Tag: service
-
Hotel chain ditches Google search for DuckDuckGo, ‘subjected to fraud attempts daily’
Tags: apple, attack, authentication, browser, chrome, cloud, control, cybercrime, cybersecurity, data-breach, fraud, google, jobs, malware, mfa, monitoring, phishing, privacy, ransomware, risk, scam, service, tool, windowsAt the end of 2021, Nordic Choice Hotels, now renamed Strawberry, was hit by a major ransomware attack that paralyzed operations for just over a week. Everything had to be done manually, says Martin Belak, who is responsible for the hotel chain’s technical security.”The receptionists worked with whiteboards to keep track of which rooms were…
-
US attacks ransomware supply chain with indictment of three cryptocurrency mixer operators
Tags: attack, business, control, crypto, cybercrime, group, hacking, law, offense, office, ransomware, russia, service, supply-chainThe US Department of Justice indicted three Russian citizens on Friday for allegedly running services that helped criminals launder cryptocurrency; the services are suspected to have been used to hide the proceeds of ransomware attacks.The US Department of Treasury’s Office of Foreign Assets Control (OFAC) had previously sanctioned the two cryptocurrency mixer services the accused…
-
Poland uncovers Russia-linked disinformation campaign targeting upcoming presidential election
The group behind the operation is likely controlled by the Russian military intelligence service, GRU, which recruits individuals “from various backgrounds,” said Poland’s digital affairs minister.]]> First seen on therecord.media Jump to article: therecord.media/poland-uncovers-russia-linked-disinformation-campaign-presidential-election
-
Microsoft sues ‘foreign-based’ cyber-crooks, seizes sites used to abuse AI
Scumbags stole API keys, then started a hacking-as-a-service biz, it is claimed First seen on theregister.com Jump to article: www.theregister.com/2025/01/13/microsoft_sues_foreignbased_crims_seizes/
-
Microsoft Sues Hackers Over Alleged Use Of Breached Azure OpenAI Services
First seen on scworld.com Jump to article: www.scworld.com/brief/microsoft-sues-hackers-over-alleged-use-of-breached-azure-openai-services
-
Inexperienced actors developed the FunkSec ransomware using AI tools
FunkSec, a new ransomware group that attacked more than 80 victims in December 2024, was developed using AI tools. The FunkSec ransomware-as-a-service (RaaS) group has been active since late 2024, the gang published over 85 victims in December 2024. The group likely used AI-based systems to quickly develop advanced tools, blending hacktivism and cybercrime. However,…
-
Microsoft 365 MFA Outage Fixed
Microsoft confirmed an outage of its multi-factor authentication system impacting access to Microsoft 365, causing login failures and service disruption First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/mfa-disruption-impacted-access/
-
3 Russians Indicted for Operating Blender.io and Sinbad.io Crypto Mixers
SUMMARY Three Russian nationals have been indicted for their alleged roles in running cryptocurrency mixing services Blender.io and… First seen on hackread.com Jump to article: hackread.com/3-russian-operating-blender-io-sinbad-io-crypto-mixers/
-
Aryaka startet CyberResearch-Lab
Der Spezialist für Unified-SASE-as-a-Service, Aryaka, hat das (CTRL) ins Leben gerufen, ein proaktives Forschungszentrum, das sich der Identifizierung, Analyse und Entschärfung aufkommender Netzwerksicherheitsrisiken und -bedrohungen widmet. Zudem hat das Unternehmen zwei neue Positionen besetzt. Geleitet wird das CTRL, das auch für die Weiterentwicklung von Unified-SASE-as-a-Service sorgen soll, von Aditya Sood, […] First seen on netzpalaver.de…
-
Alleged Blender, Sinbad cryptomixer operators arrested, indicted
Three Russian nationals have been indicted in the Northern District of Georgia for their alleged role as operators of cryptocurrency mixing (cryptomixer) services Blender.io … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/13/alleged-blender-sinbad-cryptomixer-operators-arrested-indicted/
-
Microsoft Warns of MFA Issue Affecting Microsoft 365 users
Microsoft has issued a warning regarding an ongoing issue with Multi-Factor Authentication (MFA) that is impacting some Microsoft 365 (M365) users. The problem, which surfaced earlier today, is preventing affected users from accessing certain M365 applications, raising concerns for businesses and individuals who rely on these services for essential operations. Microsoft flagged the issue via…
-
Microsoft took legal action against crooks who developed a tool to abuse its AI-based services
In December, Microsoft sued a group for creating tools to bypass safety measures in its cloud AI products. Microsoft filed a complaint with the Eastern District Court of Virginia against ten individuals for using stolen credentials and custom software to breach computers running Microsoft’s Azure OpenAI services to generate content for harmful purposes. >>Defendants used…
-
Hackers Exploiting YouTube to Spread Malware That Steals Browser Data
Malware actors leverage popular platforms like YouTube and social media to distribute fake installers. Reputable file hosting services are abused to host malware and make detection challenging. Password protection and encoding techniques further complicate analysis and evade early sandbox detection. Once a system is compromised, malware can steal sensitive data from web browsers by exploiting…
-
Security Affairs newsletter Round 506 by Pierluigi Paganini INTERNATIONAL EDITION
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. DoJ charged three Russian citizens with operating crypto-mixing services U.S. cannabis dispensary STIIIZY disclosed a data breach A…
