Oktacron - Cyber Security RSS Feeds History

Malvertising campaign MasquerAds abuses Google Ads

cyware Jan 02, 2023 Identity Theft, Fraud, Scams

Guardio Labs researchers uncovered a malvertising campaign, tracked as MasquerAds and attributed to a threat actor known as Vermux, that is abusing Google Ads to target users that are searching for popular software.

Scripps Health Reaches $3.5 Million Data Breach Settlement

cyware Jan 02, 2023 Incident Response, Learnings

Under the terms of the agreement, Scripps agrees to pay $3.57 million in "minimum cash settlements" of $100 per victim, as well as to cover some types of additional expenses.

Malaysia: Ministry of Communications and Digital investigating alleged data leak involving Maybank, Astro, EC

cyware Jan 02, 2023 Breaches and Incidents

The Ministry of Communications and Digital (KKD) takes seriously the alleged data leak, via a website on December 25, which allegedly involves Maybank, Astro, and the Election Commission (EC).

Update: Indian Railways Says It's Not Source of Alleged Data Breach

cyware Jan 02, 2023 Incident Response, Learnings

"It was found that the sample data key pattern does not match with IRCTC history application programming interface," an Indian Ministry of Railways spokesperson noted in a statement.

Over 200,000 Malaysian Customers Affected by Unifi Mobile Data Breach

cyware Jan 02, 2023 Breaches and Incidents

In a statement to LifestyleTech, the company said that its investigations revealed that 250,284 accounts were affected, exposing customers' names, phone numbers, and emails.

Attackers never let a critical vulnerability go to waste

cyware Jan 02, 2023 Trends, Reports, Analysis

“When it comes to cybersecurity, not all vulnerabilities are created equal, and many of the ones that garner media attention actually turn out to be insignificant,” said Bob Rudis, VP Research & Data Science, GreyNoise Intelligence.

PyTorch Discloses Malicious Dependency Chain Compromise Over Holidays

cyware Jan 02, 2023 Malware and Vulnerabilities

PyTorch has identified a malicious dependency with the same name as the framework's 'torchtriton' library. This has led to a successful compromise via the dependency confusion attack vector.

Google to Pay $29.5 Million to Settle Lawsuits Over User Location Tracking

cyware Jan 02, 2023 Incident Response, Learnings

The lawsuits came in response to revelations in 2018 that the internet company continued to track users' whereabouts on Android and iOS through a setting called Web & App Activity despite turning Location History options off.

3Commas API Database Leaked by Anonymous Hacker

cyware Jan 02, 2023 Breaches and Incidents

The hack occurred in early December 2022, during which the hacker gained access to the trading service’s system via the Application Programming Interface (API). How they compromised and accessed the platform’s systems is still a mystery.

Update: Lockbit apologized for the attack on the SickKids pediatric hospital and releases a free decryptor

cyware Jan 02, 2023 Incident Response, Learnings

The group is known to have a role for its affiliates that prohibits attacking healthcare organizations. Its policy forbids encrypting systems of organizations where damage could lead to the death of individuals.

Google Home Vulnerability Could Allow Eavesdropping on Conversations

cyware Jan 02, 2023 Malware and Vulnerabilities

The vulnerability could let an adversary present within the device’s wireless proximity install a backdoor account on the device and start sending remote commands, access the microphone feed, and initiate arbitrary HTTP requests.

Personal health information of 42M Americans leaked between 2016 and 2021

cyware Jan 02, 2023 Trends, Reports, Analysis

Common operational disruptions included canceled appointments/surgeries, electronic system downtime, and ambulance diversion. The researchers calculated the operational disruption duration and other data related to the attacks.

Ukraine: Russian Hackers' Focus is Civilian Infrastructure

cyware Jan 02, 2023 Geopolitical, Terrorism

State-backed Russian hacking groups are continuing to focus less on Ukrainian military targets and much more on civilian infrastructure, Ukrainian cybersecurity officials report.

Barbados: QEH progress report on cyberattack

cyware Jan 02, 2023 Incident Response, Learnings

The out-patients clinic remains open to the public. However, there may be delays and changes to their visit given the current situation. The cybersecurity incident has prevented the department from issuing appointment dates at this time.

Possible Cyberattack at CentraState Prompts Hospital to Divert Ambulances

cyware Jan 02, 2023 Breaches and Incidents

Spokeswoman Lori Palmer said critical care at the hospital has not been affected and the hospital is still taking some walk-in patients. Additionally, outpatient services were to be suspended at 1 PM Friday and remain that way until further notice.

Bristol Community College's Computer Systems Hacked in Ransomware Attack

cyware Jan 02, 2023 Breaches and Incidents

The college, which has a campus in Attleboro, said in a statement posted Friday on its website its computer network was hacked by a “criminal cyberattack” and “this incident involved ransomware encryption.”

Poland warns of pro-Kremlin cyberattacks aimed at destabilization

cyware Jan 02, 2023 Geopolitical, Terrorism

The cyberattacks on Poland’s government services, private companies, media organizations, and ordinary citizens have intensified over the past year, Poland’s security agency said.

BlackCat (ALHPV) Ransomware Gang Cloned Victim’s Website to Leak Stolen Data

cyware Jan 02, 2023 Threat Actors

The ALPHV ransomware operators have gotten creative with their extortion tactic and, in at least one case, created a replica of the victim's site to publish stolen data on it.

RedZei Chinese Scammers Targeting Chinese Students in the U.K.

cyware Jan 02, 2023 Identity Theft, Fraud, Scams

Chinese international students in the U.K. have been targeted by persistent Chinese-speaking scammers for over a year as part of an activity dubbed RedZei (aka RedThief).