Recent Security News
-
ALPHV/BlackCat Take Extortion Public
November 17, 2023 at 01:35PM ALPHV/BlackCat ransomware gang has changed their tactics by filing a complaint with the SEC against their victim, MeridianLink, for not disclosing a breach within the required timeframe. This is an attempt to pressure MeridianLink to pay the ransom sooner. Businesses should consider having an incident response plan, deciding on paying…
-
LockBit redraws negotiation tactics after affiliates fail to squeeze victims
November 17, 2023 at 01:12PM LockBit has restructured its negotiation process with ransomware victims in response to internal frustrations. The organization and its affiliates were concerned about the low rate of payment and the discounts being offered. Before the rule change, negotiations were inconsistent, leading to victims refusing to pay ransoms. LockBit has implemented guidelines…
-
2 Environmentalists Who Were Targeted by a Hacking Network Say the Public Is the Real Victim
November 17, 2023 at 12:27PM Environmentalists speaking at the sentencing of an Israeli man involved in a global computer hacking campaign argued that the public was the true victim. The hacking, targeting those fighting big oil companies over climate change, resulted in leaked documents and psychological distress for victims. The man was sentenced to over…
-
Actions to Take to Defeat Initial Access Brokers
November 17, 2023 at 12:08PM Access-as-a-service (AaaS) is a new cybercrime business model that involves selling methods for accessing networks. Criminals known as access brokers steal enterprise user credentials and sell them to other attackers. The buyers then use ransomware or malware services to steal confidential data. Countermeasures to mitigate these threats include monitoring the…
-
Yamaha Motor confirms ransomware attack on Philippines subsidiary
November 17, 2023 at 11:47AM Yamaha Motor’s motorcycle manufacturing subsidiary in the Philippines was hit by a ransomware attack, resulting in the theft and leak of some employees’ personal information. The breach was detected on October 25, and the company has been investigating with the help of external security experts. The attack was attributed to…