Cyber Attacks

Rackspace Admits Play Ransomware Gang Was Behind Recent Breach

On Thursday, cloud services provider Rackspace acknowledged that the intrusion from last month was caused by the Play ransomware group. A previously unidentified security exploit was used by the security event, which happened on December 2, 2022, to acquire initial access to the Rackspace Hosted Exchange email system. The Texas-based business stated that “CVE-2022-41080 is […]

Rackspace Admits Play Ransomware Gang Was Behind Recent Breach Read More »

BitKeep Confirms Cyber Attack, Loses Over $9 Million in Digital Currencies

BitKeep, a decentralized multi-chain cryptocurrency wallet, announced a cyber attack on its Android app on Wednesday that allowed threat actors to spread fake copies of it in order to steal users’ digital money. In a “large-scale hacking event,” according to BitKeep CEO Kevin Como, “the altered APK caused the disclosure of user’s private keys and

BitKeep Confirms Cyber Attack, Loses Over $9 Million in Digital Currencies Read More »

LastPass Acknowledges Serious Data Breach, Password Vaults Stolen

The LastPass security breach in August 2022 might have been more serious than the firm had initially revealed. The well-known password management service disclosed on Thursday that, using information stolen from the earlier break-in, malicious actors were able to steal a wealth of personal information belonging to its users, including their encrypted password vaults. Basic

LastPass Acknowledges Serious Data Breach, Password Vaults Stolen Read More »

FBI Files 6 Charges, Seizes 48 Domains Associated with DDoS-for-Hire Service Platforms

In an effort to lower the entrance barrier for malicious activity, the U.S. Department of Justice (DoJ) on Wednesday announced the seizure of 48 domains that provided services to carry out distributed denial-of-service (DDoS) cyberattacks on behalf of other threat actors. Additionally, six individuals were charged for their alleged ownership of the operation: Jeremiah Sam

FBI Files 6 Charges, Seizes 48 Domains Associated with DDoS-for-Hire Service Platforms Read More »

LastPass Suffers Another Security Breach; Exposed Some Customers Information

Popular password-management firm LastPass announced that it is looking into a second security issue in which hackers gained access to some of its customer data. According to LastPass CEO Karim Toubba, “We recently discovered suspicious activity within a third-party cloud storage service, which is now used by both LastPass and its partner, GoTo.” In October

LastPass Suffers Another Security Breach; Exposed Some Customers Information Read More »

This Malicious App used Infected Devices to Create Phony Accounts across Multiple Platforms.

The Google Play Store has been uncovered to be home to a malicious Android SMS software that secretly harvests text messages with the intention of opening accounts on numerous websites and services, including Facebook, Google, and WhatsApp. Over 100,000 people downloaded the Symoo app (com.vanjan.sms), which served as a relay for messages to be sent

This Malicious App used Infected Devices to Create Phony Accounts across Multiple Platforms. Read More »

This Malware Steals Password & Crypto Using Browser Extensions

It has been discovered that a well-known Windows information stealer by the name of ViperSoftX is used to spread a malicious extension for web browsers based on the Chromium operating system. Due to its standalone features that allow it to track website visits, steal login information and clipboard contents, and even swap cryptocurrency addresses via an

This Malware Steals Password & Crypto Using Browser Extensions Read More »

Russian Server Revives Robin Banks’ Phishing Service for Cybercriminals

The assault infrastructure of Robin Banks, a phishing-as-a-service (PhaaS) platform, has been moved to DDoS-Guard, a Russian provider of secure hosting services. After “Cloudflare disassociated Robin Banks phishing infrastructure from its services, causing a multi-day disruption to operations,” according to a report from cybersecurity firm IronNet, the transfer was made. Since Cloudflare decided to blacklist

Russian Server Revives Robin Banks’ Phishing Service for Cybercriminals Read More »

U.S. Seizes Over 50K Bitcoin Worth $3.3 Billion Linked to Silk Road Dark Web

In November 2021, 50,676 Bitcoin that had been taken in the 2012 attack of the now-defunct Silk Road dark web bazaar were seized, according to the U.S. Department of Justice (DoJ), which announced the seizure on Monday. When it was uncovered last year, the bitcoin, which was acquired in 2012 and valued at $3.36 billion,

U.S. Seizes Over 50K Bitcoin Worth $3.3 Billion Linked to Silk Road Dark Web Read More »