Recompiled binaries and phone threats used to boost the pressure Groups linked with the Play ransomware have exploited more than 900 organizations, the FBI said Wednesday, and have developed a number of new techniques in their double-extortion campaigns – including…
Category: The Register – Security
Ukraine strikes Russian bomber-maker with hack attack
Drones are not enough Following a daring drone attack on Russian airfields, Ukrainian military intelligence has reportedly also hacked the servers of Tupolev, the Kremlin’s strategic bomber maker.… This article has been indexed from The Register – Security Read the…
Ransomware scum leak patient data after disrupting chemo treatments at Kettering
Literally adding insult to injury Kettering Health patients who had chemotherapy sessions and pre-surgery appointments canceled due to a ransomware attack in May now have to deal with the painful prospect that their personal info may have been leaked online.……
Fake IT support calls hit 20 orgs, end in stolen Salesforce data and extortion, Google warns
Victims include hospitality, retail and education sectors A group of financially motivated cyberscammers who specialize in Scattered-Spider-like fake IT support phone calls managed to trick employees at about 20 organizations into installing a modified version of Salesforce’s Data Loader that…
Crims stole 40,000 people’s data from our network, admits publisher Lee Enterprises
Did somebody say ransomware? Not the newspaper group, not even to deny it Regional newspaper publisher Lee Enterprises says data belonging to around 40,000 people was stolen during an attack on its network earlier this year.… This article has been…
UK CyberEM Command to spearhead new era of armed conflict
Government details latest initiative following announcement last week Revealing more details about the Cyber and Electromagnetic (CyberEM) military domain, the UK’s Ministry of Defence (MoD) says “there are pockets of excellence” but improvements must be made to ensure the country’s…
Ukraine war spurred infosec vet Mikko Hyppönen to pivot to drones
Why? There’s a war in Europe, Finland has a belligerent neighbor, and cyber is a settled field Interview Mikko Hyppönen has spent the last 34 years creating security software that defends against criminals and state-backed actors, but now he’s moving…
‘Deliberate attack’ deletes shopping app’s AWS and GitHub resources
CEO of India’s KiranaPro, which brings convenience stores online, vows to name the perp The CEO of Indian grocery ordering app KiranaPro has claimed an attacker deleted its GitHub and AWS resources in a targeted and deliberate attack and vowed…
Meta pauses mobile port tracking tech on Android after researchers cry foul
Zuckercorp and Yandex used localhost loophole to tie browser data to app users, say boffins Security researchers say Meta and Yandex used native Android apps to listen on localhost ports, allowing them to link web browsing data to user identities…
You say Cozy Bear, I say Midnight Blizzard, Voodoo Bear, APT29 …
Microsoft, CrowdStrike, and pals promise clarity on cybercrew naming, deliver alias salad instead Opinion Microsoft and CrowdStrike made a lot of noise on Monday about teaming up with other threat-intel outfits to “bring clarity to threat-actor naming.”… This article has…
Google quietly pushes emergency fix for Chrome 0-day as exploit runs wild
TAG team spotted the V8 bug first, so you can bet nation-states weren’t far behind Google revealed Monday that it had quietly deployed a configuration change last week to block active exploitation of a Chrome zero-day.… This article has been…
X’s new ‘encrypted’ XChat feature seems no more secure than the failure that came before it
Musk’s ‘Bitcoin-style encryption’ claim has experts scratching their heads Elon Musk’s X social media platform is rolling out a new version of its direct messaging feature that the platform owner said had a “whole new architecture,” but as with many…
Crooks fleece The North Face accounts with recycled logins
Outdoorsy brand blames credential stuffing Joining the long queue of retailers dealing with cyber mishaps is outdoorsy fashion brand The North Face, which says crooks broke into some customer accounts using login creds pinched from breaches elsewhere.… This article has…
Microsoft patches the patch that put Windows 11 in a coma
Out-of-band is becoming the norm rather than the exception Microsoft is patching another patch that dumped some PCs into recovery mode with an unhelpful error code.… This article has been indexed from The Register – Security Read the original article:…
Illicit crypto-miners pouncing on lazy DevOps configs that leave clouds vulnerable
To stop the JINX-0132 gang behind these attacks, pay attention to HashiCorp, Docker, and Gitea security settings Up to a quarter of all cloud users are at risk of having their computing resources stolen and used to illicitly mine for…
Bling slinger Cartier tells customers to be wary of phishing attacks after intrusion
Nothing terribly valuable taken in data heist, though privacy a little tarnished Global jewelry giant Cartier is writing to customers to confirm their data was exposed to cybercriminals that broke into its systems.… This article has been indexed from The…
Ukrainians smuggle drones hidden in cabins on trucks to strike Russian airfields
A real-world Trojan Horse attack Ukraine claims it launched a cunning drone strike on Sunday against multiple Russian airbases, hitting over 40 military aircraft and inflicting an estimated $7 billion in damage, in an operation dubbed “Spiderweb.”… This article has…
US community bank says thieves drained customer data through third party hole
Disclosure at MainStreet Bancshares comes as American finance orgs beg for looser reporting requirements Community bank MainStreet Bancshares says thieves stole data belonging to some of its customers during an attack on a third-party provider.… This article has been indexed…
Lumma infostealer takedown may have inflicted only a flesh wound as crew keeps pinching and selling data
PLUS: Ransomware gang using tech support scam; Czechia accuses China of infrastructure attack; And more! Infosec In Brief Despite last week’s FBI announcement that it helped to take down the crew behind the Lumma infostealer, the malware continues to operate.……
Mysterious leaker GangExposed outs Conti kingpins in massive ransomware data dump
‘It’s a high-stakes intelligence war’ he told El Reg exclusive A mystery whistleblower calling himself GangExposed has exposed key figures behind the Conti and Trickbot ransomware crews, publishing a trove of internal files and naming names.… This article has been…