Data Breach Today

JUNE 12, 2022

Attacker Use DLL hijacking, DNS tunneling to Evade Post-Compromise Detection A recently identified Chinese hacking group dubbed "Aoqin Dragon" has been found to have targeted government, education and telecommunication organizations in Southeast Asia and Australia since 2013 as part of an ongoing cyberespionage campaign, according to research from (..)

Education 253

Education Government 253

Data Breach Today

APRIL 13, 2022

He replaces founder Jacob Hansen, who had served as CEO since Cobalt's inception in 2013 and will remain with the firm as a board member.

256

256

Krebs on Security

JUNE 22, 2022

Stanx said he was a longtime member of several major forums, including the Russian hacker forum Antichat (since 2005), and the Russian crime forum Exploit (since April 2013). “Something new was required and I decided to leave Omsk and try to live in the States,” Kloster wrote in 2013.

Sales 308

Sales Access Systems administration Marketing 308

Data Breach Today

MARCH 15, 2022

Gary Hibberd, known as "The Professor of Communicating Cyber" at cybersecurity services provider Cyberfort Group, discusses the biggest changes made since 2013 to the ISO 27001 international standard for an information security management system, which helps organizations secure their data assets.

Communications 227

Communications Information Security Cybersecurity Security 227

Data Breach Today

APRIL 15, 2019

darknet site, which succeeded the original Silk Road website after the FBI closed it in 2013, U.K. Authorities Say He Received Commission on Darknet Site's Sales An unemployed British man has been sentenced to more than five years in prison for his role in operating the Silk Road 2.0 authorities say.

Sales 217

Sales IT 217

Data Breach Today

NOVEMBER 5, 2020

Researchers Tracking Movement of Nearly $1 Billion in Cryptocurrency Researchers are tracking the movements of nearly $1 billion in cryptocurrency that recently moved from a mysterious digital wallet, which may have ties to the notorious darknet marketplace Silk Road, which law enforcement shuttered in 2013.

205

205

Krebs on Security

OCTOBER 1, 2019

In December 2013, a Slovenian court sentenced Škorjanc to four years and ten months in prison for creating the malware that powered the ‘ Mariposa ‘ botnet. The “sellers” page on the Darkode cybercrime forum, circa 2013. 5, 2013, federal investigators visited McCormick at his University of Massachusetts dorm room.

Mining 42

Mining Marketing IT 42

Data Breach Today

OCTOBER 1, 2020

Symantec: Palmerworm Targeting Victims in US and Asia Palmerworm, an advanced persistent threat group that's been active since 2013, is waging a cyber espionage campaign using customized malware that's targeting organizations in the U.S. and Asia, according to researchers at Symantec.

200

200

Data Breach Today

JANUARY 22, 2020

Revamped Malware Targets Browsers and Email Clients FTCODE, a ransomware strain that has been active since at least 2013, has recently been revamped to include new features, including the ability to steal credentials and passwords from web browsers and email clients, according to two research reports released this week.

Passwords 200

Passwords Ransomware 200

Data Breach Today

JANUARY 10, 2019

Agreement With 43 States Requires Retailer to Use Encryption, Tokenization Forty-three states have reached a settlement with Neiman Marcus over its 2013 data breach, one of several breaches from that period blamed on in-memory malware. The retailer will pay $1.5 million and must use encryption and tokenization to protect card data.

Retail 190

Retail Encryption Data breaches IT 190

Krebs on Security

JUNE 7, 2022

Our first swatting, in March 2013, resulted in Fairfax County, Va. . “What starts out virtual can get real all too quickly — and when the web is worldwide, so are the consequences.” ” Our family has been victimized by multiple swatting attacks over the past decade.

IT 322

IT 322

Krebs on Security

JUNE 10, 2022

In 2019, AFRINIC fired a top employee after it emerged that in 2013 he quietly commandeered millions of IPs from defunct African entities or from those that were long ago acquired by other firms, and then conspired to sell an estimated $50 million worth of the IPs to marketers based outside Africa.

