A naukri.com initiative
Cyber Crime News
Guardian
1w
85
Image Credit: Guardian
Dollars from doughnuts: Krispy Kreme online orders disrupted in cyber-attack
- Krispy Kreme struggles to meet online orders of doughnuts due to a cybersecurity attack.
- Unauthorized activity on computer systems discovered on November 29.
- Operational disruptions still ongoing, particularly affecting online ordering.
- No claim of responsibility, extent of impact still under investigation.
Read Full Article
5 Likes
TechCrunch
1w
192
Image Credit: TechCrunch
Krispy Kreme discloses cyberattack that is disrupting online orders
- Krispy Kreme disclosed a cyberattack, causing operational disruptions, including online ordering in parts of the US.
- The company has taken steps to investigate, contain, and remediate the incident with the help of cybersecurity experts.
- Shops worldwide remain open, with no interruption to deliveries, but disruptions are present in the US.
- The full scope, nature, and impact of the incident are still under investigation.
Read Full Article
11 Likes
Cryptoslate
1w
419
Image Credit: Cryptoslate
Crypto user loses $7.8 million in SolvBTC as phishing scams surge on social media
- A phishing attack resulted in a crypto user losing $7.8 million worth of SolvBTC.
- The attacker used Ethereum's CREATE2 opcode to predict and pre-compute addresses, bypassing wallet security alerts.
- The incident highlights the rising sophistication of scams, combining phishing tactics with advanced social engineering and malware deployment.
- Scam Sniffer warns of a growing trend of crypto scams on social media, with fake accounts impersonating influencers to lure victims.
Read Full Article
25 Likes
Securityaffairs
2w
90
Image Credit: Securityaffairs
Cybercriminals Impersonate Dubai Police to Defraud Consumers in the UAE – Smishing Triad in Action
- A large-scale fraud campaign has been uncovered in the UAE where cybercriminals impersonate law enforcement, particularly Dubai Police, to defraud consumers.
- Scammers target victims through phone calls, phishing, smishing, and vishing activities, asking them to pay non-existent fines online for traffic violations or license renewals.
- The fraudulent activities have increased during the winter holidays and particularly around the UAE National Day celebrations, resulting in financial losses for victims.
- UAE authorities have warned residents against sharing financial details over the phone and highlighted that official institutions will never request this information through phone calls.
Read Full Article
5 Likes
Pymnts
2w
373
Image Credit: Pymnts
OFAC Sanctions Parties Involved in Compromise of 81,000 Firewalls
- The Office of Foreign Assets Control (OFAC) has sanctioned a China-based cybersecurity company and one of its employees for their involvement in the compromise of 81,000 firewalls.
- Sichuan Silence Information Technology Company and its employee Guan Tianfeng were found to have used a zero-day exploit in a firewall product to deploy malware, aiming to steal data and infect victims' systems.
- Over 23,000 of the compromised firewalls were in the United States, including those protecting critical infrastructure companies.
- The Department of Justice has charged Guan Tianfeng with conspiracy to develop and deploy the malware, and the Department of State has announced a reward of up to $10 million for information about Guan Tianfeng or Sichuan Silence.
Read Full Article
22 Likes
Pymnts
2w
77
Image Credit: Pymnts
Meta Sounds Pre-Holiday Alarm As Scam Incidents Jump 56%
- Meta has launched a pre-holiday anti-scam awareness campaign to keep users safe.
- Scammers are using various tactics like fake coupons, gift cards, and non-existent Christmas decorations.
- Meta advises users to be cautious of phishing emails and texts and to avoid sharing personal information.
- Scam-related fraud has increased by 56%, making it the leading form of fraud.
Read Full Article
4 Likes
TechCrunch
2w
356
Image Credit: TechCrunch
US Senator announces new bill to secure telecom companies in wake of Chinese hacks
- U.S. Senator Ron Wyden has introduced a new bill, the Secure American Communications Act, in response to Chinese government hacks on telecom providers.
- The bill aims to secure American telephone networks and communications by implementing specific cybersecurity requirements.
- Telecom providers would be required to perform annual vulnerability tests, hire independent auditors to ensure compliance, and submit documentation and statements of compliance.
- Senator Wyden emphasized the need for mandatory security rules to protect against hackers and espionage.
Read Full Article
21 Likes
Cybersafe
2w
51
Image Credit: Cybersafe
North Korean Hackers steal $50 M in Crypto from Radiant Capital
- North Korean hackers stole $50 million in cryptocurrency from Radiant Capital.
- The cyberattack occurred on October 16, 2024, and was traced back to a group known as Citrine Sleet or UNC4736.
- Hackers compromised the devices of three Radiant developers and bypassed advanced security systems to execute unauthorized transfers.
- Radiant Capital is collaborating with cybersecurity experts to trace and recover the stolen funds while emphasizing the need for improved device-level security measures.
