Oktacron - Cyber Security RSS Feeds History

FTC implements tougher data protection rules to safeguard customer information

cyware Dec 06, 2021 Laws, Policy, Regulations

The FTC has amended its data protection policy, the Standards for Safeguarding Customer Information, implementing tougher rules for financial institutions that process customer information.

Who Is the Network Access Broker ‘Babam’? – Krebs on Security

cyware Dec 06, 2021 Threat Actors

Since the beginning of 2020, Babam has set up numerous auctions on the Russian-language cybercrime forum Exploit, mainly selling VPN credentials stolen from various companies.

Vulnerabilities Exploited for Monero Mining Malware Delivered via GitHub, Netlify

cyware Dec 06, 2021 Malware and Vulnerabilities

Trend Micro researchers found multiple vulnerabilities being exploited by cryptomining malware samples which were being spread through the abuse of GitHub and Netlify repositories.

Hackers Steal Millions from Cryptocurrency Exchange Bitmart

cyware Dec 06, 2021 Breaches and Incidents

Peckshield discovered the breach on Saturday, noting that one of Bitmart’s addresses showed a steady outflow of millions of dollars to an address which Etherscan referred to as the “Bitmart Hacker.”

Ransomware Attack at Delta-Montrose Electric Association Disrupts Billing Systems and Wipes Two Decades of Records

cyware Dec 06, 2021 Breaches and Incidents

The attack was detailed by the Delta-Montrose Electric Association on its website explaining that current customers won't be penalized for being unable to pay their bills because of the incident.

A mysterious threat actor is running hundreds of malicious Tor relays

cyware Dec 06, 2021 Threat Actors

Since at least 2017, a threat actor has run thousands of servers in entry, middle, and exit positions of the Tor network in what a researcher has described as an attempt to deanonymize Tor users.

German BSI agency warns of ransomware attacks over Christmas holidays

cyware Dec 06, 2021 Threat Intel & Info Sharing

The German cybersecurity authority BSI warns of ransomware attacks over the Christmas holidays, fearing the return of the Emotet botnet return. It also warned of attacks against Microsoft Exchange.

Fraudulent e-commerce transactions spiked between Thanksgiving and Cyber Monday

cyware Dec 06, 2021 Trends, Reports, Analysis

The number of suspected e-commerce fraud attempts during the 2021 holiday shopping season also saw a 25% increase over the 15.73% of fraud attempts observed earlier in the year, as per TransUnion.

Pip-audit: Google-backed tool probes Python environments for vulnerable packages

cyware Dec 06, 2021 Security Products & Services

Pip-audit leverages the PyPI JSON API to compare dependencies against the Python Packaging Advisory Database – a repository of security advisories that collects much of its data from the NVD CVE feed.

Phishing Actors Are Exploiting the Omicron COVID-19 Variant

cyware Dec 06, 2021 Identity Theft, Fraud, Scams

The emails offer recipients a free Omicron PCR test, which they claim will allow them to circumvent limitations. The emails purport to come from the U.K's National Health Service (NHS).

Yet Another Zoho ManageEngine Product Found Under Active Attacks

cyware Dec 06, 2021 Malware and Vulnerabilities

The flaw, tracked as CVE-2021-44515, is an authentication bypass issue that could allow hackers to circumvent authentication protections and execute arbitrary code in the Desktop Central MSP server.

RTF Template Injection Technique Becomes Popular Among APT Groups

cyware Dec 06, 2021 Trends, Reports, Analysis

Proofpoint identified three state-sponsored threat actors from India, Russia, and China adopting RTF template injection methods in their phishing campaigns. The adoption of this technique has made attacks from the group much harder to detect and prevent. Therefore, organizations are suggested to deploy network/host intrusion prevention systems and reliable anti-malware to stay protected.

American diplomats' iPhones reportedly compromised by NSO Group intrusion software

cyware Dec 06, 2021 Breaches and Incidents

The Apple iPhones of at least nine US State Department officials were compromised by an unidentified entity using NSO Group's Pegasus spyware, according to a report published Friday by Reuters.

