Sandy Dunn, CISO – Business Security Weekly #89

Sandra (Sandy) Dunn has over 24 years in the software and hardware industry. Initially starting out in software and hardware sales she worked with NASA, JPL, Secret Service, IRS, and other Federal Agencies to determine their server, PC, and notebook sa… Continue reading Sandy Dunn, CISO – Business Security Weekly #89

FBI announces arrest of 74 email fraudsters on three continents

The FBI on Monday announced the arrest of 74 people across three continents for hijacking bank transfers using email fraud. The “cyber-enabled financial fraud” allegedly carried out by those apprehended could involve social engineering and computer intrusions to dupe company executives into wiring money, the FBI said. A criminal could use an executive’s compromised email to facilitate a transfer or request W-2 information from within the organization, for example. The scam is essentially a more sophisticated version of the “Nigerian prince” emails that pester the average email user for money. Twenty-nine of the suspects were arrested in Nigeria, 42 in the United States, and the rest in Canada, Mauritius, and Poland. Several of the cases involved global criminal groups that defrauded companies big and small, according to the FBI. The departments of Homeland Security and Treasury, along with the U.S. Postal Inspection Service, were also in on “Operation WireWire” to take down […]

The post FBI announces arrest of 74 email fraudsters on three continents appeared first on Cyberscoop.

Continue reading FBI announces arrest of 74 email fraudsters on three continents

Oh, banks have cameras? Two men arrested for ATM jackpotting scheme must’ve forgot

The U.S. Justice Department charged two men with hacking ATMs inside Connecticut banks in full view of surveillance cameras.  The scheme, known as “ATM jackpotting,” ends with ATM machines dispensing large amounts of cash like a casino jackpot. The accused are Alex Alberto Fajin-Diaz, 31, of Spain, and Argenys Rodriguez, 21, of Massachusetts. Facing up to 30 years in prison if convicted, the pair appeared before a federal judge on Monday. Fajin-Diaz and Rodriguez allegedly dressed as repair staff, walked into banks and used malware to get the ATM machines to eject all of their money. The haul was thousands of dollars in cash each time. Police were alerted on Jan. 27, when Citizens Bank investigators observed an attack on an ATM in Cromwell, Connecticut. Police found Fajin-Diaz and Rodriguez near an ATM that was still in the process of ejecting $20 bills. When they searched Fajin-Diaz and Rodriguez’s vehicle, the authorities say they found found “tools […]

The post Oh, banks have cameras? Two men arrested for ATM jackpotting scheme must’ve forgot appeared first on Cyberscoop.

Continue reading Oh, banks have cameras? Two men arrested for ATM jackpotting scheme must’ve forgot

U.S. Secret Service warns hackers use endoscopes to clean out ATMs

You read that right. The first “jackpotting” attacks are unfolding in the U.S., with hackers using medical endoscopes to look inside front-loading ATMs and locate components where they can tether a laptop, inject malware and make the ATM sp… Continue reading U.S. Secret Service warns hackers use endoscopes to clean out ATMs

Romanian hackers allegedly carried out January D.C. police camera hack

A federal court affidavit reveals that two Romanian hackers were behind a attack that shut down most of D.C. police’s security cameras for four days in January, CNN reports. The affidavit, filed by U.S. Secret Service agent James Graham, explains that Isvanca and Cismaru compromised computers attached to 123 percent of the city’s 187 cameras with a broader plot to use those computers for a phishing campaign. A Secret Service analysis of three of the compromised computers found malicious code used in ransomware attacks along with text files containing 179,616 email addresses. Investigators concluded that the hackers planned to use D.C. computers to spread ransomware through spam emails. Investigators were able to link email accounts that had been accessed on the compromised computers to Isvanca and Cismaru. D.C. officials were able to regain control and bring the cameras back online within four days. During that the time they were disabled, an elderly woman was killed by stray gunfire in an ongoing chase, and […]

The post Romanian hackers allegedly carried out January D.C. police camera hack appeared first on Cyberscoop.

Continue reading Romanian hackers allegedly carried out January D.C. police camera hack

A reminder for why government officials really shouldn’t use personal email accounts

Top government officials continue to use personal email accounts to conduct official business even as it comes with significant  risks and runs the risk of violating federal policy, experts say. High-ranking Trump administration officials have been reportedly relying on a blend of both professional and personal email accounts to send messages to their contacts, according to separate reports by the New York Times and Washington Post. These individuals include the President’s daughter, Ivanka Trump and son-in-law Jared Kushner, both of whom hold official White House positions. Additionally, National Economic Council Director Gary Cohn and presidential adviser Stephen Miller were also found to be using private email addresses. Former FBI Cyber Division Chief Technology Officer Milan Patel told CyberScoop that high ranking officials, like Kushner and Miller, run a high risk of targeted by nation-state sponsored hackers that seek to gather intelligence and personal details. These hackers would, Milan explained, first […]

The post A reminder for why government officials really shouldn’t use personal email accounts appeared first on Cyberscoop.

Continue reading A reminder for why government officials really shouldn’t use personal email accounts

The Backstory Behind Carder Kingpin Roman Seleznev’s Record 27 Year Prison Sentence

Roman Seleznev, a 32-year-old Russian cybercriminal and prolific credit card thief, was sentenced Friday to 27 years in federal prison. That is a record punishment for hacking violations in the United States and by all accounts one designed to send a message to criminal hackers everywhere. But a close review of the case suggests that Seleznev’s record sentence was severe in large part because the evidence against him was substantial and yet he declined to cooperate with prosecutors prior to his trial.

The son of an influential Russian politician, Seleznev made international headlines in 2014 after he was captured while vacationing in The Maldives, a popular vacation spot for Russians and one that many Russian cybercriminals previously considered to be out of reach for western law enforcement agencies. He was whisked away to Guam briefly before being transported to Washington state to stand trial for computer hacking charges. Continue reading The Backstory Behind Carder Kingpin Roman Seleznev’s Record 27 Year Prison Sentence

The Backstory Behind Carder Kingpin Roman Seleznev’s Record 27 Year Prison Sentence

Roman Seleznev, a 32-year-old Russian cybercriminal and prolific credit card thief, was sentenced Friday to 27 years in federal prison. That is a record punishment for hacking violations in the United States and by all accounts one designed to send a message to criminal hackers everywhere. But a close review of the case suggests that Seleznev’s record sentence was severe in large part because the evidence against him was substantial and yet he declined to cooperate with prosecutors prior to his trial.

The son of an influential Russian politician, Seleznev made international headlines in 2014 after he was captured while vacationing in The Maldives, a popular vacation spot for Russians and one that many Russian cybercriminals previously considered to be out of reach for western law enforcement agencies. He was whisked away to Guam briefly before being transported to Washington state to stand trial for computer hacking charges. Continue reading The Backstory Behind Carder Kingpin Roman Seleznev’s Record 27 Year Prison Sentence