SNAKE Ransomware Targeting Entire Corporate Networks

Security researchers have observed samples of the new SNAKE ransomware family targeting organizations’ entire corporate networks. Discovered by MalwareHunterTeam and analyzed by Vitali Kremez, SNAKE is written in Golang and contains a high level … Continue reading SNAKE Ransomware Targeting Entire Corporate Networks

Company Told Employees to Seek Other Work After Ransomware Attack

A marketing agency told its employees that they were free to seek other employment after suffering a ransomware infection. On January 2nd, the Heritage Company released a statement in which it explained that it had made some progress in its recovery ef… Continue reading Company Told Employees to Seek Other Work After Ransomware Attack

Travelex Temporarily Disabled All Its Systems Following a Malware Attack

Foreign exchange company Travelex announced that it had temporarily disabled all of its systems following a malware attack. Twitter user Izzy Fergus first noticed something was wrong when she attempted to visit travelex.co.uk and saw a runtime error me… Continue reading Travelex Temporarily Disabled All Its Systems Following a Malware Attack

Landry’s Notifies Customers of Payment Card Incident

Dining, hospitality and entertainment corporation Landry’s notified customers of a security incident that might have affected their payment card data. On December 31, Landry’s revealed that it first learned of the incident after it detected… Continue reading Landry’s Notifies Customers of Payment Card Incident

Special Olympics NY’s Email Server Abused to Send Phishing Emails

Digital attackers compromised an email server owned by Special Olympics NY and then abused it to target donors with phishing emails. The attack emails told recipients that an automatic donation transaction of $1,942.49 would register on their accounts … Continue reading Special Olympics NY’s Email Server Abused to Send Phishing Emails

Wyze Resets All Users’ Tokens After Learning of Alleged Data Leak

Wyze implemented a token refresh for all of its users after learning of a security incident that allegedly leaked user data. On December 26, Twelve Security reported that smart home camera provider Wyze had left its production servers open to the web. … Continue reading Wyze Resets All Users’ Tokens After Learning of Alleged Data Leak

Over 100 Android Apps Used ‘Soraka’ Package to Perform Ad Fraud

Researchers identified more than 100 apps that used a common code package named “Soraka” to perform ad fraud on users’ Android devices. The White Ops Threat Intelligence team observed that many of the apps did not have a suspicious re… Continue reading Over 100 Android Apps Used ‘Soraka’ Package to Perform Ad Fraud

Marketing Agency Temporarily Halts Operations after Ransomware Attack

A marketing agency announced just days before Christmas that it would be temporarily suspending operations as it works to recover from a ransomware attack. Sandra Franecke, CEO of the Heritage Company, sent a letter to employees that the company would … Continue reading Marketing Agency Temporarily Halts Operations after Ransomware Attack

PayPal Phishing Scam Tries to Steal Much More than Login Credentials

A newly discovered PayPal phishing scam attempts to steal much more than just a user’s login credentials for the online payments service. Slovakian security firm ESET observed that the scam began by targeting users with an attack email warning th… Continue reading PayPal Phishing Scam Tries to Steal Much More than Login Credentials

LifeLabs Identified Digital Attack that Possibly Exposed 15M Customers’ Data

LifeLabs identified a digital attack that potentially exposed the personal information of approximately 15 million of its customers. In a letter to all of its customers, LifeLabs President and CEO Charles Brown explained that malicious actors gained un… Continue reading LifeLabs Identified Digital Attack that Possibly Exposed 15M Customers’ Data