Security Affairs

NOVEMBER 17, 2022

A China-based financially motivated group, tracked as Fangxiao, is behind a large-scale phishing campaign dating back as far as 2019. Researchers from Cyjax reported that a China-based financially motivated group, dubbed Fangxiao, orchestrated a large-scale phishing campaign since 2017. Pierluigi Paganini.

Phishing 114

Phishing Retail Security IT 114

Security Affairs

AUGUST 25, 2021

The group has been active since 2016, it leverages known malware such as PUNCHTRACK and BADHATCH to infect PoS systems and steal payment card data. The activity of the group was spotted in March, after more than a year of apparent inactivity. The group also employed their BADHATCH backdoor. Pierluigi Paganini.

Retail 126

Retail Insurance Cybersecurity Phishing 126

Security Affairs

AUGUST 13, 2020

Threat Intel firm Group-IB has released an analytical report on the previously unknown APT group RedCurl, which focuses on corporate espionage. A presumably Russian-speaking group conducts thoroughly planned attacks on private companies across numerous industries using a unique toolset. From Russia to Canada.

Cloud 143

Cloud Phishing Analytics Access 143

Security Affairs

SEPTEMBER 4, 2021

As a California-based provider of POS technology for the retail and hospitality sector, a successful infection would allow the group to obtain payment card data and later sell the information on online marketplaces.” . “The specified targeting of the Clearmind domain fits well with FIN7’s preferred modus operandi.

Retail 123

Retail Sales Phishing IT 123

Thales Cloud Protection & Licensing

JANUARY 26, 2021

The Future of Payments Security. The Verizon DBIR 2020 report indicates that financially motivated attacks against retailers have moved away from Point of Sale (POS) devices and controllers, towards web applications. This largely follows the trend in the industry of moving transactions primarily to a more web-focused infrastructure.

Security 143

Security Retail Authentication Big data 143

Security Affairs

DECEMBER 22, 2021

PYSA and Lockbit were the most active ransomware gangs in the threat landscape in November 2021, researchers from NCC Group report. Security researchers from NCC Group reported an increase in ransomware attacks in November 2021 over the past month, and PYSA (aka Mespinoza) and Lockbit were the most active ransomware gangs.

Ransomware 104

Ransomware Encryption Government Retail 104

Security Affairs

AUGUST 9, 2021

The Australian Cyber Security Centre (ACSC) warns of a surge of LockBit 2.0 The Australian Cyber Security Centre (ACSC) warns of an escalation in LockBit 2.0 ransomware attacks against Australian organizations in multiple industry sectors starting July 2021. This activity has occurred across multiple industry sectors.

Ransomware 113

Ransomware Retail Security Manufacturing 113

Security Affairs

DECEMBER 4, 2018

Society’s dependence on internet-based technologies means security professionals must defend against cyberattacks as well as more traditional threats, such as robbers or disgruntled employees. However, cybercriminals target some industries at disproportionally high rates. happened at retail establishments. Health Care.

Retail 92

Retail Cybersecurity Data breaches Risk 92

Security Affairs

JANUARY 30, 2024

Energy management and industrial automation firm Schneider Electric suffered a data breach after a Cactus ransomware attack. Schneider Electric is a multinational company that specializes in energy management, industrial automation, and digital transformation.

Ransomware 130

Ransomware Data breaches Digital transformation Encryption 130

IT Governance

FEBRUARY 14, 2024

Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. It has since been confirmed by Anukul Peedkaew, the permanent secretary of social development and human security.

Data Privacy 52

Data Privacy Manufacturing Privacy Security 52

The Last Watchdog

JUNE 15, 2023

The World Wide Web Consortium today announced a standardization milestone for a new browser capability that helps to streamline user authentication and enhance payment security during Web checkout. Publication of Secure Payment Confirmation as a Candidate Recommendation indicates that the feature set is stable and has received wide review.

Authentication 100

Authentication Communications Financial Services Retail 100

Security Affairs

JUNE 12, 2019

After two years of silence, FIN8 group is back and carried out a new campaign against the hotel-entertainment industry employing the ShellTea/PunchBuggy backdoor. The last time security experts documented the FIN8’s activities was in 2016 and 2017. ” reads the analysis published by Morphisec.

Phishing 80

Phishing Retail Communications Security 80

The Last Watchdog

JULY 13, 2023

Is business becoming dulled to the cyber security threat As cyber fears decrease, the technological risk landscape has fragmented, with executives nearly as concerned about the perceived threat posed by disruptive new technologies, such as AI, as the risk of cybercrime.

