Another Alleged FIN7 Cybercrime Gang Member Arrested

Ishita Chigilli Palli • May 27, 2020

The FBI has arrested another alleged member of the FIN7 cybercrime gang, which has been stealing millions of payment cards and other financial data since at least September 2015. It's the fourth arrest of those tied to the group.

►

Active Defense & Deception

Supercomputer Intrusions Trace to Cryptocurrency Miners

Latest

COVID-19

Videoconferencing: Think Twice Before Hitting 'Record'

Mathew J. Schwartz • May 27, 2020

As a result of the COVID-19 pandemic, work-from-home employees have rushed to adopt videoconferencing tools. But Kroll's Alan Brill warns that sound security and privacy practices - backed by legal, risk management and HR teams - too often lag. Here are his top concerns and tips on how to address them.

COVID-19

Lawmakers Demand Details on Fighting China-Linked Hacking

Akshaya Asokan • May 26, 2020

A bipartisan group of U.S lawmakers is requesting more information from the FBI and CISA about efforts to crack down on hacking groups linked to China's government that are targeting American facilities conducting COVID-19 research.

Governance & Risk Management

Why an Information Asset Register Plays Important Role

Anna Delaney • May 26, 2020

Security practitioners need to know what data their organization has and where it is kept so they can ensure it's protected. That inventory process that can be simplified by creating an information asset register, says Bilal Ghafoor, a data protection consultant.

Cloud Security

Setting IAM Priorities in the Shift to the Cloud

Anna Delaney • May 26, 2020

As more organizations rely more heavily on cloud-based applications as a result of a remote workforce, they must avoid taking identity and access management shortcuts, says James Gosnold of the cloud consultancy CloudKubed, who calls for the addition of another layer of authentication.

Application Security

Mercedes-Benz Data Leak Lesson: Lock Down Code Repositories

Jeremy Kirk • May 25, 2020

Don't forget to lock down online shared code repositories, as Mercedes-Benz parent company Daimler AG learned the hard way after a researcher was able to access nearly 9 GB of software development documentation from a misconfigured GitLab repository.

Cybercrime

Ransomware Gang Posting Financial Details From Bank Attack

Akshaya Asokan • May 23, 2020

The Maze ransomware gang has started releasing payment card data from an attack that happened earlier this year at Banco BCR, the state-owned Bank of Costa Rica. The cybercriminal gang is now threatening to release more of customers' financial data each week.

COVID-19

Microsoft Warns of COVID-19 Phishing Emails Spreading RAT

Akshaya Asokan • May 22, 2020

Microsoft is warning Windows users about an ongoing "massive" COVID-19-themed phishing campaign that is attempting to install the NetSupport Manager on devices. Attackers can turn NetSupport into a remote access Trojan, or RAT.

Cybercrime

Hackers Tried to Exploit Zero-Day Flaw in Sophos Firewall

Akshaya Asokan • May 22, 2020

Hackers tried two methods of exploiting a zero-day vulnerability in Sophos' XG firewall, but Sophos says it made a temporary fix that mitigated the risks. Attackers originally attempted to plant a Trojan, but then switched to ransomware.

Cybercrime

Phishing Campaign Leverages Google to Harvest Credentials

Ishita Chigilli Palli • May 22, 2020

Some fraudsters waging phishing campaigns are using fake websites hosted on Google's Firebase Storage service in an attempt to harvest credentials, according to Trustwave, which notes the phishing emails contain links to the service to make them look more credible.

Application Security

Analysis: The Long-Term Implications of 'Work From Home'

Nick Holland • May 22, 2020

The latest edition of the ISMG Security Report features Retired General Keith Alexander, former NSA director, discussing the long-term security implications of the shift to working from home. Also: an update on ransomware gangs leaking data and an analysis of using open source code for app development.

Application Security

Apple, Google Release Contact-Tracing APIs for COVID-19

Jeremy Kirk • May 21, 2020

Apple and Google have released new APIs designed to support contact-tracing apps being developed by governments to help combat the COVID-19 pandemic. Already at least three U.S. states and 22 countries have expressed interest in using the APIs to build their apps.

Cybercrime

Hot Offering on Darknet: Access to Corporate Networks

Doug Olenick • May 21, 2020

The number of darknet forum ads offering full access to corporate networks jumped almost 70% during the first quarter of 2020, compared to the previous quarter, posing a significant potential risk to corporations and their now remote workforces, according to security firm Positive Technologies.