Npower shuts down mobile app following data breach
UK energy giant Npower has permanently closed its mobile app, after finding that hackers had used it to steal sensitive information from customers. The company will not bring the app back in the future,…
Cybercrime , DDoS Protection , Fraud Management & Cybercrime Proofpoint Reports Group Rebrands as Fancy Lazarus, Lowers Ransom Amount Doug Olenick (DougOlenick) • June 11, 2021 Traditional ransomware attacks may have taken over the news cycle, but Proofpoint researchers say the malicious actors who presents themselves as the North Korean-backed Lazarus advanced persistent…
Fraud Management & Cybercrime , Governance & Risk Management , Insider Threat Researchers Learn Details During a Telegram Chat With an Attacker Doug Olenick (DougOlenick) • August 19, 2021 Ransom demand screen provided by the attacker to Abnormal Security A Nigeria-based ransomware gang is conducting a campaign that dangles a $1 million bribe…
Critical Infrastructure Security , Cybercrime , Cybercrime as-a-service Authorities Target Health Sector Ransom Gang’s IT Infrastructure Mihir Bagwe • September 6, 2021 GNCCB has deployed a “splash screen” on seized domains (Source Garda.ie) The Irish law enforcement body, the Garda National Cyber Crime Bureau, has conducted a “significant disruption operation,” targeting the IT…
Security researchers warn that multiple groups are compromising Windows web servers and are deploying malware programs that are designed to function as extensions for Internet Information Services (IIS). Such malware was deployed this year by hackers exploiting Microsoft Exchange zero-day vulnerabilities, but a total of 14 groups have been observed using native IIS backdoors and…
Three former US intelligence and military operatives broke America’s weapons export and computer security laws by, among other things, helping the United Arab Emirates hijack and siphon data from people’s iPhones, it emerged on Tuesday. US citizens Marc Baier, 49, and Ryan Adams, 34, and ex-citizen Daniel Gericke, 40, were charged [PDF] with using “illicit,…
Business Email Compromise (BEC) , Fraud Management & Cybercrime , Fraud Risk Management Company Says West African Group Used Homoglyph Techniques to Trick Victims Doug Olenick (DougOlenick) • July 21, 2021 Microsoft has announced the takedown of 17 domains that a threat group operating out of West Africa used to host fake Microsoft…
