Security News

Decryptor Released for Ransomware That Allegedly Helped Cybercriminals Make Millions
2021-01-11 18:47

Bitdefender on Monday announced the availability of a free tool that organizations can use to recover files encrypted by DarkSide, a piece of ransomware that cybercriminals claim helped them make millions. DarkSide operators have been making money not only by encrypting important files on compromised systems, but also by stealing valuable information to pressure victims into paying up.

Cybercriminals Ramp Up Exploits Against Serious Zyxel Flaw
2021-01-06 16:40

Security experts are warning hackers are ramping up attempts to exploit a high-severity vulnerability that may still reside in over 100,000 Zyxel Communications products. Zyxel, a Taiwanese manufacturer of networking devices, on Dec. 23 warned of the flaw in its firmware and released patches to address the issue.

Cybercriminals use psychology--cybersecurity pros should, too
2021-01-05 18:38

Isn't it time we stop getting psyched by the bad guys? Here are five steps cybersecurity pros can take now. How human behavior impacts cybersecurity is a hot topic.

How to address security fatigue and stop cybercriminals from winning
2020-12-22 22:54

"The seemingly endless ocean of threats can paralyze those who make decisions for an organization. They sense an ominous feeling of blood in the water yet lack clarity about how to stop the sharks from feeding." Not unlike the fatigue being experienced due to COVID-19, users are flooded continuously with news about this or that data breach and how their sensitive information was stolen.

VPN Service Used by Cybercriminals Disrupted in Global Law Enforcement Operation
2020-12-22 15:35

A VPN service used by many cybercriminals has been disrupted in a global operation that involved law enforcement agencies in Germany, the United States, the Netherlands, France and Switzerland. Europol reported on Tuesday that the operation targeted a service called Safe-Inet, and the U.S. Justice Department clarified that three associated domains have been seized, namely insorg.org, safe-inet.com and safe-inet.net.

Cybercriminals' Favorite Bulletproof VPN Service Shuts Down In Global Action
2020-12-22 08:57

Law enforcement agencies from the US, Germany, Netherlands, Switzerland, France, along with Europol's European Cybercrime Centre, announced today the coordinated takedown of Safe-Inet, a popular virtual private network service that was used to facilitate criminal activity. The service, which comes with support for Russian and English languages and has been active for over a decade, offered "Bulletproof hosting services" to website visitors, often at a steep price to the criminal underworld.

Beware of cybercriminals: Keep your guard up during the last-minute shopping frenzy
2020-12-18 18:21

TechRepublic spoke with email security firm Tessian's CEO Tim Sadler, who tells us how to avoid being phished or scammed during the search for perfect presents. Because of the flurry of e-commerce activity, email inboxes are filled with offers and notifications from retailers.

How using tactical literacy makes it harder for cybercriminals to fool end users
2020-12-17 21:00

End users just want to do their job, not become cybersecurity experts. To eliminate the glut of information, Finney, in the Forbes article Tactical Literacy: How We Can Overcome Ignorance In Cybersecurity, suggests we embrace "Tactical literacy." As to what that means, let's start by defining tactical and literacy with regards to cybersecurity.

Cybercriminals Steal Millions by Spoofing Thousands of Mobile Devices
2020-12-16 14:30

A group of cybercriminals used mobile emulators to spoof thousands of mobile devices , which enabled them to steal millions of dollars within days. Targeting financial institutions in Europe and the United States, the mobile banking fraud operation relied on over 20 emulators to spoof more than 16,000 mobile devices and access compromised accounts.

How cybercriminals are now exploiting COVID-19 vaccines
2020-12-11 16:30

Vaccine-related phishing emails and domains are popping up, while criminals are selling phony vaccines via the Dark Web, says Check Point. In another campaign, the email touts the subject line of "Pfizer's Covid vaccine: 11 things you need to know" and includes an executable file named "Covid-19 vaccine brief summary." Clicking on this file triggers the nasty malware called Agent Tesla, a Remote Access Trojan that acts as a keylogger and infostealer.