Security Affairs

NOVEMBER 17, 2022

A China-based financially motivated group, tracked as Fangxiao, is behind a large-scale phishing campaign dating back as far as 2019. Researchers from Cyjax reported that a China-based financially motivated group, dubbed Fangxiao, orchestrated a large-scale phishing campaign since 2017. Pierluigi Paganini.

Phishing 107

Phishing Retail Security IT 107

Security Affairs

MAY 12, 2024

Black Basta affiliates have targeted over 500 private industry and critical infrastructure entities, including healthcare organizations, in North America, Europe, and Australia.” The researchers analyzed blockchain transactions, they discovered a clear link between Black Basta and the Conti Group. ” reads the CSA.

Ransomware 112

Ransomware Blockchain Retail Insurance 112

Security Affairs

AUGUST 13, 2020

Threat Intel firm Group-IB has released an analytical report on the previously unknown APT group RedCurl, which focuses on corporate espionage. A presumably Russian-speaking group conducts thoroughly planned attacks on private companies across numerous industries using a unique toolset. From Russia to Canada.

Cloud 139

Cloud Phishing Analytics Access 139

Security Affairs

AUGUST 25, 2021

The group has been active since 2016, it leverages known malware such as PUNCHTRACK and BADHATCH to infect PoS systems and steal payment card data. The activity of the group was spotted in March, after more than a year of apparent inactivity. The group also employed their BADHATCH backdoor. service. . Pierluigi Paganini.

Retail 124

Retail Insurance Cybersecurity Phishing 124

The Last Watchdog

FEBRUARY 15, 2024

Through its Breach Coach ® designation, NetDiligence recognizes Harter Secrest & Emery as an industry leader and enhances the firm’s reputation as a trusted resource for clients navigating the complex landscape of data incident response. Greene Led by partner F.

Data breaches 100

Data breaches Financial Services Big data Retail 100

Security Affairs

SEPTEMBER 4, 2021

As a California-based provider of POS technology for the retail and hospitality sector, a successful infection would allow the group to obtain payment card data and later sell the information on online marketplaces.” . “The specified targeting of the Clearmind domain fits well with FIN7’s preferred modus operandi.

Retail 116

Retail Sales Phishing IT 116

Security Affairs

DECEMBER 22, 2021

PYSA and Lockbit were the most active ransomware gangs in the threat landscape in November 2021, researchers from NCC Group report. Security researchers from NCC Group reported an increase in ransomware attacks in November 2021 over the past month, and PYSA (aka Mespinoza) and Lockbit were the most active ransomware gangs.

Ransomware 98

Ransomware Encryption Government Retail 98

Security Affairs

DECEMBER 4, 2018

However, cybercriminals target some industries at disproportionally high rates. The medical industry faces an exceptional risk for cyberattacks because there are so many players involved in the sector. Nonprofits typically focus their efforts on causes that improve society at large, at-risk groups and others in need.

Retail 88

Retail Cybersecurity Data breaches Risk 88

Security Affairs

JANUARY 30, 2024

Energy management and industrial automation firm Schneider Electric suffered a data breach after a Cactus ransomware attack. Schneider Electric is a multinational company that specializes in energy management, industrial automation, and digital transformation.

Ransomware 126

Ransomware Data breaches Digital transformation Encryption 126

OpenText Information Management

OCTOBER 26, 2023

Renee Group has designed and manufactured bold footwear styles across a range of categories, including comfort, casual dress, dress, and special occasion. Renee Group Steps up seasonal sales appeared first on OpenText Blogs. We’ve been in business for almost half a … The post J.

Sales 62

Sales Manufacturing Retail Marketing 62

The Guardian Data Protection

APRIL 23, 2023

Exclusive: Cross-party collection of parliamentarians write letter to Sports Direct owner’s company Almost 50 MPs and peers have written to Mike Ashley’s Frasers Group, the corporate owner of the tycoon’s retail portfolio including House of Fraser and Sports Direct, condemning the use of “ live facial recognition ” cameras in the group’s stores.

Retail 72

Retail Privacy 72

The Guardian Data Protection

JUNE 15, 2021

Swedish retailer found guilty of gathering data to sift out potential trouble-makers among employees The home furnishings group Ikea has been ordered to pay €1.1m (£861,000) in fines and damages by a French court after being found guilty of spying on staff.

Retail 140

Retail 140

Security Affairs

JUNE 12, 2019

After two years of silence, FIN8 group is back and carried out a new campaign against the hotel-entertainment industry employing the ShellTea/PunchBuggy backdoor. At the time, FireEye and root9B published detailed reports about a series of attacks targeting the retail sector. ” reads the analysis published by Morphisec.

