Categories
APT Botnet Breach Bug CVE Cyber Security Data leak Hacking Malware Phishing Ransomware REvil Scam Skimming Trojan Vulnerability Zero-day

Threat actors target Finnish politicians’ email accounts, 21 Buttons exposes millions of users’ data, and more

Major cybersecurity events on 28th December 2020 (Evening Post): Multi-platform card skimmer found on Shopify, BigCommerce stores. REvil hackers plan to leak photos of plastic surgery patients after massive hack. GitHub-hosted malware calculates Cobalt Strike payload from Imgur pic.Continue readingThreat actors target Finnish politicians’ email accounts, 21 Buttons exposes millions of users’ data, and more

Categories
APT Botnet Breach Bug CVE Cyber Security Data leak DoppelPaymer Emotet Hacking Malware Phishing Ransomware REvil Scam Trojan Vulnerability Zero-day

iCloud outage causes account activation failure, GoDaddy apologizes for insensitive phishing email, and more

Major cybersecurity events on 28th December 2020 (Morning Post): Misconfigured AWS Bucket exposes hundreds of social influencers. Kaspersky Lab and Yandex detects malicious browser extensions including Frigate Light, Frigate CDN and SaveFrom. Fake Amazon gift card emails deliver the malware.Continue readingiCloud outage causes account activation failure, GoDaddy apologizes for insensitive phishing email, and more

Categories
Breach Bug Cyber Security Data leak Emotet Hacking Malware Phishing Ransomware Ryuk Scam TrickBot Trojan Vulnerability

US warns of COVID-themed phishing, fraud schemes, Emotet campaign returns after 7-week hiatus, and more

Major cybersecurity events on 23rd December 2020 (Morning Post): UK cryptocurrency exchange EXMO suffers breach, funds stolen. Ransomware downed UVM Medical Center systems, no payments have been made. New marketing campaign emerges against UK subway, using TrickBot malware.Continue readingUS warns of COVID-themed phishing, fraud schemes, Emotet campaign returns after 7-week hiatus, and more

Categories
ACE APT Botnet Breach Bug CVE Cyber Security Data leak Espionage Hacking Malware Phishing Ransomware RCE Scam Trojan Vulnerability Zero-day

TennCare breached, impacts 3,300 members, Hades ransomware gang targets Trucking giant Forward Air, and more

Major cybersecurity events on 22nd December 2020 (Morning Post): Nosy ex-partners armed with Instagram passwords pose a serious cybersecurity threat. Partial lists of organizations infected with Sunburst malware released online. Dell Wyse ThinOS flaws allow hacking thin clients.Continue readingTennCare breached, impacts 3,300 members, Hades ransomware gang targets Trucking giant Forward Air, and more

Categories
Breach Bug Cyber Security Data leak Hacking Malware Phishing Ransomware Scam Trojan Vulnerability

Users are advised to ignore FB Christmas bonus scam, Mexican drug cartels hold high-tech spyware, and more

Major cybersecurity events on 17th December 2020 (Evening Post): Phobos launches Orbital to find attack pathways and entry points in networks. Two malware-laced gems found in RubyGems repository, capable of replacing cryptocurrency wallet address in clipboard with attacker-supplied one.Continue readingUsers are advised to ignore FB Christmas bonus scam, Mexican drug cartels hold high-tech spyware, and more

Categories
APT Breach Bug CVE Cyber Security Data leak Hacking Malware Phishing Ransomware RCE Scam Trojan Virus Vulnerability

Vermont Medical Center attack costs $1.5M a day, Steam flaws let gamers crash opponents’ computers, and more

Major cybersecurity events on 10th December 2020 (Evening Post): njRAT Trojan operators use Pastebin as alternative to central command server. Leaky Elasticsearch server reveals massive Instagram click farm. Potential Starbucks remote code execution vulnerability uncovered and patched.Continue readingVermont Medical Center attack costs $1.5M a day, Steam flaws let gamers crash opponents’ computers, and more

Categories
Breach Bug cryptominers CVE Cyber Security Data leak Hacking Malware RAT RCE Trojan Vulnerability

Indian job portal IIMJobs hacked; database leaked online, Malicious NPM packages used to install njRAT remote access trojan, and more

Major cybersecurity events on 02nd December 2020 (Morning Post): Indian job portal IIMJobs hacked; database leaked online, Malicious NPM packages used to install njRAT remote access trojan, DarkIRC botnet is targeting the critical Oracle WebLogic CVE-2020-14882. Continue readingIndian job portal IIMJobs hacked; database leaked online, Malicious NPM packages used to install njRAT remote access trojan, and more

Categories
Arbitrary Code Execution Breach Bug COVID Credential Stuffing Cyber Security Data leak Hacking Malware Phishing Ransomware REvil Trojan Vulnerability

Baltimore County Public Schools Closed Due to Ransomware Attack, WebKit Vulnerabilities Allow Remote Code Execution via Malicious Websites, and more

Major cybersecurity events on 01st December 2020 (Evening Post): Baltimore County Public Schools Closed Due to Ransomware Attack, WebKit Vulnerabilities Allow Remote Code Execution via Malicious Websites, Gootkit malware returns to life alongside REvil ransomware.Continue readingBaltimore County Public Schools Closed Due to Ransomware Attack, WebKit Vulnerabilities Allow Remote Code Execution via Malicious Websites, and more

Categories
APT Breach Bug Credential Stuffing Cyber Security Data leak Espionage Hacking Malware Money laundering Phishing Ransomware Skimming Social Engineering Trojan Vulnerability

Indian National Gets 20-Year Jail in United States for Running Scam Call Centers, Microsoft links Vietnamese state hackers to crypto-mining malware campaign, and more

Major cybersecurity events on 01st December 2020 (Morning Post): Indian National Gets 20-Year Jail in United States for Running Scam Call Centers, Microsoft links Vietnamese state hackers to crypto-mining malware campaign, Credit card skimmer fills fake PayPal forms with stolen order info.Continue readingIndian National Gets 20-Year Jail in United States for Running Scam Call Centers, Microsoft links Vietnamese state hackers to crypto-mining malware campaign, and more

Categories
APT Arbitrary Code Execution Breach Bug COVID CVE Cyber Security Dark Web Data leak DoppelPaymer Hacking Malware Ransomware Snooping Social Engineering Trojan Vulnerability Zoombombing

A hacker is selling access to the email accounts of hundreds of C-level executives, Operators behind Dark Caracal are still alive and operational, and more

Major cybersecurity events on 30th November 2020 (Evening Post): Office 365 phishing campaign leverages Oracle and Amazon cloud services, A hacker is selling access to the email accounts of hundreds of C-level executives, Operators behind Dark Caracal are still alive and operational. Continue readingA hacker is selling access to the email accounts of hundreds of C-level executives, Operators behind Dark Caracal are still alive and operational, and more