Security News > 2022 > February

Iranian State Broadcaster Clobbered by ‘Clumsy, Buggy’ Code
2022-02-18 13:46

Footage of opposition leaders calling for the assassination of Iran's Supreme Leader ran on several of the nation's state-run TV channels in late January after a state-sponsored cyber-attack on Iranian state broadcaster IRIB. The incident - one of a series of politically motivated attacks in Iran that have occurred in the last year - included the use of a wiper that potentially ties it to a previous high-profile attack on Iran's national transportation networks in July, according to researchers from Check Point Research. Though the earlier attacks have been attributed to Iran state-sponsored actor Indra, researchers believe a copycat actor was behind the IRIB attack based on the malware and tools used in the attack, they said in a report published Friday.

Microsoft offers defense against 'ice phishing' crypto scammers
2022-02-18 11:17

Microsoft has some advice on how to defend against "Ice phishing" and other novel attacks that aim to empty cryptocurrency wallets, for those not already abstaining. Ice phishing, as Microsoft describes it, is a clickjacking, or a user interface redress attack, that "[tricks] a user into signing a transaction that delegates approval of the user's tokens to the attacker.

Popular e-cigarette store was compromised to steal credit cards
2022-02-18 10:14

BleepingComputer has confirmed Element Vape, a prominent online seller of e-cigarettes and vaping kits was serving a credit card skimmer on its live site, likely after getting hacked. With its presence across the U.S. and Canada, Element Vape sells e-cigarettes, vaping devices, e-liquids, and CBD products in both retail outlets and on their online store.

Warning: Popular e-cigarette store hacked to steal credit cards
2022-02-18 10:14

BleepingComputer has confirmed Element Vape, a prominent online seller of e-cigarettes and vaping kits is serving a credit card skimmer on its live site, likely after getting hacked. With its presence across the U.S. and Canada, Element Vape sells e-cigarettes, vaping devices, e-liquids, and CBD products in both retail outlets and on their online store.

Stop vaping: Major e-cigarette store hacked to steal credit cards
2022-02-18 10:14

BleepingComputer has confirmed Element Vape, a prominent online seller of e-cigarettes and vaping kits is serving a credit card skimmer on its live site, likely after getting hacked. With its presence across the U.S. and Canada, Element Vape sells e-cigarettes, vaping devices, e-liquids, and CBD products in both retail outlets and on their online store.

Google Drive flags macOS '.DS_Store' files for copyright violation
2022-02-18 09:10

DS Store' files generated by macOS file systems as a violation of its copyright infringement policy. DS Store" file on their Google Drive being flagged for violating Google's 'Copyright Infringement' policy.

When you’re fending off cyber-attackers, it is possible to be just too tooled up
2022-02-18 07:30

Organizations face more cyber-threats than ever before, leading many security teams to implement increasing numbers of tools and controls in response. The problem is this means your security dashboard can soon start looking more like a smorgasbord.

Ransomware’s savage reign continues as attacks increase 105%
2022-02-18 06:30

SonicWall released a report which details a sustained meteoric rise in ransomware with 623.3 million attacks globally. Researchers diligently tracked the dramatic rise in ransomware, recording an astounding 318.6 million more ransomware attacks than 2020, a 105% increase.

Even when warned, businesses ignore critical vulnerabilities and hope for the best
2022-02-18 06:00

When tested, 28% of businesses had critical vulnerabilities - vulnerabilities that could be immediately exploited by cyber attacks. A quarter of businesses neglected to fix those critical vulnerabilities, even though penetration testing had highlighted them to the business after a retest was completed.

Software supply chain security still a pain point
2022-02-18 05:30

ActiveState announced the results of its survey, providing insights into the security challenges of the software industry's open source supply chain, which includes the security of open source components, as well as the security and integrity of key software development processes. The results point to the fact that software supply chain security is still in its infancy.