25 Jun FBI warns of fake law firms targeting crypto scam victims The FBI is warning of cybercriminals posing as law firms and lawyers that offer cryptocurrency recovery services to victims of investment scams and steal funds and personal information. […]
24 Jun New attack uses MSC files and Windows XSS flaw to breach networks A novel command execution technique dubbed ‘GrimResource’ uses specially crafted MSC (Microsoft Saved Console) and an unpatched Windows XSS flaw to perform code execution via the Microsoft Management Console. […]
24 Jun Four FIN9 hackers indicted for cyberattacks causing $71M in losses Four Vietnamese nationals linked to the international cybercrime group FIN9 have been indicted for their involvement in a series of computer intrusions that caused over $71 million in losses to companies in the U.S. […]
24 Jun CoinStats says North Korean hackers breached 1,590 crypto wallets CoinStats suffered a massive security breach that compromised 1,590 cryptocurrency wallets, with the attack suspected to have been carried out by North Korean threat actors. […]
23 Jun Facebook PrestaShop module exploited to steal credit cards Hackers are exploiting a flaw in a premium Facebook module for PrestaShop named pkfacebook to deploy a card skimmer on vulnerable e-commerce sites and steal people’s payment credit card details. […]
22 Jun CDK Global outage caused by BlackSuit ransomware attack The BlackSuit ransomware gang is behind CDK Global’s massive IT outage and disruption to car dealerships across North America, according to multiple sources familiar with the matter. […]
22 Jun Rafel RAT targets outdated Android phones in ransomware attacks An open-source Android malware named ‘Rafel RAT’ is widely deployed by multiple cybercriminals to attack outdated devices, some aiming to lock them down with a ransomware module that demands payment on Telegram. […]
22 Jun Ratel RAT targets outdated Android phones in ransomware attacks An open-source Android malware named ‘Ratel RAT’ is widely deployed by multiple cybercriminals to attack outdated devices, some aiming to lock them down with a ransomware module that demands payment on Telegram. […]
21 Jun Los Angeles Unified confirms student data stolen in Snowflake account hack The Los Angeles Unified School District has confirmed a data breach after threat actors stole student and employee data by breaching the company’s Snowflake account. […]
21 Jun US sanctions 12 Kaspersky Lab execs for working in Russian tech sector The Treasury Department’s Office of Foreign Assets Control (OFAC) has sanctioned twelve Kaspersky Lab executives for operating in the technology sector of Russia. […]