Collaborate Disseminate
In this report, we will dig deeper into two major consequences of (willing and unwilling) sharing personal data in public — doxing and the selling of personal data on the dark web — and try to untangle the connection between the two. Continue reading Dox, steal, reveal. Where does your personal data end up?
In the past year, Maze ransomware has become one of the most notorious malware families threatening businesses and large organizations. Continue reading Life of Maze ransomware
Originally, ransomware didn’t involve any data theft. Malware would encrypt the data on your computer, and demand a ransom for the encryption key. Now ransomware is increasingly involving both encryption and exfiltration. Brian Krebs wrote about this in December. It’s a further incentive for the victims to pay. Recently, the aerospace company Visser Precision was hit by the DoppelPaymer ransomware…. Continue reading Ransomware Now Leaking Stolen Documents
When users of hacking forums turn on each other, expect things to get messy quickly. Continue reading Hacking forum spills rival’s 321,000 member database
The source code of a set of Iranian cyberespionage tools was leaked online…. Continue reading Iranian Cyberespionage Tools Leaked Online
The real identity of Tessa88—the notorious hacker tied to several high-profile cyber attacks including the LinkedIn, DropBox and MySpace mega breaches—has been revealed as Maksim Vladimirovich Donakov (Максим Владимирович Донаков), a resident of Penza,… Continue reading Real Identity of Hacker Who Sold LinkedIn, Dropbox Databases Revealed
This case happened in a country where sex work is legal, but it still illustrates how people exploit stigma and shame. Continue reading A New Zealand Woman Was Charged for Doxing a Sex Worker Online
Doxing rivals, stealing each other’s files, and poking around Nintendo’s servers are all a normal part of the ballooning Nintendo Switch hacking and piracy scenes. Continue reading Inside the Messy, Dark Side of Nintendo Switch Piracy
In what appears to be the latest salvo in a new, wired form of protest, developer Sam Lavigne posted code that scrapes LinkedIn to find Immigration and Customs Enforcement employee accounts. His code, which basically a Python-based tool that scans LinkedIn for keywords, is gone from Github and Gitlab and Medium took down his original […] Continue reading Security, privacy experts weigh in on the ICE doxxing
The social security numbers, addresses, phone numbers, and alleged credit card numbers of dozens of people are being advertised and sold on Facebook. The internet giant deleted some of them after Motherboard flagged the posts. Continue reading Facebook Has Hosted Stolen Identities and Social Security Numbers for Years