Crypto Hack Earned Crooks $600 Million

This is a Writeup of Tryhackme room “Baron samedit” https://tryhackme.com/room/sudovulnssamedit Room link: https://tryhackme.com/room/sudovulnssameditNote: This room is free In January 2021, Qualys released a blog post detailing a terrifying new vulnerability in the Unix sudo program. Specifically, this was a heap buffer overflow allowing any user to escalate privileges to root — no misconfigurations required. This…

A man in California who received more than $5 million in Payment Protection Program loans intended to help struggling businesses during the coronavirus pandemic was arrested on Friday on federal bank fraud and other charges after he used the money to buy a Lamborghini and other luxury cars, federal prosecutors said. The man, Mustafa Qadiri,…

Specialists of the information security company Proofpoint spoke about a Chinese cybercriminal group that hacks into Gmail accounts using a browser extension. Cyber criminal group TA413 has been active for almost a decade and is usually associated by experts with the LuckyCat and ExileRAT malware, and its victims are mostly Tibetans. In early 2021, TA413…

Email Security & Protection , Endpoint Security , Fraud Management & Cybercrime Attack Code ‘Rudimentary and Amateurish’ but Still a Threat Mathew J. Schwartz (euroinfosec) • March 24, 2021     Ransom note left by Black Kingdom (Source: MalwareTech) Attackers gunning for an easy payday are continuing to target Microsoft Exchange servers that have not…

Governance & Risk Management , Identity & Access Management , IT Risk Management Discussion Tackles Critical Risk Management Issues Anna Delaney (annamadeline) • April 1, 2021     Clockwise, from top left: Suparna Goswami, Anna Delaney, Mathew Schwartz and Tom Field Four editors at Information Security Media…

Cybercrime , Data Loss Prevention (DLP) , Endpoint Security 1.5 Million Facebook Passwords Among Leaked Data; Raccoon Infostealer Suspected Jeremy Kirk (jeremy_kirk) • June 10, 2021     A control panel for the Raccoon infostealer botnet, where subscribers can browse data stolen from compromised computers (Source: Hold Security) There’s such a surfeit of stolen data…