erwin

FEBRUARY 21, 2019

Much like the hospitality industry , digital transformation in retail has been a huge driver of change. One important fact is getting lost among all of the talk of “the retail apocalypse” and myriad stories about increasingly empty shopping malls: there’s a lot of money to be made in retail.

Digital transformation 69

Digital transformation Retail e-Delivery Customer Experience 69

Security Affairs

AUGUST 13, 2020

Threat Intel firm Group-IB has released an analytical report on the previously unknown APT group RedCurl, which focuses on corporate espionage. A presumably Russian-speaking group conducts thoroughly planned attacks on private companies across numerous industries using a unique toolset. From Russia to Canada.

Cloud 143

Cloud Phishing Analytics Access 143

Security Affairs

SEPTEMBER 4, 2021

As a California-based provider of POS technology for the retail and hospitality sector, a successful infection would allow the group to obtain payment card data and later sell the information on online marketplaces.” The image asks the recipient to Enable Editing and Enable Content to access its content.

Retail 124

Retail Sales Phishing IT 124

Security Affairs

NOVEMBER 21, 2021

The Conti ransomware group has suffered a data breach that exposed its attack infrastructure and allowed researcher to access it. Researchers at security firm Prodaft were able to identify the real IP address of one of the servers used by the Conti ransomware group and access the console for more than a month.

Access 91

Access Ransomware Retail Data breaches 91

Security Affairs

DECEMBER 22, 2021

PYSA and Lockbit were the most active ransomware gangs in the threat landscape in November 2021, researchers from NCC Group report. Security researchers from NCC Group reported an increase in ransomware attacks in November 2021 over the past month, and PYSA (aka Mespinoza) and Lockbit were the most active ransomware gangs.

Ransomware 104

Ransomware Encryption Government Retail 104

Krebs on Security

FEBRUARY 1, 2024

“R,” “R$” and “ElSwapo1,” was the ringleader of a SIM-swapping group called the “Powell SIM Swapping Crew.” ” Colorado resident Emily “Em” Hernandez allegedly helped the group gain access to victim devices in service of SIM-swapping attacks between March 2021 and April 2023.

Blockchain 232

Blockchain Ransomware Retail Analytics 232

Security Affairs

APRIL 12, 2024

TA547 group is targeting dozens of German organizations with an information stealer called Rhadamanthys, Proofpoint warns. The group also operates as an initial access broker (IAB) and targets various geographic regions. The security firm pointed out that this is the first TA547 group to use this malware family.

Retail 110

Retail Passwords IT Security 110

Krebs on Security

SEPTEMBER 20, 2021

Or maybe it isn’t entirely clear who should get the report when remote access to an organization’s internal network is being sold in the cybercrime underground. Perhaps this particular retailer also did so at one point, however my message was returned with a note saying the email had been blocked.

Retail 305

Retail Security Encryption IT 305

Security Affairs

FEBRUARY 19, 2024

The Cactus ransomware group claims responsibility for pilfering 1.5TB of data from the Energy management and industrial automation giant Schneider Electric. Splashtop, AnyDesk, SuperOps RMM) to achieve remote access and uses Cobalt Strike and the proxy tool Chisel in post-exploitation activities.

Ransomware 110

Ransomware Digital transformation Encryption Retail 110

Security Affairs

MARCH 3, 2024

Camera doorbells manufactured by the Chinese company Eken Group Ltd under the brands EKEN and Tuck are affected by major vulnerabilities. Researchers from Consumer Reports (CR) discovered severe vulnerabilities in doorbell cameras manufactured by the Chinese company Eken Group Ltd.

Manufacturing 128

Manufacturing Retail Sales Communications 128

Krebs on Security

MAY 11, 2020

Diebold Nixdorf , a major provider of automatic teller machines (ATMs) and payment technology to banks and retailers, recently suffered a ransomware attack that disrupted some operations. The 35,000-employee company also produces point-of-sale systems and software used by many retailers.

Ransomware 339

Ransomware Retail Sales Data breaches 339

Security Affairs

JANUARY 13, 2019

The ServHelper is a backdoor, experts analyzed two variants of it, while FlawedGrace is a remote access trojan (RAT). ” The TA505 group was first spotted by Proofpoint back 2017, it has been active at least since 2015 and targets organizations in financial and retail industries. ” continues Proofpoint.

IT 97

IT Financial Services Retail Ransomware 97

The Last Watchdog

JULY 27, 2023

The program will be broken down into two separate distribution structures, each with a distinct revenue focus and cyber security data access formation. Librizzi “Furthermore, Converge’s operational efficiency allows us to target small business through the program, complementing business we write through our retail Cyber practice,” she says.

