Starlink

Security

<p style="text-align: justify">You can also read this news on COINTURK NEWS: <a href="https://en.coin-turk.com/blackberry-identifies-cyber-threat-targeting-mexican-crypto-exchanges-and-banks/" data-wpel-link="internal">Blackberry Identifies Cyber Threat Targeting Mexican Crypto Exchanges and Banks</a><br></p>
<p class="p1" style="text-align: justify">The <a href="https://newslinker.co/category/technology/" data-wpel-link="exclude">technology</a> giant Blackberry, once dominant in the mobile phone market, has detected an attacker targeting numerous Mexico-based cryptocurrency exchanges and banks through its research and intelligence branch, issuing a warning about this issue. Blackberry’s report identified an attack that uses an open-source remote access tool called AllaKore RAT to try to steal sensitive user information from banks and crypto trading services.</p> 
<h2 class="p1" style="text-align: justify" id="details-on-the-blackberry-report">Details on the Blackberry Report</h2> 
<p class="p1" style="text-align: justify">The threat in question aims to install itself on computers and databases operated by intermediary companies, often evading employee suspicion by hiding behind official naming schemes and links. The report states:</p> 
<blockquote> 
 <p class="p1" style="text-align: justify">“AllaKore RAT has been significantly modified to allow threat actors to send stolen banking credentials and unique authentication information back to a command and control (C2) server for financial fraud purposes.”</p> 
</blockquote> 
<p class="p1" style="text-align: justify">The threat model indicates that attackers primarily target large companies with gross revenues over $100 million. Blackberry noted that such companies report directly to the Mexican Social Security Institute. Most of the attacks were traced back to Mexican Starlink IP addresses. Furthermore, considering the use of Spanish instructions in the modified RAT payload, Blackberry concluded that the threat actor is likely based in Latin America.</p> 
<p class="p1" style="text-align: justify"><img loading="lazy" loading="lazy" decoding="async" class="aligncenter wp-image-307185 size-full" src="https://coin-turk.com/wp-content/uploads/2024/01/blackberry.jpg" alt="" width="1039" height="993"></p> 
<h2 class="p1" style="text-align: justify" id="phishing-fraud-and-the-crypto-market">Phishing Fraud and the Crypto Market</h2> 
<p class="p1" style="text-align: justify">More recent versions of AllaKore RAT follow a more complex setup process, where the software is delivered to targets in a Microsoft software installer file. The software only operates after confirming the victim’s current location as Mexico.</p> 
<p class="p1" style="text-align: justify">However, the scope of the threat is not limited to major banks and crypto trade services. The same method is also used to target large Mexico-based companies from other business sectors, including retail, agriculture, public sector, manufacturing, transportation, commercial services, and capital goods.</p> 
<p class="p1" style="text-align: justify">Cyberattacks carried out through simple phishing continue to increase in success rate along with funds theft. On January 20th, the contact information of approximately 66,000 users of hardware wallet manufacturer Trezor was leaked in a security breach. Trezor issued the following statement to warn its users:</p> 
<blockquote> 
 <p class="p1" style="text-align: justify">“We want to emphasize that no user funds were put at risk due to this incident. Your Trezor device is as secure today as it was yesterday.”</p> 
</blockquote> 
<h5><span style="font-weight:bold;font-size:16px">The post first appeared on COINTURK NEWS: </span> <a href="https://en.coin-turk.com/blackberry-identifies-cyber-threat-targeting-mexican-crypto-exchanges-and-banks/" data-wpel-link="internal">Blackberry Identifies Cyber Threat Targeting Mexican Crypto Exchanges and Banks</a></h5>

Blackberry Identifies Cyber Threat Targeting Mexican Crypto Exchanges and Banks

Table of Contents

COINTURK NEWS

Other articles published on Jan 25, 2024

NextEra Energy’s (NEE) Q4 Surge: Balancing Expectations with Renewable Ambitions

Impending Expiration of $5.7 Billion in Bitcoin and Ethereum Options

Nigeria’s Crypto Race Eyes Top Spot in Africa

Crypto Bank Sygnum Raises $40 Million, Is Crypto Funding Back?

SEC Chair Gensler Tempers Enthusiasm Over Ethereum ETF Applications

Aptos Integrates Multiple Crypto Analytics Providers to Enhance On-Chain Data Capabilities

Join our free newsletter for daily crypto updates!