2020 and 2021 saw massive increases and record costs, and ransomware payments continue to be well above what was seen in the more “normal” conditions prior to March 2020 despite a big 40% drop.
About $5 billion of the FTX shortfall has been recovered thus far but apparently at least about $415 million of its funds have walked out the door in the form of stolen crypto.
Another security breach has impacted over a hundred Mailchimp customers. Social engineering was used to gain access to the company’s customer support tools similar to prior attacks.
35,000 accounts were compromised in December by a credential stuffing attack. The company says that it sees no evidence that money was moved out of PayPal accounts or that unauthorized charges were made.
In 2021, organizations were facing pretty good odds of experiencing a ransomware attack (64%). Those odds declined tremendously in 2022 (25%), but it’s not time to celebrate just yet.
Twitter’s statement on the data leak (or lack thereof) said only that the company had seen no evidence of a breach of its internal systems and that the prior API scraping issue was not the source of the information.
Crypto crimes became even more lucrative in 2022 with a jump to $20 billion even though that share of illicit activity only increased very slightly and stayed far below historic highs.
The core of Ukraine’s war crime argument is that Russian cyber attacks have directly accompanied shellings and bombings of critical infrastructure companies, creating real world damage that impacts civilians.
The simplicity of the malware it generates reflects the relatively early and basic state of ChatGPT, but the early criminal activity indicates what direction things may develop in as these tools become more advanced and capable.
CircleCI customers have been advised to rotate secrets as a major security breach appears to have given attackers access to a broad variety of authentication credentials.