The Coming Storm Archives - Page 8 of 8 - s0x • Austin Managed IT Services

7 Jan, 2020

Tricky Phish Angles for Persistence, Not Passwords

Cybersecurity Jeff Jones, Latest Warnings, login.microsoftonline.com, Michael Tyler, Microsoft Office 365, microsoftonline.com, PhishLabs, The Coming Storm, Web Fraud 2.0

Late last year saw the re-emergence of a nasty phishing tactic that allows the attacker to gain full access to a user’s data stored in the cloud without actually stealing the account password. The phishing lure starts with a link that leads to the real login page for a cloud email and/or file storage service. Anyone who takes the bait will inadvertently forward a digital token to the attackers that gives them indefinite access to the victim’s email, files and contacts — even after the victim has changed their password. …

6 Jan, 2020

The Hidden Cost of Ransomware: Wholesale Password Theft

Cybersecurity A Little Sunshine, alex holden, Hold Security, Karen Christianson, Mark Schafer, Ransomware, Ryuk, SVA Consulting, The Coming Storm, VCPI

Organizations in the throes of cleaning up after a ransomware outbreak typically will change passwords for all user accounts that have access to any email systems, servers and desktop workstations within their network. But all too often, ransomware victims fail to grasp that the crooks behind these attacks can and frequently do siphon every single password stored on each infected endpoint. The result of this oversight may offer attackers a way back into the affected organization, access to financial and healthcare accounts, or — worse yet — key tools for attacking the victim’s various business partners and clients. …

17 Dec, 2019

Ransomware Gangs Now Outing Victim Businesses That Don’t Pay Up

Cybersecurity BleepingComputer, Lawrence Abrams, Maze Ransomware, Ransomware, rEvil, Sodinokibi, The Coming Storm

27 Nov, 2019

It’s Way Too Easy to Get a .gov Domain Name

Cybersecurity CISA, Cybersecurity and Infrastructure Security Agency, DOTGOV Bill, dotgov.gov, exeterri.gov, John Levine, The Coming Storm, town.exeter.ri.us, U.S. Department of Homeland Security, U.S. General Services Administration, Web Fraud 2.0

Many readers probably believe they can trust links and emails coming from U.S. federal government domain names, or else assume there are at least more stringent verification requirements involved in obtaining a .gov domain versus a commercial one ending in .com or .org. But a recent experience suggests this trust may be severely misplaced, and that it is relatively straightforward for anyone to obtain their very own .gov domain. …

26 Nov, 2019

Sale of 4 Million Stolen Cards Tied to Breaches at 4 Restaurant Chains

Cybersecurity Data Breaches, Focus Brands, Gemini Advisory, Joker's stash, Krystal breach, McAlister's Deli breach, Moe's breach, Payment Card Industry security standards, PCI, Schlotsky's breach, The Coming Storm, Verizon

23 Nov, 2019

110 Nursing Homes Cut Off from Health Records in Ransomware Attack

Cybersecurity alex holden, Hold Security, Karen Christianson, Ransomware, The Coming Storm, VCPI

A ransomware outbreak has besieged a Wisconsin based IT company that provides cloud data hosting, security and access management to more than 100 nursing homes across the United States. The ongoing attack is preventing these care centers from accessing crucial patient medical records, and the IT company’s owner says she fears this incident could soon lead not only to the closure of her business, but also to the untimely demise of some patients. …

7 Nov, 2019

Study: Ransomware, Data Breaches at Hospitals tied to Uptick in Fatal Heart Attacks

Cybersecurity A Little Sunshine, Department of Health and Human Services, HHS, Leo Scanlon, Owen Graduate School of Management, PBS, The Coming Storm, The New England Journal of Medicine, Vanderbilt University, WannaCry

3 Nov, 2019

NCR Barred Mint, QuickBooks from Banking Platform During Account Takeover Storm

Cybersecurity A Little Sunshine, credential replay attacks, Digital Insight, Intuit, Mint, NCR Corp, Quickbooks Online, The Coming Storm, Web Fraud 2.0

Banking industry giant NCR Corp. [NYSE: NCR] late last month took the unusual step of temporarily blocking third-party financial data aggregators Mint and QuicBooks Online from accessing Digital Insight, an online banking platform used by hundreds of financial institutions. That ban, which came in response to a series of bank account takeovers in which cybercriminals used aggregation sites to surveil and drain consumer accounts, has since been rescinded. But the incident raises fresh questions about the proper role of digital banking platforms in fighting password abuse. …

25 Oct, 2019

Cachet Financial Reeling from MyPayrollHR Fraud

Cybersecurity The Coming Storm

s0x • Austin Managed IT Services

s0x • Austin Managed IT Services

Tag Archives: The Coming Storm