Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
|
2021-06-02 10:00:03 |
US schools land IBM grants to protect themselves against ransomware (lien direct) |
The grants are worth a total of $3 million. |
Ransomware
|
|
|
|
2021-06-01 10:43:00 |
Asian cybercrime takedown leads to intercept of $83 million in financial theft (lien direct) |
Police intercepted funds that were on their way to the accounts of financial fraudsters. |
|
|
|
|
2021-06-01 09:53:44 |
SEC charges US promoters for marketing alleged BitConnect cryptocurrency Ponzi scheme (lien direct) |
Promoters of a suspected, high-profile exit scam are now in the hot seat. |
|
|
|
|
2021-05-28 09:42:00 |
Researchers find four new malware tools created to exploit Pulse Secure VPN appliances (lien direct) |
There are now at least 16 malware families designed to compromise Pulse Secure VPN products. |
Malware
|
|
|
|
2021-05-27 10:00:00 |
Fake human rights organization, UN branding used to target Uyghurs in ongoing cyberattacks (lien direct) |
The ethnic group is being targeted in spy campaigns under the guise of the United Nations. |
|
|
|
|
2021-05-26 10:52:40 |
Bluetooth bugs open the door for attackers to impersonate devices (lien direct) |
Devices supporting the Bluetooth Core and Mesh specifications are impacted. |
|
|
|
|
2021-05-26 09:37:00 |
Russian national jailed for running stolen data, hijacked account seller platform deer.io (lien direct) |
Kirill Victorovich Firsov was arrested by the FBI last year. |
|
|
|
|
2021-05-25 14:00:03 |
Not as complex as we thought: Cyberattacks on operational technology are on the rise (lien direct) |
Common techniques are setting a low bar for attacks on control processes. Sometimes, attackers have no idea what the system is used for. |
|
|
|
|
2021-05-25 11:00:00 |
Iranian hacking group Agrius pretends to encrypt files for a ransom, destroys it instead (lien direct) |
The relatively new threat group has been connected to attacks against Israeli targets. |
Threat
|
|
|
|
2021-05-25 10:00:03 |
Russian dark web marketplace Hydra cryptocurrency transactions reached $1.37bn in 2020 (lien direct) |
The market is used to trade everything from drugs to stolen data. |
|
|
|
|
2021-05-25 09:07:31 |
Encrochat drug dealer betrayed by his love of cheese (lien direct) |
Police were able to arrest him by using a shared photo of Stilton as a starting point. |
|
|
|
|
2021-05-24 09:36:50 |
FBI identifies 16 Conti ransomware attacks striking US healthcare, first responders (lien direct) |
One of Conti's latest victims is Ireland's health service. |
Ransomware
|
|
|
|
2021-05-24 08:22:42 |
FBI intelligence analyst indicted for theft of cybersecurity, counterterrorism documents (lien direct) |
The former agent held top-level clearance privileges. |
|
|
|
|
2021-05-21 10:28:19 |
Irish court issues injunction against Conti hackers to stop health service data exposure, sale (lien direct) |
The group has warned that the data will be leaked or sold if a $20 million ransom demand is not met. |
|
|
|
|
2021-05-21 09:16:56 |
US insurance giant CNA Financial paid $40 million ransom to regain control of systems: report (lien direct) |
CNA Financial reportedly paid up a few weeks after the attack in March. |
|
|
|
|
2021-05-20 13:00:00 |
Fraudsters employ Amazon \'vishing\' attacks in fake order scams (lien direct) |
Case studies highlight how scam artists are using voice messages to dupe their victims into handing over credentials or cash. |
Studies
|
|
|
|
2021-05-20 11:12:21 |
Android apps exposed data of millions of users through cloud authentication failures (lien direct) |
Malicious apps are not the only security problem on our handsets: misconfiguration can also put us at risk. |
|
|
|
|
2021-05-20 11:04:06 |
Colonial Pipeline CEO: Paying DarkSide ransom was the \'right thing to do for the country\' (lien direct) |
The chief executive has confirmed the payment of a $4.4 million ransom. |
|
|
|
|
2021-05-19 11:06:52 |
Bizarro banking Trojan surges across Europe (lien direct) |
Operators have so far targeted customers of at least 70 banks across Europe and South America. |
|
|
|
|
2021-05-19 10:20:22 |
Amazon extends ban on police using Rekognition facial recognition technology, no end in sight (lien direct) |
The existing moratorium will continue as Congress has not tackled concerns raised by the use of the technology in criminal cases. |
|
|
|
|
2021-05-19 10:00:03 |
Cybercriminals scanned for vulnerable Microsoft Exchange servers within five minutes of news going public (lien direct) |
Research suggests the cheap hire of cloud services has allowed cyberattackers to quickly pick out targets. |
|
|
|
|
2021-05-19 09:00:03 |
This is how the Cobalt Strike penetration testing tool is being abused by cybercriminals (lien direct) |
Cobalt Strike is a popular tool with cybersecurity professionals. Unfortunately, it's also utilized by threat actors. |
Tool
Threat
|
|
|
|
2021-05-18 16:48:02 |
Antivirus software, explained (lien direct) |
Antivirus software isn't enough to protect our devices and accounts any longer, but it still provides a key layer of defense. |
|
|
|
|
2021-05-18 08:00:15 |
FBI receives record level of complaints for online scams, investment fraud (lien direct) |
Victims are set to lose the most when they fall for romance scams and business email compromise. |
|
|
|
|
2021-05-18 06:55:00 |
Android stalkerware detection rates surged over 2020 (lien direct) |
