• Search for:
    28 Oct, 2020
    Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo
    Cybersecurity , , , , , , , , , , , ,

    In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. The Gunnebo Group is a Swedish multinational company that provides physical security to a variety of clients globally, including banks, government agencies, airports, casinos, jewelry stores, tax agencies and even nuclear power plants. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually. …

    Read MoreSecurity Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo

    8 Oct, 2020
    Amid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work
    Cybersecurity , , , , , , ,

    There’s an old adage in information security: “Every company gets penetration tested, whether or not they pay someone for the pleasure.” Many organizations that do hire professionals to test their network security posture unfortunately tend to focus on fixing vulnerabilities hackers could use to break in. But judging from the proliferation of help-wanted ads for offensive pentesters in the cybercrime underground, today’s attackers have exactly zero trouble gaining that initial intrusion: The real challenge seems to be hiring enough people to help everyone profit from the access already gained. …

    Read MoreAmid an Embarrassment of Riches, Ransom Gangs Increasingly Outsource Their Work

    2 Oct, 2020
    Attacks Aimed at Disrupting the Trickbot Botnet
    Cybersecurity , , , , , , , , ,

    Over the past 10 days, someone has been launching a series of coordinated attacks designed to disrupt Trickbot, an enormous collection of more than two million malware-infected Windows PCs that are constantly being harvested for financial data and are often used as the entry point for deploying ransomware within compromised organizations. …

    Read MoreAttacks Aimed at Disrupting the Trickbot Botnet

    19 May, 2020
    Ukraine Nabs Suspect in 773M Password ‘Megabreach’
    Cybersecurity , , , , , , , ,

    In January 2019, dozens of media outlets raised the alarm about a new “megabreach” involving the release of some 773 million stolen usernames and passwords that was breathlessly labeled “the largest collection of stolen data in history.” A subsequent review by KrebsOnSecurity quickly determined the data was years old and merely a compilation of credentials pilfered from mostly public data breaches. Earlier today, authorities in Ukraine said they’d apprehended a suspect in the case. …

    Read MoreUkraine Nabs Suspect in 773M Password ‘Megabreach’

    18 May, 2020
    This Service Helps Malware Authors Fix Flaws in their Code
    Cybersecurity , , , , , , , , , , , , , , ,

    Almost daily now there is news about flaws in commercial software that lead to computers getting hacked and seeded with malware. But the reality is most malicious software also has its share of security holes that open the door for security researchers or ne’er-do-wells to liberate or else seize control over already-hacked systems. Here’s a look at one long-lived malware vulnerability testing service that is used and run by some of the Dark Web’s top cybercriminals. …

    Read MoreThis Service Helps Malware Authors Fix Flaws in their Code

    30 Apr, 2020
    How Cybercriminals are Weathering COVID-19
    Cybersecurity , , , , , , , , , , ,

    In many ways, the COVID-19 pandemic has been a boon to cybercriminals: With unprecedented numbers of people working from home and anxious for news about the virus outbreak, it’s hard to imagine a more target-rich environment for phishers, scammers and malware purveyors. In addition, many crooks are finding the outbreak has helped them better market their cybercriminal wares and services. But it’s not all good news: The Coronavirus also has driven up costs and disrupted key supply lines for many cybercriminals. …

    Read MoreHow Cybercriminals are Weathering COVID-19

    26 Mar, 2020
    Russians Shut Down Huge Card Fraud Ring
    Cybersecurity , , , , , , , , , , , , , , , , , , , ,

    Federal investigators in Russia have charged at least 25 people accused of operating a sprawling international credit card theft ring. Cybersecurity experts say the raid included the charging of a major carding kingpin thought to be tied to dozens of carding shops and to some of the bigger data breaches targeting western retailers over the past decade. In a statement released this week, the Russian Federal Security Service (FSB) said 25 individuals were charged with circulating illegal means of payment in connection with some 90 websites that sold stolen credit card data. …

    Read MoreRussians Shut Down Huge Card Fraud Ring