Smashing Security podcast #367: WhatsApp at Westminster, unhealthy AI, and Drew Barrymore

MPs aren’t just getting excited about an upcoming election, but also the fruity WhatsApp messages they’re receiving, can we trust AI with our health, and who on earth is pretending to be a producer for the Drew Barrymore TV show?

All this and much m… Continue reading Smashing Security podcast #367: WhatsApp at Westminster, unhealthy AI, and Drew Barrymore

Heartless scammers prey on hundreds of lost pet owners, demanding ransoms or else…

Hundreds of pet owners across the UK have reported that they have received blackmail threats from scammers who claim to have found their lost pooches and missing moggies.

Read more in my article on the Hot for Security blog. Continue reading Heartless scammers prey on hundreds of lost pet owners, demanding ransoms or else…

STALKER 2 hacker demands Ukrainian game developer reinstates Russian language support, or else…

A Ukrainian video game developer has revealed that a hacker has leaked development material stolen from the company’s systems, and is threatening to release tens of gigabytes more if their unorthodox ransom demands are not met. Continue reading STALKER 2 hacker demands Ukrainian game developer reinstates Russian language support, or else…

FTC warns LGBTQ+ community of extortion scams targeting them on dating apps

Members of the LGBTQ+ community have been warned to be on their guard against extortionists who may attempt to prey on them via online dating apps such as Grindr and Feeld.

Read more in my article on the Hot for Security blog. Continue reading FTC warns LGBTQ+ community of extortion scams targeting them on dating apps

On the Evolution of Ransomware

Good article on the evolution of ransomware:

Though some researchers say that the scale and severity of ransomware attacks crossed a bright line in 2020, others describe this year as simply the next step in a gradual and, unfortunately, predictable devolution. After years spent honing their techniques, attackers are growing bolder. They’ve begun to incorporate other types of extortion like blackmail into their arsenals, by exfiltrating an organization’s data and then threatening to release it if the victim doesn’t pay an additional fee. Most significantly, ransomware attackers have transitioned from a model in which they hit lots of individuals and accumulated many small ransom payments to one where they carefully plan attacks against a …

Continue reading On the Evolution of Ransomware

Sextortionist Campaign Targets iOS, Android Users with New Spyware

Goontact lures users of illicit sites through Telegram and other secure messaging apps and steals their information for future fraudulent use. Continue reading Sextortionist Campaign Targets iOS, Android Users with New Spyware

Finnish Data Theft and Extortion

The Finnish psychotherapy clinic Vastaamo was the victim of a data breach and theft. The criminals tried extorting money from the clinic. When that failed, they started extorting money from the patients:

Neither the company nor Finnish investigators have released many details about the nature of the breach, but reports say the attackers initially sought a payment of about 450,000 euros to protect about 40,000 patient records. The company reportedly did not pay up. Given the scale of the attack and the sensitive nature of the stolen data, the case has become a national story in Finland. Globally, attacks on health care organizations have escalated as cybercriminals look for higher-value targets…

Continue reading Finnish Data Theft and Extortion

Received email with password in the subject – To what extent have I been hacked? [duplicate]

I was cleaning out my spam folder, when I saw one with a subject line which had a little-used password of mine. 16 hours ago. I’m fairly sure odds of guessing this password are small, so I looked.
The email comes from mediajobboard.com. If… Continue reading Received email with password in the subject – To what extent have I been hacked? [duplicate]