[ANN][ICO] HEROIC.com 🚀Decentralized Cybersecurity Powered by AI [PRESALE LIVE]

[ChiNgadOr]

‘Gnosticplayers’ hacker returns with fifth dataset containing over 65 million user accounts for sale

The latest batch of stolen users’ records belongs to six new companies.
The hacked data is being sold for 0.8463 Bitcoin ($4,350) on the DreamMarket forum.
‘Gnosticplayers’ hacker is back with the fifth round of stolen data. This time, he has put up over 65 million user accounts on sale on the dark web forum.


https://cyware.com/news/gnosticplayers-hacker-returns-with-fifth-dataset-containing-over-65-million-user-accounts-for-sale-95450e99

[ChiNgadOr]

After FBI agents, hackers now release personal information of AAF members

In the last week, the hacker group who goes by the name of ‘PokemonGo Team’ had uploaded the personal information of several Federal agents.
The hackers could have exploited a flaw in the third-party software used by the websites associated with the FBINAA in order to steal the data.

https://cyware.com/news/after-fbi-agents-hackers-now-release-personal-information-of-aaf-members-49eae921

[ChiNgadOr]

New Phishing scam called ‘The Hotlist’ now targets the Instagram users

The new scam operates in a similar manner as the recent ‘The Nasty List’ scam.
The scam begins with Instagram users receiving a message regarding a list of their ‘hot’ photos on Instagram.

https://cyware.com/news/new-phishing-scam-called-the-hotlist-now-targets-the-instagram-users-4e10b4e6

[ChiNgadOr]

Eight unsecured databases found leaking nearly 60 million LinkedIn users' information

linkedin, imac, people, background, desktop, table, business, mac, digital, gray, editorial, technology, touch, computer, computing, mobile, linked, device, online, man, screen, search, network, friends, display, pad, interface, illustrative, internet, partnership, social, iphone6, gadget, contact, company, discussion, apple, information, blog, space, chat, message, office, hand, communication
The total size of databases is estimated to be 229 GB.
As of April 15, 2019, the databases were secured and are no longer accessible on the internet.
Eight misconfigured databases have been found leaking approximately 60 million records of LinkedIn user information. The total size of databases is estimated to be 229 GB, with each database ranging between 25 GB and 32 GB.

https://cyware.com/news/eight-unsecured-databases-found-leaking-nearly-60-million-linkedin-users-information-181c7e45

[ChiNgadOr]

Zero-day XML External Entity Injection vulnerability found impacting Microsoft Internet Explorer

The flaw can enable an attacker to steal confidential information or exfiltrate local files from the victim’s machine.
XXE injection works if a user opens a specially crafted .MHT file.

https://cyware.com/news/zero-day-xml-external-entity-injection-vulnerability-found-impacting-microsoft-internet-explorer-07d6e3c2

[ChiNgadOr]

Malicious attachment disguised as top-secret US document leveraged to target organizations in Europe:
The campaign is used against several financial service firms and embassies in Europe.
The infection process starts with attackers sending phishing emails to the targets.

[ChiNgadOr]

Drive-by download attack leveraged to deliver LoadPCBanker trojan through Google Sites

The malware is used against victims who speak Portuguese or English.
The attack begins with victims receiving phishing emails about a hotel reservation or confirmation.
Cybercriminals are deploying a banking trojan using the file cabinet template built into the Google Sites platform. The malware, dubbed as LoadPCBanker, is used against victims who speak Portuguese or English.

https://cyware.com/news/drive-by-download-attack-leveraged-to-deliver-loadpcbanker-trojan-through-google-sites-9347161e

[ChiNgadOr]

Old Vulnerabilities Are Still Good Tricks for Today's Attacks

The value of a security vulnerability drops significantly the moment it gets patched but the bad guys will keep exploiting it for as long as they can find victims that are worth the effort.
According to a report today, the most exploited security bugs in the first quarter of 2019 were well-known, old problems, some of them patched almost a decade ago.
Statistics and research from Fidelis Cybersecurity show that about a third of the alerts recorded by the company were for exploits, vulnerabilities, and malware that emerged in 2017 and earlier.

https://www.bleepingcomputer.com/news/security/old-vulnerabilities-are-still-good-tricks-for-todays-attacks/

[ChiNgadOr]

Ransomware attack hits Cleveland Airport crippling email services and information screens
What is the issue - On April 22, 2019, a ransomware attack hit Cleveland Hopkins Internation Airport disabling information screens that display in-airport flight arrivals, departures and baggage claims.
Why it matters - The attack halted the services for days and the FBI is investigating the incident in order to determine the source of the attack and to restore the services back to normal operations. However, as of yesterday (April 25, 2019), the services still remain paralyzed.

https://cyware.com/news/ransomware-attack-hits-cleveland-airport-crippling-email-services-and-information-screens-3666699e

[ChiNgadOr]

BabyShark malware continues to target nuclear and cryptocurrency industries


The malware has been found using two other malware as secondary payloads.
They malware used as secondary payloads - KinJongRAT and PCRat - are referred to as ‘Cowboys’.
In February 2019, a new malware family named BabyShark was found targeting national security think tanks and academic institutions in the US. In the campaign, the malware was used primarily used to collect secrets and sensitive details from the targets.

https://cyware.com/news/babyshark-malware-continues-to-target-nuclear-and-cryptocurrency-industries-40e04829

[ChiNgadOr]

Financial and private data of dozens of IT giants’ leaked following a cyber attack at CITYCOMP

The affected companies include the names of Oracle, Airbus, Toshiba and Volkswagen.
CITYCOMP revealed that it had fallen victim to a ‘targeted’ cyber attack in early April this year.
Cybercriminals have hacked German-based CITYCOMP internet service provider in order to steal financial data of dozens of companies. The affected companies include the names of Oracle, Airbus, Toshiba and Volkswagen.

https://cyware.com/news/financial-and-private-data-of-dozens-of-it-giants-leaked-following-a-cyber-attack-at-citycomp-ac28b54c

[ChiNgadOr]

This is really something to worry about, as SAP is the most common software used by accountants in most of companies.

