A naukri.com initiative
Cyber Crime News
TechDigest
2M
217
Image Credit: TechDigest
Co-Op shelves to be restocked following cyber attack, M&S hackers may have ‘partial credit card’ details
- Co-Op is restocking shelves after a cyber-attack affected online ordering and impacted customer and staff data, hacker group DragonForce claimed responsibility.
- Marks & Spencer warns customers of potential scam calls and emails after hackers stole personal data, including partial credit card details.
- US tech firms secure deals in the Middle East as Saudi Arabia commits $600bn to American AI companies, Nvidia set to sell AI chips to the country.
- Airbnb introduces redesigned app to offer additional services like catering and personal training, plans to invest millions in expanding its business offerings.
Read Full Article
12 Likes
Guardian
2M
114
Image Credit: Guardian
Co-op cyber-attack: stock availability in stores ‘will not improve until weekend’
- Co-op stores continue to struggle with stock availability after a cyber-attack, recovery expected by the weekend.
- Shoppers facing empty shelves, especially in rural areas; Co-op working with suppliers to restock stores with essential items.
- Hackers accessed customer data from Co-op systems, no financial information compromised.
- M&S also affected by cyber-attack, facing possible significant fines and loss of sales; expected to claim up to £100m from cyber insurers.
Read Full Article
6 Likes
Securityaffairs
2M
440
Image Credit: Securityaffairs
How Interlock Ransomware Affects the Defense Industrial Base Supply Chain
- Interlock Ransomware attack on a defense contractor exposed global defense supply chain details, risking operations of top contractors and their clients.
- Interlock Ransomware uncovered supply chain details of top defense contractors globally, leading to potential exposure of classified information and interest from foreign intelligence agencies and espionage groups.
- Numerous documents related to global defense corporations were found in the leaked dataset released by Interlock Ransomware.
- Ransomware attacks on defense contractors can have profound implications for national security, operational efficiency, financial stability, trust, and brand reputation, highlighting the need for robust cybersecurity measures and CMMC implementation.
Read Full Article
26 Likes
Securityaffairs
2M
362
Image Credit: Securityaffairs
Marks and Spencer confirms data breach after April cyber attack
- Marks and Spencer confirms data breach after April cyber attack, where threat actors stole customer data.
- The cyber incident led to temporary changes in store operations and affected card payments, gift cards, and Click and Collect service.
- The stolen data includes customer contact details, birthdate, order history, and masked card details, but not full payment info.
- M&S recommends caution against phishing attempts, resetting passwords, and staying updated on security practices post-breach.
Read Full Article
21 Likes
Silicon
2M
348
Image Credit: Silicon
Marks & Spencer Warns Customers Over Data Theft
- Marks & Spencer informed online customers of data theft during a cyber-attack on 25 April.
- The stolen data included contact details, dates of birth, and online order history.
- No card details, payment information, or account passwords were compromised.
- Customers are advised to change passwords as a precaution, and M&S is working on resolving the issue.
Read Full Article
20 Likes
TechCrunch
2M
94
Image Credit: TechCrunch
Marks & Spencer confirms customers’ personal data was stolen in hack
- Marks & Spencer confirms customers’ personal data was stolen in a recent hack, including names, dates of birth, addresses, phone numbers, and more.
- The company is resetting online account passwords as a precautionary measure.
- Marks & Spencer is facing disruptions and outages across its stores, leading to empty grocery shelves and online ordering system remaining offline.
- Ransomware gang DragonForce claimed responsibility for cyberattacks on Marks & Spencer, Co-op, and Harrods in the U.K., with Co-op confirming customer data theft.
Read Full Article
4 Likes
Securityaffairs
2M
45
Image Credit: Securityaffairs
Moldovan Police arrested a 45-year-old foreign man participating in ransomware attacks on Dutch companies
- A 45-year-old foreign man was arrested in Moldova for participating in ransomware attacks on Dutch companies in 2021.
- The arrest was a result of a joint international operation involving Moldovan and Dutch authorities, with the suspect wanted for cybercrimes including ransomware attacks and money laundering.
- The suspect was linked to a ransomware attack on the Netherlands Organization for Scientific Research, resulting in €4.5 million in damages, attributed to the DoppelPaymer ransomware operation.
- In a related development, Europol announced an international operation targeting key members of the DoppelPaymer ransomware group in March 2023.
Read Full Article
2 Likes
TechDigest
2M
280
Image Credit: TechDigest
M&S admits customer data was stolen in cyber attack
- Marks & Spencer has confirmed a cyber attack resulted in stolen customer data and disruptions to their operations.
- The incident affected customers' personal information, prompting password resets, but no payment details were compromised.
- The cyber attack led to online order halts, empty shelves, and a drop in M&S's share price.
- M&S is taking measures to investigate the breach, improve security, and recover from the incident that impacted its supply chain.