Not only are the apps potentially unethical, but vendors also aren't interested in fixing core security issues found within them. |
|
|
|
|
2021-05-14 11:45:00 |
Toshiba unit struck by DarkSide ransomware group (lien direct) |
Following Colonial Pipeline, a DarkSide affiliate has claimed another victim. |
Ransomware
|
|
|
|
2021-05-14 10:10:24 |
Cloudflare wants to kill the CAPTCHA (lien direct) |
Security keys could not only bolster authentication but may also remove one of the most annoying aspects of the internet. |
|
|
|
|
2021-05-14 08:42:46 |
(Déjà vu) Rapid7 source code, alert data accessed in Codecov supply chain attack (lien direct) |
The breached source code subset was used for internal tooling. |
|
|
|
|
2021-05-13 19:00:04 |
HelpSystems expands email, cloud security portfolio with acquisition of Agari, Beyond Security (lien direct) |
The vendor is targeting areas ripe for growth in the cybersecurity field. |
|
|
|
|
2021-05-13 14:47:00 |
Colonial Pipeline paid close to $5 million in ransomware blackmail payment (lien direct) |
The payment was reportedly made soon after the attack began. It wasn't enough to stop the disruption. |
Ransomware
|
|
★★★★★
|
|
2021-05-13 09:35:47 |
Fake Android, iOS apps promise lucrative investments while stealing your money (lien direct) |
Hundreds of malicious cryptocurrency, stock, and banking apps have been discovered by researchers. |
|
|
|
|
2021-05-12 11:00:00 |
Researchers track down five affiliates of DarkSide ransomware service (lien direct) |
Customers of the RaaS can deploy malware as they see fit and dictate the content of leaks. |
Ransomware
Malware
|
|
|
|
2021-05-12 08:44:22 |
FBI, CISA publish alert on DarkSide ransomware (lien direct) |
The advisory deals with ransomware-as-a-service, thrust into the spotlight by the Colonial Pipeline cyberattack. |
Ransomware
|
|
|
|
2021-05-11 10:46:00 |
(Déjà vu) Colonial Pipeline attack: Everything you need to know (lien direct) |
Updated: DarkSide has claimed responsibility for the catastrophic ransomware outbreak. |
Ransomware
|
|
|
|
2021-05-11 10:46:00 |
Everything you need to know about the Colonial Pipeline ransomware attack (lien direct) |
DarkSide has claimed responsibility for the catastrophic ransomware outbreak. |
Ransomware
|
|
|
|
2021-05-11 08:14:27 |
GitHub shifts away from passwords with security key support for SSH Git operations (lien direct) |
Support has been added to bolster defense against account compromise. |
|
|
|
|
2021-05-10 18:00:03 |
DarkSide explained: the ransomware group responsible for Colonial Pipeline cyberattack (lien direct) |
The group's existence is tied to a murky web of shorted stocks, criminality, and failed attempts to appear as Robin Hood. |
Ransomware
|
|
|
|
2021-05-10 10:29:06 |
Amazon seized, destroyed two million fake products sent to warehouses in 2020 (lien direct) |
Over 10 billion suspect listings were also wiped out during the year in a counterfeit crackdown. |
|
|
|
|
2021-05-10 09:24:33 |
Lemon Duck hacking group adopts Microsoft Exchange Server vulnerabilities in new attacks (lien direct) |
Fake TLDs are now also being created to maximize the potential success of attacks. |
|
|
|
|
2021-05-10 08:14:49 |
Group pleads guilty to running bulletproof hosting service for criminal gangs, malware payloads (lien direct) |
Zeus, SpyEye, Citadel, and the Blackhole exploit kit were among the strains stored through the host. |
Malware
|
|
|
|
2021-05-07 11:25:54 |
New Moriya rootkit stealthily backdoors Windows systems (lien direct) |
Unknown attackers may have been quietly exploiting networks in attacks reaching back to 2018. |
|
|
|
|
2021-05-07 10:16:05 |
IRS secures order to serve Kraken with customer data request on cryptocurrency traders (lien direct) |
Users who have conducted $20,000 in transactions are now on the tax office's radar. |
|
|
|
|
2021-05-07 09:15:44 |
Google teams up with Stop Scams to tackle financial fraud in the UK (lien direct) |
Companies are stepping up to tackle scams on and offline. |
|
|
|
|
2021-05-06 13:00:06 |
Data leak implicates over 200,000 people in Amazon fake product review scam (lien direct) |
Names, email addresses, and PayPal details were exposed and left online. |
|
|
|
|
2021-05-06 10:30:03 |
Ryuk ransomware finds foothold in bio research institute through student who wouldn\'t pay for software (lien direct) |
The incident started with a student who didn't want to pay for a license and ended with the loss of research. |
Ransomware
|
|
|
|
2021-05-05 09:37:00 |
Banking Trojan evolves from distribution through porn to phishing schemes (lien direct) |
While starting out in Brazil, the malware may now also be present in Europe. |
Malware
|
|
|
|
2021-05-05 08:47:10 |
Panda Stealer dropped in Excel files, spreads through Discord to steal user cryptocurrency (lien direct) |
The malware hones in on cryptocurrency funds as well as VPN credentials. |
Malware
|
|
|
|
2021-05-04 14:00:03 |
Three new malware families found in global finance phishing campaign (lien direct) |
Doubledrag, Doubledrop, and Doubleback are the work of “experienced” threat actors. |
Malware
Threat
|
|
|
|
2021-05-04 13:05:20 |
Patch issued to tackle critical security issues present in Dell driver software since 2009 (lien direct) |
Five critical security issues have been discovered. |
|
|
|
|
2021-04-30 09:37:17 |
SAP admits to \'thousands\' of illegal software exports to Iran (lien direct) |
SAP says it accepts “full responsibility for past conduct.” |
|
|
|