Read Full Article
3 Likes
Cybersecurity-Insiders
2w
176
Image Credit: Cybersecurity-Insiders
Aiming for Whales: Phishing Tactics Are Climbing the Corporate Ladder
- Whaling phishing attacks, targeting C-suite executives and decision-makers are growing and exploiting publicly available information to appear legitimate.
- These attacks are precise and deep, involving the combination of technical manipulation with psychological tactics.
- Whaling phishing has wide-ranging consequences – data breaches, financial losses and reputational damage.
- Leaders can safeguard their companies against these attacks by customising security training programs for employees including executives; Deploy advanced email filtering systems; Mandate multi-factor authentication (MFA); Audit and monitor publicly available executive data; Encourage a security-first culture.
- Executives are particularly vulnerable, being targeted as they have access to sensitive data and decision-making authority.
- Attackers invest in tailored tactics to exploit the most trusted individuals, whom may have less time for stringent cybersecurity training.
- Spoofing trusted contacts, social engineering and creating pressure scenarios are all methods for exploiting trust, urgency, and authority of executives.
- Falling victim to a whaling phishing attack can lead to serious legal and regulatory repercussions.
- Leadership must model proactive security practices to ensure the safety of their organizations in an increasingly complex threat landscape.
- By understanding how these attacks operate and implementing robust defenses, companies can reduce their risk significantly.
Read Full Article
10 Likes
Tech Story
2w
193
Booking.com Typo Bug Could Expose Your Entire Trip to Strangers The Typo Bug: How It Came to Light
- Booking.com, one of the world’s most popular travel booking platforms, has a significant flaw in its system.
- A typo during the reservation process can link someone else’s travel plans to your account.
- Booking.com confirmed the issue arises when an incorrect email address is entered during reservation.
- The lack of verification step puts users' sensitive information and control over bookings at risk.
Read Full Article
11 Likes
Securityaffairs
2w
370
Image Credit: Securityaffairs
Romanian energy supplier Electrica Group is facing a ransomware attack
- Romanian energy supplier Electrica Group is facing a ransomware attack.
- The attack hasn't affected critical systems but may cause temporary disruptions in customer services.
- Electrica is implementing internal cybersecurity protocols and collaborating with national cybersecurity authorities.
- The attack is believed to be a retaliation for Romania annulling its presidential election over alleged Russian interference.
Read Full Article
22 Likes
TechCrunch
2w
370
Image Credit: TechCrunch
US medical device giant Artivion says hackers stole files during cybersecurity incident
- Artivion, a medical device company, experienced a cybersecurity incident that disrupted its services.
- The incident involved the acquisition and encryption of data, suggesting a ransomware attack.
- Certain systems were taken offline in response, causing disruptions to order and shipping processes.
- Artivion does not expect a significant financial impact from the incident.
Read Full Article
22 Likes
Cybersecurity-Insiders
2w
254
Image Credit: Cybersecurity-Insiders
TikTok influencers being targeted by cyber attacks for Election results manipulation
- A cyberattack on Romania's election infrastructure in November 2024 led to the leaking of sensitive data on a Russian hacking forum.
- Over 85,000 cyberattacks were recorded on Romania's election infrastructure before the election concluded.
- The cyberattack also targeted TikTok influencers, with some being paid to promote a specific presidential candidate.
- The Romanian Foreign Intelligence Service (SIE) has accused the Russian government of orchestrating the attack.
Read Full Article
15 Likes
Socprime
2w
336
Image Credit: Socprime
UAC-0185 aka UNC4221 Attack Detection: Hackers Target the Ukrainian Defense Forces and Military-Industrial Complex
- Hackers have targeted Ukrainian defense organizations and the military-industrial complex in a series of phishing attacks using the UAC-0185 (aka UNC4221) group.
- CERT-UA issued a security alert notifying cyber defenders of the attacks, which masquerade the sender as the Ukrainian Union of Industrialists and Entrepreneurs (UUIE).
- The attacks involve email spoofing and lures recipients with invitations to a conference on transitioning Ukraine's defense industry products to NATO standards.
- The UAC-0185 group is known for credential theft, remote access to military systems, and the use of custom tools like MESHAGENT and UltraVNC.
Read Full Article
20 Likes
TechCrunch
2w
2.5k
Image Credit: TechCrunch
Blue Yonder investigating data theft claims after ransomware gang takes credit for cyberattack
- Supply chain software company Blue Yonder is investigating claims of data theft after a ransomware gang takes credit for a cyberattack.
- The Arizona-based company, which provides software to organizations like DHL and Starbucks, experienced a ransomware incident on November 21.
- The ransomware gang, known as Termite, claims to have stolen 680 gigabytes of data and threatens to use it for future attacks.
- Blue Yonder is working with external cybersecurity experts to address the claims, while the investigation remains ongoing.
Read Full Article
8 Likes
For uninterrupted reading, download the app