REvil Ransomware Gang Starts Auctioning Victim Data

The criminal group behind the REvil ransomware enterprise has begun auctioning off sensitive data stolen from companies hit by its malicious software. The move marks an escalation in tactics aimed at coercing victims to pay up -- and publicly shaming those who don't. But it may also signal that...

FBI: BEC Scam Losses Almost Double To Reach $1.2 Billion

Business email compromise BEC scams are squeezing more money than ever out of victims, with losses from the attacks almost doubling year-over-year in 2018 to reach $1.2 billion. That’s according to the FBI’s annual Internet Crime Report IC3 for 2018, which records the number of complaints, losses...

Two Hackers Charged with Hacking SEC System in Stock-Trading Scheme

The U.S. authorities have charged two Ukrainian hackers for hacking into the Securities and Exchange Commission's EDGAR filing system and stealing sensitive market-moving reports of companies before their public release. EDGAR, or Electronic Data Gathering, Analysis, and Retrieval, is an online...

Analysis of cyberattack on U.S. think tanks, non-profits, public sector by unidentified attackers

Reuters recently reported a hacking campaign focused on a wide range of targets across the globe. In the days leading to the Reuters publication, Microsoft researchers were closely tracking the same campaign. Our sensors revealed that the campaign primarily targeted public sector institutions and...

FTC Releases Alert with Cybersecurity Resources for Non-Profits and Small Businesses

The Federal Trade Commission FTC has released an alert with new cybersecurity resources for non-profits and small businesses. These resources, which cover topics such as ransomware, phishing, and email authentication, aim to help organizations protect their network and information. NCCIC encourag...

BEC is Big Business for Hackers: What makes these attacks so hard to prevent?

For years, one of the most lucrative ways for hackers to generate profits was through ransomware attacks. These instances involve the use of strong encryption to lock victims out of their files and data - attackers then sell the decryption key in exchange for an untraceable Bitcoin ransom payment...

Alleged Mastermind Behind Carbanak Crime Gang Arrested

The suspected mastermind behind the Carbanak criminal gang, which is notorious for stealing as much as $1 billion from more than 100 financial institutions in a string of attacks, has been apprehended, according to the Spanish National Police. According to the European Union Agency for Law...

Joomla Jtag Members Directory 5.3.7 SQL Injection

Title: Joomla Jtag Members Directory 5.3.7 - SQL injection Credit: Bilal KARDADOU Vendor: https://joomlatag.com URL: https://extensions.joomla.org/extensions/extension/clients-a-communities/members-lists/jtag-members-directory/ Product: 'Joomla Jtag Members Directory 5.3.7' Developer: JoomlaTag...

The Market for Stolen Account Credentials

Past stories here have explored the myriad criminal uses of a hacked computer, the various ways that your inbox can be spliced and diced to help cybercrooks ply their trade, and the value of a hacked company. Today's post looks at the price of stolen credentials for just about any e-commerce, ban...

October 12, 2017 – Morning Cyber Coffee Headlines – “Fall Harvest Edition” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! October 12, 2017 - Headlines Carbon Black in the News: Ransomware market soars...

Are All Ransom Attacks Considered Ransomware?

Ransomware has loomed large in the news of late. It seems to be around every turn, and it’s not going anywhere. The untraceability of Bitcoin payments, coupled with new blackhat tools available to anyone at little if any cost, means extortion attempts will continue to grab headlines worldwide. Bu...

Threat Outbreak Alert RuleID16387: Email Messages Distributing Malicious Software on July 2, 2015

Medium Alert ID: 39639 First Published: 2015 July 6 13:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16387 may contain the following files: Name | Size...

CVE-2014-7376

The Facebook Profits on Steroids aka com.wFacebookProfitsonSteroids application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Facebook Profits on Steroids aka com.wFacebookProfitsonSteroids application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7376

CVE-2014-7376 concerns the Android app Facebook Profits on Steroids (com.wFacebookProfitsonSteroids) version 0.1, which fails to validate X.509 certificates when connecting to SSL servers. This weakens transport security by enabling MITM attackers to spoof servers and obtain sensitive information...

Russian Mafia Organizes to Double Cybercrime Profits in 2011

The dollar-value of online criminal activity conducted by the Russian mafia and other criminal organizations doubled in 2011, according to a new report from the Russian security firm Group-IB. The global cyber crime market was worth $12.5 billion in 2011, the report claims. Russian-speaking...

MegaUpload founder Kim Dotcom released on bail

MegaUpload founder Kim Dotcom released on bail Kim Dotcom, the millionaire founder of the file-sharing website Megaupload, was released on bail Wednesday after a judge said he didn't appear to have enough money to flee. Authorities in the U.S. allege founder Kim Dotcom facilitated millions of...

New Analysis Shows Pushdo Botnet Sent Trillions of Spam Emails, Generated Millions in Profits

A new, detailed analysis of the operations of the infamous Cutwail/Pushdo botnet shows that the network, which had been he target of several takedown attempts in the last couple of years, is not only amazingly resilient, but also is incredibly prolific, with one section of the botnet sending more...

Hack-a-mole: Disgruntled Programmer Accused of Sabotaging Arcade Game Classic

Marvin Walter Wimberly, Jr., a sixty one year-old programmer and game board designer has been charged by authorities in Florida with committing computer crimes with the intent to defraud after his employer, game maker Bob’s Space Racers BSR uncovered an elaborate scheme in which popular arcade...

Mariposa Operators Did Not Use Cookie Stuffing

According to the researcher who helped take down Mariposa, the operators who purchased the bot software from the man known as “Iserdo” and then built Mariposa, for some reason didn’t opt for the feature, which he offered for 200 euros, even though it would have increased their potential profits...