These scammers claim to have videos of your most private moments

Cybercriminals have scammed people out of $332,000 since July 2018 by threatening to publish footage of the individuals engaging in some kind of sexual act, according to research published Thursday. The threat intelligence company Digital Shadows examined 790,000 “sextortion” attempts sent to 89,000 email recipients to find that digital con artists typically build their bogus stories on existing information about real hacks. They often review a database of username and password credentials leaked in previous data breaches to find possible extortion victims. Upon contacting a user, scammers claim to have video of the victim watching internet pornography, providing the stolen password to boost their legitimacy. Others claim they exploited a known vulnerability in Cisco routers to monitor their web activity. The tactic was enough to convince more than 3,100 people worldwide to send bitcoin to 92 addresses, according to Digital Shadows. Attacks ranged from sloppy thieves who demonstrated little knowledge of how to organize such […]

The post These scammers claim to have videos of your most private moments appeared first on CyberScoop.

Continue reading These scammers claim to have videos of your most private moments

The Dark Overlord was recruiting employees and looking for attention before 9/11 data dump

Months before The Dark Overlord claimed it stole a trove of sensitive documents about the 9/11 terrorist attacks, the hacking group was struggling to live up to its own reputation. The hackers were perhaps best known for a two-year cybercrime spree in which they took credit for leaking unaired episodes of the Netflix series “Orange is the New Black,” then for harassing U.S. schools and sending death threats to students in 2017. Both incidents generated international media attention, but it wasn’t long before authorities were on the case, with Serbian police arresting a suspected member in May 2018. While The Dark Overlord denies one of its members was apprehended, the group took steps to staff up in the months that followed. A new report from the threat intelligence provider Digital Shadows, prepared exclusively for CyberScoop, indicates that the hacking group sought new members and methods of gaining publicity. “Do YOU want to get Rich? Come […]

The post The Dark Overlord was recruiting employees and looking for attention before 9/11 data dump appeared first on CyberScoop.

Continue reading The Dark Overlord was recruiting employees and looking for attention before 9/11 data dump

BEC-as-a-Service: Hacked accounts available from $150

Digital Shadows has announced the findings of new research revealing the diversity of methods used to infiltrate company emails. The FBI has estimated that scams resulting from business email compromise – such as fake invoices and wire fraud – have cos… Continue reading BEC-as-a-Service: Hacked accounts available from $150

Shadow Search: Find cyber threats across the open, deep and dark web

Digital Shadows has announced the availability of Shadow Search – providing security analysts with a search tool to make decisions to protect their organization from cyber threats. Previously available as a key feature within Digital Shadows core Searc… Continue reading Shadow Search: Find cyber threats across the open, deep and dark web

Rick Holland, Digital Shadows – Enterprise Security Weekly #104

Rick Holland has more than 15 years’ experience working in information security. Paul and John talk to Rick about vulnerability management, WAFs, and advice to enterprise marketing. Full Show NotesVisit http://securityweekly.com/esw for all the l… Continue reading Rick Holland, Digital Shadows – Enterprise Security Weekly #104

ERP applications under attack: How criminals target the crown jewels

Business-critical applications running the biggest organizations in the world are under attack, according to research from Digital Shadows and Onapsis. The report shows a rise in cyberattacks on widely-used enterprise resource planning (ERP) applicatio… Continue reading ERP applications under attack: How criminals target the crown jewels

The new gold rush: A look inside cryptocurrency fraud

Cybercriminals are flooding to the new world of cryptocurrencies looking to exploit the boom in interest and adoption of these electronic currencies, according to Digital Shadows. This new gold rush is creating a new frontier for professional cybercrim… Continue reading The new gold rush: A look inside cryptocurrency fraud

SecureAuth, Digital Shadows, and ThreatStack – Startup Security Weekly #56

Building successful products, the most important startup question, and updates from McAfee, Slack, ThreatStack, JASK, and more startup security news! Startup Articles & Discussion SECRETS TO BUILDING SUCCESSFUL PRODUCTS IN 2017: EXPERTS WEIGH IN ==> focus, focus, focus Hiring For A Discipline You Know Little About ==> Do the job first, then work yourself out of it […]

The post SecureAuth, Digital Shadows, and ThreatStack – Startup Security Weekly #56 appeared first on Security Weekly.

Continue reading SecureAuth, Digital Shadows, and ThreatStack – Startup Security Weekly #56

Assessing the habits and tactics of organized credit card fraud gangs

By analyzing hundreds of criminal forums, Digital Shadows discovered a new trend in the form of remote learning ‘schools’. Available to Russian speakers only, these six-week courses comprise 20 lectures with five expert instructors. The course includes webinars, detailed notes and course material. An advertisement for the WWH online course In exchange for $745 (plus $200 for course fees), aspiring cyber criminals have the potential to make $12k a month, based on a standard 40-hour … More Continue reading Assessing the habits and tactics of organized credit card fraud gangs