Phishing 76

Phishing Retail Communications Security 76

The Last Watchdog

JULY 13, 2023

The report outlines how cyber hacking groups are becoming more specialised and diversified, with some groups now using SME’s security systems as a training ground for new hackers to learn their trade. These threats are fast evolving and unfamiliar, with many companies being caught on the back-foot when dealing with the risk.

Risk 189

Risk Insurance Energy and Utilities Marketing 189

Security Affairs

JANUARY 13, 2019

” The TA505 group was first spotted by Proofpoint back 2017, it has been active at least since 2015 and targets organizations in financial and retail industries. In November experts observed several campaigns carried out by the TA505 group, in three of them the threat actors delivered the ServHelper malware.

IT 91

IT Financial Services Retail Ransomware 91

Security Affairs

AUGUST 9, 2021

ransomware attacks against Australian organizations in multiple industry sectors starting July 2021. This activity has occurred across multiple industry sectors. The LockBit ransomware gang has been active since September 2019, in June the group announced the LockBit 2.0 ransomware. . ransomware. in Australia since 2020.

Ransomware 111

Ransomware Retail Security Manufacturing 111

The Last Watchdog

JUNE 15, 2023

Customer authentication For the past 15 years, e-commerce has increased as a percentage of all retail sales. In 2019 the Web Payments Working Group began work on Secure Payment Confirmation to help fulfill Strong Customer Authentication requirements with low checkout friction.

Authentication 100

Authentication Communications Financial Services Retail 100

Security Affairs

APRIL 21, 2024

Automotive Industry Chinese Organized Crime’s Latest U.S.

Data breaches 97

Data breaches Security MDM Ransomware 97

Krebs on Security

JUNE 22, 2023

” The written notice goes on to say UPS believes the data exposure “affected packages for a small group of shippers and some of their customers from February 1, 2022 to April 24, 2023.” “It was more or less the same day. In a statement provided to KrebsOnSecurity, Sandy Springs, Ga. ”

Phishing 280

Phishing Retail IT Communications 280

Thales Cloud Protection & Licensing

APRIL 22, 2024

The report analyzes the bad bot threat landscape across industries, sophistication levels, origin, and more. Bad Bots Affect All Sectors The gaming industry suffers most from bad bot traffic, with 57.2% It is crucial to recognize that various industries are threatened by bad bots in distinct ways.

Digital transformation 71

Digital transformation Retail Access Encryption 71

Security Affairs

NOVEMBER 20, 2020

Group-IB, a global threat hunting and intelligence company headquartered in Singapore, has discovered that QakBot (aka Qbot) operators have abandoned ProLock for Egregor ransomware. The biggest ransom demand detected by Group-IB team has been at $4 million worth of BTC. of victims) and Retail (14.5%). ProLock = Egregor.

Ransomware 116

Ransomware Retail Encryption Manufacturing 116

Thales Cloud Protection & Licensing

JANUARY 26, 2021

The Verizon DBIR 2020 report indicates that financially motivated attacks against retailers have moved away from Point of Sale (POS) devices and controllers, towards web applications. This largely follows the trend in the industry of moving transactions primarily to a more web-focused infrastructure. Fraud and scams move to the web.

Security 143

Security Retail Authentication Big data 143

Security Affairs

AUGUST 28, 2019

Recent campaigns show t hreat actors behind the Dridex and Locky malware families , the TA505 group, have updated tactics and expanded its target list. Trend Micro revealed that the TA505 group that is behind the Dridex and Locky malware families continue to make small changes to its operations. XLS or VBA.DOC macros.”

e-Delivery 72

e-Delivery Insurance Retail Government 72

Security Affairs

FEBRUARY 28, 2024

“These operations have targeted various industries, including Aerospace & Defense, Education, Energy & Utilities, Governments, Hospitality, Manufacturing, Oil & Gas, Retail, Technology, and Transportation. ” reads the joint report. reads the press release published by DoJ.

Energy and Utilities 96

Energy and Utilities Military Government Phishing 96

IT Governance

MAY 7, 2024

At least 191 Australian organisations affected by ZircoDATA ransomware attack The ransomware group BlackBasta listed Australia-based ZircoDATA as a victim in February, allegedly exfiltrating 395 GB of data. Source (New) IT services USA Yes 1,382 Worthen Industries Source 1 ; source 2 (Update) Manufacturing USA Yes 1,277 R.J.

