Tag: theft
-
HubPhish Exploits HubSpot Tools to Target 20,000 European Users for Credential Theft
Cybersecurity researchers have disclosed a new phishing campaign that has targeted European companies with an aim to harvest account credentials and take control of the victims’ Microsoft Azure cloud infrastructure.The campaign has been codenamed HubPhish by Palo Alto Networks Unit 42 owing to the abuse of HubSpot tools in the attack chain. Targets include at…
-
Nebraska AG sues Change Healthcare, UnitedHealth for data theft after ransomware attack
The 29-page filing alleges violations of Nebraska’s consumer protection and data security laws and says Change Healthcare, which is owned by UnitedHealth Group (UHG), failed to implement proper security measures that exacerbated the data breach, disrupting critical healthcare services across the state.]]> First seen on therecord.media Jump to article: therecord.media/nebraska-ag-sues-change-healthcare-unitedhealth-after-ransomware-attack
-
That cheap webcam? HiatusRAT may be targeting it, FBI warns
Webcams have been a key part of business and home offices everywhere, especially since the COVID pandemic hit. But they are not often high-quality products, especially if used only sporadically, as many consumers and remote workers are content with a cheap one from China. This not only causes regular hardware problems, but it can also be…
-
10 Major Ransomware Attacks And Data Breaches In 2024
Major ransomware attacks and data breaches in 2024 included the Change Healthcare attack, data theft attacks targeting Snowflake customers and the China-linked Salt Typhoon campaign against U.S. government officials. First seen on crn.com Jump to article: www.crn.com/news/security/2024/10-major-ransomware-attacks-and-data-breaches-in-2024
-
Thousands Affected by Data Theft Hack of Smallest US State
Brain Cipher Gang Claims Credit for Hit on State of Rhode Island’s Vendor Deloitte. Potentially hundreds of thousands of Rhode Islanders are affected by an attack on RIBridges, the state’s IT system for health and human service benefits, including Medicaid. Cybercriminal group Brain Cipher claims to have stolen 1 terabyte of data from Deloitte, which…
-
5 Things To Know On The Cleo Data Theft Attacks
The cybercriminal group Clop, previously responsible for the widely felt MOVEit data theft attacks of 2023, has reportedly claimed responsibility for the recent attacks exploiting Cleo file transfer tools. First seen on crn.com Jump to article: www.crn.com/news/security/2024/5-things-to-know-on-the-cleo-data-theft-attacks
-
Fake Captcha Campaign Highlights Risks of Malvertising Networks
Large-scale campaign identified by Guardio Lans and Infoblox, exploiting malvertising and fake captchas to distribute Lumma infostealer for massive theft First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/fake-captcha-campaign-risks/
-
Clop ransomware claims responsibility for Cleo data theft attacks
The Clop ransomware gang has confirmed to BleepingComputer that they are behind the recent Cleo data-theft attacks, utilizing zero-day exploits to breach corporate networks and steal data. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/clop-ransomware-claims-responsibility-for-cleo-data-theft-attacks/
-
PDQ Deploy users warned of credential-theft risk
First seen on scworld.com Jump to article: www.scworld.com/news/pdq-deploy-users-warned-of-credential-theft-risk
-
Cyberint’s 2024 Report Highlights Surge in Credential Theft and Rise of AI-Powered Phishing
Cyberint, a Check Point company, has released its 2024 Cyber Security Landscape Report, painting a concerning picture of the evolving threat landscape. The report, drawing on data from the Cyberint Argos Platform, analysed 140,000 cyber threat alerts across critical industries, revealing a 333% surge in credential theft, a significant rise in supply chain attacks, and…
-
DoJ Indicts 14 North Koreans for $88M IT Worker Fraud Scheme Over Six Years
The U.S. Department of Justice (DoJ) has indicted 14 nationals belonging to the Democratic People’s Republic of Korea (DPRK or North Korea) for their alleged involvement in a long-running conspiracy to violate sanctions and commit wire fraud, money laundering, and identity theft by illegally seeking employment in U.S. companies and non-profit organizations.”The conspirators, who worked…
-
US Indicts 14 North Koreans in IT Scam Funding WMD Programs