Insurance 188

Insurance Risk Retail Marketing 188

Security Affairs

JANUARY 30, 2024

Splashtop, AnyDesk, SuperOps RMM) to achieve remote access and uses Cobalt Strike and the proxy tool Chisel in post-exploitation activities. In early January, the Cactus ransomware group claimed to have hacked Coop, one of the largest retail and grocery providers in Sweden.

Ransomware 129

Ransomware Data breaches Digital transformation Encryption 129

Security Affairs

OCTOBER 1, 2021

Luxury retail company Neiman Marcus Group has announced this week that it has suffered a data breach that impacted customer information. The attack against Neiman Marcus Group took place in May 2020, as a result of the attack, threat actors had access to customers’ information, including payment card data.

Data breaches 99

Data breaches Retail Passwords Access 99

Security Affairs

DECEMBER 1, 2023

The Black Basta ransomware group has been active since April 2022, like other ransomware operations, it implements a double-extortion attack model. A joint research by Elliptic and Corvus Insurance revealed that the group accumulated at least $107 million in Bitcoin ransom payments since early 2022. The average ransom payment was $1.2

Ransomware 93

Ransomware Blockchain Retail Insurance 93

Security Affairs

FEBRUARY 28, 2024

. “These operations have targeted various industries, including Aerospace & Defense, Education, Energy & Utilities, Governments, Hospitality, Manufacturing, Oil & Gas, Retail, Technology, and Transportation. The US government operation blocked access to the routers by Russian cyberspies.

Energy and Utilities 104

Energy and Utilities Military Government Phishing 104

Krebs on Security

APRIL 18, 2019

The clues so far suggest the work of a fairly experienced crime group that is focused on perpetrating gift card fraud. It appears the attackers in this case are targeting companies that in one form or another have access to either a ton of third-party company resources, and/or companies that can be abused to conduct gift card fraud.

IT 190

IT Retail Phishing Access 190

Krebs on Security

JUNE 27, 2019

based cloud solution provider, allowed hackers to access email and file sharing systems for some of the company’s clients, KrebsOnSecurity has learned. As noted in that April story, PCM was one of the companies targeted by the same hacking group that compromised Wipro. A digital intrusion at PCM Inc. , a major U.S.-based

Cloud 246

Cloud Retail Access Government 246

Security Affairs

JUNE 7, 2023

Clop ransomware group claims to have hacked hundreds of companies globally by exploiting MOVEit Transfer vulnerability. The Clop ransomware group may have compromised hundreds of companies worldwide by exploiting a vulnerability in MOVEit Transfer software. The group has fixed the deadline on June 14.

Ransomware 85

Ransomware Retail Personal data Authentication 85

IT Governance

MAY 7, 2024

At least 191 Australian organisations affected by ZircoDATA ransomware attack The ransomware group BlackBasta listed Australia-based ZircoDATA as a victim in February, allegedly exfiltrating 395 GB of data. Source (New) Construction USA Yes 489 ClearVision Optical Source (New) Retail USA Yes 261 Symphony Financial, LLC.

Data breaches 59

Data breaches Education Manufacturing Retail 59

Hunton Privacy

DECEMBER 1, 2020

Carrefour France and Carrefour Banque are both affiliates of the French retail group, the Carrefour Group. The group has diversified its activities into the banking and insurance, travel agency and e-commerce sectors. The CNIL carried out online inspections on the carrefour.fr and carrefour-banque.fr and carrefour-banque.fr

GDPR 91

GDPR Personal data Data collection Marketing 91

Security Affairs

NOVEMBER 20, 2020

Group-IB, a global threat hunting and intelligence company headquartered in Singapore, has discovered that QakBot (aka Qbot) operators have abandoned ProLock for Egregor ransomware. The biggest ransom demand detected by Group-IB team has been at $4 million worth of BTC. of victims) and Retail (14.5%). ProLock = Egregor.

Ransomware 124

Ransomware Retail Encryption Manufacturing 124

The Last Watchdog

JUNE 15, 2023

Customer authentication For the past 15 years, e-commerce has increased as a percentage of all retail sales. In 2019 the Web Payments Working Group began work on Secure Payment Confirmation to help fulfill Strong Customer Authentication requirements with low checkout friction.

Authentication 100

Authentication Communications Financial Services Retail 100

Krebs on Security

NOVEMBER 2, 2023

Most online retailers grew wise to these scams years ago and stopped shipping to regions of the world most frequently associated with credit card fraud, including Eastern Europe, North Africa, and Russia. The stuffers use stolen cards to purchase high-value products from merchants and have the merchants ship the items to the drops’ address.

