👉 What’s going on in the cyber world today?
Okta, Sonatype, North Korean, Moonstone Sleet, Microsoft, AllaSenha RAT, HarfangLab, Proofpoint, Australian Home Affairs Department, Ticketmaster Cyber Incident, ABC News, BBC, Birmingham Live, Toshiba, Office of the Maine General Attorney, Bring Me The Horizon, Global Village Space, Cooler Master, Cyber Daily, US Department of Treasury, NFT Financial Risks, NIST, AI Office, The European Commission, IBM, Cristiano Ronaldo, Binance.
Listen to the full podcast
Okta warns of a new wave of credential stuffing attacks targeting their Customer Identity Cloud feature, impacting multiple customers since April. These attacks exploit stolen usernames and passwords to breach online accounts using cross-origin authentication endpoints. Okta advises customers to disable unused URLs and implement strong security measures, including multi-factor authentication and passwordless options, to protect against these threats.
Cybersecurity researchers have identified a malicious Python package, pytoileur, in the Python Package Index (PyPI) repository aimed at facilitating cryptocurrency theft. The package, uploaded by a user named PhilipsPY, has been downloaded 316 times and includes code that executes a Base64-encoded payload to retrieve and run a Windows binary from an external server. The malicious activity highlights the increasing threat to open-source ecosystems, as attackers leverage credible platforms like PyPI and Stack Overflow to spread their campaigns.
Moonstone Sleet, a newly identified North Korean threat actor, has been launching cyberattacks against software, education, and defense sectors using ransomware and custom malware. The group employs tactics such as setting up fake companies and job offers, trojanizing legitimate tools, and distributing malicious games. Microsoft’s analysis reveals that these methods show significant overlaps with the notorious Lazarus Group but with distinct traits. Organizations are advised to strengthen their cybersecurity measures to guard against these sophisticated attacks.
A new cyber campaign aims at Brazilian banks, deploying a custom Windows RAT called AllaSenha. The attack vectors include phishing links in emails, with decoy PDF files hiding malicious LNK shortcuts. Once executed, the payload retrieves a DLL from Azure infrastructure, enabling the trojan to steal banking credentials and intercept two-factor authentication codes.
A sophisticated phishing scheme promises a free baby grand piano, enticing victims to pay hefty delivery fees, amassing over $900k in ill-gotten gains. Targeting North American universities and beyond, the operation employs faux legitimacy and urgency, emphasizing non-traceable payment methods to conceal its fraudulent nature. Though the origins point to Nigeria, the scheme showcases the adaptability and profitability of modern cybercrime.
Home Affairs Department confirms cyber incident affecting Ticketmaster customers as hacker group ShinyHunters claims data breach, potentially impacting millions globally. 1.3 terabytes of customer data, including personal and payment details, up for sale, raising concerns of identity fraud and phishing attacks. Cybersecurity experts warn of rising cyber threats and urges consumers to prioritize multi-factor authentication for protection against criminal organizations.
BBC probes breach affecting over 25,000 present and past employees, triggering cybersecurity concerns among authorities. The breach, originating from the corporation’s pension scheme, prompts swift action and reassurances from scheme representatives. Despite speculation, BBC denies ransomware involvement, focusing on containing and investigating the breach.
Toshiba America Business Solutions experiences email compromise, potentially exposing personal information and Social Security numbers. The breach, lasting nearly a year, impacts individuals across multiple US states, prompting ongoing investigation and complimentary identity monitoring services for affected parties. TABS, a subsidiary of Toshiba TEC corporation, is renowned for office printing and retail solutions, with significant annual revenue and a sizable workforce.
Fans eagerly explore an ARG hinted in a music video, only to face disruption from hackers. Despite brief excitement, the game’s website issues warnings after hacking attempts, underscoring the need for fair play in alternate reality gaming.
Cooler Master, a prominent computer hardware manufacturer based in Taiwan, has fallen victim to a significant data breach. A threat actor, known as ‘Ghostr,’ claimed to have breached Cooler Master’s website and stolen the personal information of 500,000 Fanzone members, including names, addresses, credit card details, and more.
📢 Cyber News
The US Treasury report highlights concerns like terrorist financing, nuclear proliferation, and fraud in the NFT market. The assessment underscores the need for regulatory measures and consumer education to mitigate potential abuses in the evolving digital asset landscape. Despite acknowledging that most illicit activities occur outside the digital asset space, the report outlines recommendations to address risks associated with NFTs.
The National Institute of Standards and Technology (NIST) has undertaken measures to address the backlog in the National Vulnerability Database (NVD). A recent contract awarded to an outside vendor is expected to bolster the processing of software and hardware bugs added to the database. Concerns about the backlog were raised following agency cutbacks earlier in the year, prompting NIST to take action to expedite the analysis and enrichment of vulnerabilities.
The European AI Office, slated to commence operations on June 16, marks a significant milestone in the region’s regulatory landscape. Tasked with implementing the AI Act, the first-ever binding regulation on artificial intelligence, the office is expected to play a pivotal role in shaping the future of AI governance in the European Union.
With cybercrime on the rise, manufacturing emerges as a prime target. IBM’s latest findings reveal the sector as the most-attacked industry for the third consecutive year, with over 25% of security incidents attributed to manufacturers. In light of this, bolstering security fundamentals becomes paramount for resilience against malware attacks, particularly ransomware, which has been the primary weapon of choice for cybercriminals infiltrating manufacturing networks.
Football legend Cristiano Ronaldo partners with Binance to release an NFT collection capturing his iconic moments. The collection, “Forever Worldwide: The Road to Saudi Arabia,” showcases Ronaldo’s journey from his roots in Madeira to his illustrious career in Manchester United, Real Madrid, and beyond. Fans can expect exclusive experiences, including in-person interactions and real-world rewards, as part of this immersive NFT venture.
Copyright © 2024 CyberMaterial. All Rights Reserved.
