Doctor Paid $60,000 in Bitcoin to Hire Dark Web Hitmen

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A former neonatologist received an 8-year prison sentence and was mandated to pay over $25,000 in compensation, along with a $100,000 fine. Ronald Craig Ilg, age 56, received an 8-year sentence for arranging assaults and kidnappings through hitmen hired on …

New Malware App on Google Play With Over 20 Million Downloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently the cybersecurity experts at Dr. Web antivirus reported that over 20 million devices have recently downloaded a highly successful new category of activity-tracking apps from the Google Play Store. Among the features offered by these applications are pedometers, the …

BIND DNS Software High-Severity Flaws Let Hackers Remotely Trigger DoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Internet Systems Consortium (ISC) released security advisories on January 25, 2023, to address flaws in the DNS software suite BIND.  A denial of service could occur if these vulnerabilities are exploited. The flaws that were resolved have the potential …

PlugX Malware Hides on Removable USB Devices to Infect Windows Machine

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An investigation by cyber security experts at Palo Alto Network’s Unit 42 team recently revealed that a variation of PlugX malware has the ability to conceal harmful files on USB drives and subsequently infect Windows systems upon connection. A new …

New Mimic Ransomware Abuses Windows Search Engine to Look Files for Encryption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new strain of ransomware named Mimic has been uncovered recently by security experts at Trend Micro in June 2022. Mimic takes advantage of the APIs of the ‘Everything’ a file search tool for Windows to search for files to …

Hackers Launching Millions of Attacks to Exploit Critical Realtek SDK Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the latter half of 2022, a significant number of cyber attacks utilizing a remote code execution vulnerability in Realtek Jungle SDK were reported. These attacks, numbering 134 million, aimed to compromise smart devices. The vulnerability in question grants unauthorized …

PoC Exploit Released for Critical CryptoAPI Spoofing Vulnerability in Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Akamai researchers have made available a demonstration exploit code for a significant vulnerability in Windows CryptoAPI that was identified by the National Security Agency (NSA) and the United Kingdom’s National Cyber Security Centre (NCSC). The exploit allows for the forging …

GoTo Says Hackers Stole Customer Data and Encryption Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GoTo, formerly LogMeIn Inc., has acknowledged that a threat actor stole an encryption key that gave access to a portion of the backup files that were encrypted. Information about certain customers was stolen from a third-party cloud storage service that LastPass …

FBI: Lazarus Group Is Responsible For $100 Million Harmony Crypto Theft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It has been officially confirmed by the Federal Bureau of Investigation (FBI) that the cyber-attacks on the cryptocurrency exchange, Harmony Horizon, which resulted in the theft of $100 million worth of Ethereum, were orchestrated by state-sponsored hacking groups, Lazarus and …

Experian Glitch Exposing Credit Files Lasted 47 Days

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

On Dec. 23, 2022, KrebsOnSecurity alerted big-three consumer credit reporting bureau Experian that identity thieves had worked out how to bypass its security and access any consumer’s full credit report — armed with nothing more than a person’s name, address, …