A naukri.com initiative
Cyber Crime News
Bitcoinist
1M
301
Image Credit: Bitcoinist
US Seizes Crypto and 145 Domains in Major Darknet Takedown
- The US Department of Justice seized cryptocurrency assets and 145 internet domains linked to darknet marketplace BidenCash.
- BidenCash facilitated the sale of stolen credit card data and personal information to thousands of users, accumulating over 117,000 users and distributing more than 15 million compromised payment card numbers.
- Authorities seized cryptocurrency funds used by BidenCash and redirected the seized domains to law enforcement-controlled servers to prevent further illicit activities.
- The operation involved international collaboration with law enforcement bodies and marks a continuation of US efforts to dismantle cybercriminal infrastructure operating on the dark web.
Read Full Article
18 Likes
Dataprivacyandsecurityinsider
1M
332
Adidas and UChicago Sued Over Data Breaches Caused by Third-Party Vendors
- Adidas America and the University of Chicago Medical Center are facing data breach lawsuits for breaches of sensitive personal information caused by third-party vendors.
- Plaintiffs in the lawsuits allege that both organizations failed to adequately protect personal information, leading to data falling into the wrong hands.
- Lawsuits claim that Adidas did not provide sufficient information about the breach, and the University of Chicago Medical Center allegedly didn't encrypt or redact compromised data.
- The cases highlight the trend of holding companies accountable for breaches by third-party vendors, raising questions about the extent of responsibility in ensuring data security.
Read Full Article
20 Likes
Medium
1M
377
Image Credit: Medium
Text Phishing
- Scammers have evolved from email phishing to text message phishing.
- Various tactics used in text phishing include fake giveaway notifications, package delivery updates, false purchase confirmations, and fraudulent credit card offers.
- The aim of text phishing is to deceive individuals into sharing private information like usernames, passwords, date of birth, social security number, or credit card details.
- Text phishing attempts often involve deceptive links that lead to requests for sensitive information.
Read Full Article
22 Likes
Securityaffairs
1M
103
Image Credit: Securityaffairs
Law enforcement seized the carding marketplace BidenCash
- U.S. and Dutch authorities collaborated to dismantle the BidenCash cybercrime marketplace by seizing 145 associated domains.
- The U.S. Department of Justice announced the seizure of 145 darknet and clear web domains, along with cryptocurrency funds linked to BidenCash.
- BidenCash, operational since March 2022, charged a fee for transactions and distributed millions of stolen payment cards, generating around $17 million in revenue.
- Authorities shut down 145 domains related to BidenCash, redirecting them to law enforcement servers to prevent further criminal activities.
Read Full Article
6 Likes
Securityaffairs
1M
274
Image Credit: Securityaffairs
Ukraine’s military intelligence agency stole 4.4GB of highly classified internal data from Tupolev
- Ukraine’s military intelligence agency GUR hacked the Russian aerospace and defense company Tupolev, stealing 4.4GB of highly classified internal data.
- The breach exposed internal communications, staff details, engineers' resumes, procurement records, and confidential meeting minutes.
- Ukrainian intelligence source stated that nearly all of Tupolev's secrets are now exposed, impacting Russia's strategic aviation operations.
- Ukraine's GUR had monitored Tupolev's internal flow for months, defacing Tupolev's website symbolically and targeting Russia's defense industry.
Read Full Article
16 Likes
TechCrunch
1M
225
Image Credit: TechCrunch
Ransomware gang claims responsibility for Kettering Health hack
- A ransomware gang, Interlock, has claimed responsibility for the hack on Kettering Health, a network of hospitals, clinics, and medical centers in Ohio, which forced the healthcare system to shut down all computer systems for two weeks.
- Interlock stated they stole more than 940 gigabytes of data from Kettering Health and published some of the stolen data, including private health information and employee data, on their dark web site.
- Interlock's public acknowledgment of the breach could indicate that negotiations with Kettering Health have stalled, potentially leading to the exposure of the stolen data. Kettering Health's senior vice president stated that the company did not pay any ransom to the hackers.
- Kettering Health was able to restore core components of its electronic health record system provided by Epic, marking a significant step towards normal operations post-cyberattack.
Read Full Article
13 Likes
TechCrunch
1M
337
Image Credit: TechCrunch
Data breach at newspaper giant Lee Enterprises affects 40,000 people
- Lee Enterprises, a newspaper publishing giant, confirms a data breach affecting 39,779 individuals, including personal information like Social Security numbers.
- The breach primarily impacts former and current employees of the company and was a result of a ransomware attack in February.
- Lee Enterprises, a major U.S. newspaper publisher, suffered disruptions in printing and operations due to the ransomware attack by the Qilin group, affecting media outlets across the country.
- The breach also led to delays in payments to freelancers and contractors, with the company yet to respond to requests for comments on the incident.
Read Full Article
20 Likes
Kaspersky
1M
139
Image Credit: Kaspersky
Scammers are promising compensation from a bank | Kaspersky official blog
- Scammers are now promising compensation to victims in a new scam that involves phishing websites hosting fake news videos and AI-generated content.
- The scammers use fake news segments with AI-generated voiceovers to lure victims into believing a bank is offering payouts to all Brazilian citizens.
- Victims are directed to a phishing website where they are asked personal questions and encouraged to pay taxes in order to receive a promised windfall, which never materializes.
- The scam relies on AI-generated journalist and celebrity clones to deliver a sense of credibility to the fake news report.
