Exchange Servers Under Active Attack via ProxyShell Bugs

A 22-year-old UK citizen has been arrested in connection with a 2020 hack that promised a doubling of Bitcoin promised through high-profile Twitter accounts, including Apple’s. The Department of Justice said that Joseph O’Connor was arrested by Spanish authorities on Wednesday in Estepona, Spain. U.S. officials had sent a request for his arrest, as O’Connor…

Cybersecurity Biden signs much-anticipated cybersecurity executive order By Justin Katz May 12, 2021   President Joe Biden on Wednesday signed his long-awaited executive order designed to confront the myriad of cybersecurity challenges facing the country — ranging from the supply chain attack that compromised nine federal agencies to ransomware that ultimately shut down…

Fraud Management & Cybercrime , Fraud Risk Management , Governance & Risk Management ‘Unsophisticated’ Code Has Scant Resemblance to WannaCry Namesake, Researchers Say Mathew J. Schwartz (euroinfosec) • March 16, 2021     DearCry ransomware appends “.CRYPT” to forcibly encrypted files. (Source: Sophos) Fresh ransomware targeting as-yet-unpatched on-premises Exchange servers appears to have been rushed…

Sophos acquires Braintrace to provide better security outcomes to their MDR customers | IT Security News 24. July 2021 This article has been indexed from Help Net Security Sophos announced that it has acquired Braintrace, further enhancing Sophos’ Adaptive Cybersecurity Ecosystem with Braintrace’s proprietary Network Detection and Response (NDR) technology. Braintrace’s NDR provides deep visibility…

Ongoing Campaign Also Uses Malicious CAPTCHA Verification PageMihir Bagwe •August 30, 2021     Phishing email using a Zoom meeting subject line (Source: Microsoft) Microsoft is warning of a “widespread” phishing campaign in which fraudsters use open redirect links to lure users to malicious websites to harvest Office 365 and other credentials, according to a…

Cybercrime , Cybercrime as-a-service , DDoS Protection Matthew Gatrel Offered Subscription-Based Computer Attack Platforms Prajeet Nair (@prajeetspeaks) • September 19, 2021     An Illinois man has been found guilty of running subscription-based distributed denial of service attacks that flood targeted computers with information and prevent them from being able to access the internet, reports…