alex holden Archives - s0x • Austin Managed IT Services

17 Mar, 2022

Pro-Ukraine ‘Protestware’ Pushes Antiwar Ads, Geo-Targeted Malware

Cybersecurity alex holden, GitHub, Hold Security, protestware, Russia's War on Ukraine, The Coming Storm

1 Mar, 2022

Conti Ransomware Group Diaries, Part I: Evasion

Cybersecurity alex holden, Alla Witte, Conti, Conti breach, Conti ransomware, Contileaks, Emercoin, EmerDNS, Hof, Hold Security, Ne'er-Do-Well News, Ransomware, REvil ransomware, Stern, The Coming Storm, trickbot, Ukraine

A Ukrainian security researcher this week leaked several years of internal chat logs and other sensitive data tied to Conti, an aggressive and ruthless Russian cybercrime group that focuses on deploying its ransomware to companies with more than $100 million in annual revenue. The chat logs offer a fascinating glimpse into the challenges of running a sprawling criminal enterprise with more than 100 salaried employees. The records also provide insight into how Conti has dealt with its own internal breaches and attacks from private security firms and foreign governments. …

13 Oct, 2021

How Coinbase Phishers Steal One-Time Passwords

Cybersecurity A Little Sunshine, alex holden, Bleeping Computer, Coinbase, Coinbase phishing, Hold Security, Lawrence Abrams, one-time password phishing, The Coming Storm, Web Fraud 2.0

20 Sep, 2021

Does Your Organization Have a Security.txt File?

Cybersecurity alex holden, Alphabet, amazon, Edwin Foudil, Facebook, HCA Healthcare, Hold Security, Kroger, Procter & Gamble, Security Tools, security.txt, USAA, Walmart

It happens all the time: Organizations get hacked because there isn’t an obvious way for security researchers to let them know about security vulnerabilities or data leaks. Or maybe it isn’t entirely clear who should get the report when remote access to an organization’s internal network is being sold in the cybercrime underground. In a bid to minimize these scenarios, a growing number of major companies are adopting “Security.txt,” a proposed new Internet standard that helps organizations describe their vulnerability disclosure practices and preferences. …

8 Jul, 2021

Kaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software

Cybersecurity A Little Sunshine, alex holden, CVE-2015-2862, CVE-2021-30116, Data Breaches, Dutch Institute for Vulnerability Disclosure, Fred Voccola, Hold Security, Kaseya, Mandiant, Michael Sanders, Ransomware, rEvil, Victor Gevers, Wietse Boonstra

Last week cybercriminals deployed ransomware to 1,500 organizations that provide IT security and technical support to many other companies. The attackers exploited a vulnerability in software from Kaseya, a Miami-based company whose products help system administrators manage large networks remotely. Now it appears Kaseya’s customer service portal was left vulnerable until last week to a data-leaking security flaw that was first identified in the same software six years ago. …

15 Jun, 2021

How Does One Get Hired by a Top Cybercrime Gang?

Cybersecurity alex holden, Alla Witte, Breadcrumbs, DarkSide, Hold Security, Ne'er-Do-Well News, trickbot, U.S. Department of Justice

The U.S. Department of Justice (DOJ) last week announced the arrest of a 55-year-old Latvian woman who’s alleged to have worked as a programmer for Trickbot, a malware-as-a-service platform responsible for infecting millions of computers and seeding many of those systems with ransomware. Just how did a self-employed web site designer and mother of two come to work for one of the world’s most rapacious cybercriminal groups and then leave such an obvious trail of clues indicating her involvement with the gang? This post explores answers to those questions, as well as some of the ways Trickbot and other organized cybercrime gangs gradually recruit, groom and trust new programmers. …

29 Oct, 2020

FBI, DHS, HHS Warn of Imminent, Credible Ransomware Threat Against U.S. Hospitals

Cybersecurity alex holden, Charles Carmakal, Department of Homeland Security, fbi, Health and Human Services, Hold Security, Latest Warnings, Mandiant, Ransomware, Reuters, Ryuk, The Coming Storm

On Monday, Oct. 27, KrebsOnSecurity began following up on a tip from a reliable source that an aggressive Russian cybercriminal gang known for deploying ransomware was preparing to disrupt information technology systems at hundreds of hospitals, clinics and medical care facilities across the United States. Today, officials from the FBI and the U.S. Department of Homeland Security hastily assembled a conference call with healthcare industry executives warning about an “imminent cybercrime threat to U.S. hospitals and healthcare providers.” …

10 Oct, 2020

Report: U.S. Cyber Command Behind Trickbot Tricks

Cybersecurity alex holden, Hold Security, national security agency, Ne'er-Do-Well News, Ransomware, The Washington Post, trickbot, U.S. Cyber Command

2 Oct, 2020

Attacks Aimed at Disrupting the Trickbot Botnet

Cybersecurity alex holden, Hold Security, Intel 471, Mark Arena, Ransomware, Ryuk, The Coming Storm, trickbot, UHS, Universal Health Services

27 Jul, 2020

Business ID Theft Soars Amid COVID Closures

Cybersecurity alex holden, business identity theft, COVID-19, Dun & Bradstreet, Eva Velasquez, Fan Experiences, Hold Security, Identity Theft Resource Center, Mary McMahan, Scott Russell, Target: Small Businesses, The Coming Storm

Identity thieves who specialize in running up unauthorized lines of credit in the names of small businesses are having a field day with all of the closures and economic uncertainty wrought by the COVID-19 pandemic, KrebsOnSecurity has learned. This story is about the victims of a particularly aggressive business ID theft ring that’s spent years targeting small businesses across the country and is now pivoting toward using that access for pandemic assistance loans and unemployment benefits. …

Tag Archives: alex holden