A naukri.com initiative
Cyber Crime News
Coinjournal
1M
49
Image Credit: Coinjournal
Safemoon CTO pleads guilty in $200m crypto fraud case
- Safemoon CTO Thomas Smith has pleaded guilty to charges in a $200 million crypto fraud case.
- Thomas Smith pleaded guilty to two charges of securities fraud conspiracy and wire fraud conspiracy.
- He admitted to misleading investors about SafeMoon's liquidity pool and making false claims about locked assets.
- If convicted, Smith could face up to 20 years in prison for wire fraud conspiracy and up to 25 years for securities fraud.
Read Full Article
2 Likes
TechCrunch
1M
392
Image Credit: TechCrunch
Your Android phone could have stalkerware. Here’s how to remove it
- Consumer-grade spyware apps pose a threat to Android users by monitoring private messages, calls, and location.
- Common surveillance apps like TheTruthSpy, Cocospy, and Spyic can be identified and removed using this guide.
- Stalkerware apps are often disguised as child monitoring software but are used for unauthorized tracking.
- Abusing Android features, stalkerware apps avoid detection and can track partners without consent.
- Symptoms of a compromised device include unusual behavior, increased temperature, and excessive data usage.
- Check for spyware by ensuring Google Play Protect is enabled and monitoring accessibility services.
- Review app access to notifications and device admin settings to detect stalkerware.
- Uninstall unrecognized apps with broad access and strengthen device security with a robust password.
- Always prioritize safety when dealing with stalkerware and seek support if needed.
- For immediate assistance, contact the National Domestic Violence Hotline or the Coalition Against Stalkerware.
Read Full Article
23 Likes
Coinjournal
1M
347
Image Credit: Coinjournal
SEC launches new unit to combat crypto fraud and cybercrime
- The US Securities and Exchange Commission (SEC) has launched a new Division of Enforcement unit called the Cyber and Emerging Technologies Unit (CETU) to combat crypto fraud and cybercrime.
- Replacing the Crypto Assets and Cyber Unit (CACU), the CETU will focus on handling compliance to protect retail investors and target fraud committed through emerging technologies like crypto, blockchain, AI, and social media.
- The CETU will work alongside the SEC's recently launched Crypto Task Force and will be led by Laura D'Allaird, with a team of about 30 fraud specialists and attorneys.
- The unit will prioritize combatting fraud, hacking incidents, and non-compliance with cybersecurity regulations to facilitate capital formation and market efficiency while protecting investors.
Read Full Article
20 Likes
Pymnts
1M
22
Image Credit: Pymnts
SEC Replaces Crypto Unit With Team to Probe ‘Cyber-Related Misconduct’
- The Securities and Exchange Commission (SEC) has announced the creation of the Cyber and Emerging Technologies Unit (CETU).
- The CETU replaces the Crypto Assets and Cyber Unit and will focus on protecting investors against cyber-related misconduct.
- The unit will address fraud involving emerging technologies, hacking, cryptocurrency assets, and cybersecurity compliance.
- The creation of CETU reflects the SEC's commitment to safeguarding investors and fostering innovation.
Read Full Article
1 Like
Dataprivacyandsecurityinsider
1M
18
Image Credit: Dataprivacyandsecurityinsider
NewsBank Hit with Class Action over Employee Data Breach
- A class action has been filed against NewsBank, Inc. over a 2024 breach of employee personal information.
- The breach impacted employees' personal information, including names, dates of birth, Social Security numbers, and financial account details.
- The lead plaintiff claims a heightened risk of identity theft and the lawsuit alleges negligence, breach of contract, and breach of fiduciary duty.
- The class seeks over $5 million in damages and injunctive relief, including enhanced security measures and lifetime identity theft protection services.
Read Full Article
1 Like
TechCrunch
1M
31
Image Credit: TechCrunch
California privacy regulator seeks to fine Florida data broker after huge breach of Social Security numbers
- The California Privacy Protection Agency (CPPA) is seeking a fine of $46,000 against National Public Data for failing to register as a data broker.
- National Public Data experienced a data breach in April 2024, resulting in the theft of three billion records, including Social Security numbers and personal information.
- The data broker filed for bankruptcy protection, which was rejected, allowing legal action to be taken against the company.
- CPPA's enforcement division filed a claim against National Public Data for failing to register, seeking the $46,000 fine.
Read Full Article
1 Like
Securityaffairs
1M
392
Image Credit: Securityaffairs
NailaoLocker ransomware targets EU healthcare-related entities
- NailaoLocker ransomware targeted European healthcare organizations between June and October 2024.
- The malware campaign, called The Green Nailao, involved the use of ShadowPad, PlugX, and the newly discovered NailaoLocker ransomware.
- The attack exploited a zero-day vulnerability in Check Point VPN appliances, allowing the threat actors to access sensitive information and move laterally through the network.
- Although the campaign shares similarities with China-linked APT groups, attribution remains uncertain.
