Cyber attackers hacked into the computer system that controls servers and internet access at the prison in Bernalillo County, New Mexico last week.
For a short time, the jail’s automatic door system was knocked out, meaning staff at the Metropolitan Detention Center (MDC) had to manually unlock each cell when detainees needed to get out for exercise or recreation.
Ransomware attacks, where a hacker takes data from the victim or takes control of a computer system until a ransom is paid, are becoming increasingly common as more official and commercial business is conducted online.
The United States last year offered a $10 million reward for help finding the leaders of the “Darkside” gang, a Russia-based outfit Washington blames for an assault that shut down one of the country’s largest oil pipelines.
More than half a billion dollars in ransomware-related payments were reported to US authorities in the first half of 2021 alone, though the true cost is thought to be considerably higher.
At the time of this writing, it is unclear if the outage is the result of a technical issue or it is the result of a cyber attack against the infrastructure of the social network giant. It’s October, the cyber-security awareness month.
Neither WhatsApp or Facebook have made it official that the outage was caused by a cyber attack. Thus, despite much speculation that the services were hacked, Facebook issued a public statement a couple of hours ago saying that the blackout was caused by a technical glitch and not by any state-funded actors.
But some twitter users who belong to the tech world confirm the reports and said that the chances for the app being targeted by hackers are plenty. Although many are happy that these platforms are down. Like Covid forced people to stay home and be close to family, outage of these platforms gives us time to be social in person instead of remote!!
During the current Corona crisis, the people are are at home more often. Adding to that, employees are working from home more than ever before. This presents itself as great breeding ground for cyber criminals.
Phishing attacks are setup in a way to send the victims to websites with fake information about the Coronavirus. Often times, these sites use the user’s system resources to earn cryptocurrency like Bitcoin – All without the approval of the user .
Ransomware :
Ransomware encrypts files on computers and ask the user for a ransom in return of the original files. The rise of a cryptocurrency like Bitcoin surely helped ransomware attacks, as it allows the malicious actor to be more anonymous. In 2021 and onwards, it’s possible to see more sophisticated attacks going on.
Emerging technologies such as cloud computing, Artificial Intelligence (AI), automation, and the Internet of Things (IoT) are creating unprecedented opportunities for businesses to unlock new value.
The shortage of skilled security personnel, complex compliance requirements, incessantly evolution of cyberattacks, and perilous insider threats continue to be the most prominent ongoing cybersecurity challenges
The rush to cloud-everything will cause many security holes, challenges, misconfigurations and outages.
More growth in the security industry. Our numbers of new products and new year mergers and acquisitions will cause network complexity issues and integration problems and overwhelm cyber teams.
Privacy will be a mess, with user revolts, new laws, confusion and self-regulation failing.
Identity and multi-factor authentication (MFA) will take center stage as passwords (finally) start to go away in a tipping-point year.
Tons of high-profile Internet of Thing (IoT) hacks, some which will make headline news.
Ransomware will get worse and worse — with new twists, data stealing prior to encryption, malware packaging with other threats and very specific targeting of organizations.
Lots of 5G vulnerabilities will become headline news as the technology grows.
Advanced Persistent Threats (APT) attacks will be widely available from criminal networks. The dark web will allow criminals to buy access into more sensitive corporate networks.
Mobile devices, including smartphones, will be attacked in new ways, including app stores.
Cryptocurrencies will play new roles, with criminals switching often for hiding advantages.
Named xHelper, this malware was first spotted back in March but slowly expanded to infect more than 32,000 devices by August (per Malwarebytes), eventually reaching a total of 45,000 infections this month (per Symantec).
The source of these infections is “web redirects” that send users to web pages hosting Android apps. These sites instruct users on how to side-load unofficial Android apps from outside the Play Store. Code hidden in these apps downloads the xHelper trojan. The trojan has shown intrusive popup ads and notification spam. The ads and notifications redirect users to the Play Store, where victims are asked to install other apps — a means through which the xHelper gang is making money from pay-per-install commissions.
Furthermore, even if users spot the xHelper service in the Android operating system’s Apps section, removing it doesn’t work, as the trojan reinstalls itself every time, even after users perform a factory reset of the entire device.
How xHelper survives factory resets is still a mystery
Adware is a type of malware that hides on your device so it can serve you unwanted adverts, including scam ads. On top of this, adware-containing apps can drain battery resources, increase network traffic and gather your personal information. Here are the 21 apps affected by the adware.It goes without saying that if you have any of these installed, you should delete them now. They have been removed from Google playstore.
Original release date: October 29, 2019
Microsoft publicly released information revealing an uptick in cyberattacks globally targeting anti-doping authorities and sporting organizations. The Microsoft Threat Intelligence Center (MSTIC) routinely tracks malicious activity originating from the Russian advanced persistent threat (APT) group 28, also known as Fancy Bear, STRONTIUM, Swallowtail, Sofacy, Sednit, and Zebrocy. According to Microsoft, APT28 is targeting sporting and anti-doping organizations using spearphishing, password spraying (a brute force technique), fake Microsoft internet domains, as well as open-source and custom malware to exploit internet-connected devices.
To protect against similar attacks, Microsoft recommends:
• Enabling two-factor authentication on all business and personal email accounts,
• Learning how to spot phishing schemes and protect yourself from them, and
• Enabling security alerts about links and files from suspicious websites.
Hackers can manipulate media files transferred by users through the WhatsApp and Telegram messaging applications due to the way the Android operating system allows apps to access files in external storage. To minimize cyber risks it is essential that every user understand that they are both an asset and a potential security liability.
The attack works against WhatsApp in its default configuration and against Telegram if the user has enabled the “Save to gallery” option. Android Q will introduce a privacy feature called Scoped Storage, which changes how applications can access files on the device’s external storage.