Microsoft has released information about a security hole in Apple macOS that has since been patched and could be used by an attacker to go around security measures put in place to stop the execution of malicious software. The iPhone manufacturer resolved the flaw, dubbed Achilles (CVE-2022-42821, CVSS score: 5.5), with macOS Ventura 13, Monterey […]
The MacOS Vulnerability: Achilles Read More »
Popular password-management firm LastPass announced that it is looking into a second security issue in which hackers gained access to some of its customer data. According to LastPass CEO Karim Toubba, “We recently discovered suspicious activity within a third-party cloud storage service, which is now used by both LastPass and its partner, GoTo.” In October
LastPass Suffers Another Security Breach; Exposed Some Customers Information Read More »
Following its reluctance to pay a ransom, Medibank revealed on Thursday that the threat actors responsible for the disastrous cyberattack have disclosed another data dump of information taken from its systems on the dark web. The Australian health insurance said, “We are in the midst of reviewing the data, but the data released looks to
Hackers Leak Another Set of Medibank Customer Data on the Dark Web Read More »
The French data protection authority penalized Électricité de France €600,000 on Tuesday for failing to comply with the General Data Protection Regulation (GDPR) of the European Union. The electric utility was accused of violating European law by retaining the passwords for more than 25,800 accounts and hashing them using the MD5 technique as recently as
French Electricity Provider Fined for Using Weak MD5 Algorithm to Store User Passwords Read More »
The Google Play Store has been uncovered to be home to a malicious Android SMS software that secretly harvests text messages with the intention of opening accounts on numerous websites and services, including Facebook, Google, and WhatsApp. Over 100,000 people downloaded the Symoo app (com.vanjan.sms), which served as a relay for messages to be sent
On Monday, the U.S. Justice Department (DoJ) announced the removal of seven domain names in connection with a bitcoin “pig slaughtering” hoax. The actors received almost $10 million from five victims as part of the deceptive plan, according to the DoJ, which ran from May to August 2022. Pig butchering, also known as Sha Zhu
U.S. Authorities Burst Fake Crypto Investment Websites Read More »
It has been discovered that a well-known Windows information stealer by the name of ViperSoftX is used to spread a malicious extension for web browsers based on the Chromium operating system. Due to its standalone features that allow it to track website visits, steal login information and clipboard contents, and even swap cryptocurrency addresses via an
This Malware Steals Password & Crypto Using Browser Extensions Read More »
The assault infrastructure of Robin Banks, a phishing-as-a-service (PhaaS) platform, has been moved to DDoS-Guard, a Russian provider of secure hosting services. After “Cloudflare disassociated Robin Banks phishing infrastructure from its services, causing a multi-day disruption to operations,” according to a report from cybersecurity firm IronNet, the transfer was made. Since Cloudflare decided to blacklist
Russian Server Revives Robin Banks’ Phishing Service for Cybercriminals Read More »
In November 2021, 50,676 Bitcoin that had been taken in the 2012 attack of the now-defunct Silk Road dark web bazaar were seized, according to the U.S. Department of Justice (DoJ), which announced the seizure on Monday. When it was uncovered last year, the bitcoin, which was acquired in 2012 and valued at $3.36 billion,
U.S. Seizes Over 50K Bitcoin Worth $3.3 Billion Linked to Silk Road Dark Web Read More »
File hosting service Dropbox on Tuesday disclosed that it was the victim of a phishing campaign that allowed unidentified threat actors to gain unauthorized access to 130 of its source code repositories on GitHub. “These repositories included our own copies of third-party libraries slightly modified for use by Dropbox, internal prototypes, and some tools and
Dropbox Gets Hacked Read More »
