News

On Wednesday, the European police agency, Europol, announced that it had assisted in the arrest of 10 hackers. The 10 individuals are being accused of stealing $100 million in cryptocurrency using "SIM-swapping" attacks. This type of attack allows criminals to gain access to their victims' phones, by tricking the phone company into deactivating a working SIM card and transferring its functions to the hackers. Europol stated that “the attacks orchestrated by this criminal gang targeted...

Security researcher, Alex Birsan had an idea last year while working with Justin Gardner, another researcher. This idea led to him being able to gain access to over 35 major tech companies' internal systems in a supply chain attack. Among these were Microsoft, Apple, Netflix and Uber. This particular supply chain attack is so sophisticated, it needed no action from the victims, who as a result automatically received malicious packages. The attack leveraged a unique...

According to a leading cyber-security company, Iran is targeting dissidents in an effort to install spyware on their PC and mobile devices. More than 1,000 individuals were affected. The spyware was being used to steal call recordings and media files. One of the groups is known as Domestic Kitten or APT-50, which allegedly tricked people into downloading malicious software onto their mobile devices. The methods they used include: using an existing version of an authentic...

On Friday a hacker accessed the water treatment computer systems for the city of Oldsmar, Florida, and altered the chemical levels of the water to a dangerous level. News of the attacks was only publicised on 8th February, after Oldsmar city officials held a press conference about the matter. It appears that the hacker first accessed the computer systems on 5th February at 8am, and then later on in the day at 1:30pm. The first...

Morse code, invented as a way of transmitting messages across telegraph wire, is being used by cybercriminals to hide malicious URLs within email attachments. This obfuscation technique was discovered last week, and so far there is no record of it being used in phishing attacks before. Numerous samples of the targeted attack have been uploaded to VirusTotal since the 2nd of February, 2021, BleepingComputer reports. The attack starts with a phishing email, which claims to...

Leon Medical Centers and Nocona General Hospital suffered a ransomware attack in November, in which attackers stole tens of thousands of patient records. The attack was only officially announced in January. Among the records stolen were scanned diagnostics results and letters to insurers, which include personally identifiable information such as names, addresses and birthdates.  The attackers demanded a ransom payment in return for a decryption key and a promise not to publish the records stolen....

The head of GCHQ spoke to Sky News about a secret cyber operation, targeting the Islamic State. The mission of this operation is to target the group's ability to fly drones, meddle with their phones and affect their propaganda. General Sir Patrick Sanders has warned the UK, that social media is being used to sow division, spread conspiracy theories and "tear the fabric of society apart". Both sanders and Jeremy Fleming, director at GCHQ, spoke...

Version 88.0.4324.150 of the Chrome browser was released today. The new version, compatible with Windows, Mac and Linux contains a bugfix for a zero-day vulnerability. The vulnerability was assigned the identifier CVE-2021-21148. Google described it as a "heap overflow" memory corruption bug, which was exploited in attacks before Mattias Buelens found and reported the issue on the 24th of January. Google's security team published a report two days after Buelen's report, detailing attacks carried out...

A group of antifa (anti-fascist) Israeli hackers broke into the website belonging to the Patriotic Brigade Knights, a white supremacist group allied to the Ku Klux Klan (KKK). The hackers published the names, photos and personal information of the members of the fascist group. They also replaced and added some personalised information to the website, including a banner saying: "Shabbat Shalom! Goodnight white pride." Their goal was to "strike terror into the hearts of the...

Ransomware attacks and nation-state assaults on vaccine supply chains are only two of the many challenges healthcare cyber professionals have been hit with as a result of COVID-19. How were these challenges overcome? More importantly, though, what challenges are healthcare cyber professionals facing in a post-Pandemic world? The Israeli Economic and trade Missions in London and Washington, DC have teamed up to launch a cybersecurity panel focusing on exactly that: “Post-Pandemic Healthcare: Greatest challenges facing...