Content by Mathew J. Schwartz

Emotet, Ryuk, TrickBot: 'Loader-Ransomware-Banker Trifecta'

Mathew J. Schwartz  •  April 15, 2020

Many criminals are continuing to tap cybercrime platforms and services to make it easier to earn an illicit paycheck, sometimes by combining tools, such as Emotet, Ryuk and TrickBot. This "loader-ransomware-banker trifecta has wreaked havoc" in recent years, says security firm Intel 471.

Coronavirus: UK Government Promises App for Contact Tracing

Mathew J. Schwartz  •  April 13, 2020

The U.K. government says it's prepping a contact-tracing app in an attempt to help contain COVID-19. But a leading cybersecurity expert argues that the proposal amounts to little more than "do-something-itis" and urges a focus, instead, on expanded testing as well as ventilator production.

UK and US Security Agencies Sound COVID-19 Threat Alert

Mathew J. Schwartz  •  April 9, 2020

Cybercrime groups and nation-state hacking gangs are continuing to exploit the COVID-19 pandemic to further their aims, U.K. and U.S. security agencies warn in a joint alert. While overall attack levels haven't increased, they say, "the frequency and severity of COVID-19-related cyberattacks" looks set to surge.

Microsoft Exchange: 355,000 Servers Lack Critical Patch

Mathew J. Schwartz  •  April 8, 2020

Patch or perish alert: Less than 20 percent of vulnerable Microsoft Exchange servers have received a fix for a serious flaw that Microsoft first disclosed nearly two months ago, security firm Rapid7 warns. It also found a "concerning number" of Exchange 2007 servers, which Microsoft stopped supporting in 2017.

No COVID-19 Respite: Ransomware Keeps Pummeling Healthcare

Mathew J. Schwartz  •  April 7, 2020

As the COVID-19 outbreak has intensified, so too has cybercrime, including ransomware, Interpol, the international crime-fighting agency, warns. Despite some gangs claiming to no longer be targeting healthcare organizations, experts have seen "no abatement, empathy or free decryptor" from any of them.

Zoom Promises Geo-Fencing, Encryption Overhaul for Meetings

Mathew J. Schwartz  •  April 6, 2020

Zoom, responding to research that highlighted encryption and infrastructure shortcomings in its audio and video conferencing software, has promised to further revamp its security controls. With COVID-19 driving a surge in working from home, researchers have been closely reviewing the security of such software.

The Cybersecurity Follies: Zoom Edition

Mathew J. Schwartz  •  April 3, 2020

The stuck-at-home chronicles have fast become surreal, as remote workers face down a killer virus on the one hand and the flattening of their work and personal lives on the other. To help, many have rushed to adopt Zoom. And for many use cases - hint: not national security - it is a perfectly fine option.

What Went Wrong at Equifax? We Have Good Answers

Mathew J. Schwartz  •  April 3, 2020

What missteps led to hackers stealing details on 145 million Americans from Equifax in 2017? The answer to that question can be found in numerous reports and a Justice Department indictment. Security researcher Adrian Sanabria says they're essential reading for anyone responsible for cybersecurity defenses.

Morrisons Not Liable for Breach Caused by Rogue Employee

Mathew J. Schwartz  •  April 2, 2020

Supermarket giant Morrisons is not liable for a data breach caused by a rogue employee, Britain's Supreme Court has ruled, bringing to a close the long-running case - the first in the country to have been filed by data breach victims.

Is COVID-19 Driving a Surge in Unsafe Remote Connectivity?

Mathew J. Schwartz  •  March 31, 2020

As the coronavirus drives a massive upsurge in remote working, a review of remote desktop protocol usage suggests RDP adoption hasn't spiked. But as IT teams rely more heavily on remote access, experts warn that too many RDP systems remain internet-exposed.

FBI: Cybercrime Gang Mailing 'BadUSB' Devices to Targets

Mathew J. Schwartz  •  March 30, 2020

The FBI warns that the notorious FIN7 cybercrime gang has a new trick up its sleeve: Mailing victims a $50 gift card portrayed as good for redeeming items listed on an accompanying USB storage device, which in reality downloads Griffon backdoor software to give attackers remote access.

Russia's Cybercrime Rule Reminder: Never Hack Russians

Mathew J. Schwartz  •  March 27, 2020

Russian authorities typically turn a blind eye to cybercrime committed by citizens, provided they target foreigners. But as the recent "BuyBest" arrests of 25 individuals demonstrate, authorities do not tolerate criminals that target Russians, and especially not anyone who targets Russian banks.

Microsoft to Pause Non-Essential Software Updates

Mathew J. Schwartz  •  March 26, 2020

Microsoft has announced that it will pause all non-essential updates for Windows, while both Google and Microsoft have said their Chrome and Edge browsers will, for now, receive only stability and security updates. The moves come as IT teams are continuing to respond to the ongoing fallout of the COVID-19 pandemic.

More Ransomware Gangs Join Data-Leaking Cult

Mathew J. Schwartz  •  March 25, 2020

More bad ransomware news: Following in the footsteps of Maze, now even more cybercrime gangs are threatening to not only crypto-lock systems but also leak stolen data. Such moves come following a banner year for ransomware operators, who are continuing to bring more advanced tactics to bear.

Russia Blamed for COVID-19 Disinformation Campaigns

Mathew J. Schwartz  •  March 23, 2020

Disinformation campaigns with ties to Russia are continuing in an attempt to impede other governments' responses to the COVID-19 pandemic, complicating public health efforts to combat the disease, European officials warn.