-
Azure networking snafu enters day 2, some services still limping
Struggling to connect to the cloud? You’re not alone First seen on theregister.com Jump to article: www.theregister.com/2025/01/10/microsoft_azure_networking_snafu/
-
DoJ charged three Russian citizens with operating crypto-mixing services
The U.S. Department of Justice charged three Russian citizens with operating crypto-mixing services that helped crooks launder cryptocurrency. The U.S. Department of Justice (DoJ) charged Russian national Roman Vitalyevich Ostapenko, Alexander Evgenievich Oleynik, and Anton Vyachlavovich Tarasov with operating crypto-mixing services Blender.io and Sinbad.io that helped crooks launder cryptocurrency. Roman Vitalyevich Ostapenko and Alexander Evgenievich…
-
Fake PoC Exploit Targets Cybersecurity Researchers with Malware
A fake proof-of-concept (PoC) exploit designed to lure cybersecurity researchers into downloading malicious software. This deceptive tactic leverages a recently patched critical vulnerability in Microsoft’s Windows LDAP service (CVE-2024-49113), which can cause denial-of-service attacks. First seen on hackread.com Jump to article: hackread.com/fake-poc-exploit-hit-cybersecurity-researchers-malware/
-
Neue und verbesserte Version des Banshee-Stealers nimmt MacOS-Nutzer ins Visier
Check Point Software Technologies warnt vor einer neuen und verbesserten Version des Banshee-Stealers. Er nimmt MacOS-Nutzer ins Visier, was bedeutet, dass über 100 Millionen Anwender bedroht sind. Banshee tauchte mitten im Jahr 2024 als Stealer-as-a-Service für 3.000 US-Dollar als Mietmodell auf. Die Malware nutzte ab September sogar die Funktion String-Encryption aus Apples eigenem Programm XProtect,…
-
US bank FNBO uses Pindrop to tackle voice fraud, deepfakes
Learn how First National Bank of Omaha in the US is enhancing customer authentication and verification in its contact centres, eliminating friction points and making life easier for its customer service teams, with Pindrop voice security technology First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366617954/US-bank-FNBO-uses-Pindrop-to-tackle-voice-fraud-deepfakes
-
New Paper: “Future of SOC: Transform the ‘How’” (Paper 5)
After a long, long, long writing effort “¦ eh “¦ break, we are ready with our 5th Deloitte and Google Cloud Future of the SOC paper “Future of SOC: Transform the ‘How’.” As a reminder (and I promise you do need it; it has been years”¦), the previous 4 papers are: “New Paper: “Future of the SOC: Evolution or…
-
US charges operators of cryptomixers linked to ransomware gangs
The U.S. Department of Justice indicted three operators of sanctioned Blender.io and Sinbad.io crypto mixer services used by ransomware gangs and North Korean hackers to launder ransoms and stolen cryptocurrency. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-charges-operators-of-cryptomixers-linked-to-ransomware-gangs/
-
Microsoft Sues Hacking Group Exploiting Azure AI for Harmful Content Creation
Microsoft has revealed that it’s pursuing legal action against a “foreign-based threatactor group” for operating a hacking-as-a-service infrastructure to intentionally get around the safety controls of its generative artificial intelligence (AI) services and produce offensive and harmful content.The tech giant’s Digital Crimes Unit (DCU) said it has observed the threat actors “develop First seen on…
-
DoJ Indicts Three Russians for Operating Crypto Mixers Used in Cybercrime Laundering
The U.S. Department of Justice (DoJ) on Friday indicted three Russian nationals for their alleged involvement in operating the cryptocurrency mixing services Blender.io and Sinbad.io.Roman Vitalyevich Ostapenko and Alexander Evgenievich Oleynik were arrested on December 1, 2024, in coordination with the Netherlands’ Financial Intelligence and Investigative Service, Finland’s National Bureau of First seen on thehackernews.com…
-
Microsoft sues service for creating illicit content with its AI platform
Service used undocumented APIs and other tricks to bypass safety guardrails. First seen on arstechnica.com Jump to article: arstechnica.com/security/2025/01/microsoft-sues-service-for-creating-illicit-content-with-its-ai-platform/
-
Hack of Rhode Island social services platform impacted at least 709K, officials say
State officials received reports from Deloitte and a third-party forensic firm showing the threat to the database has been mitigated and;efforts are underway to restore access. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/rhode-island-social-services-breach-709k/737111/
-
Microsoft accuses group of developing tool to abuse its AI service in new lawsuit
Microsoft has taken legal action against a group the company claims intentionally developed and used tools to bypass the safety guardrails of its cloud AI products. According to a complaint filed by the company in December in the U.S. District Court for the Eastern District of Virginia, a group of 10 unnamed defendants allegedly used…
-
US government charges operators of crypto mixing service used by North Korea and ransomware gangs
Three Russian citizens were charged with money laundering for their role in operating Blender.io and Sinbad.io crypto mixing services. First seen on techcrunch.com Jump to article: techcrunch.com/2025/01/10/us-government-charges-operators-of-crypto-mixing-service-used-by-north-korea-and-ransomware-gangs/
-
MSSP Market Update: Cohesity Adds Incident Response to CERT Services
First seen on scworld.com Jump to article: www.scworld.com/news/mssp-market-update-cohesity-adds-incident-response-to-cert-services