#cyberattack

Mar 4, 2020
1 min

Casinos in Las Vegas Hit by Suspected Ransomware Attack

“We are actively monitoring the situation” "Slot machines in two Las Vegas casinos were out of action for almost a week in an incident that bears all the hallmarks of a ransomware attack. Investigations are currently underway by the Nevada State Game Control Board, which told us it is “actively monitoring the situation”. Four Queens Hotel and Casino and Binion’s Casino in downtown Las Vegas are open for business but for several days were only able to trade in cash, while star

Feb 27, 2020
1 min

BARBARA CORCORAN 'SHARK' GETS HOOKED FOR $380K In Email Phishing Scam

"Shark Tank" star Barbara Corcoran is missing nearly $400,000 Wednesday morning after her office was victimized by email scammers who used a tiny typo to gain the upper hand. The scam started last week when an email chain was forwarded to Barbara's bookkeeper, a woman named Christine. Folks on Barbara's team tell us the email appeared to have been sent from Barbara's executive assistant, Emily ... and it informed Christine she had the green light to pay $388,700.11 to a compa

Feb 24, 2020
1 min

Over 120 Million US Consumers Exposed in Privacy Snafu

Security researchers have discovered a publicly exposed cloud database containing personal data and behavioral profiles on 120 million Americans. Security company UpGuard found the misconfigured Amazon S3 bucket on February 3 this year, eventually tracing it back to market analysis company Tetrad. Around half of the 747GB trove appears to have been sourced from client organizations. It included: data extracted from Chipotle employees’ mobile phones for tracking, a spreadsheet

Feb 18, 2020
1 min

Bug in WordPress plugin can let hackers wipe up to 200,000 sites.

Same bug can also let attackers gain access to the admin account. WordPress site owners who use commercial themes provided by ThemeGrill are advised to update one of the plugins that come installed with these themes in order to patch a critical bug that can let attackers wipe their sites. The vulnerability resides in ThemeGrill Demo Importer, a plugin that ships with themes sold by ThemeGrill, a web development company that sells commercial WordPress themes. https://www.zdnet

Feb 10, 2020
1 min

Facebook's Twitter account was hijacked by the same group that hacked a bunch of NFL accounts.

"Facebook's Twitter account was briefly hijacked by the hacking collective OurMine on Friday afternoon, but the company still appeared to retain some control over the account. "Hi, we are O u r M i n e. Well, even Facebook is hackable but at least their security better than Twitter. to improve your accounts security Contact us: contact@o u r m i n e .org For security services visit: o u r m i n e. org," a Friday afternoon tweet announcing the takeover said. The Twitter accoun

Feb 7, 2020
1 min

IoT Malware Campaign Infects Global Manufacturing Sites

The infection uses Lemon_Duck PowerShell malware variant to exploit vulnerabilities in embedded devices at manufacturing sites. "A new malware campaign built to exploit flaws in connected devices is targeting manufacturers around the world and affecting products from smart printers to heavy operational equipment. Researchers at TrapX Labs first saw this attack targeting Latin American manufacturers in October 2019. Since then, it has continued to expand, with a peak in Decemb

Feb 4, 2020
1 min

witter says an attacker used its API to match usernames to phone numbers

Twitter discloses security incident involving the abuse of one of its official API features. "In a statement published today, Twitter disclosed a security incident during which third-parties exploited the company's official API (Application Programming Interface) to match phone numbers with Twitter usernames. In an email seeking clarifications about the incident, Twitter told ZDNet that they became aware of exploitation attempts against this API feature on December 24, 2019,

Jan 27, 2020
1 min

Wyden calls on NSA to examine White House cybersecurity following Bezos hack.

"Sen. Ron Wyden (D-Ore.) on Friday pressured the National Security Agency (NSA) on efforts to secure personal devices of government employees from foreign hackers and surveillance following news that Amazon CEO Jeff Bezos's phone was allegedly hacked by Saudi officials. Wyden, a member of the Senate Intelligence Committee, sent a letter to NSA Director Gen. Paul Nakasone asking for an update on a commitment made by former NSA Director Michael Rogers in 2018 that the agency wo

Jan 17, 2020
1 min

WeLeakInfo.com Seized For Selling Info from Data Breaches, 2 Arrested

"As a clear indication of how law enforcement views the commercial disclosure of stolen information, the FBI has seized the WeLeakInfo.com domain and international law enforcement arrested two individuals for selling subscriptions to data exposed in breaches. These accessed credentials were then used to conduct attacks in the UK, Germany, and the US. In coordination with the UK NCA, the Netherlands National Police Corps, the German Bundeskriminalamt, and the Police Service of

Jan 10, 2020
1 min

Las Vegas hit by cyberattack as it hosts CES

The attack, discovered Tuesday, came as people gathered for the world's largest tech show. Whoever came up with the slogan, "What happens in Vegas stays in Vegas," wasn't prepared for a cyberattack. But that's what happened in the early morning hours on Tuesday, when the team monitoring computers for the City of Las Vegas detected it had been "compromised". The city, which tweeted about the attack, didn't say which systems were affected or how the attack happened, though the

Jan 3, 2020
1 min

Iran's 'forceful revenge' against the US is likely to include cyber warfare...