Marketing 267

Marketing Retail Blockchain Communications 267

Krebs on Security

JUNE 22, 2023

. “Because this information could be misused by third parties, including potentially in a smishing scheme, UPS has taken steps to limit access to that information.” “It wasn’t like I put the order through [on Apple.ca] and some days or weeks later I got a targeted smishing attack,” he said.

Phishing 276

Phishing Retail IT Communications 276

eSecurity Planet

FEBRUARY 2, 2023

Users can collaborate with peers to validate threats and develop response plans using private groups and shared collections, and strengthen their existing security solutions with threat intelligence delivered through open standards,” said Sam Dillingham, Senior Offering Manager, IBM Security.

Retail 97

Retail Cloud Access Privacy 97

Security Affairs

JANUARY 30, 2023

Sports fashion retail JD Sports discloses a data breach that explosed data of about 10M customers who placed orders between 2018 and 2020. The affected JD Sports group brands are JD, Size?, JD Sports does not hold full payment card data and, further, has no reason to believe that account passwords were accessed.”

Data breaches 96

Data breaches e-Delivery Passwords Retail 96

Thales Cloud Protection & Licensing

JANUARY 26, 2021

The Verizon DBIR 2020 report indicates that financially motivated attacks against retailers have moved away from Point of Sale (POS) devices and controllers, towards web applications. Figure 1: Web application breaches in the Retail industry. Fraud and scams move to the web. Source: Verizon DBIR 2020. Vulnerabilities exploitation.

Security 143

Security Retail Authentication Big data 143

Security Affairs

OCTOBER 20, 2019

TA505 cybercrime group that operated the Dridex Trojan and Locky ransomware, has been using a new RAT dubbed SDBbot in recent attacks. Security experts at Proofpoint observed the notorious TA505 cybercrime group that has been using a new RAT dubbed SDBbot in recent attacks. ” reads the analysis published by Proofpoint.

Retail 45

Retail Phishing Ransomware Access 45

Security Affairs

MAY 1, 2023

The previously undetected LOBSHOT malware is distributed using Google ads and gives operators VNC access to Windows devices. Researchers from Elastic Security Labs spotted a new remote access trojan dubbed LOBSHOT was being distributed through Google Ads. ” reads the report published by Elastic Security Labs.

Retail 94

Retail Access Education Security 94

Security Affairs

AUGUST 9, 2021

which includes info related to the activity of the gang, such as initial access, threat activity and mitigations. Most of the attacks have been reported in July, the organizations hit by the ransomware gang operate in professional services, construction, manufacturing, retail, and food industries. ransomware. in Australia since 2020.

Ransomware 111

Ransomware Retail Security Manufacturing 111

Security Affairs

JUNE 16, 2023

British multinational oil and gas company Shell has confirmed that it has suffered a ransomware attack conducted by the Clop group. At the time of this writing, the Clop ransomware group already added 27 companies to the list of victims on its dark web leak site. At this time the number of installs located in the UK is 127.

Ransomware 95

Ransomware Data breaches Retail Government 95

Security Affairs

NOVEMBER 8, 2021

Electronics retail giant MediaMarkt was hit by a ransomware attack that disrupted store operations in the Netherlands and Germany. Media Markt is a German multinational chain of stores selling consumer electronics with over 1000 stores in Europe.

Ransomware 118

Ransomware Computer and Electronics Retail Sales 118

Security Affairs

MAY 20, 2023

Luxottica Group S.p.A. As a vertically integrated company, Luxottica designs, manufactures, distributes and retails its eyewear brands, including LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Target Optical, Eyemed vision care plan, and Glasses.com. The investigation into the security breach is still ongoing. “We

Data breaches 95

Data breaches Retail Sales Ransomware 95

Security Affairs

JUNE 13, 2023

The threat actors exploited the zero-day flaw ( CVE-2023-34362 ,) in MOVEit file transfer and access the infrastructure of the regulator. A spokesperson for Ofcom told The Record that the ransomware group had access confidential information which the regulator held on companies it regulates. “A

Communications 75

Communications Data breaches Ransomware Personal data 75

Security Affairs

APRIL 18, 2019

Russian financially motivated threat actor TA505 used remote access Trojans (RATs) in attacks on financial entities in the United States and worldwide. The hackers used remote access Trojans (RATs) in attacks aimed at financial entities in the United States and worldwide. ” reads the analysis published by Cyberint.

Retail 75

Retail Phishing Ransomware Access 75