Marketing 300

Marketing Government Systems administration Sales 300

Krebs on Security

APRIL 30, 2024

In 2013, investigators going through devices seized from Kivimäki found computer code that had been used to crack more than 60,000 web servers using a previously unknown vulnerability in Adobe’s ColdFusion software. Kivimäki was 15 years old at the time.

Passwords 279

Passwords Access Security IT 279

Krebs on Security

FEBRUARY 14, 2020

In May 2013, the U.S. Justice Department seized Liberty Reserve , alleging the virtual currency service acted as a $6 billion financial hub for the cybercrime world.

Government 254

Government Phishing Access IT 254

Krebs on Security

APRIL 16, 2024

As it happens, Rescator’s criminal hacking crew was directly responsible for the 2013 breach at Target and the 2014 hack of Home Depot. According to a 2013 report from the Treasury Inspector General’s office, the IRS issued nearly $4 billion in bogus tax refunds in 2012, and more than $5.8 billion in 2013.

Sales 271

Sales Retail Insurance IT 271

Krebs on Security

JUNE 29, 2023

Kislitsin also was indicted in Nevada in 2013, but the Nevada indictment does not name his alleged victim(s) in that case. ”] Kislitsin was hired by Group-IB in January 2013, nearly six months after the Formspring hack. ”

Cybersecurity 287

Cybersecurity Passwords Government Security 287

Krebs on Security

OCTOBER 26, 2021

Indeed, some of history’s largest cyberheists involved point-of-sale malware, including the 2008 breach at Heartland Payment Systems that exposed 100 million payment cards, and the 2013-2014 string of breaches at Target , Home Depot and elsewhere that led to the theft of roughly another 100 million cards.

Sales 72

Sales Retail Computer and Electronics Risk 72

The Last Watchdog

JUNE 21, 2020

The epidemic went truly mainstream with the release of CryptoLocker back in 2013, and it has since transformed into a major dark web economy spawning the likes of Sodinokibi, Ryuk, and Maze lineages that are targeting the enterprise on a huge scale in 2020. FBI spoofs 2012 – 2013. File encryption 2013 – 2015.

Ransomware 243

Ransomware Encryption Privacy Security awareness 243

Data Breach Today

OCTOBER 3, 2019

Unit 42 Researchers Describe Malware Attacks That May Have Ties to China Threat actors that may have connections to China has been using a variety of malware in a series of information-gathering espionage campaigns across Southeast Asia since at least 2013, according to researchers at Palo Alto Networks' Unit 42 division.

168

168

Schneier on Security

JUNE 4, 2024

Grand and Bruno spent months reverse engineering the version of the RoboForm program that they thought Michael had used in 2013 and found that the pseudo-random number generator used to generate passwords in that version­and subsequent versions until 2015­did indeed have a significant flaw that made the random number generator not so random.

Passwords 128

Passwords IT Security 128

Krebs on Security

FEBRUARY 5, 2023

In 2013, Kurittu worked on an investigation involving Kivimäki’s use of the Zbot botnet, among other activities Kivimäki engaged in as a member of the hacker group Hack the Planet (HTP).” The DDoS-for-hire service allegedly operated by Kivimäki in 2012.

ROT 259

ROT Security Access IT 259

Krebs on Security

AUGUST 6, 2020

In 2013, KrebsOnSecurity broke the news that the U.S. Also in 2013, KrebsOnSecurity broke the news that ssndob[.]ms In addition, he said, it seems clear that the fraudsters are recycling stolen identities to file phony unemployment insurance claims in multiple states. Dun & Bradstreet , and Kroll Background America Inc.

Insurance 352

Insurance Communications Authentication Access 352

Krebs on Security

MARCH 2, 2021

The patches released today fix security problems in Microsoft Exchange Server 2013 , 2016 and 2019. The software giant typically releases security updates on the second Tuesday of each month, but it occasionally deviates from that schedule when addressing active attacks that target newly identified and serious vulnerabilities in its products.

Education 326

Education Access Authentication Communications 326

Krebs on Security

SEPTEMBER 30, 2024

Islam also pleaded guilty to reporting dozens of phony bomb threats and fake hostage situations at the homes of celebrities and public officials (Islam participated in a swatting attack against this author in 2013 ). Troy Woody Jr. left) and Mir Islam, are currently in prison in the Philippines for murder. In December 2022, Troy Woody Jr.

