• Search for:
    9 Jun, 2020
    Florence, Ala. Hit By Ransomware 12 Days After Being Alerted by KrebsOnSecurity
    Cybersecurity , , , , , , , , ,

    In late May, KrebsOnSecurity alerted numerous officials in Florence, Ala. that their information technology systems had been infiltrated by hackers who specialize in deploying ransomware. Nevertheless, on Friday, June 5, the intruders sprang their attack, deploying ransomware and demanding nearly $300,000 worth of bitcoin. City officials now say they plan to pay the ransom demand, in hopes of keeping the personal data of their citizens off of the Internet. …

    Read MoreFlorence, Ala. Hit By Ransomware 12 Days After Being Alerted by KrebsOnSecurity

    19 May, 2020
    Ukraine Nabs Suspect in 773M Password ‘Megabreach’
    Cybersecurity , , , , , , , ,

    In January 2019, dozens of media outlets raised the alarm about a new “megabreach” involving the release of some 773 million stolen usernames and passwords that was breathlessly labeled “the largest collection of stolen data in history.” A subsequent review by KrebsOnSecurity quickly determined the data was years old and merely a compilation of credentials pilfered from mostly public data breaches. Earlier today, authorities in Ukraine said they’d apprehended a suspect in the case. …

    Read MoreUkraine Nabs Suspect in 773M Password ‘Megabreach’

    30 Apr, 2020
    How Cybercriminals are Weathering COVID-19
    Cybersecurity , , , , , , , , , , ,

    In many ways, the COVID-19 pandemic has been a boon to cybercriminals: With unprecedented numbers of people working from home and anxious for news about the virus outbreak, it’s hard to imagine a more target-rich environment for phishers, scammers and malware purveyors. In addition, many crooks are finding the outbreak has helped them better market their cybercriminal wares and services. But it’s not all good news: The Coronavirus also has driven up costs and disrupted key supply lines for many cybercriminals. …

    Read MoreHow Cybercriminals are Weathering COVID-19

    17 Mar, 2020
    Coronavirus Widens the Money Mule Pool
    Cybersecurity , , , , , , , , , , ,

    With many people being laid off or working from home thanks to the Coronavirus pandemic, cybercrooks are almost certain to have more than their usual share of recruitable “money mules” — people who get roped into money laundering schemes under the pretense of a work-at-home job offer. Here’s the story of one upstart mule factory that spoofs a major nonprofit and tells new employees they’ll be collecting and transmitting donations for an international “Coronavirus Relief Fund.” …

    Read MoreCoronavirus Widens the Money Mule Pool

    26 Feb, 2020
    Zyxel 0day Affects its Firewall Products, Too
    Cybersecurity , , , , ,

    On Monday, networking hardware maker Zyxel released security updates to plug a critical security hole in its network attached storage (NAS) devices that is being actively exploited by crooks who specialize in deploying ransomware. Today, Zyxel acknowledged the same flaw is present in many of its firewall products. …

    Read MoreZyxel 0day Affects its Firewall Products, Too

    24 Feb, 2020
    Zyxel Fixes 0day in Network Storage Devices
    Cybersecurity , , , , , , , , , , , , , ,

    Networking hardware vendor Zyxel today released an update to fix a critical flaw in many of its network attached storage (NAS) devices that can be used to remotely commandeer them. The patch comes 12 days after KrebsOnSecurity alerted the company that precise instructions for exploiting the vulnerability were being sold for $20,000 in the cybercrime underground. Based in Taiwan, Zyxel Communications Corp. (a.k.a “ZyXEL”) is a maker of networking devices, including Wi-Fi routers, NAS products and hardware firewalls. The company has roughly 1,500 employees and boasts some 100 million devices deployed worldwide. While in many respects the class of vulnerability addressed in this story is depressingly common among Internet of Things (IoT) devices, the flaw is notable because it has attracted the interest of groups specializing in deploying ransomware at scale. …

    Read MoreZyxel Fixes 0day in Network Storage Devices

    6 Jan, 2020
    The Hidden Cost of Ransomware: Wholesale Password Theft
    Cybersecurity , , , , , , , , ,

    Organizations in the throes of cleaning up after a ransomware outbreak typically will change passwords for all user accounts that have access to any email systems, servers and desktop workstations within their network. But all too often, ransomware victims fail to grasp that the crooks behind these attacks can and frequently do siphon every single password stored on each infected endpoint. The result of this oversight may offer attackers a way back into the affected organization, access to financial and healthcare accounts, or — worse yet — key tools for attacking the victim’s various business partners and clients. …

    Read MoreThe Hidden Cost of Ransomware: Wholesale Password Theft

    23 Nov, 2019
    110 Nursing Homes Cut Off from Health Records in Ransomware Attack
    Cybersecurity , , , , ,

    A ransomware outbreak has besieged a Wisconsin based IT company that provides cloud data hosting, security and access management to more than 100 nursing homes across the United States. The ongoing attack is preventing these care centers from accessing crucial patient medical records, and the IT company’s owner says she fears this incident could soon lead not only to the closure of her business, but also to the untimely demise of some patients. …

    Read More110 Nursing Homes Cut Off from Health Records in Ransomware Attack

    11 Nov, 2019
    Retailer Orvis.com Leaked Hundreds of Internal Passwords on Pastebin
    Cybersecurity , , , , , , ,

    Orvis, a Vermont-based retailer that specializes in high-end fly fishing equipment and other sporting goods, leaked hundreds of internal passwords on Pastebin.com for several weeks last month, exposing credentials the company used to manage everything from firewalls and routers to administrator accounts and database servers, KrebsOnSecurity has learned. Orvis says the exposure was inadvertent, and that many of the credentials were already expired. …

    Read MoreRetailer Orvis.com Leaked Hundreds of Internal Passwords on Pastebin