December 2023 – We Fix PC

Android game dev’s Google Drive misconfig highlights cloud security risks

Japanese game developer Ateam has proven that a simple Google Drive configuration mistake can result in the potential but unlikely exposure of sensitive information for nearly one million people over a period of six years and eight months. […]

30 Dec

New Black Basta decryptor exploits ransomware flaw to recover files

Researchers have created a decryptor that exploits a flaw in Black Basta ransomware, allowing victims to recover their files for free. […]

29 Dec

The Week in Ransomware – December 29th 2023 – LockBit targets hospitals

It’s been a quiet week, with even threat actors appearing to take some time off for the holidays. We did not see much research released on ransomware this week, with most of the news focusing on new attacks and LockBit affiliates increasingly targeting hospitals. […]

29 Dec

Hospitals ask courts to force cloud storage firm to return stolen data

Two not-for-profit hospitals in New York are seeking a court order to retrieve data stolen in an August ransomware attack that’s now stored on the servers of a Boston cloud storage company. […]

29 Dec

Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts

Multiple information-stealing malware families are abusing an undocumented Google OAuth endpoint named “MultiLogin” to restore expired authentication cookies and log into users’ accounts, even if an account’s password was reset. […]

28 Dec

Steam game mod breached to push password-stealing malware

Downfall, a fan expansion for the popular Slay the Spire indie strategy game, was breached on Christmas Day to push Epsilon information stealer malware using the Steam update system. […]

28 Dec

Game mod on Steam breached to push password-stealing malware

Downfall, a fan expansion for the popular Slay the Spire indie strategy game, was breached on Christmas Day to push Epsilon information stealer malware using the Steam update system. […]

28 Dec

Eagers Automotive halts trading in response to cyberattack

Eagers Automotive has announced it suffered a cyberattack and was forced to halt trading on the stock exchange as it evaluates the impact of the incident. […]

28 Dec

EasyPark discloses data breach that may impact millions of users

Parking app developer EasyPark has published a notice on its website warning of a data breach it discovered on December 10, 2023, which impacts an unknown number of its millions of users. […]

28 Dec

Microsoft disables MSIX protocol handler abused in malware attacks

Microsoft has again disabled the MSIX ms-appinstaller protocol handler after multiple financially motivated threat groups abused it to infect Windows users with malware. […]

Month: December 2023

Android game dev’s Google Drive misconfig highlights cloud security risks

New Black Basta decryptor exploits ransomware flaw to recover files

The Week in Ransomware – December 29th 2023 – LockBit targets hospitals

Hospitals ask courts to force cloud storage firm to return stolen data

Malware abuses Google OAuth endpoint to ‘revive’ cookies, hijack accounts

Steam game mod breached to push password-stealing malware

Game mod on Steam breached to push password-stealing malware

Eagers Automotive halts trading in response to cyberattack

EasyPark discloses data breach that may impact millions of users

Microsoft disables MSIX protocol handler abused in malware attacks