Coinbase stopped scammers from stealing an extra $280,000 during Twitter hack

Maybe Coinbase should send Twitter an invoice, because it certainly sounds like their quick thinking helped prevent last week’s hack from leaving a lot more Twitter users with empty wallets. As we reported at the time, cybercriminals successfully… Continue reading Coinbase stopped scammers from stealing an extra $280,000 during Twitter hack

Around 130 Twitter accounts targeted in bitcoin scam hack, company says

Hackers who breached Twitter accounts belonging to Democratic presidential nominee Joe Biden, rapper Kanye West and other high profile users had targeted roughly 130 accounts, only taking over a small number, the company said. Attackers gained access to “a small subset” of the 130 accounts on which they initially focused, gaining control and sending tweets in their name, Twitter said in an update Thursday. By impersonating influential users like former president Barack Obama, Microsoft co-founder Bill Gates and Amazon CEO Jeff Bezos, the hackers urged millions of followers to send bitcoin to the same address as part of a scam that netted more than $110,000. While Twitter has since removed all of the tweets, the incident marked a major breach for the social media site, resulting in questions about its ability to safeguard accounts belonging to influential newsmakers. It’s also led to suggestions that the attackers would have had access to […]

The post Around 130 Twitter accounts targeted in bitcoin scam hack, company says appeared first on CyberScoop.

Continue reading Around 130 Twitter accounts targeted in bitcoin scam hack, company says

Biden campaign hires ex-White House official Chris DeRusha as CISO

Joe Biden, the presumptive Democratic nominee for president, has turned to a former White House cybersecurity official to protect the campaign’s networks from hackers. Biden’s campaign said Friday it had hired Chris DeRusha, who served as a White House cybersecurity adviser when Biden was vice president, as the campaign’s chief information security officer. DeRusha, who has also held cybersecurity positions with the State of Michigan, the Department of Homeland Security and Ford Motor Co., will be charged with safeguarding the campaign’s digital assets in an election that U.S. officials expect to draw continued foreign interference. The Biden campaign has also hired software engineer Jacky Chang as its chief technology officer. Chang worked as a technologist for the Democratic National Committee and for Hillary Clinton’s 2016 presidential campaign. “Biden for President takes cybersecurity seriously and is proud to have hired high quality personnel with a diverse breadth of experience, knowledge and […]

The post Biden campaign hires ex-White House official Chris DeRusha as CISO appeared first on CyberScoop.

Continue reading Biden campaign hires ex-White House official Chris DeRusha as CISO

Trump, Biden Campaign Staffers Targeted By APT Phishing Emails

Google TAG researchers warn that APTs are targeting campaign staffers for both Donald Trump and Joe Biden with phishing emails. Continue reading Trump, Biden Campaign Staffers Targeted By APT Phishing Emails

Google: Biden and Trump campaigns targeted by separate spearphishing campaigns

Hackers linked with China and Iran have been sending malicious spearphishing emails to staff on Joe Biden and President Donald Trump’s campaigns respectively, according to a researcher with Google’s Threat Analysis Group. Chinese government-linked hackers have been targeting Biden’s staffers, whereas Iranian government-linked hackers have been targeting Trump’s campaign, according to Shane Huntley, the Director of Google’s Threat Analysis Group. There is no evidence that the hacking attempts have resulted in compromises, Huntley said. This is just the latest warning from security researchers and the U.S. intelligence community that foreign government-backed hackers are interested in targeting various U.S. presidential campaigns during the 2020 election cycle, in what is turning out to be a tumultuous year for American citizens amid economic turmoil, the coronavirus pandemic, and mass protests about racism. “We have known from the beginning of our campaign that we would be subject to such attacks and we are prepared for […]

The post Google: Biden and Trump campaigns targeted by separate spearphishing campaigns appeared first on CyberScoop.

Continue reading Google: Biden and Trump campaigns targeted by separate spearphishing campaigns

It’s hard for campaigns to be transparent without aiding attackers

Everyone knows what happened to John Podesta in 2016. Hillary Clinton’s campaign manager clicked on a phishing email, and as far as we know, it was the first time a cyberattack shaped a presidential election. This time around, the campaigns are more focused on recognizing and stopping phishing attacks. That’s good, because phishing has become way more sophisticated over the last four years, including the painstaking research smart attackers run. So if we were to see a repeat of 2016, where would hackers conduct their homework? They could look no further than the Federal Election Commission, whose website illustrates how tough it is to balance transparency and security. The bad guys are looking, too Check out the FEC’s campaign finance data repository. It enables anyone to see where campaigns are spending their money: They’re required to list individuals, vendors, and others they are paying to support their operations. The site […]

The post It’s hard for campaigns to be transparent without aiding attackers appeared first on CyberScoop.

Continue reading It’s hard for campaigns to be transparent without aiding attackers