Pilfered Data From Iranian Insurance and Food Delivery Firms Leaked Online

January 3, 2024 at 02:56PM Cybercriminals broke into 23 leading Iranian insurance firms and SnappFood, dumping millions of user profiles. Data from insurers’ leak included sensitive details. SnappFood had 3TB of data, including user profiles, addresses, and credit card records, leaked. The attacks may be state-sponsored cyber espionage. StealC malware infected a SnappFood employee, potentially … Read more

Orbit Chain loses $86 million in the last fintech hack of 2023

January 2, 2024 at 03:46PM Orbit Chain suffered a security breach resulting in an $86 million loss, involving assets like Ether, Dai, Tether, and USD Coin. The breach, suspected to be the work of sophisticated state-sponsored attackers possibly from North Korea, prompted a collaboration with Korean authorities. Stolen funds are being tracked internationally, and caution … Read more

Cyberattack Targets Albanian Parliament’s Data System, Halting Its Work

December 28, 2023 at 02:06PM Albania’s Parliament confirmed a cyberattack on its data system, resulting in a temporary service halt. The attack did not compromise the system’s data, but experts are investigating potential consequences. Iranian-based hackers allegedly targeted other entities. This incident follows a previous cyberattack that led to severed diplomatic ties with Iran. The … Read more

Chinese Hackers Deliver Malware to Barracuda Email Security Appliances via New Zero-Day

December 27, 2023 at 06:12AM China-linked hackers are persistently targeting Barracuda Email Security Gateway (ESG) appliances. In May 2023, a zero-day vulnerability, CVE-2023-2868, was used to deliver malware and steal data, attributed to cyberespionage group UNC4841. Subsequently, a new zero-day vulnerability, CVE-2023-7102, impacting the ‘Spreadsheet::ParseExcel’ library, was exploited to deliver new malware variants. Barracuda issued … Read more

Israeli Company Hires Overseas Attackers in ‘Hack-Back’ Effort

December 14, 2023 at 10:50AM Israeli CEO Doron Amir has recruited hackers from around the world to counter anti-Israel online activity. He believes that permitting offensive cyber operations, with proper supervision, would deter cyberattacks. This concept has been met with skepticism by cybersecurity experts, citing concerns about sufficient oversight and accountability. CyTaka has not commented … Read more

Ukraine’s largest mobile carrier Kyivstar down following cyberattack

December 12, 2023 at 10:47AM Ukraine’s largest telecom provider, Kyivstar, suffered a cyberattack impacting over 25 million subscribers, causing mobile and internet service disruption. The company attributed the attack to hackers, involving law enforcement. There’s speculation of Russian involvement amid the ongoing conflict. Subscribers can access Vodafone Ukraine’s roaming services, and utilize internal roaming during … Read more

Scattered Spider Casino Hackers Evade Arrest in Plain Sight

November 17, 2023 at 03:56PM The cybercrime group known as Scattered Spider has been able to successfully attack US organizations without being disrupted or arrested, despite federal law enforcement being aware of their identities for over six months. The FBI and CISA have released an advisory to help organizations defend against Scattered Spider, but it … Read more

Shadowy Hack-for-Hire Group Behind Sprawling Web of Global Cyberattacks

November 17, 2023 at 02:23PM An investigation by a security vendor has confirmed previous reports linking an Indian hack-for-hire group, called Appin, to cyber espionage and surveillance activities. The group, which no longer exists under its original name, targeted businesses, executives, politicians, and government officials around the world. The investigation found evidence of data theft, … Read more

22 Energy Firms Hacked in Largest Coordinated Attack on Denmark’s Critical Infrastructure

November 14, 2023 at 07:09AM Hackers launched a coordinated attack on 22 energy organizations in Denmark’s critical infrastructure. The attack, which occurred in May 2023, involved compromising victim organizations within a few days. The hackers exploited vulnerabilities in Zyxel firewalls and gained complete control over the impacted systems. The attacks were observed to have been … Read more

Mr. Cooper Says Customer Data Compromised in Cyberattack

November 13, 2023 at 06:03AM US mortgage giant Mr. Cooper experienced a cyberattack on October 31 that led to service disruptions. Hackers gained access to certain systems, preventing the company from processing customer payments. Customer data was compromised, prompting Mr. Cooper to notify affected individuals and offer complimentary credit monitoring services. Users are advised to … Read more