Read Full Article
23 Likes
TechCrunch
1M
94
Image Credit: TechCrunch
UK healthcare giant HCRG confirms hack after ransomware gang claims theft of sensitive data
- U.K. healthcare giant HCRG Care Group is investigating a cybersecurity incident after a ransomware gang claimed to have breached the company’s systems and stolen sensitive data.
- The Medusa ransomware group has allegedly stolen more than two terabytes of data, including employees’ personal information, medical records, financial records, and government identification documents.
- HCRG has confirmed the incident and is working with external forensic specialists to investigate. It has informed the Information Commissioner's Office and other regulators.
- The Medusa ransomware group is demanding a $2 million ransom from HCRG, threatening to publish the stolen data if the payment is not made.
Read Full Article
5 Likes
Siliconangle
1M
54
Image Credit: Siliconangle
New report warns of growing threat of mobile phishing targeting SMS and messaging apps
- A new report warns of a growing threat of mobile phishing targeting SMS and messaging apps.
- Mobile-specific weaknesses, such as smaller screen sizes and touch-based interactions, are exploited by cybercriminals to carry out large-scale phishing campaigns.
- Attackers leverage SMS, messaging apps, and QR codes to trick users into revealing sensitive information or downloading malicious software.
- Mobile users with smaller screens are less likely to verify URLs, and the trust in mobile messaging apps makes phishing attempts more successful.
Read Full Article
3 Likes
NullTX
1M
157
Image Credit: NullTX
Urgent Warning: Active Phishing Campaign Targeting Jupiter Users
- A phishing campaign targeting Jupiter users through ads claiming a 'Jupiter Exchange exploit' is active.
- Malicious actors trick users into pasting JS code into their browser consoles leading to wallet drain.
- Deceitful operation involves fake bug reports urging users to interact with malicious links.
- The fraudsters use a malicious API (solapi.network) to access and drain crypto wallets.
- Users are warned against engaging with unsound advertisements or links and advised to verify code sources.
- Protective measures include using hardware wallets, verifying updates from platforms, and enabling 2FA.
- Jupiter users are urged to stay vigilant against phishing attempts and act promptly if compromised.
- Staying informed about cryptocurrency threats and scams is crucial for safeguarding investments.
- Disclosure: This is not trading or investment advice. Always research before investing in cryptocurrencies.
Read Full Article
9 Likes
Securelist
1M
117
Image Credit: Securelist
Managed detection and response in 2024
- Kaspersky Managed Detection and Response service (MDR) provides round-the-clock monitoring and threat detection.
- In 2024, the MDR infrastructure processed an average of 15,000 telemetry events per host daily, with over two high-severity incidents detected per day.
- The largest concentration of Kaspersky MDR customers is in Europe, the CIS, and the META regions.
- General observations from 2024 include decreased high-severity incidents with increased complexity, a rise in human-driven targeted attacks, attackers often returning after a successful breach, prevalent use of Living off the Land techniques, and top threats being User Execution and Phishing.
Read Full Article
7 Likes
TechCrunch
1M
144
Image Credit: TechCrunch
US Army soldier pleads guilty to AT&T and Verizon hacks
- Cameron John Wagenius, a former U.S. Army soldier, has pleaded guilty to hacking AT&T and Verizon and stealing phone records.
- Wagenius faces a maximum fine of $250,000 and up to 10 years in prison for each of the two counts.
- The charges against Wagenius are linked to the indictment of two other hackers involved in major data breaches against Snowflake and several other companies.
- Wagenius and the other hackers stole data from AT&T, LendingTree, Santander Bank, Ticketmaster, and over 160 other companies.
Read Full Article
8 Likes
Medium
1M
167
Image Credit: Medium
7 Impact of Social Media on Mantal Health.
- Cyberbullying on social media leads to emotional distress and self-worth issues.
- Misinformation spreads quickly on social media, causing confusion and distrust.
- Addiction to social media can result in decreased productivity and feelings of depression and anxiety.
- Increased usage of social media leads to a decline in face-to-face communication and diminished social skills.
Read Full Article
10 Likes
Schneier
1M
4
Device Code Phishing
- Device code phishing is a technique that exploits the device code flow authentication method.
- Device code flow is designed for logging input-constrained devices into user accounts, such as printers and smart TVs.
- Instead of directly authenticating the user, the input-constrained device displays a device code and link associated with the user account.
- The user opens the link on another device and enters the code, allowing the remote server to log the input-constrained device into the account.
Read Full Article
Like
Securityaffairs
1M
299
Image Credit: Securityaffairs
Venture capital firm Insight Partners discloses security breach
- Venture capital firm Insight Partners disclosed a security breach involving unauthorized access to its information systems.
- The breach was detected on January 16, 2025, and the attacker was removed the same day.
- Insight Partners is conducting an investigation with the help of cybersecurity experts.
- No significant impact on operations, portfolio companies, funds, or stakeholders is expected.
Read Full Article
17 Likes
For uninterrupted reading, download the app