Collaborate Disseminate
“Time to find out who in your family secretly ran … [a] QAnon hellhole,” said attackers who affiliated themselves with the hacktivist collective Anonymous, noting that Epik had laughable security. Continue reading Epik Confirms Hack, Gigabytes of Data on Offer
Organized crime ring thrived on violence, intimidation and $12 million in online fraud profits. Continue reading Europol Breaks Open Extensive Mafia Cybercrime Ring
With the help of malicious insiders, a fraudster was able to install malware and remotely divorce iPhones and other handsets from the carrier’s U.S. network — all the way from Pakistan. Continue reading AT&T Phone-Unlocking Malware Ring Costs Carrier $200M
A spyware effort bent on stealing cookies and logins is being driven by unsophisticated attackers cashing in on the initial-access-broker boom. Continue reading Airline Credential-Theft Takes Off in Widening Campaign
The well-known banking trojan retools for stealth with a whole new attack routine, including using ads for Microsoft TeamViewer and Zoom to lure victims in. Continue reading ZLoader’s Back, Abusing Google AdWords, Disabling Windows Defender
The security vulnerabilities bring the web behemoth up to 10 browser zero-days found so far this year. Continue reading Pair of Google Chrome Zero-Day Bugs Actively Exploited
The security vulnerability can be exploited with a malicious CSV file. Continue reading WooCommerce Multi Currency Bug Allows Shoppers to Change eCommerce Pricing
The incident raises considerations for security for critical data housed in third-party infrastructure, researchers say. Continue reading MyRepublic Data Breach Raises Data-Protection Questions
The malware appeared in August with an ambitious roadmap (think ransomware, DDoS) that could make it ‘the most feature-rich Android malware on the market.’ Continue reading SOVA, Worryingly Sophisticated Android Trojan, Takes Flight
A chain of exploits could allow a malicious Azure user to infiltrate other customers’ cloud instances within Microsoft’s container-as-a-service offering. Continue reading ‘Azurescape’ Kubernetes Attack Allows Cross-Container Cloud Compromise