Cybersecurity News
Confessions of an ID Theft Kingpin, Part II
Yesterday's piece told the tale of Hieu Minh Ngo, a hacker the U.S. Secret Service described as someone who caused more material financial harm to more Americans than any other convicted cybercriminal. Ngo was recently deported back to his home country after serving more than seven years in prison for running multiple identity theft services. He now says he wants to use his experience to convince other cybercriminals to use their skills for good. Here's a look at what happened after he got busted.27 August 2020
Facebook Hits Back At Apple’s iOS 14 Privacy Update
While privacy experts praised Apple’s upcoming iOS 14 updates, Facebook said the new features could cut its advertising business in half.
27 August 2020
DDoS extortion campaign targets financial firms, retailers
The extortionists attempt to scare the targets into paying by claiming to represent some of the world’s most notorious APT groups
The post DDoS extortion campaign targets financial firms, retailers appeared first on WeLiveSecurity
27 August 2020
Magecart’s Success Paves Way For Cybercriminal Credit Card ‘Sniffer’ Market
Magecart's successes have led to threat actors actively advertising 'sniffers' that can be injected into e-commerce websites in order to exfiltrate payment cards.
27 August 2020
How CISOs Can Play a New Role in Defining the Future of Work
Rather than just reacting to security issues in the COVID-19 era, CISOs are now in a position to be change agents alongside their C-suite peers.27 August 2020
Malicious Attachments Remain a Cybercriminal Threat Vector Favorite
Malicious attachments continue to be a top threat vector in the cybercriminal world, even as public awareness increases and tech companies amp up their defenses.
27 August 2020
Revamped Qbot Trojan Packs New Punch: Hijacks Email Threads
New version of trojan is spreading fast and already has claimed 100,000 victims globally, Check Point has discovered.
27 August 2020
Your email threads are now being hijacked by the QBot Trojan
Operators have changed their tactics in the quest for data theft.27 August 2020
DDoS extortionists target NZX, Moneygram, Braintree, and other financial services
One of the victims, the New Zealand stock exchange (NZX), has halted trading for the third day in a row following the attacks.26 August 2020
'Transparent Tribe' APT Group Deploys New Android Spyware for Cyber Espionage
The group, which has been around since at least 2013, has impacted thousands of organizations, mostly in India.26 August 2020
Higher Education CISOs Share COVID-19 Response Stories
Security leaders from Stanford, Ohio State, and the University of Chicago share challenges and response tactics from the COVID-19 pandemic.26 August 2020
US Warns of Ongoing BeagleBoyz Bank-Theft Operations
The North Korean operatives have attempted to steal more than $2 billion since 2015 in a series of ongoing campaigns.26 August 2020
Twitter botnet quoting Dracula book caught pushing pro-Chinese propaganda
Botnet was estimated at around 3,000 bots, before Twitter suspended some accounts this month.26 August 2020
Twitter takes down 'Dracula' botnet pushing pro-Chinese propaganda
Botnet was estimated at around 3,000 bots, before accounts were suspended or restricted last week.26 August 2020
Cisco Patches ‘High-Severity’ Bugs Impacting Switches, Fibre Storage
Nine bugs were patched, eight of which are rated ‘high’ severity.
26 August 2020
6 Signs Your Supply Chain Risk Just Shot Up
Risk levels are not steady states. Here are six indications that the danger posed by your supply chain is headed in the wrong direction.
26 August 2020
6 Signs Your Supply Chain Risk Just Shot Up
Risk levels are not steady states. Here are six indications that the danger posed by your supply chain is headed in the wrong direction.
26 August 2020
Confessions of an ID Theft Kingpin, Part I
At the height of his cybercriminal career, the hacker known as "Hieupc" was earning $125,000 a month running a bustling identity theft service that siphoned consumer dossiers from some of the world's top data brokers. That is, until his greed and ambition played straight into an elaborate snare set by the U.S. Secret Service. Now, after more than seven years in prison Hieupc is back in his home country and hoping to convince other would-be cybercrooks to use their computer skills for good.26 August 2020
A quarter of the Alexa Top 10K websites are using browser fingerprinting scripts
Academics also discover many new previously unreported JavaScript APIs that are currently being used to fingerprint users.26 August 2020
The 'Shared Responsibility' Misnomer: Why the Cloud Continues to Confound
Under the "shared responsibility model," the security management of cloud offerings is split equally between the vendor and the customer. Easy enough, right?26 August 2020