Cyber Gangs Aren’t Afraid of Prosecution

October 16, 2024 at 03:10PM Cybercriminals have an advantage over law enforcement due to slow investigations, inadequate funding, and resource constraints. Specialized agencies struggle against sophisticated attacks and cyber gangs, which enjoy impunity in some countries. To combat this, governments must enhance agency organization, secure funding, foster public-private partnerships, and update legislation. ### Meeting Takeaways … Read more

US disrupts Anonymous Sudan DDoS operation, indicts 2 Sudanese brothers

October 16, 2024 at 02:43PM The U.S. Department of Justice indicted two Sudanese brothers, accused of running the hacktivist group Anonymous Sudan, responsible for over 35,000 DDoS attacks. Their actions disrupted critical services worldwide, including health facilities. The brothers face various charges, including conspiracy and reckless endangerment, which could lead to severe prison sentences. **Meeting … Read more

From Misuse to Abuse: AI Risks and Attacks

October 16, 2024 at 07:45AM Cybercriminals are increasingly using AI to enhance their capabilities, although much of the hype surrounding AI in cybercrime lacks substance. Currently, AI is mainly applied to simple tasks like phishing and code generation. However, security risks exist, particularly with custom AI tools, raising concerns over sensitive data exposure. ### Meeting … Read more

Cisco confirms ‘ongoing investigation’ after crims brag about selling tons of data

October 15, 2024 at 06:40PM Cisco is investigating a potential data breach following claims from hacker IntelBroker, who alleges they stole and are selling sensitive Cisco files, including source code and credentials. Multiple major companies may be affected. Cisco has not confirmed the breach details, and investigations are ongoing. ### Meeting Takeaways from Cisco Data … Read more

Cybercriminals Are Increasingly Helping Russia and China Target the US and Allies, Microsoft Says

October 15, 2024 at 04:43PM Collaboration between authoritarian governments and criminal hackers poses a significant threat to national security, as highlighted by Microsoft. This partnership, particularly involving Russia and China, has raised concerns among security officials and cybersecurity experts regarding the potential risks to the US and its allies. **Meeting Takeaways:** 1. **Concerns Over Collaboration:** … Read more

Microsoft says more ransomware stopped before reaching encryption

October 15, 2024 at 12:55PM Microsoft reports a 2.75 times increase in ransomware attacks, yet defenses are improving, halving successful encryption attempts. Common methods include social engineering and exploiting unmanaged devices. Ransomware tactics like double extortion are prevalent, with Akira leading attacks. Microsoft advises implementing multi-factor authentication and reviewing account privileges to mitigate risks. ### … Read more

New Malware Campaign Uses PureCrypter Loader to Deliver DarkVision RAT

October 15, 2024 at 11:54AM A new malware campaign, utilizing the PureCrypter loader, delivers the DarkVision RAT, enabling capabilities like keylogging and remote access. Disclosed by Zscaler ThreatLabz, the multi-stage process involves a .NET executable and persistence features. DarkVision RAT is affordable, making it appealing to cybercriminals seeking versatile malicious tools. ### Meeting Takeaways – … Read more

Southeast Asian Cybercrime Profits Fuel Shadow Economy

October 14, 2024 at 09:05PM Southeast Asia faces a growing shadow economy driven by cyber-enabled fraud and organized crime, generating $27-$37 billion annually. Criminal syndicates exploit lax laws and geopolitical tensions, advancing money laundering and human trafficking. Despite law enforcement efforts, innovation in cybercrime outpaces government response, posing significant economic and human rights challenges. ### … Read more

INC ransomware rebrands to Lynx – same code, new name, still up to no good

October 11, 2024 at 07:05PM Researchers at Palo Alto’s Unit 42 suggest that the INC ransomware group has rebranded as Lynx following a notable period of attacks. Comparisons reveal a 70.8% code overlap, indicating a shared foundation. Despite INC’s recent activity, both groups exhibit similarities in their operations and web presence, raising questions about their … Read more

Bohemia and Cannabia Dark Web Markets Taken Down After Joint Police Operation

October 11, 2024 at 02:27AM Dutch police have dismantled Bohemia and Cannabia, the largest dark web market, following an international investigation. Launched in late 2022, operations ceased in 2023 after internal issues. Authorities arrested two suspects and seized €8 million in cryptocurrency. Meanwhile, a Ukrainian hacker was arrested for operating a VPN accessing the Russian … Read more