Security News

FIN7 Cybercrime Group Targeting U.S. Auto Industry with Carbanak Backdoor
2024-04-18 13:58

The infamous cybercrime syndicate known as FIN7 has been linked to a spear-phishing campaign targeting the U.S. automotive industry to deliver a known backdoor called Carbanak (aka Anunak). "FIN7...

WEF Cybercrime Atlas: Researchers are creating new insights to fight cybercrime
2024-04-10 04:30

Hosting the Cybercrime Atlas in the World Economic Forum creates the space to experiment with how we enable disruption collaborations - giving the Cybercrime Atlas participants access to the expertise and ideas of the Forums' Partnership Against Cybercrime community. This was a turning point as it answered one of the first questions posed by the Cybercrime Atlas community: can we create new and actionable intelligence relying on open-source information and, by working collectively, can we build insights that match or exceed those created by the community members working in isolation? The answer to both of these questions is a resounding "Yes".

76% of consumers don’t see themselves as cybercrime targets
2024-04-04 03:00

"The sudden rise of AI adoption by cybercriminals has been a game changer and poses an unprecedented threat to consumers' digital safety. With a surge in AI-assisted texting scams, fraud attempts, and expertly crafted phishing emails, consumers must remain vigilant to understand, prioritize, and apply cybersecurity best practices," said Ciprian Istrate, SVP of operations at Bitdefender Consumer Solutions Group. The top-ranked concern for consumers is cybercriminals accessing their finances at 48%, followed by identity protection at 17% with 78% of all respondents stating they use a mobile device to conduct sensitive transactions such as banking, accessing investment accounts, managing crypto wallets or for healthcare.

India rescues 250 citizens enslaved by Cambodian cybercrime gang
2024-04-02 01:04

The Indian government says it rescued and repatriated 250 citizens who sought jobs in Cambodia, only to be forced into conducting cybercrime once they arrived. India Today reports that there are at least 5,000 more held captive in Cambodia and forced to launch scams that have generated nearly $60,000,000 in the last six months.

Indian Government Rescues 250 Citizens Forced into Cybercrime in Cambodia
2024-04-01 13:51

The Indian government said it has rescued and repatriated about 250 citizens in Cambodia who were held captive and coerced into running cyber scams. The Indian nationals "were lured with...

Escalating malware tactics drive global cybercrime epidemic
2024-04-01 03:30

The average malware detections rose 80% from the previous quarter, illustrating a substantial volume of malware threats arriving at the network perimeter. Geographically, most of the increased malware instances affected the Americas and Asia-Pacific.

$700 cybercrime software turns Raspberry Pi into an evasive fraud tool
2024-03-26 20:40

Cybercriminals are selling custom Raspberry Pi software called 'GEOBOX' on Telegram, which allows inexperienced hackers to convert the mini-computers into anonymous cyberattack tools. GEOBOX is sold on Telegram channels for a subscription of $80 per month or $700 for a lifetime license, payable in cryptocurrency.

Serial extortionist of medical facilities pleads guilty to cybercrime charges
2024-03-20 14:33

A cyberattacker and extortionist of a medical center has pleaded guilty to federal computer fraud and abuse charges in the US. Robert Purbeck, adopting the aliases "Lifelock" and "Studmaster" during his time as a cybercriminal, according to the Department of Justice, stole personal data belonging to more than 132,000 people. In one incident described by the DoJ following his 2021 indictment [PDF], Purbeck was said to have targeted a Florida orthodontist and threatened to sell his child's personal information unless they paid a ransom.

International effort to disrupt cybercrime moves into operational phase
2024-03-14 15:00

The Cybercrime Atlas, a massive undertaking that aims to disrupt cybercriminals across the globe, enters its operational phase in 2024, two years after organizers laid the groundwork at the RSA Conference. "One of the main questions was, is it actually possible, with companies stepping in to invest resources in this type of research? And it became very clear that yes, companies can work together, they are very eager to create this type of knowledge base and to be part of such processes," Tal Goldstein, the WEF Centre for Cybersecurity's head of strategy, told The Register.

RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate Espionage
2024-03-14 10:23

The Russian-speaking cybercrime group called RedCurl is leveraging a legitimate Microsoft Windows component called the Program Compatibility Assistant (PCA) to execute malicious commands. “The...