaking losses9News.com.au – Sep 27 2021 06:36The levels of Australians falling victim to phone scams is "exploding" as cybercriminals capitalise on locked-down residents. New data from the ACCC’s Scamwatch shows that in 2021 alone Australians have lost a record-breaking $211 million to scams,…
Zloader Campaigns at a Glance 9/29/21 7:00 AMTrend Micro – Sep 29 2021 13:09View infographic: Zloader Campaigns at a Glance The ZBOT (aka Zeus) trojan has been one of the most prolific and enduring malware families of the past 20 years. After its first appearance in 2006, its source code was leaked in 2011, leading to a…
Scam Alert: Flubot Malware Hits New ZealandScoop NZ – Politics – Sep 29 2021 01:01The New Zealand telecommunications sector is warning customers of a new scam text message alert that is showing up in large numbers in New Zealand. Pretending to be an alert from a courier company, the text asks users to click on a link or download…
FluBot, The Mobile Phone Spreading Around The Globe, Infecting Phones And Stealing DataScoop NZ – Sci-tech – Sep 29 2021 06:07The threats people face online continue to change and evolve. Researchers at NortonLifeLock have been tracking one such threat, FluBot, since it first began its spread across Europe in April 2021. This mobile malware infects and steals data from the…
FluBot text scam victims told there may be alternative to ‘a factory reset’stuff.co.nz – Sep 30 2021 00:22Phone users who were tricked into downloading a malware app after clicking on malicious links in a deluge of scam texts may be able to remove it without wiping their phones, Vodafone says. Spark, Vodafone and 2degrees warned on Wednesday that…
VNC malware used by Kimsuky group (TinyNuke, TightVNC) – Korean reportingReddit – BlueTeamSec – Sep 28 2021 19:14submitted by /u/digicat [link] [comments]
ERMAC, a new banking Trojan that borrows the code from Cerberus malwareSecurity Affairs – Sep 28 2021 06:27ERMAC is a new Android banking Trojan that can steal financial data from 378 banking and wallet apps. Researchers from Threatfabric found in July a new Android banking trojan dubbed ERMAC that is almost fully based on the popular banking trojan
TA544 threat actors hit Italian firms with Ursnif banking trojanHackRead – Sep 29 2021 14:35By Waqas A new malware campaign from a group called TA544 is targeting organizations in Italy with Ursnif banking trojan – Here's how it works. This is a post from HackRead[.]com Read the original post: TA544 threat actors hit Italian firms with Ursnif…
This is well worth building detections for if you have the capability – very easy to allowlist the domains in 2nd pic and find CobaltStrike, Trickbot etc in the remaining traffic.GossiTheDog – Twitter – Sep 28 2021 23:38This is well worth building detections for if you have the capability – very easy to allowlist the domains in 2nd pic and find CobaltStrike, Trickbot etc in the remaining traffic.
ThreatFabric writes about ERMAC, a new Android banking trojan based on Cerberus and operated by BlackRock actor(s).virusbtn – Twitter – Sep 27 2021 11:42ThreatFabric writes about ERMAC, a new Android banking trojan based on Cerberus and operated by BlackRock actor(s). hxxps://www[.]threatfabric[.]com/blogs/ermac-another-cerberus-reborn.html…
FinServ Data Breaches
Effective Oct. 1, 2021: Connecticut Expands Data Breach Notification StatuteData Breaches – Data Privacy Monitor – Sep 27 2021 20:21On June 16, 2021, the Connecticut General Assembly adopted an expanded version of Connecticut’s data breach notification statute (2021 CT H.B. 5310 (NS)). Through this expansion, Connecticut’s data breach notification statute will be updated,…
Fraud & Money Laundering
N26 fined €4.25 million over AML failingsFinextra Research news – Sep 29 2021 15:40German digital bank N26 has been fined €4.25 million by BaFin over lax money laundering controls.
FMA Steps Up Enforcement Of Anti-money Laundering BreachesScoop NZ – Business – Sep 29 2021 19:57The Financial Markets Authority (FMA) – Te Mana Tātai Hokohoko has escalated its enforcement approach to non-compliance with New Zealand’s anti-money laundering and countering financing of terrorism (AML/CFT) rules, according to a new report. …
NICE Actimize Augments Its Anti-Money Laundering Solutions With Real-time AI Entity Resolution for More Effective Financial Crime DetectionBusiness Wire Professional Services News – Sep 28 2021 11:30HOBOKEN, N.J.–(BUSINESS WIRE)– #Actimize–Securing a single, accurate record of customer information has become increasingly important as anti-money laundering programs shift from transactional analysis to a more focused, customer-centric analysis….
Human Trafficking a Serious Money Laundering Concern for Financial InstitutionsBusiness Wire Technology News – Sep 27 2021 07:00LONDON–(BUSINESS WIRE)– #AML–Human trafficking is now one of the biggest concerns for compliance professionals across the globe, according to the latest annual anti-money laundering study from BAE Systems: The State of Anti-Money Laundering 2021….
Nov 3 management of former Batu Maung rep’s money laundering caseBernama – Sep 28 2021 00:00BUTTERWORTH, Sept 28  –  The Sessions Court today fixed Nov 3 for case management of 164 money laundering charges involving RM20.22 million faced by former Batu Maung assemblyman Datuk Mansor Musa. Judge Ahmad Azahari Abd Hamid set the date after the…
Banks trial emergency hotline for APP fraudFinextra Research Headlines blog – Sep 28 2021 13:11UK banks are to establish an emergency hotline to protect customers from APP fraudsters posing as bank staff.
U.S. sues Wells Fargo, says it fraudulently overcharged customersNasdaq – Sep 27 2021 17:27NEW YORK, Sept 27 (Reuters) – The U.S. government on Monday sued Wells Fargo & Co WFC.N, accusing the bank of fraudulently overcharging hundreds of commercial customers who used its foreign exchange services. The civil fraud action was filed in the…
BRI seeks greater public vigil to avoid digital banking fraudsAntara News – Sep 28 2021 12:04State-run Bank Rakyat Indonesia (BRI) has called on the public to exercise greater caution in their use of the digital world to avoid falling prey to website frauds or getting hoodwinked by fake links. BRI Corporate Secretary …
Signifyd Partners With Capital One to Deliver Leading-Edge Fraud Protection and Drive Ecommerce Revenue to New HeightsBusiness Wire Technology News – Sep 27 2021 13:00SAN JOSE, Calif.–(BUSINESS WIRE)– #authorization–Signifyd Partners With Capital One to Deliver Leading-Edge Fraud Protection and Drive Ecommerce Revenue to New Heights
Hong Kong’s special inspector to seize Next Digital’s financial records in its fraud probe, source saysSouth China Morning Post – Sep 28 2021 03:10The Eastern Magistrate Court granted a search warrant for the inspector Clement Chan to enter Next Digital’s offices in Tseung Kwan O to seize the financial documents Chan is due to report the results of his investigations within six months

Although Silobreaker has relied on what it regards as reliable sources while compiling the content herein, Silobreaker cannot guarantee the accuracy, completeness, integrity or quality of such content and no responsibility is accepted by Silobreaker in respect of such content. Readers must determine for themselves what reliance they should place on the compiled content herein.

Silobreaker Financial Services Threat Alert

Sign up to receive strategic intelligence on the biggest threats facing the Financial Services industry.

Silobreaker
This website uses cookies.
See our privacy policy at www.silobreaker.com/legal