- To protect against such scams, individuals are advised to be cautious of entering personal details on suspicious websites and to avoid clicking on unknown links.
- Recognizing patterns such as enticing bait, phishing websites, and fake news reports can help individuals avoid falling victim to payout scams.
- Tips include watching for inconsistencies in AI-generated videos, such as unaligned lip movements or unnatural facial expressions.
- Installing security software like Kaspersky Premium can help prevent access to suspicious links and phishing attempts.
- Basic safety measures such as avoiding sharing personal and payment information on dubious sites and being wary of promises of free prizes are crucial to staying safe online.
- Scammers constantly evolve their tactics, creating new schemes like simulated giveaways, false subscriptions, and cryptocurrency fraud to deceive individuals.
Read Full Article
8 Likes
TechDigest
1M
414
Image Credit: TechDigest
M&S faces ‘unprecedented’ Scottish lawsuit over cyber attack data breach
- Marks & Spencer is facing an “unprecedented” class action lawsuit in Scotland following a major cyberattack disrupting operations.
- Scottish law firm Thompsons Solicitors is leading the legal challenge for affected customers whose personal data was stolen.
- The lawsuit aims to seek compensation for the increased risk of fraud and scams, potential financial losses, distress, anxiety, and time spent resolving issues.
- Over 350 individuals have already joined the class action, marking an 'unprecedented' response for a case of this nature in Scotland.
Read Full Article
24 Likes
TechJuice
1M
234
Image Credit: TechJuice
Crocodilus Trojan Expands Globally, Targeting Crypto and Banking Apps
- Crocodilus, a sophisticated Android banking trojan, is now targeting users globally, including Europe, South America, and parts of Asia.
- The malware spreads by posing as legitimate apps like online casinos or fake banking apps, exploiting vulnerabilities in Android devices.
- Crocodilus requests accessibility service permissions once installed, overlaying fake login pages on banking and cryptocurrency apps to capture user credentials.
- To protect against Crocodilus and similar threats, users are advised to download apps from trusted sources, update device software regularly, and implement robust security measures like multi-factor authentication.
Read Full Article
14 Likes
Bitcoinist
1M
306
Image Credit: Bitcoinist
Coinbase Faces Backlash For Allegedly Delaying Recent Data Breach Disclosure
- Coinbase is facing backlash for allegedly delaying the disclosure of a data breach that occurred last month, reportedly knowing about it months before going public.
- A recent report by Reuters revealed that an India-based TaskUs employee working for Coinbase was caught taking pictures of her work computer to sell information to hackers in January.
- Coinbase has severed ties with the personnel involved and tightened controls but refrained from disclosing the identity of other foreign agents.
- Investors have criticized Coinbase for lack of transparency and utilizing overseas contractors for sensitive data, leading to legal scrutiny including class action lawsuits and a Department of Justice investigation.
Read Full Article
18 Likes
Securityaffairs
1M
63
Image Credit: Securityaffairs
Cartier disclosed a data breach following a cyber attack
- Luxury-goods conglomerate Cartier suffered a data breach due to a cyberattack.
- The breach exposed customers' personal information like names, email addresses, and countries.
- Cartier contained the issue, enhanced system protection, and alerted authorities and impacted customers.
- This incident is a part of a series of cyberattacks on luxury fashion brands, including Adidas, Dior, and Victoria's Secret.
Read Full Article
3 Likes
Guardian
1M
72
Image Credit: Guardian
What to do if your email account is stolen – and how to stop it happening again
- Email accounts have become essential for various online services, therefore, it is crucial to secure them.
- If your email account is stolen, promptly change your password using a familiar device and follow the account recovery process provided by the email service provider.
- If unable to recover the stolen account, create a new email account and migrate your logins to it for security reasons.
- Once regaining access to your account, set a strong, unique password, enable two-step verification, use security questions, and set up recovery options to enhance security.
Read Full Article
4 Likes
VoIP
1M
382
Image Credit: VoIP
Telefonica Probes Peruvian Data Breach Amid Cybersecurity Concerns
- Telefonica is investigating a cyberattack following the leak of sensitive data of around one million former Peruvian customers by hacker group Dedale.
- The leaked data seems to be from Telefonica's past operations in Peru, despite the recent sale of its local branch.
- This incident reflects a broader trend of cybersecurity challenges faced by telecom companies globally, with recent breaches impacting major U.S. carriers and South Korea's SK Telecom.
- The telecom sector's increasing vulnerability to cyber threats underscores the importance of implementing robust security measures to safeguard personal and national security data.
Read Full Article
23 Likes
Managedmethods
1M
387
Image Credit: Managedmethods
In The News | ManagedMethods Helps K-12 Schools With Launch of Advanced Phishing AI Solution
- ManagedMethods launches Advanced Phishing solution to enhance cybersecurity for K-12 schools, introducing the first chain-of-thought AI phishing detection tool for the education sector.
- As phishing attacks become more sophisticated, the solution aims to help schools mitigate the growing risk of cyber threats like ransomware, with 63% of K-12 organizations hit by ransomware last year.
- The AI model in the solution simulates human-like problem-solving to detect phishing and spam emails across Gmail and Outlook, offering smarter protection for students and staff.
- ManagedMethods' Advanced Phishing solution provides comprehensive protection for K-12 school districts, improving detection accuracy, reducing false positives, and offering recommended response actions.
Read Full Article
23 Likes
For uninterrupted reading, download the app