Risk 189

Risk Insurance Energy and Utilities Marketing 189

Thales Cloud Protection & Licensing

APRIL 22, 2024

The report analyzes the bad bot threat landscape across industries, sophistication levels, origin, and more. Bad Bots Affect All Sectors The gaming industry suffers most from bad bot traffic, with 57.2% It is crucial to recognize that various industries are threatened by bad bots in distinct ways.

Digital transformation 71

Digital transformation Retail Access Encryption 71

IT Governance

FEBRUARY 21, 2024

Fowler sent a responsible disclosure notice when he discovered the database and it was secured the following day. Source New Telecoms USA Yes 6,158 Nabholz Construction Company Employee Welfare Health Plan Source 1 ; source 2 New Healthcare USA Yes 5,326 Dawson James Securities, Inc. North Hill Home Health Care, Inc.,

Data Privacy 52

Data Privacy Manufacturing Privacy Energy and Utilities 52

Security Affairs

JANUARY 13, 2019

Security researchers at Proofpoint researchers discovered two strains of malware tracked as ServHelper and FlawedGrace distributed through phishing campaigns by the TA505 crime gang. In November experts observed several campaigns carried out by the TA505 group, in three of them the threat actors delivered the ServHelper malware.

IT 96

IT Financial Services Retail Ransomware 96

Security Affairs

FEBRUARY 28, 2024

The Federal Bureau of Investigation (FBI), National Security Agency (NSA), US Cyber Command, and international partners released a joint Cybersecurity Advisory (CSA) to warn that Russia-linked threat actors are using compromised Ubiquiti EdgeRouters (EdgeRouters) to evade detection in cyber operations worldwide. .

Energy and Utilities 104

Energy and Utilities Military Government Phishing 104

Security Affairs

DECEMBER 22, 2019

The best news of the week with Security Affairs. A WhatsApp bug could have allowed crashing of all group members. Online Retailer LightInTheBox exposes unsecured DB containing 1.3TB of web server logs. Gangnam Industrial Style APT campaign targets industrial firms worldwide. Pierluigi Paganini.

Security 57

Security Ransomware Passwords Data breaches 57

Security Affairs

JANUARY 24, 2024

Impacted customers include Sweden’s largest cinema chain Filmstaden (the attack disrupted its online ticket system) and the discount retail chain Rusta. ” BleepingComputer first reported that the security breach was the result of an Akira ransomware attack. Tietoevry notified law enforcement and impacted customers.

Ransomware 115

Ransomware Government Retail Cloud 115

Security Affairs

NOVEMBER 20, 2020

Group-IB, a global threat hunting and intelligence company headquartered in Singapore, has discovered that QakBot (aka Qbot) operators have abandoned ProLock for Egregor ransomware. The biggest ransom demand detected by Group-IB team has been at $4 million worth of BTC. of victims) and Retail (14.5%). ProLock = Egregor.

Ransomware 123

Ransomware Retail Encryption Manufacturing 123

The Last Watchdog

JUNE 27, 2023

of the Payment Card Industry Data Security Standards (PCI DSS v4.0). This free assessment tool provides organizations of all sizes with clarity and simple compliance coupled with proactive security measures to prevent web skimming and Magecart attacks. and 11.6.1 of PCI DSS v4.0.

Compliance 100

Compliance Retail Security Communications 100

Security Affairs

SEPTEMBER 22, 2020

Luxottica Group S.p.A. is an Italian eyewear conglomerate and the world’s largest company in the eyewear industry. Security experts believe that threat actor exploited the above flaw to infect the systems at the company with ransomware. At the time Luxottica has yet to release any official statement on the attack.

Retail 141

Retail Manufacturing Ransomware Security 141

Security Affairs

OCTOBER 6, 2021

Both cybercriminal groups and actors involved in espionage operations use this RAT due to Agent Tesla’s stability, flexibility and functionality that allows for the collection of sensitive data and exfiltration from the victim. . Last year, Agent Tesla was spotted in highly targeted campaigns against the oil and gas industry.

Financial Services 138

Financial Services Retail Education Information Security 138

Security Affairs

OCTOBER 12, 2023

Researchers from the Akamai Security Intelligence Group uncovered a Magecart web skimming campaign that is manipulating the website’s default 404 error page to hide malicious code. The attacks are targeting a large number of Magento and WooCommerce websites, including large organizations in the food and retail industries.

Retail 114

Retail IT Security Information Security 114

Security Affairs

MAY 20, 2023

Luxottica Group S.p.A. is an Italian eyewear conglomerate and the world’s largest company in the eyewear industry. BleepingComputer first reported the news, and Luxottica confirmed that the data breach is the result of a new security incident suffered by a third-party contractor that was managing its customer data.

