App Stores Not Safe From Fake Crypto Apps as Investment Scams Run Rampant
In total, the FBI says that $42 milion has been stolen by fake crypto apps since 2021. The more complicated of these apps almost always use a social engineering element.
-
-
One of the World’s Most Common Vehicle GPS Tracker Has a Hard-Coded Password Anyone Can Exploit
The hard-coded password vulnerability is the most serious of the bunch, but there are others that would likely cause the MiCODUS MV720 vehicle GPS tracker to be pulled out of circulation even if it was not present.
-
Endemic Log4j Vulnerability To Remain a Problem for the Next Decade, According to Cyber Safety Review Board
The notorious Log4j vulnerability is “endemic” and will not be fully remedied by the open source community or the organizations it plagues, according to a new report from the Cyber Safety Review Board.
-
At Least Four Nations Have Mobilized State-Sponsored Hackers in Cyber Espionage Campaigns Against Journalists
Researchers has observed journalists being targeted by state-sponsored hackers from China, North Korea, Turkey and Iran. Cyber espionage campaigns focused on looking for identities of anonymous sources and any “off-the-record” information.
-
Social Media for Disneyland Hit by Account Takeover, Used for Demeaning Messages
Social media accounts belonging to Disneyland were compromised by an unknown party and used to post crude and offensive messages during a brief account takeover.
-
North Korean Hackers May Have Used Fake Job Offer To Pull Off Axie Infinity Crypto Theft
Platforms like LinkedIn sometimes make it difficult to filter fake job offers out from legitimate communications. This may have been exploited in the Axie Infinity crypto theft incident.
-
Social Engineering Responsible for Another Data Breach at a Marriott Location, 20GB of Data Stolen
A social engineering attack apparently ensnared a member of the BWI Airport Marriott staff, with the ensuing data breach leaking 20GB of data including credit card information.
-
Hacker Claims Theft of Personal Data of 1 Billion China Citizens From National Police Department, but Samples May Be From Smaller Prior Data Leaks
Hacker raised major alarms by offering the personal data of 1 billion China citizens for sale, but it may originate from prior known data leaks that comprise a much smaller total of records.
-
Series of DDoS Cyber Attacks on Lithuania Appear To Have Come From a Private Group of Russian Hackers
Russian hackers has taken responsibility for a hacking campaign in Lithuania that has seen primarily government services hit by distributed denial of service (DDoS) cyber attacks.
-
Ransomware-as-a-Service Group LockBit Offers Bug Bounty Program for Both Internal and External Vulnerabilities
While this latest gambit from ransomware-as-a-service gang LockBit is likely more of a publicity stunt than a genuine attempt at a bug bounty program, it reflects the comfort level that online criminals have settled into.
