Top 10 Stories

The technical capabilities of criminal gangs are outpacing the UK's ability to deal with their threat, the NCA added. It said there were 2.46 million "cyber incidents" last year, including 700,000 frauds - with the biggest threat coming from "a few hundred" criminals. View full story ORIGINAL SOURCE: BBC

Taking a break from its recent takeovers of CEOs' Twitter and Quora accounts, the hacking group OurMine today turned its attention to Wikileaks, reportedly knocking its website offline with a distributed denial of service (DDoS) attack. View full story ORIGINAL SOURCE: SC Magazine

According to Web security firm Sucuri, this latest campaign, dubbed Realstatistics, has been raging on for the past two weeks, with at least 100 new infected websites detected every day, based on the company's telemetry data. View full story ORIGINAL SOURCE: Softpedia

The toolkit, dubbed by ESET “SBDH” based on a string found in its downloader, is designed to exfiltrate specific files from the systems of targeted organizations. Several instances of the malware have been observed by the security firm over the past year in attacks aimed at government and public institutions. View full story ORIGINAL SOURCE: Security Week

The security researcher from Government Lab Mohammed Adel has found a vulnerability in the UK Defence Gateway, an application only for the staff use, that could be exploited by attackers to gain access to the system as a staff member. View full story ORIGINAL SOURCE: Security Affairs

Infecting nearly 10 million Android devices all over the world, the malware is reportedly raking in at least $300,000 a month for its makers. As for its makers, the group responsible for the malware also reportedly controls more than 85 million devices through a variety of fake apps and other security threats. View full story ORIGINAL SOURCE: Econotimes

The software, called EasyDoc Converter.app, is supposed to be a file converter but doesn't do its advertised functions. Instead it drops complex malware onto the system that subverts the security of the system, allowing it to be used as part of a botnet or to spy on the owner. View full story ORIGINAL SOURCE: The Register

Cybercriminals are using local brand names such as local ISP providers and legitimate looking addresses to fool users into downloading malware that can steal information by monitoring browsers, file transfer protocol (FTP) clients, and mail clients. Its targets? Mostly rural banks. View full story ORIGINAL SOURCE: Trend Micro blog

The United Nation’s Office on Drugs and Crime (UNODC) published its annual report on Thursday andplaced special emphasis on curbing the illicit trade on the Dark Web. According to the Global Drug Survey report for 2016, drug users are increasingly turning to dark web marketplaces. The UN’s report concedes: “Law enforcement and the criminal justice system in many countries are still not in a position to deal effectively with the anonymous online marketplace known as...

Trustwave researcher Rodel Mendrez has gained access to the inbox of the criminal behind a commercial keylogger used to attack industries including finance, cloud services, logistics, foreign trade, and government. Mendrez's reverse engineering effort found credentials buried within the Hawkeye keylogger that lead through redirection to the author's inbox. Attackers behind Hawkeye were siphoning from compromised machines browser, email, and FTP credentials, and system data including installed firewalls, operating system information, and IP address data....