Infosecurity News

Researchers Discover Chaos, a Golang Multipurpose Botnet
The tool was written in Chinese and seemed China-based due to its C2 infrastructure

Government, Union-Themed Lures Used to Deliver Cobalt Strike Payloads
Cisco Talos discovered the malicious campaign in August 2022

LeakBase: India Swachhata Platform Breached, 16 Million User PII Records Exposed
Data samples contain email addresses, hashed passwords and user IDs, other PII

Mobile, Cloud and Email Are Top Threat Vectors For 2023
PwC study finds organizations have a long way to go on security

Crypto-Thieves Cost Victims 53 Times What They Make
Report reveals surging cloud bills for crypto-jacking victims

IRS Warns of "Industrial Scale" Smishing Surge
Tax agency says automated tools are to blame

WatchGuard Report: Malware Decreases but Encrypted Malware Up in Q2 2022
This could reflect threat actors shifting their tactics to rely on more elusive malware

Hackers Use Telegram and Signal to Assist Protestors in Iran
Key activities are data leaking and selling, including officials' phone numbers and emails

Hacker Breaches Fast Company Apple News Account, Sends Racist Messages
The breach seems related to the hack of Fast Company's website on Sunday afternoon

ICO Reprimands UK Organizations for GDPR Failings
Subject Access Requests experiencing significant delays

Cyber-Threats Top Business Leaders' Biggest Concerns
Many are operating under a false sense of security

Meta Takes Down Russian "Smash-and-Grab" Disinformation Campaign
Chinese network targeting US mid-terms also closed down

Alleged Optus Hacker Apologizes, Deletes Customers' Exposed Data
They claimed responsibility for the attack and said they had deleted the stolen data

Lazarus Group Targets MacOS Users Seeking Crypto Jobs
The new attacks would be a new instance of a campaign spotted by ESET and Malwarebytes in August

Microsoft Sway Pages Weaponized to Perform Phishing and Malware Delivery
Most phishing attack vectors observed involved clicking a direct link to a phishing page

Global Firms Deal with 51 Security Incidents Each Day
Siloed systems appear to be holding back teams

TikTok Facing £27m UK Regulatory Fine
Social network failed to protect kids, says ICO

Ukraine Predicts "Massive" Russian Cyber Assault
Kremlin set to intensify attacks on critical infrastructure

Fitbit Increases Security Requirements, Mandates Google Login From 2023
Users will have the option to log in using their Fitbit account for as long as it is supported

ReasonLabs Unveils Multimillion Dollar Global Credit Card Scam
The victims of the plot were users of Mastercard, Visa, and American Express, among others