Iran's leaders vowed to exact "a forceful revenge" against the US Friday in response to an American drone strike that killed Iranian Quds Force head Qassem Soleimani. Now, cybersecurity and defense experts are bracing for a possible Iranian cyber-offensive that could target online infrastructure across the US military and private sector. Experts told Business Insider that Iran has spent years building out its computer warfare capabilities. Since 2010, when Iran faced a cyber

Jan 2, 2020
1 min

Windows users, beware: This fake update could lock up your PC, or worse

Updating to Windows 10? Don't fall victim to this spam email attack. With the end of for Windows 7 coming in January, many users are looking to update to Windows 10 to continue getting security updates and support from Microsoft. According to a Tuesday report from security firm Trustwave, attackers are well aware of this and are targeting Microsoft users with fake Windows update emails that will infect computers with ransomware -- an especially sinister type of malware that l

Dec 23, 2019
1 min

More than 267 million Facebook user IDs, phone numbers and names were in an unsecured database.

"More than 267 million Facebook user phone numbers, names and user IDs were exposed in a database that anyone could access online, adding to a long list of privacy and security mishaps that continue to plague the world's largest social network. Security researcher Bob Diachenko discovered the trove of Facebook user data on Dec. 14. The database, which has been pulled down, wasn't protected by a password or any other safeguard. Access to the database was removed, but by then t

Dec 20, 2019
1 min

Ransomware at Colorado IT Provider Affects 100+ Dental Offices

A Colorado company that specializes in providing IT services to dental offices suffered a ransomware attack that is disrupting operations for more than 100 dentistry practices, KrebsOnSecurity has learned. Multiple sources affected say their IT provider, Englewood, Colo. based Complete Technology Solutions (CTS), was hacked, allowing a potent strain of ransomware known as "Sodinokibi" or "rEvil" to be installed on computers at more than 100 dentistry businesses that rely on t

Dec 19, 2019
1 min

Ransomware Gangs Now Outing Victim Businesses That Don’t Pay Up

As if the scourge of ransomware wasn’t bad enough already: Several prominent purveyors of ransomware have signaled they plan to start publishing data stolen from victims who refuse to pay up. To make matters worse, one ransomware gang has now created a public Web site identifying recent victim companies that have chosen to rebuild their operations instead of quietly acquiescing to their tormentors. Less than 48 hours ago, the cybercriminals behind the Maze Ransomware strain e

Dec 16, 2019
1 min

New Orleans declares state of emergency following ransomware attack

"New Orleans declared a state of emergency and shut down its computers after a cyber security event, the latest in a string of city and state governments to be attacked by hackers. Suspicious activity was spotted around 5 a.m. Friday morning. By 8 a.m., there was an uptick in that activity, which included evidence of phishing attempts and ransomware, Kim LaGrue, the city’s head of IT said in a press conference. Once the city confirmed it was under attack, servers and computer

Dec 13, 2019
1 min

New Ransomware “Zeppelin” Targets High Profiles in Canada and Europe

"Security researchers stated that cybercriminals have created a new ransomware variant titled “Zeppelin” to target healthcare and IT companies in the U.S., Canada, and Europe. It’s said that Zeppelin ransomware is reportedly a new variant of the VegaLocker/Buran ransomware. Background of the Ransomware According to the BlackBerry Cylance Threat Research team, Zeppelin is the newest member of the Delphi-based Ransomware-as-a-Service (RaaS) family based on the same code and fea

Dec 10, 2019
1 min

Google Confirms Critical Android 8, 9 And 10 ‘Permanent’ Denial Of Service Threat

"The December 2019 Android Security Bulletin has been published by Google and contains details of several vulnerabilities within the Android operating system. In total, three vulnerabilities have been given a critical rating. However, Google has highlighted one of these as being "the most severe," and for very good reason: a single maliciously crafted message could "cause a permanent denial of service." If you tend to hang fire when the "a software update is available" notifi

Dec 9, 2019
1 min

FBI Issues ‘Drive-By’ Hacking Warning: This Is How To Secure Your Devices

"There is a gaping hole in our online security—the surge of connected devices we now surround ourselves with. Now the FBI has warned that “hackers can use those innocent devices to do a virtual drive-by of your digital life.” The issue is the smart digital technologies encroaching into all aspects of our lives: “Unsecured devices can allow hackers a path into your router, giving the bad guy access to everything else on your home network that you thought was secure. Are privat

Dec 4, 2019
1 min

This new Android malware comes disguised as a chat app

CallerSpy can monitor calls, messages, take screenshots and records its surroundings, say researchers - who warn that it could be the early stages of a targeted cyber-espionage campaign. A new form of mobile malware designed to snoop on calls, texts and other communications is targeting Android users by duping them into downloading a fake chat application. The trojan malware, dubbed CallerSpy, has been discovered and detailed by cybersecurity researchers at Trend Micro, who b