Categories
Breach Bug CVE Cyber Security DDoS Espionage Hacking Malware Ransomware RCE Scam Vulnerability

Empire Market offline, suspects exit scam, TikTok files lawsuit against US government, and more

Major cybersecurity events on 25th August (Morning Post): Iranian hackers leveraged RDP to deploy Dharma ransomware. Transsion, low-cost Android smartphones manufacturer, pre-installs malware on devices to list users on subscription services. Ransomware attack targets Brookfield Residential.Continue readingEmpire Market offline, suspects exit scam, TikTok files lawsuit against US government, and more

Categories
APT Breach CVE Cyber Security Data leak DDoS Hacking Malware Ransomware RAT Scam Vulnerability

Experian suffers data breach impacts 24m customers, Lucifer DDoS malware targets Linux systems, and more

Major cybersecurity events on 20th August 2020 (Morning Post): Data scraped from Instagram, TikTok and YouTube exposes 235 million social media profiles. Maze ransomware crew claims to have hacked SK hynix, leaks 5% of stolen files. Spotify fails to renew certificate, faces outage.Continue readingExperian suffers data breach impacts 24m customers, Lucifer DDoS malware targets Linux systems, and more

Categories
Botnet Breach Bug Data leak Hacking Malware Phishing Ransomware Smuggling Vulnerability

Anti-vaccination posts causes Facebook to be sued, China hacks Taiwan government email accounts, and more

Major cybersecurity events on 19th August 2020 (Evening Post): Voice phishing service targets corporate VPNs. Ongoing campaign uses HTML smuggling for malware delivery. FritzFrog malware attacks Linux servers over SSH to mine Monero. New vulnerability could put IoT devices at risk.Continue readingAnti-vaccination posts causes Facebook to be sued, China hacks Taiwan government email accounts, and more

Categories
Botnet Breach Cryptojacking Data leak Hacking Malware Ransomware Vulnerability

Title Insurance Company exposes millions of personal information, US registers a spike in ransomware attacks, and more

Major cybersecurity events on 24th July 2020 (Evening Post): About 280,000 Instacart customer records hacked and put for sale on the dark web. Prometei uses NSA exploits to steal data and mine Monero. Twitter hackers read private messages of 36 high-profile accounts.Continue readingTitle Insurance Company exposes millions of personal information, US registers a spike in ransomware attacks, and more

Categories
APT Botnet Breach CVE Cyber Security Hacking Malware RCE Vulnerability

Hacking forums loaded with Slack credentials, Meow attack targets dozens of Elasticsearch databases, and more

Major cybersecurity events on 23rd July 2020 (Evening Post): Prometei botnet spotted in the wild, exploits Windows SMB protocol to covertly mine for cryptocurrency. Fake cryptocurrency trading app hits Mac users with malware. Apple’s iPhone Research Device Program makes its debut. Continue readingHacking forums loaded with Slack credentials, Meow attack targets dozens of Elasticsearch databases, and more

Categories
Breach Cryptojacking CVE Cyber Security DDoS Hacking Malware Phishing Ransomware Spearphishing Vulnerability

Hackers sent explicit messages to breached list of students, Hidden Web Skimmers used to target ecommerce sites, and more

Major cybersecurity events on 29th June 2020 (Evening Post): Attackers hack E27, asks for donation in exchange for details about vulnerabilities. Maine Information and Analysis Center suffers data breach, leaks data. Evil Corp stopped from spreading ransomware, preventing attack on 30 major firms.Continue readingHackers sent explicit messages to breached list of students, Hidden Web Skimmers used to target ecommerce sites, and more

Categories
Botnet Breach CVE Cyber Security Malware Ransomware RCE Trojan Vulnerability

Expiring SSL certificates affect smart appliances, Thanos’ weaponized research tools target Windows users, and more

Major cybersecurity events on 11th June 2020 (Morning Post): Indian firm Compsys invites law suits after registering hoax domains. Snake Ransomware hits Honda and Energy Co. Contract tracing apps on Google Play deployed to steal data. Voting tech used in 5 US states fatally flawed. Continue readingExpiring SSL certificates affect smart appliances, Thanos’ weaponized research tools target Windows users, and more

Categories
APT Breach CVE Cyber Security Malware Phishing Spyware Vulnerability

Fake Valorant game scams gamers, Major attack on Israeli Water systems avoided, Retasked Valak steals data, and more

Major cybersecurity events on 29th May 2020 (Morning Post): Fake Arogya Setu app infects devices with spyware. Russia-linked APT group exploits flaw in EXIM. Iran-linked Charming Kitten targeted WHO: says Google. Continue readingFake Valorant game scams gamers, Major attack on Israeli Water systems avoided, Retasked Valak steals data, and more

Categories
Breach CVE Cyber Security DDoS Malware Phishing Ransomware Vulnerability

Cisco phishing targets Webex users, 1.41M US Doctors data on hacker forum, 500,000 Zoom accounts sold on dark web, and more

Major cybersecurity events on 13th April 2020: The database of more than 1 million SCUF Gaming customers was exposed online. Two airport websites “SFOConnect.com” and “SFOConstruction.com” became targets of hackers. US consumers report $12M in COVID-19 scam losses. Oracle tackles a massive 405 bugs for its patch update.Continue readingCisco phishing targets Webex users, 1.41M US Doctors data on hacker forum, 500,000 Zoom accounts sold on dark web, and more

Categories
CVE Cyber Security Emotet Malware Ransomware

CloudSEK Daily Threat Bulletin – 25th February 2020

Round Up of Major Breaches and Scams Threat group steals data by bypassing server firewall and masking C2 traffic What appears to be a state-sponsored threat group is using a technique called “Cloud Snooper” to bypass a server’s firewall to communicate with command and control (C2). The attackers deployed a rootkit that then installs a…Continue readingCloudSEK Daily Threat Bulletin – 25th February 2020