article thumbnail

Ukraine: Belarusian APT group UNC1151 targets military personnel with spear phishing

Security Affairs

The CERT of Ukraine (CERT-UA) warned of a spear-phishing campaign targeting Ukrainian armed forces personnel. The Computer Emergency Response Team of Ukraine (CERT-UA) is warning of an ongoing spear-phishing campaign targeting private email accounts belonging to Ukrainian armed forces personnel. ua-passport[.]space space and id[.]bigmir[.]space.

Military 106
article thumbnail

The Week in Cyber Security and Data Privacy: 13 – 19 November 2023

IT Governance

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. have notified 330,000 people that their personal data might have been compromised as part of the MOVEit Transfer data breach.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Magecart hackers hide captured credit card data in JPG file

Security Affairs

Crooks devised a new method to hide credit card data siphoned from compromised e-stores, experts observed hackers hiding data in JPG files. The new exfiltration technique was uncovered while investigating a Magecart attack against an e-store running the e-commerce CMS Magento 2. ” reads the post published by Sucuri.

CMS 107
article thumbnail

List of data breaches and cyber attacks in June 2020 ­– 7 billion records breached

IT Governance

The only saving grace for the organisation – which didn’t do itself any favours by initially denying the story and threatening to sue people who reported on it – is that the leaked database comprised a list of records from past data breaches. You can take a look at every data breach and cyber attack that we recorded in June in this blog.

article thumbnail

The Week in Cyber Security and Data Privacy: 4 – 10 December 2023

IT Governance

At the end of each month, these incidents – and any others that we find – will be used to inform our monthly analysis of data breaches and cyber attacks. Data breached: more than 59 million data records. BianLian claims to have exfiltrated 5 TB of data, comprising millions of sensitive documents. Data breached: 5 TB.

article thumbnail

Experts warn of an emerging Python-based credential harvester named Legion

Security Affairs

The malware can exfiltrate collected data via Telegram chat using the Telegram Bot API. Legion exploits web servers running Content Management Systems (CMS), PHP, or PHP-based frameworks such as Laravel. “From these targeted servers, the tool uses a number of RegEx patterns to extract credentials for various web services.

CMS 84
article thumbnail

Magecart attacks are still around but are more difficult to detect

Security Affairs

Malwarebytes researchers observed the use of 3 different themes by the threat actor to hide their skimmer, named after JavaScript libraries: hal-data[.]org/gre/code.js org/gre/code.js ( Angular JS ) hal-data[.]org/data/ org/data/ ( Logger ) js.g-livestatic[.]com/theme/main.js livestatic[.]com/theme/main.js

Cleanup 96