Read Full Article
16 Likes
Guardian
2M
312
Image Credit: Guardian
M&S says some personal data was taken in cyber-attack
- Marks & Spencer has confirmed that personal customer data was accessed in a recent cyber-attack, prompting the retailer to halt online orders and affecting product availability in stores.
- The accessed data includes names, addresses, and order histories, but not payment details or account passwords. M&S reassured customers that no action is required, although a password reset may be prompted for extra security.
- The cyber-attack, suspected to be linked to hacking group Scattered Spider, led M&S to take offline its IT systems since April 25. The retailer has reported the incident to authorities and is working to resolve the issues with cybersecurity experts.
- The Information Commissioner's Office is investigating reports from M&S and the Co-op Group, another victim of a cyber-attack, collaborating with the National Cyber Security Centre to address such incidents.
Read Full Article
18 Likes
Hackernoon
2M
73
Image Credit: Hackernoon
Android Users Can Now Simulate Phishing Attacks with PyPhisher on Termux—Here's How
- PyPhisher is a tool that helps ethical hackers create fake login pages for popular sites on Android phones using Termux.
- Users can simulate phishing attacks by following a step-by-step guide to install and run PyPhisher on Termux.
- Installing PyPhisher involves updating Termux packages, installing required dependencies like Git, Python3, Pip, PHP, and OpenSSH, cloning the PyPhisher repository, and running the tool.
- Once PyPhisher is set up, users can select a phishing template, generate phishing links, open them in a browser, and capture login credentials for ethical hacking purposes.
Read Full Article
4 Likes
Securityaffairs
2M
73
Image Credit: Securityaffairs
Threat actors use fake AI tools to deliver the information stealer Noodlophile
- Threat actors are using fake AI tools to distribute the information stealer Noodlophile, as warned by Morphisec researchers.
- Attackers exploit the AI hype through viral posts and Facebook groups to trick users into downloading Noodlophile Stealer, a new malware that steals browser credentials and crypto wallets.
- Noodlophile Stealer, a previously undisclosed malware, is being sold on cybercrime forums as part of malware-as-a-service schemes and is often bundled with tools for credential theft.
- Fake AI tools like 'Dream Machine' or 'CapCut' spread through social media, attracting users seeking free video/image editors, but instead delivering malware like Noodlophile or XWorm.
Read Full Article
4 Likes
TechDigest
2M
105
Image Credit: TechDigest
Inside hacking meltdown at M&S, iOS19 to let you sync Public WiFi across devices
- Marks & Spencer faced a hacking meltdown after a promising financial year, impacting its reputation and future prospects.
- Apple is set to introduce a new feature in iOS 19 that will automatically sync public Wi-Fi networks across all Apple devices, simplifying the connection process.
- Virgin Media O2 and Daisy Group are merging their business communications and IT operations to create a £3bn telecoms powerhouse.
- Rockstar Games released the second trailer for Grand Theft Auto 6, showcasing advanced graphics and gameplay elements, setting high expectations for the upcoming game.
Read Full Article
6 Likes
Securityaffairs
2M
50
Image Credit: Securityaffairs
German police seized eXch crypto exchange
- Germany's Federal Criminal Police (BKA) shut down the eXch crypto exchange (eXch.cx), seizing its infrastructure over money laundering and illegal trading allegations.
- The German law enforcement seized €34M in crypto and 8TB of data from the platform, marking its third-largest crypto asset seizure ever.
- eXch crypto exchange had been active since 2014, enabling anonymous crypto swaps via clearnet and darknet, avoiding Anti Money Laundering rules. Authorities suspect the platform allowed laundering $1.9B.
- eXch announced it would shut down on May 1, 2025, amid suspicions of money laundering and illegal trading. Despite the shutdown announcement, authorities swiftly seized data and crypto assets from the platform.
Read Full Article
3 Likes
Securityaffairs
2M
262
Image Credit: Securityaffairs
Security Affairs newsletter Round 523 by Pierluigi Paganini – INTERNATIONAL EDITION
- 437,329 patients' personal data exposed in Ascension cyberattack.
- Operation Moonlander dismantles cybercriminal services Anyproxy and 5socks.
- SonicWall fixes critical flaws in SMA 100.
- NSO Group ordered to pay over $167M to WhatsApp for spyware campaign.
Read Full Article
15 Likes
Securityaffairs
2M
243
Image Credit: Securityaffairs
Ascension reveals personal data of 437,329 patients exposed in cyberattack
- A data breach at Ascension, caused by a former partner's compromise, exposed the health information of over 430,000 patients.
- The breach disclosed personal and clinical data, including names, contact info, SSNs, and medical visit details, with specific information varying by individual.
- Ascension initiated an investigation after learning of the security incident, discovering that patient information was accidentally disclosed to a former business partner, likely leading to data theft.
- The healthcare organization is offering two years of free identity monitoring to those affected by the breach and has reported the incident to the U.S. Department of Health & Human Services.
Read Full Article
14 Likes
For uninterrupted reading, download the app