DOJ Indicts North Korean IT Workers for Using Remote Jobs to Fund Weapons Programs. U.S. federal prosecutors indicted 14 North Koreans for a long-running IT scam generating $88 million by exploiting remote work with U.S. firms, a scheme prosecutors say is tied to DPRK-controlled companies that fund weapons programs through stolen identities, data theft and…
-
Cleo patches critical zero-day exploited in data theft attacks
Cleo has released security updates for a zero-day flaw in its LexiCom, VLTransfer, and Harmony software, currently exploited in data theft attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cleo-patches-critical-zero-day-exploited-in-data-theft-attacks/
-
Ongoing widespread AWS customer credential theft exposed by open S3 bucket
First seen on scworld.com Jump to article: www.scworld.com/news/ongoing-widespread-aws-customer-credential-theft-exposed-by-open-s3-bucket
-
New Cleo zero-day RCE flaw exploited in data theft attacks
Hackers are actively exploiting a zero-day vulnerability in Cleo managed file transfer software to breach corporate networks and conduct data theft attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-cleo-zero-day-rce-flaw-exploited-in-data-theft-attacks/
-
AppLite: A New AntiDot Variant Targeting Mobile Employee Devices
Our zLabs team has identified an extremely sophisticated mishing (mobile-targeted phishing) campaign that delivers malware to the user’s Android mobile device enabling a broad set of malicious actions including credential theft of banking, cryptocurrency and other critical applications. First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/applite-a-new-antidot-variant-targeting-mobile-employee-devices/
-
WhatsApp finally fixes View Once flaw that allowed theft of supposedly vanishing pics
And it only took four months, tut First seen on theregister.com Jump to article: www.theregister.com/2024/12/10/whatsapp_view_once/
-
Radiant Capital Incident: $50M Cyber Heist Linked to North Korean Threat Actors
A new report from Radiant Capital provides a detailed analysis of the sophisticated cyberattack that led to the theft of approximately $50 million USD on October 16, 2024. The findings,... First seen on securityonline.info Jump to article: securityonline.info/radiant-capital-incident-50m-cyber-heist-linked-to-north-korean-threat-actors/
-
Deloitte denied its systems were hacked by Brain Cipher ransomware group
Deloitte has responded to claims by the Brain Cipher ransomware group, which alleges the theft of over 1 terabyte of the company’s data. Recently, the ransomware group Brain Cipher added Deloitte UK to its Tor leak site. The gang claimed to have stolen one terabyte of compressed data from the company. A Deloitte spokesperson addressed…
-
Blue Yonder Probing Data Theft Claims After Ransomware Gang Takes Credit for Attack
The Blue Yonder ransomware attack that caused disruptions to Starbucks and major grocery stores may have also involved information theft. The post Blue Yonder Probing Data Theft Claims After Ransomware Gang Takes Credit for Attack appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/blue-yonder-probing-data-theft-claims-after-ransomware-gang-takes-credit-for-attack/
-
Deloitte Responds After Ransomware Group Claims Data Theft
Deloitte has issued a response after the Brain Cipher ransomware group claimed to have stolen over 1 Tb of information belonging to the company. The post Deloitte Responds After Ransomware Group Claims Data Theft appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/deloitte-responds-after-ransomware-groups-claims-data-theft/
-
Blue Yonder investigating data theft claims after ransomware gang takes credit for cyberattack
Supply chain software giant Blue Yonder says it is investigating claims of data theft after a ransomware gang threatened to publish troves of data stolen from the company. Arizona-based Blue Yonder, which provides supply chain management software to thousands of organizations including DHL, Starbucks and Walgreens, was hit by a cyberattack on November 21. The…
-
Video: Protect Your Identity After the NPD Data Breach
A recent data breach at National Public Data (NPD), including the theft of Social Security numbers, shows the need to protect your identity and prevent fraud. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/video/protect-your-identity-after-npd-data-breach/