FBI

First LockBit, now BreachForums: Are cops winning the war or just a few battles?

by

May 17, 2024 at 07:42AM Recent cybercrime operations by the FBI and global law enforcement included the shutdown of BreachForums, marking a more aggressive approach in battling cybercriminals. While takedowns disrupt, dismantlement involves arrests and infrastructure confiscation, a challenge compounded by cybercriminal safe havens. Efforts to dismantle groups like Scattered Spider are underway, albeit with … Read more

BreachForums Shut Down in Apparent Law Enforcement Operation

by

May 16, 2024 at 03:51AM The popular hacking forum BreachForums has been shut down as part of an international law enforcement operation led by the United States. The FBI and Justice Department, with help from other agencies, have taken down the website and arrested one of its administrators, Baphomet. Further details about the incident are … Read more

FBI takes down BreachForums ransomware website and Telegram channel

by

May 15, 2024 at 06:37PM The FBI, along with global law enforcement, has seized control of BreachForums, a ransomware brokerage site. The operation, involving international partners, took down the site and its Telegram channel. This marks a significant blow to cybercriminals trading in stolen data and carrying out double extortion attacks. It is a major … Read more

FBI seize BreachForums hacking forum used to leak stolen data

by

May 15, 2024 at 10:46AM The FBI has seized the BreachForums hacking forum, used to leak and sell stolen corporate data. The website and its data are now under FBI control. Victims and individuals are requested to contact the FBI with information about the forum and its members for the investigation. The FBI is investigating … Read more

The Week in Ransomware – May 10th 2024 – Chipping away at LockBit

by

May 10, 2024 at 06:05PM The FBI and NCA have revealed the identity of LockBitSupp, the operator of LockBit ransomware, as Russian national Dmitry Yuryevich Khoroshev. The ransomware operation has been on a revenge spree, leaking the names of 119 victims. Other ransomware attacks and disruptions, including on healthcare giant Ascension, have caused widespread damage. … Read more

#StopRansomware: Black Basta

by

May 10, 2024 at 04:13PM The joint Cybersecurity Advisory (CSA) pertains to Black Basta, a ransomware variant targeting critical infrastructure, particularly the Healthcare and Public Health (HPH) Sector. Affiliates use phishing and exploiting vulnerabilities for initial access, employ a double-extortion model, and conduct data exfiltration prior to encryption. The CSA provides TTPs, IOCs, and mitigations … Read more

University System of Georgia Says 800,000 Impacted by MOVEit Hack

by

May 8, 2024 at 06:24AM The University System of Georgia informs 800,000 individuals about the compromise of their personal and financial data in the May 2023 MOVEit hack. The data breach, linked to a ransomware group, affects over 2,000 organizations and around 60 million individuals. USG is offering affected individuals one year of free credit … Read more

CISA urges software devs to weed out path traversal vulnerabilities

by

May 2, 2024 at 03:44PM CISA and the FBI warn software companies about path traversal vulnerabilities in recent alert due to security risks like file manipulation, data access, and system takedown. They urge implementing preventive measures, and they recall previous exploits in essential sectors. Similarly, the agencies previously addressed SQL injection vulnerabilities and emphasized the … Read more

Ex-NSA Employee Sentenced to 22 Years for Trying to Sell U.S. Secrets to Russia

by

May 1, 2024 at 03:12AM A former NSA employee has been sentenced to 22 years in prison for attempting to transfer classified documents to Russia. Despite a short tenure at NSA, Jareh Dalke made contact with an undercover FBI agent posing as a Russian, and transmitted top-secret documents in exchange for money. Dalke pleaded guilty … Read more

Two cuffed in Samourai Wallet crypto dirty money sting

by

April 25, 2024 at 01:23PM Two men, alleged co-founders of cryptocurrency firm Samourai Wallet, face serious charges over facilitating money laundering of over $100 million. They are accused of running an unlicensed money-transmitting business and enabling transactions outside of regulatory rules. The US arrested Rodriguez, while Hill was apprehended in Portugal and is awaiting extradition. … Read more