Sinister sysadmin allegedly locked up thousands of Windows workstations, demanded ransom

August 29, 2024 at 02:34PM Former infrastructure engineer, Daniel Rhyne, was arrested and charged after allegedly locking colleagues out of their company’s systems and threatening to shut down servers unless paid a ransom. This led to him being charged with extortion, intentional damage to a protected computer, and wire fraud, facing up to 35 years … Read more

Latvian Hacker Extradited to U.S. for Role in Karakurt Cybercrime Group

August 23, 2024 at 01:36AM Deniss Zolotarjovs, a Latvian residing in Moscow, has been charged in the U.S. for allegedly engaging in cybercrimes, including data theft, extortion, and money laundering. Zolotarjovs is linked to a cybercriminal organization involved in ransomware attacks and is the first member of the group to be extradited to the U.S. … Read more

Marsh Insurance: Volume of Cyber-Insurance Claims Reaches New Heights

June 13, 2024 at 05:17PM In 2023, cyber-insurance claims hit a new high, with over 1,800 claims from the US and Canada. The surge was attributed to more complex cyberattacks, increased privacy claims, a rise in organizations purchasing cyber insurance, and the MOVEit file transfer supply chain breach. Healthcare had the highest claims at 17%, … Read more

A million Australian pubgoers wake up to find personal info listed on leak site

May 2, 2024 at 12:06AM Over a million records of Australians visiting local pubs and clubs have been leaked online. The data includes individuals’ names, addresses, dates of birth, and venues visited. Outabox, a tech services company, appears to be involved in collecting and possibly mishandling the data. Clubs and authorities are investigating the breach, … Read more

Ransomware Double-Dip: Re-Victimization in Cyber Extortion

April 22, 2024 at 07:06AM This text summarizes a report on Cyber Extortion and Ransomware threat landscape, focusing on re-victimization and the impact of law enforcement efforts. It discusses the increase in cybercrime, challenges in monitoring victimization, and the role of affiliates in facilitating cyber-attacks. The report also highlights the unpredictability and complexity of the … Read more

Making Sense of Operational Technology Attacks: The Past, Present, and Future

March 21, 2024 at 05:30AM The text explores the landscape of operational technology (OT) cyber-attacks. It delineates five types of OT cyber-attacks, categorizing them into two distinct groups based on the assets targeted and how they are impacted. The discussion highlights the importance of distinguishing between these categories to better prepare for future cyber-attacks. The … Read more

LockBit ransomware kingpin gets 4 years behind bars

March 14, 2024 at 02:35PM LockBit ransomware kingpin, Mikhail Vasiliev, has been sentenced to nearly four years in prison and ordered to pay over CA$860,000 in restitution to his victims by a Canadian court. He awaits extradition to the US, facing additional charges. The LockBit gang, known for extorting over $120 million, was targeted by … Read more

4 Key Steps to Reevaluate Your Cybersecurity Priorities

February 22, 2024 at 10:28AM Cyber extortion reached a new peak in early 2023. Businesses face rising cyberattacks, especially targeting sensitive data holders like banks and hospitals. Financially motivated cybercriminals exploit victims’ willingness to pay. Brands must respond transparently to incidents. It is critical for boards to elevate cybersecurity, audit sensitive information, update incident response … Read more

Cyber Insights 2024: Ransomware

February 21, 2024 at 01:57PM SecurityWeek’s Cyber Insights annual series discusses major cybersecurity pain points, including the evolving CISO role and new SEC liability rules. Ransomware, a prevalent cyber extortion method, is anticipated to evolve with new tactics such as encryption-free extortion, AI-powered phishing, and politically motivated attacks. Ransomware-as-a-Service, zero-day vulnerabilities, and geopolitical tensions contribute … Read more

Patchwork Using Romance Scam Lures to Infect Android Devices with VajraSpy Malware

February 5, 2024 at 08:45AM Patchwork used romance scam lures to distribute VajraSpy trojan in India and Pakistan. ESET uncovered 12 espionage apps, including some on Google Play, infecting over 1,400 devices. The malware steals various data and was spread through fake messaging apps. This isn’t the first time for Patchwork, which has targeted similar … Read more