News

Godaddy.com, the world’s largest domain name registrar, recently addressed an authentication weakness that cybercriminals were using to blast out spam through legitimate, dormant domains. But several more recent malware spam campaigns suggest GoDaddy’s fix hasn’t gone far enough, and that scammers likely still have a sizable arsenal of hijacked GoDaddy domains at their disposal. Source: Krebs on Security

Researchers say they have identified the threat actor behind the massive “Collection #1” data dump which exposed hundreds of millions of credentials on a hacking forum in January. Recorded Future researchers said this weekend that an individual using the moniker “C0rpz” has claimed as early as Jan. 7 to be the original creator and seller of the Collection #1 data. The original database of breached emails – totalling 773 million unique email addresses –was discovered...

US-based casual dining and fast food restaurant chain Huddle House announced late Friday last week a security breach that impacted its point of sale (POS) system. "Criminals compromised a third-party point of sale (POS) vendor's data system and utilized the vendor's assistance tools to gain remote access-and the ability to deploy malware-to some Huddle House corporate and franchisee POS systems," Huddle House said in a security alert listed on its front page. Source: ZDNet

Avast (LSE:AVST), a global leader in cybersecurity products, and Barracuda Networks, Inc., a leading provider of cloud-enabled security solutions, today announce an agreement under which Barracuda will become a master reseller of Avast Business CloudCare, Avast Management Console and Avast Antivirus Security solutions. “Small to mid-size businesses are currently underserved by the market as security systems tend to be targeted to the needs of larger enterprises. Through Avast’s 30 years of cybersecurity expertise, we have...

Reading & Farnborough 4 February 2019. SecureCloud+, a trusted provider of next-generation secure information systems to government and defence, has been contracted by the Royal Air Force to deliver network collaboration services for Team Tempest. Team Tempest is a global network of international partners formed by the Royal Air Force Rapid Capability Office (RCO) along with BAE Systems, Rolls Royce, MBDA and Leonardo. SecureCloud+ is the only SME to be part of the team, which...

A 20-year-old college student who stole cryptocurrency worth more than $5 million by hijacking victims' phone numbers has pleaded guilty and accepted a sentence of 10 years in prison. Ortiz was arrested last year on charges of siphoning millions of dollars in cryptocurrency from around 40 victims using a method commonly known as "SIM swapping," which typically involves fraudulently porting of the same number to a new SIM card belonging to the attacker. Source: The...

Social Media research shows British MP Jacob Ree-Mogg’s #Moggmentum campaign is being pushed by accounts linked to a powerful Kremlin disinformation operation. Analysis of social media traffic between January and February 2018 reveals a pattern of disinformation being fronted by social media users connected to Russia’s Brexit interference campaign – known to have been more influential that Vote Leave and Leave.EU combined. Source: Byline Times

CookieMiner is a new malware strain capable of stealing and exfiltrating web browser cookies related to online wallet services and cryptocurrency exchange websites, as well as passwords, text messages, and credit card credentials. The newly identified malware targets Mac devices and shares at least some of its code with the OSX.DarthMiner and OSX.LamePyre strains discovered by Malwarebytes during December 2018. Source: Bleeping Computer

Home improvement site Houzz has suffered a data breach, with an unknown amount of user information stolen. The hack, discovered in late December but only revealed on Friday, involved the theft of profile information, including name, city, state, country and profile description, along with internal identifiers such as the region and location of the user and whether each has a profile image. Source: Silicon Angle

Britain's data watchdog is investigating complaints that Google is breaking privacy laws, raising the prospect of multi-million pound fines for the company. The Information Commissioner’s Office is investigating whether the Search giant has broken the General Data Protection Regulation (GDPR), which came into force last year. If found to be in breach Google faces fines of up to 4pc of its global turnover - which by 2017’s figures could be as much as $4bn (£3.1bn).  Source:...