Cybercrime

Deployed publicly accessible MOVEit Transfer? Oh no. Mass exploitation underway

Time to MOVEit, MOVEit. We don't like to MOVEit, MOVEit

Patches01 Jun 2023 | 10

Dark Pink cyber-spies add info stealers to their arsenal, notch up more victims

Not to be confused with K-Pop sensation BLACKPINK, gang pops military, govt and education orgs

Research01 Jun 2023 | 3

Pegasus-pusher NSO gets new owner keen on the commercial spyware biz

Investors roll the dice against government sanctions and lawsuits

Security30 May 2023 | 15

Alien versus Predator? No, this Android spyware works together

Phone-hugging code can record calls, read messages, track geolocation, access camera, other snooping

Research27 May 2023 | 8

BlackByte ransomware crew lists city of Augusta after cyber 'incident'

Mayor promises to comment on Friday

Cyber-crime26 May 2023 | 2

Five Eyes and Microsoft accuse China of attacking US infrastructure again

Defeating Volt Typhoon will be hard, because the attacks look like legit Windows admin activity

Cyber-crime25 May 2023 | 10

Philly Inquirer says Cuba ransomware gang's data leak claims are fake news

Now that's a Rocky relationship

Cyber-crime24 May 2023 |

IT security analyst admits hijacking cyber attack to pocket ransom payments

Ashley Liles altered blackmail emails in bid to make off with £300,000 in Bitcoin

Cyber-crime24 May 2023 | 22

US bans North Korean outsourcer and its feisty freelancers

They do your work – usually from Russia and China – then send their wages home to pay for missiles

Cyber-crime24 May 2023 | 3

Dish confirms 300,000 people's data was exposed in February's attack

But don't worry – we know it was deleted. Hmm. How would you know that?

Cyber-crime23 May 2023 | 4

Uncle Sam strangles criminals' cashflow by reining in money mules

Tech support scammer among those targeted by recent crackdowns

Cyber-crime23 May 2023 | 7

Teen in court after '$600K swiped from DraftKings gamblers'

Bet he didn't expect these computer hacking charges

Cyber-crime19 May 2023 | 17

Russian IT guy sent to labor camp for DDoSing Kremlin websites

Pro-Ukraine techie gets hard time

Cyber-crime19 May 2023 | 25

Cisco squashes critical bugs in small biz switches

You'll want to patch these as proof-of-concept exploit code is out there already

Patches18 May 2023 |

Six million patients' data feared stolen from PharMerica

Cue the inevitable class action lawsuit

Cyber-crime18 May 2023 | 5

'Strictly limit' remote desktop – unless you like catching BianLian ransomware

Do it or don't. We're not cops. But the FBI are, and they have this to say

CSO17 May 2023 | 32

Feds offer $10m reward for info on alleged Russian ransomware crim

Infecting cops' computers is one way to put a target on your back

Cyber-crime17 May 2023 | 1

Cops crack gang that used bots to book and resell immigration appointments

Keeping files that mention 'robot rental' may not have been the best way to cover their tracks

Cyber-crime16 May 2023 | 24

Extra! Extra! Don’t quite read all about it: Cyber attack hits Philadelphia Inquirer

Breaking news, literally

Cyber-crime15 May 2023 |

No more macros? No problem, say miscreants, we'll adapt

Microsoft blocking 'net scripts sparked 'monumental shift' in attacks

CSO15 May 2023 | 10

Ransomware corrupts data, so backups can be faster and cheaper than paying up

Smash and grab raids don’t leave time for careful encryption

Cyber-crime15 May 2023 | 31

'Top three Balkans drug kingpins' arrested after cops crack their Sky ECC chats

Maybe try carrier pigeons instead

Cyber-crime13 May 2023 | 27

Ex-Ubiquiti dev jailed for 6 years after stealing internal corp data, extorting bosses

Momentary lapse in VPN led to stretch in the cooler, $1.6m bill

Cyber-crime12 May 2023 | 8

FBI-led Op Medusa slays NATO-bothering Russian military malware network

Perseus to the rescue as Snake eats itself

Cyber-crime09 May 2023 | 9

FYI: Intel BootGuard OEM private keys leak from MSI cyber heist

Updated Plus: Court-ordered domain seizures of DDoS-for-hire sites

Cyber-crime09 May 2023 | 13

Modern Auth comes to on-prem Exchange Server gear

Guess this'll have to do while we wait for *checks notes* ES 2025

CSO08 May 2023 | 2

How to tell an AI bot wrote that scammy-looking tax email: No spelling mistakes

Don't let the robots take your money! That's the IRS's job

AI + ML04 May 2023 | 16

Meta does the 'We found baddies and crushed them' thing again – this time for AI

Who would have thought crims would try using Facebook to fool people?