Data breaches 94

Data breaches Retail Sales Ransomware 94

Security Affairs

AUGUST 28, 2019

Recent campaigns show t hreat actors behind the Dridex and Locky malware families , the TA505 group, have updated tactics and expanded its target list. Trend Micro revealed that the TA505 group that is behind the Dridex and Locky malware families continue to make small changes to its operations. XLS or VBA.DOC macros.”

e-Delivery 74

e-Delivery Insurance Retail Government 74

Krebs on Security

JUNE 22, 2023

” The written notice goes on to say UPS believes the data exposure “affected packages for a small group of shippers and some of their customers from February 1, 2022 to April 24, 2023.” “It was more or less the same day. In a statement provided to KrebsOnSecurity, Sandy Springs, Ga. ”

Phishing 272

Phishing Retail IT Communications 272

IT Governance

DECEMBER 20, 2022

Although there have still been a few surprises, with the death of Queen Elizabeth II and blazing heatwaves across the UK to name but two, it was a familiar year in the cyber security landscape. Google , Clearview AI , and Meta all receives hefty penalties in 2022, demonstrating the continued important of effective information security.

Security 132

Security Data breaches Ransomware Military 132

Security Affairs

SEPTEMBER 10, 2021

Security researchers from Broadcom’s Symantec linked a previously undocumented backdoor to the Chinese Grayfly operation. In late August, ESET researchers uncovered the SideWalk backdoor that was employed by the Chine cyberespionage group in an attack aimed at a computer retail company based in the U.S.

Retail 103

Retail Risk Security IT 103

Security Affairs

MAY 5, 2021

The group targeted the organization with phishing attacks aimed at spreading at least three new sophisticated malware strains. FireEye’s Mandiant unit observed two distinct waves of attacks carried out by the cybercrime group in December 2020. orgs with 3 malware appeared first on Security Affairs. Pierluigi Paganini.

Manufacturing 107

Manufacturing Phishing Military Retail 107

Security Affairs

OCTOBER 20, 2020

Luxottica Group S.p.A. is an Italian eyewear conglomerate and the world’s largest company in the eyewear industry. BleepingComputer website, citing the security firm Bad Packets, speculates that the Italian was using a Citrix ADX controller device vulnerable to the critical CVE-2019-19781 vulnerability in Citrix devices.

Ransomware 138

Ransomware IT Retail Manufacturing 138

Security Affairs

OCTOBER 18, 2020

The financially-motivated hacker group FIN11 has started spreading ransomware to monetize its cyber criminal activities. The financially-motivated hacker group FIN11 has switched tactics starting using ransomware as the main monetization method. ” reads the analysis published by FireEye. ” reads the analysis.

Ransomware 132

Ransomware IT Healthcare Phishing 132

IT Governance

MARCH 22, 2018

Cyber security has become a major priority for every organisation. Such machine learning has been adopted in industries such as motoring, healthcare and retail. It will no doubt progress to many more, so what might this mean for cyber security? Ultimately, this would help improve network security defences.

Artificial Intelligence 85

Artificial Intelligence Security Encryption Risk 85

Security Affairs

OCTOBER 20, 2019

TA505 cybercrime group that operated the Dridex Trojan and Locky ransomware, has been using a new RAT dubbed SDBbot in recent attacks. Security experts at Proofpoint observed the notorious TA505 cybercrime group that has been using a new RAT dubbed SDBbot in recent attacks. ” reads the analysis published by Proofpoint.

Retail 44

Retail Phishing Ransomware Access 44

Security Affairs

APRIL 27, 2019

Experts at Cisco Talos group disclosed a dozen vulnerabilities uncovered in Sierra Wireless AirLink gateways and routers, including several serious flaws. Researchers at Cisco Talos group disclosed a dozen vulnerabilities affecting Sierra Wireless AirLink gateways and routers, including several serious flaws. Pierluigi Paganini.

Passwords 103

Passwords Sales IoT Authentication 103

Krebs on Security

MARCH 26, 2020

Cybersecurity experts say the raid included the charging of a major carding kingpin thought to be tied to dozens of carding shops and to some of the bigger data breaches targeting western retailers over the past decade. Flint is among the biggest players in the crowded underground market for stolen credit card data, according to a U.S.

Retail 277

Retail Insurance Cybersecurity Data breaches 277

Security Affairs

APRIL 18, 2019

Security experts at CyberInt uncovered a new campaign of a Russian financially motivated threat actor tracked as TA505. “CyberInt researchers have been tracking various activities following the spear-phishing campaign targeting large US-based retailers detected in December 2018.”

Retail 75

Retail Phishing Ransomware Access 75