FBI: Tech support scams now use couriers to collect victims’ money

January 29, 2024 at 11:36AM The FBI issued a warning about scammers using courier services to collect cash and precious metals from victims, often senior citizens, in tech support or government impersonation scams. The scammers pressure victims to sell assets and arrange for couriers to pick up funds. The FBI advises caution and to report … Read more

FBI: Beware of thieves building Androxgh0st botnets using stolen creds

January 16, 2024 at 08:36PM The FBI and CISA warn that cybercriminals are leveraging old vulnerabilities to deploy Androxgh0st malware, targeting .env files containing user credentials for AWS, Microsoft Office 365, SendGrid, and Twilio. The malware can be used to steal data, execute code remotely, and create new AWS users and instances. Mitigations include updating … Read more

Zeppelin ransomware source code sold for $500 on hacking forum

January 4, 2024 at 11:20AM A cybercriminal offered the Zeppelin ransomware source code and builder on a forum for $500. Despite questions about its legitimacy, screenshots indicate it is genuine. The seller, ‘RET,’ claims to have cracked the builder without a license and intends to sell it to a single buyer. Security flaws in Zeppelin’s … Read more

FBI: Play ransomware breached 300 victims, including critical orgs

December 18, 2023 at 11:29AM The FBI, CISA, and ASD’s ACSC jointly warn that the Play ransomware gang has targeted approximately 300 organizations globally between June 2022 and October 2023, impacting critical infrastructure. The group employs unconventional tactics, including stealing sensitive data and using a custom VSS Copying Tool. Organizations are urged to address vulnerabilities … Read more