Cybercrime Southeast Europe Newsletter No. 69
Dear Clients,
In recent months, alarming trends in cyber and crypto crime have been observed across the Western Balkans. Attacks are becoming more sophisticated, targeting individuals, companies, and even government institutions.
Key Trends:
- Infostealers and Malicious Software: Attacks exploiting pirated software and operating systems provide criminals with initial access to company, agency, and government networks.
- Local Ransomware Groups: These groups target everyone—from small businesses to industrial organizations and individuals—using cracked red teaming tools and purchased file-encryption software.
- Smishing and Vishing: In the past 30 days alone, a confirmed crypto theft amounted to €18,000 via SMS messages pretending to come from a crypto exchange.
- Online Extortion and False Alerts: Tactics seen previously in the USA are now emerging locally, including extortion and fake bomb threats targeting offices, schools, and other facilities.
- Banking and Delivery Fraud: Fake websites offering prizes or payment services for banks or delivery companies are used to defraud users, often exploiting the lack of company awareness and employee training.
- Classic Online Scams: Ads and marketplaces trick users into paying for fake services or products, such as “TV transfers” or sending gift cards for alleged services.
- Poor Network Resource Protection: Online cameras, servers, and IoT devices frequently lack proper security, making them easy targets for hackers.
- Hacktivism and Misuse of Surveillance Tools: Servers and profiles are being compromised, while applications like Pegasus/Cellebrite are misused against journalists and citizens, often outside legal frameworks.
- Social Media Attacks: Targeted to steal credentials and sell compromised profiles with large follower counts.
These developments demonstrate that security is an ongoing process, not a game of ego. Education, vigilance, and proactive protection remain the most effective defenses.
Kind regards,
Your DefendMe Team