Security03 May 2023 | 1

288 arrested in multinational Monopoly Market takedown

US tells criminals it 'will find you' and has a particular set of skills

Cyber-crime02 May 2023 | 16

China has 50 hackers for every FBI cyber agent, says Bureau boss

Combatting it is going to take more money. Lots of more money.

Cyber-crime01 May 2023 | 27

Crooks don't need ChatGPT to social-engineer victims, as they're more than happy to demonstrate

RSA Conference Not today, AI

Spotlight on RSA29 Apr 2023 | 10

Google sues CryptBot slingers, gets court order to shut down malware domains

Hands off those Chrome users, they're ours!

Cyber-crime27 Apr 2023 | 7

Mandiant's 'most prevalent threat actor' may be living under your roof – the teenager

RSA Conference Plus they are cliquey as all hell

Spotlight on RSA25 Apr 2023 | 18

Singapore tells its people: Go forth and block those ads

As it preps to launch WhatsApp scam-shredder

Personal Tech25 Apr 2023 | 33

That 3CX supply chain attack keeps getting worse: Other vendors hit

In Brief Also, Finland sentences CEO of breach company to prison (kind of), and this week's laundry list of critical vulns

CSO24 Apr 2023 | 9

European air traffic control confirms website 'under attack' by pro-Russia hackers

Another cyber nuisance in support of Putin's war, nothing too serious

Cyber-crime22 Apr 2023 | 10

ChatGPT fans need 'defensive mindset' to avoid scammers and malware

Palo Alto Networks spots suspicious activity spikes such as naughty domains, phishing, and worse

AI + ML21 Apr 2023 | 4

An earlier supply chain attack led to the 3CX supply chain attack, Mandiant says

Threat hunters traced it back to malware-laced Trading Technologies' software

Cyber-crime20 Apr 2023 | 2

Medusa ransomware crew brags about spreading Bing, Cortana source code

'Does have a somewhat Lapsus$ish feel' we're told

Cyber-crime19 Apr 2023 | 12

Russian snoops just love invading unpatched Cisco gear, America and UK warn

Spying on foreign targets? That's our job!

CSO18 Apr 2023 | 7

Capita IT breach gets worse as Black Basta claims it's now selling off stolen data

No worries, outsourcer only handles government tech contracts worth billions

Cyber-crime18 Apr 2023 | 39

LockBit crew cooks up half-baked Mac ransomware

Please, no need to fix these problems

Security17 Apr 2023 | 8

Firmware is on shaky ground – let's see what it's made of

Opinion Old architectures just don't stack up

Research17 Apr 2023 | 69

Cybercrims hop geofences, clamor for stolen ChatGPT Plus accounts

Where there's a will…

AI + ML15 Apr 2023 | 11

Russia-pushed UN Cybercrime Treaty may rewrite global law. It's ... not great

Special report Let's go through all the proposed problematic powers, starting with surveillance and censorship

Cyber-crime14 Apr 2023 | 23

US extradites Nigerian charged over $6m email fraud scam

Maybe our prince has come at last

Cyber-crime14 Apr 2023 | 10

How much to infect Android phones via Google Play store? How about $20k

Or whatever you managed to haggle with these miscreants

Cyber-crime10 Apr 2023 | 9

MSI hit in cyberattack, warns against installing knock-off firmware

1.5TB of databases, source code, BIOS tools said to be stolen

Cyber-crime07 Apr 2023 | 8

CAN do attitude: How thieves steal cars using network bus

It starts with a headlamp and fake smart speaker, and ends in an injection attack and a vanished motor

Research06 Apr 2023 | 198

Criminal records office yanks web portal offline amid 'cyber security incident'

ACRO says payment data safe, other info may have been snaffled

Cyber-crime06 Apr 2023 | 20

Cops cuff teenage 'Robin Hood hacker' suspected of peddling stolen info

Luxury cars and designer duds don't seem very prince of thieves

Cyber-crime06 Apr 2023 | 25

Cops put the squeeze on Genesis crime souk denizens, not just the admins this time

Feds managed to image entire backend server with full details

Cyber-crime05 Apr 2023 | 1

Notorious stolen credential warehouse Genesis Market seized by FBI

Operation Cookie Monster crumbles stolen data-as-a-service vendor

Cyber-crime05 Apr 2023 | 12

Feds seize $112m in cryptocurrency linked to 'pig-butchering' finance scams

Thieves go nose-to-tail stripping cash from victims

Cyber-crime04 Apr 2023 | 13

Uber driver info stolen yet again: This time from law firm

Never mind software supply chain attacks, lawyers are the new soft target?

Cyber-crime03 Apr 2023 | 14

Capita: Cyber-attack broke some of our IT systems

Staff regain access to Microsoft apps, tech outsourcer still working to restore services for some

Defense Tech Week03 Apr 2023 | 24