article thumbnail

National Safety Council data leak: Credentials of NASA, Tesla, DoJ, Verizon, and 2K others leaked by workplace safety organization

Security Affairs

User Table Schema | Source: Cybernews As a huge number of emails were leaked, platform users could potentially experience a surge in spam and phishing emails. It’s advisable for them to externally verify the information contained in emails and exercise caution when clicking links or opening attachments. Are the leaked passwords crackable?

Passwords 134
article thumbnail

Balikbayan Foxes group spoofs Philippine gov to spread RATs

Security Affairs

The group focuses on Shipping/Logistics, Manufacturing, Business Services, Pharmaceutical, and Energy entities, among others. The threat actors carried out spear-phishing attacks using spoofed email addresses. Victims of the group are located in North America, Europe, and Southeast Asia. .

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Hackers target German Task Force for COVID-19 PPE procurement

Security Affairs

Researchers from the IBM X-Force Incident Response and Intelligence Services (IRIS) reported that attackers launched a COVID-19-themed spear-phishing campaign to steal the user credentials of over 100 senior executives. The phishing messages originating from a Russia-based IP address 178[.]159[.]36[.]183, Pierluigi Paganini.

article thumbnail

Security Affairs newsletter Round 461 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

Private Plane Owners’ Data Linked to LA Intl. Private Plane Owners’ Data Linked to LA Intl.

article thumbnail

Illumio Unveils CloudSecure for Zero Trust Segmentation in the Cloud

eSecurity Planet

“They find a way in, whether it’s phishing or something else – but then to find all the valuable assets, they have to use lateral movements in those environments,” Kirner said. “And we stop that lateral movement.” ” One way to visualize that process, Kirner said, is to picture a submarine.

Cloud 131
article thumbnail

US DoJ indicts Chinese hackers over state-sponsored cyber espionage

Security Affairs

In July 2018, FireEye observed a series of new attacks of the group leveraging spear-phishing emails using weaponized Word documents that attempt to deliver the UPPERCUT backdoor, also tracked as ANEL. Department of Energy’s Lawrence Berkeley National Laboratory. ” continues the DoJ’s Press release.

article thumbnail

List of data breaches and cyber attacks in May 2021 – 116 million records breached

IT Governance

Spargo & Associates Inc. unknown) Criminal hackers attack Ehrmann, demand millions in ransom (unknown) Criminal hackers attack Energy Hamburg Radio (unknown) Chemical distribution company Brenntag paid a $4.4