ASIC says financial market cyber resiliency remained steady but fell short of target

cyware Dec 06, 2021 Trends, Reports, Analysis

Firms in Australia's financial market have continued to be resilient against cyber threats, with improvement rates in cyber resiliency remaining steady, the ASIC reported on Monday.

Millions of Users Impacted by Discovery of Hundreds of Vulnerabilities in Common Wi-Fi Routers

cyware Dec 06, 2021 Malware and Vulnerabilities

The router affected by most of the flaws is the TP-Link Archer AX6000 (32 vulnerabilities), followed by Synology RT-2600ac with 30 issues and by Netgear Nighthawk AX12 with 29 flaws.

Emotet Spreads Again with Fake App Installers

cyware Dec 06, 2021 Malware and Vulnerabilities

Threat actors behind Emotet are penetrating inside networks through malicious Windows App Installer packages by imitating Adobe PDF software. The campaign uses stolen reply-chain emails that seem to be a reply to an existing conversation. Once the install button is clicked, the installer downloads/installs an appx show more ...

bundle hosted on Microsoft Azure. Kindly use reliable anti-phishing, network firewall, and anti-malware to stay protected.

New WIRTE Threat Group Targeting Scholars in the Middle East

cyware Dec 06, 2021 Threat Actors

Researchers suspect that the stealthy hacking group called WIRTE has been conducting attacks against government and diplomatic entities in the Middle East, since at least 2019. The group has targeted victims in multiple regions, including Armenia, Cyprus, Egypt, Jordan, Lebanon, Palestine, Syria, and Turkey. Organizations in targeted regions need to watch against such attacks.

Multiple Banking Trojans on Google Play Infect Thousands of Devices

cyware Dec 06, 2021 Malware and Vulnerabilities

Hackers infected over 300,000 devices via four malicious apps loaded with banking trojans. The malicious apps posed as utility apps and attempted to take full control of the infected devices. Experts recommend using a reliable anti-malware app on the smartphone and monitoring app behavior after installation.

Unprotected Database Leaks Sensitive Information of 30,000 Florida Healthcare Workers

cyware Dec 06, 2021 Breaches and Incidents

A database run by Gale Healthcare Solutions was found exposing 170,239 records that included names, emails, home addresses, photos, and Social Security Numbers as well as tax documents in some cases.

Kafdrop flaw allows data from Kafka clusters to be exposed Internet-wide

cyware Dec 06, 2021 Malware and Vulnerabilities

Researchers at Spectral discovered a security flaw in Kafdrop, a popular open-source UI and management interface for Apache Kafka clusters, that has been downloaded more than 20 million times.

Critical vulnerabilities in open source forum software NodeBB could lead to RCE

cyware Dec 06, 2021 Malware and Vulnerabilities

Critical vulnerabilities in the JavaScript-based open source forum platform NodeBB could allow attackers to steal private information and access admin accounts, researchers have warned.

New XS-Leaks Attacks Could Enable Theft of User Data from All Modern Web Browsers

cyware Dec 06, 2021 Malware and Vulnerabilities

Researchers have discovered new cross-site data leakage attacks against modern web browsers, including Tor Browser, Firefox, Chrome, Edge, Safari, and Opera, among others.

Malicious Version of KMSPico Windows Activator Used to Steal Users' Cryptocurrency Wallets

cyware Dec 06, 2021 Malware and Vulnerabilities

Red Canary noted that it’s not just individuals who use KMSPico to fraudulently activate Windows as it has also noticed various IT departments using the tool which makes it a big threat in such cases.

American Diplomat's iPhones Compromised By NSO Group

packetstormsecurity Dec 06, 2021 headline,government,malware,usa,phone,fl

FBI: Cuban Ransomware Hits 49 Critical Infrastructure Organizations

packetstormsecurity Dec 06, 2021 headline,government,malware,usa,cyberwar

BitMart Crypto Exchange Loses $150 Million To Hackers

packetstormsecurity Dec 06, 2021 headline,hacker,bank,cybercrime,data los