3.5 million user logins for the MobiFriends dating app are being offered for free on a popular dark web hackers forum. This post appeared first on Naked Security Blog by…
Browsing Categoryspearphishing
309 million Facebook users’ phone numbers (and more) found online
First, 267m records were exposed & sold for 0.0002 cents each on the Dark Web. It was taken down but got reposted with yet more records. This post appeared first…
Google sent ~40K warnings to targets of state-backed attackers in 2019
Google has seen a rising number of attackers impersonating news outlets and journalists to spread fake news among other reporters. This post appeared first on Naked Security Blog by Sophos…
Ransomware attack forces 2-day shutdown of natural gas pipeline
The attacker(s) infected both IT and operational networks with an unspecified ransomware strain, though the facility never lost control. This post appeared first on Naked Security Blog by Sophos Author:…
North Carolina county falls for BEC scam, to the tune of $1,728,083
The county could only claw back some of the $2,504,601 it paid to a scammer posing as a contractor working on building a new high school. This post appeared first…
Latest Spam Campaigns from TA505 Now Using New Malware Tools Gelup and FlowerPippi
By: Hara Hiroaki and Loseway Lu (Threats Analysts) Since our last research on TA505, we have observed new activity from the group that involves campaigns targeting different countries over the…
Most hackers for hire are scammers, research shows
Google & UC San Diego researchers found that only 5 of 27 hacker-for-hire services actually launched attacks against their targets. This post appeared first on Naked Security Blog by Sophos…
Amnesty sues maker of Pegasus, the spyware let in by WhatsApp zero day
Amnesty International, which was sent the Pegasus spyware via a WhatsApp message, is seeking to stop NSO Group’s “web of surveillance.” This post appeared first on Naked Security Blog by…
Two people indicted for massive Anthem health data breach
They’re part of a gang that spearphished millions of records out of the health insurer and other businesses, the DOJ says. This post appeared first on Naked Security Blog by…
Microsoft slaps down 99 APT35/Charming Kitten domains
Court order in hand, Microsoft seized control of the hacker group’s (which it calls Phosphorous) phishing sites. This post appeared first on Naked Security Blog by Sophos Author: Lisa Vaas