Data breaches 59

Data breaches Education Manufacturing Retail 59

Security Affairs

MAY 5, 2021

The group targeted the organization with phishing attacks aimed at spreading at least three new sophisticated malware strains. FireEye’s Mandiant unit observed two distinct waves of attacks carried out by the cybercrime group in December 2020. ” Follow me on Twitter: @securityaffairs and Facebook.

Manufacturing 99

Manufacturing Phishing Military Retail 99

Security Affairs

SEPTEMBER 22, 2020

Luxottica Group S.p.A. is an Italian eyewear conglomerate and the world’s largest company in the eyewear industry. The Italian eyewear and eyecare giant Luxottica has reportedly suffered a cyber attack that disrupted its operations in Italy and China.

Retail 141

Retail Manufacturing Ransomware Security 141

Security Affairs

OCTOBER 20, 2019

TA505 cybercrime group that operated the Dridex Trojan and Locky ransomware, has been using a new RAT dubbed SDBbot in recent attacks. Security experts at Proofpoint observed the notorious TA505 cybercrime group that has been using a new RAT dubbed SDBbot in recent attacks. ” reads the analysis published by Proofpoint.

Retail 43

Retail Phishing Ransomware Access 43

Security Affairs

OCTOBER 6, 2021

Both cybercriminal groups and actors involved in espionage operations use this RAT due to Agent Tesla’s stability, flexibility and functionality that allows for the collection of sensitive data and exfiltration from the victim. . Last year, Agent Tesla was spotted in highly targeted campaigns against the oil and gas industry.

Financial Services 135

Financial Services Retail Education Information Security 135

Security Affairs

OCTOBER 18, 2020

The financially-motivated hacker group FIN11 has started spreading ransomware to monetize its cyber criminal activities. The financially-motivated hacker group FIN11 has switched tactics starting using ransomware as the main monetization method. ” reads the analysis published by FireEye. ” reads the analysis.

Ransomware 131

Ransomware IT Healthcare Phishing 131

Security Affairs

SEPTEMBER 10, 2021

In late August, ESET researchers uncovered the SideWalk backdoor that was employed by the Chine cyberespionage group in an attack aimed at a computer retail company based in the U.S. The APT group primarily focuses on attacks against organizations in East and Southeast Asia, the group has been particularly active in recent years.

Retail 96

Retail Risk Security IT 96

Security Affairs

OCTOBER 12, 2023

Researchers from the Akamai Security Intelligence Group uncovered a Magecart web skimming campaign that is manipulating the website’s default 404 error page to hide malicious code. The attacks are targeting a large number of Magento and WooCommerce websites, including large organizations in the food and retail industries.

Retail 107

Retail IT Security Information Security 107

Security Affairs

APRIL 18, 2019

“CyberInt researchers have been tracking various activities following the spear-phishing campaign targeting large US-based retailers detected in December 2018.” ” The TA505 group was first spotted by Proofpoint back 2017, it has been active at least since 2015 and targets organizations in financial and retail industries. .

Retail 69

Retail Phishing Ransomware Access 69

The Last Watchdog

JUNE 27, 2023

of the Payment Card Industry Data Security Standards (PCI DSS v4.0). Jscrambler’s research has shown that in recent months the modus operandi for three of the most prolific cybercriminal groups has evolved as they seek more innovative ways to compromise targets. and 11.6.1 of PCI DSS v4.0. With the new PCI DSS v4.0

Compliance 100

Compliance Retail Security Communications 100

Krebs on Security

MARCH 26, 2020

Cybersecurity experts say the raid included the charging of a major carding kingpin thought to be tied to dozens of carding shops and to some of the bigger data breaches targeting western retailers over the past decade. Flint is among the biggest players in the crowded underground market for stolen credit card data, according to a U.S.

Retail 281

Retail Insurance Cybersecurity Data breaches 281

Security Affairs

APRIL 27, 2019

Experts at Cisco Talos group disclosed a dozen vulnerabilities uncovered in Sierra Wireless AirLink gateways and routers, including several serious flaws. Researchers at Cisco Talos group disclosed a dozen vulnerabilities affecting Sierra Wireless AirLink gateways and routers, including several serious flaws.

Passwords 99

Passwords Sales IoT Authentication 99

IT Governance

FEBRUARY 14, 2024

GB City of Clemson, South Carolina Source New Public USA Yes 21,056 DGX-Dependable Hawaiian Express Source New Professional services USA Yes 20 GB Verdimed Source New Agricultural Spain Yes 19 GB Watchmax Source New Retail UK Yes 15,000 Del-Tron Precision Source New Manufacturing India Yes 8.9 GB Signature Performance, Inc.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52