Browsing tag

Hacking

REvil Ransomware targets 1000+ businesses causing holiday havoc

Reportedly, Revil ransomware is demanding $5 million in ransom. Not many ransomware gangs survive long enough to victimize one company after another successfully. Most are dissected by cybersecurity researchers and taken care of usually. However, the REvil ransomware happens to be one of the former which has been proven once again with the latest news […]

Hackers steal $600 million in largest ever cryptocurrency heist

The targeted company Poly Network claims that hackers exploited a vulnerability between contract calls where a contract can change/modify the keeper of a contract and execute transactions.  One of the industry’s leading decentralized finance platforms (DeFi) Poly Network has become a victim of a cyberheist in which hackers managed to steal $611 million worth of […]

Revil ransomware increases ransom to $70M in Kaseya attack

The Revil ransomware group has released a notice stating that more than 1 million systems have been infected – far more than initially believed. A couple of days ago, we reported on how the infamous REvil ransomware had targeted over 40 Managed Service Providers (MSPs) compromising more than 1000 businesses in the process. In the […]

Indian call center seized over Amazon hacking scam against US citizens

The call center ran a fake Amazon technical support call center in South Delhi – Now, 26 of its “employees” have been arrested. The Delhi Police have shut down a fake call center alleged to have been operational for the past seven months and scamming US citizens. Allegedly, the call center employees duped US citizens […]

Domain, server of DoubleVPN used by ransomware gangs seized

US, Canada, and European authorities took part in the operation which ended up seizing cybercriminals’ access to and infrastructure of DoubleVPN. A collaborative effort between Europe, Canada, and US law enforcement authorities has served a big blow to threat actors. According to a press release from Europol, they have seized the web domains, customer logs, […]

SolarWinds hackers exploited iOS 0-day to compromise iPhones

According to Google, SolarWinds hackers used the vulnerability to steal web security credentials from Western European government officials. Google published a report on Wednesday to share details of its latest findings on the SolarWinds supply chain attack discovered in 2020. The latest revelation is that SolarWinds hackers learned about and exploited an iOS zero-day vulnerability […]

Colombia arrests suspect wanted by US over Gozi virus

The suspect, Mihai Ionut Paunescu, was already arrested by the Romanian authorities in December 2012 but managed to avoid extradition to the United States. Colombian authorities have arrested Mihai Ionut Paunescu, a Romanian man who was charged more than eight years ago by the United States with involvement in developing the Gozi virus.  Gozi is […]

Crippling attack on Iranian trains linked to Meteor file wiper malware

The Meteor file wiper malware is linked to a cyberattack that took place on July 9th, 2021 on the Iranian railway system and transport ministry. The IT security researchers at SentinelOne’s security have reported that a cyberattack that brought down Iran’s national railways earlier in July involved a new, reusable wiper malware known as Meteor. […]

Hackers leak 260,000 accounts from Pakistani music streaming site Patari

Hackread.com informed Patari of the data breach almost a week ago yet we did not receive any response whatsoever. Patari or Patari.pk, a Pakistani music streaming site has suffered a data breach in which its database containing personal data and login credentials of over 257,000 registered users has been leaked on English and Russian language […]

The Threat of Ransomware on the Rise in 2021

As if we didn’t have enough threats on our plate to deal with. Did you know in 2018, ransomware attacks worldwide grew by 380%? There are several reasons why there has been such a whopping increase, for instance, Social distancing may be affecting how we work, but it also might be creating an increase in […]

Vulnerability exposed Peloton bike, treadmil to malware attacks

Peloton workouts are susceptible to hacking leading to malware and spying, claims McAfee’s Advanced Threat Research team. According to their latest research, a vulnerability, classified as CVE-2021-3387, was discovered in the touchscreen of Peloton Bike+ and Tread+, allowing threat actors to control it remotely, without any involvement of the equipment’s operating system. SEE: Electronic Skateboards […]

Prominent defibrillator management tool exposed to remote attacks

High-Risk Security Flaws Found and Patched in ZOLL Defibrillator Management Software. The Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) has released an alert stating that multiple remote code execution vulnerabilities have been identified in software used by ZOLL, a US-based healthcare technology provider. SEE: Hackers exploiting critical vulnerabilities in Fortinet VPN – […]

DarkRadiation ransomware targeting RedHat, Debian Linux distributions

The newly discovered DarkRadiation ransomware chain is unlike any other ransomware family. Trend Micro cybersecurity researchers have shared findings of a newly identified ransomware strain dubbed DarkRadiation. The ransomware strain is entirely written in Bash, and this aspect makes it difficult for most security software to detect it as a threat. SEE: Revil ransomware gang hits US […]

Hackers could access photos, videos without unlocking your phone

The vulnerability existed in the Facebook Messenger Rooms video chat feature and exposed Android smartphone users to intrusion. Nepalese security researcher Samip Aryal has identified a security vulnerability in the Facebook Messenger Rooms video chat feature that lets attackers access any user’s private Facebook photos and videos or submit posts on their behalf.  Astonishingly, this feat can […]

EU to Launch Bloc-wide Rapid Response Joint Cyber Unit

The task force is quite similar to Washington’s newly proposed ransomware task force, but the EU’s version will coordinate current work between cyber agencies/authorities across the bloc. The European Union (EU) plans to set up a new cybersecurity task force to respond to cyberattacks across the bloc. Called the Joint Cyber Unit, the task force […]

Fake DarkSide gang demands 100 BTC from companies

The original DarkSide ransomware gang had quit its operation last month after the attack on Colonial Pipeline. In May 2021, the DarkSide ransomware group targeted Colonial Pipeline, the largest fuel pipeline in the United States. The attack was so severe that it shut down 5,500 miles of pipeline along the East Coast. As a repercussion, […]

N Korean hackers used VPN flaws to breach S Korean atomic agency

Korea Atomic Energy Research Institute (KAERI), which is a government-owned organization in South Korea, has disclosed that its internal network was targeted by cybercriminals possibly operating from North Korea. The KAERI is a Seoul-funded research institute established in 1959. It is located in Daejeon and is responsible for designing and developing nuclear technologies for fuel […]

ThroughTek Flaw Exposed Millions of IoT Cameras to Spying

The vulnerability exisits in the company’s P2P SDK, a function that allows a client on a desktop or mobile app to access the camera’s audio or video streams via the internet. Nozomi Networks has shared details of a critical IoT supply chain vulnerability that might be exposing millions of internet-connected cameras to espionage. Reportedly, the flaw affects IoT […]

WhatsApp Photo Filter Bug Could Have Exposed Your Data to Remote Attackers

A now-patched high-severity security vulnerability in WhatApp’s image filter feature could have been abused to send a malicious image over the messaging app to read sensitive information from the app’s memory. Tracked as CVE-2020-1910 (CVSS score: 7.8), the flaw concerns an out-of-bounds read/write and stems from applying specific image filters to a rogue image and […]

A Wide Range of Cyber Attacks Leveraging Prometheus TDS Malware Service

Multiple cybercriminal groups are leveraging a malware-as-a-service (MaaS) solution to carry out a wide range of malicious software distribution campaigns that result in the deployment of payloads such as Campo Loader, Hancitor, IcedID, QBot, Buer Loader, and SocGholish against individuals in Belgium as well as government agencies, companies, and corporations in the U.S. Dubbed “Prometheus” […]