cybercrime

Danish Trains Halted Through Cyberattack

Ransomware on Suppliers’ Servers Halts Trains Trains ground to a halt in Denmark on Oct. 29, 2022. Not through strike action, but because of a cyberattack. Attacks against critical infrastructure are not new. In the United States, the Transportation Security Administration (TSA) recently issued a new directive with the aim of improving the cybersecurity of railroad operations. Attacks against critical infrastructure such as railways are almost always carried out by Advanced Persistent Threat groups, the state-sponsored cyber-offensive wings of governments.

Continue reading

Massive Breach at Twitch

Entire Source Code Base Stolen and Posted Online The term a massive breach doesn’t quite describe what took place at Twitch, Amazon’s streaming platform. Twitch announced the breach on Twitter on Oct. 6, 2021. The amount of data is staggering—around 125GB—but the scope of its content is truly astonishing. The hackers stole: All of Twitch’s source code. All of it. Every piece of software they’ve written in-house. Remuneration details for their content creators.

Continue reading

Pirated Software Leads to Ransomware Attack

Student Downloads Pirated Software and Infects COVID-19 Research Institute A research student working at a European biomolecular research institute wanted to obtain copy of the software he used at the Institute for his personal use. The cost of a license proved too much for the students budget, so he asked on an online forum if there was a way he could get a cracked copy of the software. That is, one that has been modified by cybercriminals so that licensing is bypassed.

Continue reading

Facebook Data Breach Exposes 533 Million Accounts

533 Million Facebook Accounts from 106 Countries Leaked Online Yet again, Facebook suffers a data breach embarrassment. Underlining once more—as if it was needed—that Facebook does not practice what it preaches when it comes to safeguarding and protecting its users’ personal data. The breached data is freely available on the Dark Web. Usually, breaches of this type are monetized. The threat actors charge other cybercriminals for access to the data.

Continue reading

Fireeye Hit by Cyberattack

Major Cyber Security Firm Attacked One of the largest cyber security firms in the US has been hit by a successful cyberattack. Cyber security giant FireEye published a blog post describing the event. CEO Kevin Mandia said the hack most likely came from a nation-state attacker: “Based on my 25 years in cyber security and responding to incidents, I’ve concluded we are witnessing an attack by a nation with top-tier offensive capabilities,” Mandia said in his post.

Continue reading

Scammers Accidentally Ring Cybercrime Police

A Bad Case of Wrong Number A tech-support scammer making random phone calls in the hope of finding a victim to dupe accidentally rang the cybercrime squad of an Australian police force. Officers at the Financial and Cybercrime Investigation Branch (FCIB) used the opportunity—and a secure sand-boxed computer—to discover the mechanics behind the attack. “No one is safe from receiving scam robo-calls, not even the police,” the FCIB said.

Continue reading

FBI Warns US Hospitals About Ransomware

FBI: US healthcare system facing “increased and imminent” threat of attack The FBI, the Department of Homeland Security, and the Department of Health and Human Services warned that they had “credible information of an increased and imminent cybercrime threat to US hospitals and healthcare providers”. The attacks are ransomware attacks using the Ryuk ransomware strain. They suspect Russian-speaking threat actors are behind the attacks, which are believed to be financially, not politically, motivated.

Continue reading

Russian Military Hackers Accused of Spreading Malware

Six Russian Military Officers Charged Over Malware Six officers in Unit 74455 of the Russian Main Intelligence Directorate (GRU), a military intelligence agency of the General Staff of the Armed Forces, have been charged by the US with spreading malware and meddling with elections. They are said to be part of the infamous Fancy Bear Advanced Persistent Threat group, APT28. “No country has weaponized its cyber capabilities as maliciously or irresponsibly as Russia, wantonly causing unprecedented damage to pursue small tactical advantages and to satisfy fits of spite,” said Assistant Attorney General for National Security John C.

Continue reading

Thirteen Year Old Arrested for Cybercrime

Unnamed 13-year Old Arrested for Cyberattacks in Indiana A 13-year-old boy was arrested and charged with hacking into an Indiana school district’s computer system. The defendant is a pupil at Benjamin Franklin Middle School, Valparaiso, the county seat of Porter County, Indiana. Police confirmed on September 18 that they had taken a boy into custody the day before, after school staff discovered he had illegally entered the Valparaiso Community School computer system.

Continue reading

Negligent Homicide in German Hospital Cyberattack

German Police Probe ‘Negligent Homicide’ in Hospital Cyberattack A ransomware attack on a German hospital is under investigation as a cybercrime, obviously, but it is also being investigated from a potential homicide viewpoint. The ransomware attack delayed treatment for a female patient that led to her death, a state Justice Ministry has suggested. The patient was scheduled to undergo life-saving treatment at the Düsseldorf University Clinic but a ransomware attack against about 30 servers forced emergency services to redirect ambulances to a different hospital in Wuppertal, about 60 Km away.

Continue reading