Government 290

Government Artificial Intelligence Personal data Phishing 290

Krebs on Security

JULY 28, 2022

Launched in 2013, Microleaves is a service that allows customers to route their Internet traffic through PCs in virtually any country or city around the globe. The very first discussion thread started by the new user Microleaves on the forum BlackHatWorld in 2013 sought forum members who could help test and grow the proxy network.

Computer and Electronics 249

Computer and Electronics Marketing Sales Blockchain 249

Krebs on Security

JULY 17, 2019

The above commercial is vaguely reminiscent of the slick ads produced for and promoted by convicted Ukrainian credit card fraudster Vladislav “BadB” Horohorin , who was sentenced in 2013 to serve 88 months in prison for his role in the theft of more than $9 million from RBS Worldpay, an Atlanta-based credit card processor. (In

Cybersecurity 204

Cybersecurity Security IT 204

Security Affairs

SEPTEMBER 14, 2020

The project was launched in September 2019 and as of August 2020, the experts collected 680 records of ransomware attacks that took place since November 2013. now has 687 records assembled from publicly disclosed incidents between November 2013 and August 2020.” ” reads the project description.

Ransomware 144

Ransomware Data collection Education Security 144

Krebs on Security

MARCH 8, 2021

2, Microsoft patched four flaws in Exchange Server 2013 through 2019. . “We never got a ‘real’ confirmation of the zero-day before the patch was released,” said Dubex’s Chief Technology Officer Jacob Herbst. How long have the vulnerabilities exploited here been around?

Security 362

Security Access IT 362

Krebs on Security

SEPTEMBER 16, 2020

In February 2020, KrebsOnSecurity wrote about being contacted by an Internal Revenue Service investigator seeking to return funds seized seven years earlier as part of the governments 2013 seizure of Liberty Reserve , a virtual currency service that acted as a $6 billion hub for the cybercrime world.

Phishing 356

Phishing Blockchain Marketing Government 356

Krebs on Security

DECEMBER 8, 2020

These vulnerabilities affect Microsoft Excel 2013 through 2019, Microsoft 365 32 and 64 bit versions, Microsoft Office 2019 32 and 64 bit versions, and Microsoft Excel for Mac 2019.” “The vulnerabilities, if exploited, would allow an attacker to execute arbitrary code on a victim’s machine.

Security 312

Security Risk IT 312

Krebs on Security

FEBRUARY 5, 2020

Mathew Marulla began leasing a Ford Focus electric vehicle in 2013, but turned the car back in to Ford at the end of his lease in 2016. Here’s the story of one former electric vehicle owner who discovered he could still gain remote, online access to his old automobile years after his lease ended.

Personal data 309

Personal data Access Marketing Privacy 309

Security Affairs

JUNE 20, 2022

The vulnerability, tracked as CVE-2022-22620 , was fixed for the first time in 2013, but in 2016 experts discovered a way to bypass the fix. CVE-2022-22620 was initially fixed in 2013, reintroduced in 2016, and then disclosed as exploited in-the-wild in 2022.” Its fix was just regressed in 2016 during refactoring.

Security 145

Security IT Cybersecurity Data breaches 145

Security Affairs

JANUARY 31, 2024

It was operating between 2008 and 2013. In 2013, the Motion Picture Association of America (MPAA) shut down the website due to concerns related to copyright infringement. According to German media , one of the two operators was also involved in the operations of the site mega-downloads.net.

IT 135

IT Security Information Security 135

Krebs on Security

APRIL 28, 2021

In 2013, KrebsOnSecurity broke the news about an identity theft service in the underground that programmatically pulled sensitive consumer credit data directly from a subsidiary of Experian. Geico said the data was used by thieves involved in fraudulently applying for unemployment insurance benefits.

Insurance 363

Insurance Access Authentication Security 363

KnowBe4

SEPTEMBER 16, 2024

Business email compromise (BEC) attacks have caused more than $55 billion in losses between 2013 and 2023, according to an advisory from the U.S. Federal Bureau of Investigation (FBI).

Security 114

Security 114