Infosecurity News

UK Cops Lead Action Against Fraud Site that Made £100m+
Over 100 admins and users of iSpoof site arrested

Russian DDoS Briefly Downs European Parliament Site
Parliament had declared Russia a state-sponsor of terrorism

Panaseer Launches Guidance on Security Controls Ahead of EU's New Legislation
The cybersecurity monitoring firm offers 18 recommendations on security controls to help organizations anticipate tougher cybersecurity regulations

CISA Updates Guidelines to Increase Resilience of Infrastructure Planning
They expand the framework's scope by adding new resources and tools to support SLTT partners

Meta Removes Pro-US Accounts in Middle East and Central Asia
The operation relied on many internet services, including Telegram, Twitter, YouTube and others

Qakbot Infections Linked to Black Basta Ransomware Campaign
Threat actors obtained admin access in two hours and then deployed ransomware in under 12 hours

Yanluowang Ransomware's Russian Links Laid Bare
Another dump of chat records provides insight into threat group

UK Privacy Tsar Defends Controversial Enforcement Strategy
Information commissioner wants to avoid "money-go-round" of government fines

Dozens of Russian Groups Steal 50 Million User Passwords
Info-stealing malware infected nearly one million devices in 2022

Ducktail Hacker Group Evolves, Targets Facebook Business Accounts
Activity observed since early September featured new avenues to spear-phish targets

US Takes Down Domains Used in 'Pig Butchering' Cryptocurrency Scheme
The US Attorney's Office for the Eastern District of Virginia made the announcement on Monday

Firms Spend $1197 Per Employee Yearly to Address Cyber-Attacks
The data excludes compliance fines, ransomware costs and losses from non-operational processes

Estonian Duo Arrested for Masterminding $575m Ponzi Scheme
US authorities unseal 18-count indictment

Experts Warn Threat Actors May Abuse Red Team Tool Nighthawk
C2 framework could be the next Cobalt Strike, says Proofpoint

Credential Stuffers Steal $300K from DraftKings Customers
Complaints about poor customer service flood Twitter

Google Wins Legal Battle Against Glupteba Botnet
The tech giant said the court's ruling against the botnet operators set a crucial legal precedent

Thousands of Algolia API Keys Could Expose Users' Data
The majority were from shopping, education, lifestyle, business and medical firms

Luna Moth Phishing Extortion Campaign Targets Businesses in Multiple Sectors
It leverages extortion without encryption and has cost victims hundreds of thousands of dollars

Private Equity Exposed by Cyber-Hygiene Shortcomings
Fifth of portfolio companies feature "zero tolerance findings"

New AXLocker Ransomware Steals Victims' Discord Tokens
Researchers also discover two additional new variants



