Cybersecurity
When the London-based billionaire Viktor Prokopenya decided to stop his cryptocurrency exchange group Currency.com serving clients in Russia last week, he did not realise how rapidly the backlash would arrive. Within minutes of the announcement came a torrent of…
The Media Institute of Southern Africa in Malawi (MISA-Malawi), a watchdog group, has accused the Malawi Police Service of hacking a website for the Platform for Investigative Journalism. The accusation comes after the media organization said Thursday that its…
The State Department announced Friday that it is offering a reward of up to $5 million for information about North Korean digital operations that help keep the regime afloat and fund its weapons programs. The department’s Rewards for Justice program will issue the money…
The North Korean-linked Lazarus group sent fake job offers to targets in the chemical sector and information technology firms, which — when opened — install Trojan horse programs to collect information and send it back to the attackers, technology provider…
Cloud-based repository hosting service GitHub on Friday revealed that it discovered evidence of an unnamed adversary capitalizing on stolen OAuth user tokens to unauthorizedly download private data from several organizations. "An attacker abused stolen OAuth user…
After breaching servers managed by the cybercriminals, security researchers found a connection between Conti ransomware and the recently emerged Karakurt data extortion group, showing that the two gangs are part of the same operation. The Conti ransomware…
In many ransomware incidents, Russia-linked actors often play the role of attacker rather than the victim. But in recent weeks, cyberattacks have crippled Russian companies and disrupted government agencies. Late last month, a ransomware gang by the name of OldGremlin…
Google fixed two vulnerabilities in its Chrome web browser as part of an emergency update this week, including a type confusion vulnerability that is already being exploited in the wild. The type confusion vulnerability (CVE-2022-1364) impacts the JavaScript and…
Threat actors have launched a new marketplace called Industrial Spy that sells stolen data from breached companies, as well as offering free stolen data to its members. While stolen data marketplaces are not new, instead of extorting companies and scaring them with GDPR…
An ongoing phishing campaign targets T-Mobile customers with malicious links using unblockable texts sent via SMS (Short Message Service) group messages. The New Jersey Cybersecurity & Communications Integration Cell (NJCCIC) issued a warning after multiple…