Around 50000 firms that use SAP solutions left vulnerable with new exploits

The exploits could be used by attackers to fully compromise SAP applications as well as delete all business data.
Vulnerabilities present in SAP NetWeaver installations were primarily targeted by these exploits.
Around 50,000 companies using SAP software are at great risks as new exploits target software configuration flaws. A recent report by cybersecurity firm Onapsis has detailed these exploits, which can cripple SAP-based systems. According to the report, about a million systems were discovered to be affected.


https://cyware.com/news/around-50000-firms-that-use-sap-solutions-left-vulnerable-with-new-exploits-4d36a052

[ChiNgadOr]

Attackers delete GitHub, GitLab, and Bitbucket repositories and replace with ransom notes

A GitHub search revealed almost 400 Github repositories that have been targeted in this manner.
According to BitcoinAbuse.com, there have been 27 abuse reports and all the abuse reports include the same ransom note.

https://cyware.com/news/attackers-delete-github-gitlab-and-bitbucket-repositories-and-replace-with-ransom-notes-da4e9e36

[ChiNgadOr]

Hackers stole over $41 million from Binance cryptocurrency exchange

Hackers also withdrew 7,000 Bitcoin, worth nearly $41 million from Binance’s hot wallet.
Binance cryptocurrency exchange suffered a security breach on May 7, 2019, wherein hackers stole users’ API keys, two-factor authentication codes, and other information. Hackers also withdrew 7,000 Bitcoin, worth nearly $41 million from Binance’s hot wallet.

https://cyware.com/news/hackers-stole-over-41-million-from-binance-cryptocurrency-exchange-1d24db61

[ChiNgadOr]

Crippling ransomware attacks targeting US cities on the rise

New York (CNN)Targeted ransomware attacks on local US government entities -- cities, police stations and schools -- are on the rise, costing localities millions as some pay off the perpetrators in an effort to untangle themselves and restore vital systems.

https://edition.cnn.com/2019/05/10/politics/ransomware-attacks-us-cities/index.html

[ChiNgadOr]

Bug in Twitter led to collection and sharing of users’ geolocation data with its partner

Twitter inadvertently collected and shared iOS users’ location data with one of its partners.
Twitter confirmed that the partner did not retain the shared data and deleted the data as part of their normal process.
Twitter has disclosed a bug in its platform that collects iOS app users’ location data and shares with one of its partners.

https://cyware.com/news/bug-in-twitter-led-to-collection-and-sharing-of-users-geolocation-data-with-its-partner-f2ebc19c

[ChiNgadOr]

Multiple Russian government sites leak passport and personal data of over 2.25 million citizens

Begtin uncovered almost 23 Russian government sites that leak SNILS numbers and almost 14 sites that leak passport details.
The leaked passport and personal details also belonged to several high-profile Russian government officials including the deputy chairman of the Russian Duma (Parliament) Alexander Zhukov, former deputy prime minister Arkady Dvorkovich, and former deputy prime minister Anatoly Chubais.

https://cyware.com/news/multiple-russian-government-sites-leak-passport-and-personal-data-of-over-225-million-citizens-483f4c08

[ChiNgadOr]

Medicare details of Australians available for sale in the darknet
Medicare Madness product listings suggest that Medicare details of Australians are available for sale since September 2018.
These listings are available to “verified customers only” who have previously purchased products worth at least $200.
After two years of Medicare data leak, the Medicare details belonging to Australians are still available for sale in the Empire Market.

https://cyware.com/news/medicare-details-of-australians-available-for-sale-in-the-darknet-facbf14e

[ChiNgadOr]

Unprotected database exposes the personal information of almost 8 million people in the US

The leaky database has exposed the personal information of almost 8 million people who had participated in online surveys, contests, and requests for free product samples.
The exposed information includes names, addresses, email addresses, phone numbers, dates of birth, gender, and IP addresses.
Security researcher Sanyam Jain has uncovered an unprotected Elasticsearch database that has been left publicly accessible without any authentication.

https://cyware.com/news/unprotected-database-exposes-the-personal-information-of-almost-8-million-people-in-the-us-485a97c2

[ChiNgadOr]

Cybercriminals break into production systems of Stack Overflow

Stack Overflow mentioned that the attackers gained access to production systems on May 11.
However, it says that no customer or user data was breached due to the incident.
Stack Overflow, a popular online forum for programmers and computer professionals, was breached by attackers. Production systems belonging to Stack Overflow were the prime target in this incident.

https://cyware.com/news/cybercriminals-break-into-production-systems-of-stack-overflow-b9c149c6