Latest Cybersecurity News and Articles

---

Inferno Malware Masqueraded as Coinbase, Drained $87 Million from 137,000 Victims

The operators behind the now-defunct Inferno Drainer created more than 16,000 unique malicious domains over a span of one year between 2022 and 2023. The scheme “leveraged high-quality phishing pages to lure unsuspecting users into connecting their cryptocurrency wallets with the attackers’ infrastructure that spoofed Web3 protocols to trick victims into authorizing

---

Tura Scandinavia AB Encounters Another Cyberattack Following Intrusion in December

Tura Scandinavia AB has allegedly been targeted by the LockBit ransomware group, with claims of unauthorized access to the company's network and the sale of login credentials on the dark web.

---

Hackers Weaponize Windows Flaw to Deploy Crypto-Siphoning Phemedrone Stealer

Threat actors have been observed leveraging a now-patched security flaw in Microsoft Windows to deploy an open-source information stealer called Phemedrone Stealer. “Phemedrone targets web browsers and data from cryptocurrency wallets and messaging apps such as Telegram, Steam, and Discord,” Trend Micro researchers Peter Girnus, Aliakbar Zahravi, and Simon Zuckerbraun said. “It also

---

Opera MyFlaw Bug Could Let Hackers Run Any File on Your Mac or Windows

The vulnerability was addressed through updates on November 22, 2023, after responsible disclosure, and was related to a long-forgotten version of the My Flow landing page.

---

There were over 4,000 ransomware victims in 2023

According to a recent report, there 2343 4,368 ransomware victims in 2023, a 55% surge from 2022. Business services suffered the most attacks.

---

NoName Targets Websites of Financial Services, Transportation, and Telecom Firms in Lithuania

Several prominent organizations in Lithuania, including Compensa Vienna Insurance Group, If Insurance, Lithuanian Roads Association, AD REM, INIT, and Balticum, have been targeted by the NoName ransomware group.

---

HelloFresh Fined $178K After Sending 80 Million Spam Messages

The Information Commissioner's Office found that HelloFresh breached regulations by not informing customers about the extent of their data usage for marketing purposes and continuing to send unwanted messages even after customers requested to stop.

---

Anonymous Collective Launches Cyberattack on Bahrain Over Yemen Airstrikes

The Anonymous Collective has launched a cyberattack on Bahrain in retaliation for its support of US and UK airstrikes on Yemen. Several Bahraini media outlets, including Akhbar al-Khaleej and Gulf Daily News, have been affected by the cyberattack.

---

Update: British Library Catalogue Back Online After Ransomware Attack

The recovery process is ongoing and will involve a full technical rebuild, with the Library working closely with the UK government to ensure a secure and financially sustainable recovery.

---

3 Ransomware Group Newcomers to Watch in 2024

The ransomware industry surged in 2023 as it saw an alarming 55.5% increase in victims worldwide, reaching a staggering 4,368 cases.  Figure 1: Year over year victims per quarter The rollercoaster ride from explosive growth in 2021 to a momentary dip in 2022 was just a teaser—2023 roared back with the same fervor as 2021, propelling existing groups and ushering in a wave of formidable

---

Opera MyFlaw Bug Could Let Hackers Run ANY File on Your Mac or Windows

Cybersecurity researchers have disclosed a security flaw in the Opera web browser for Microsoft Windows and Apple macOS that could be exploited to execute any file on the underlying operating system. The remote code execution vulnerability has been codenamed MyFlaw by the Guardio Labs research team owing to the fact that it takes advantage of a feature called My Flow that makes it

---

Azorult Malware Comes to the Fore in New Dark Web Campaign

The Azorult malware, known for stealing sensitive data, has resurfaced with a sophisticated approach. It is distributed through malicious PDF files that contain a shortcut file.

---

Report: DDoS Attacks on the Environmental Services Industry Surge by 61,839% in 2023

The environmental services industry experienced an alarming surge in HTTP-based DDoS attacks during COP 28, highlighting the increasing intersection between environmental issues and cyber security.

---

Microsoft to Keep All European Cloud Customers’ Personal Data Within EU

Microsoft has announced that it will store all customer data in the European Union (EU) rather than transferring it abroad. This move is aimed at complying with varying privacy regulations across jurisdictions.

---

Human Error and Insiders Expose Millions in UK Law Firm Data Breaches

Insider actions and human error account for the majority of data breaches in UK law firms, emphasizing the need for robust cybersecurity measures to protect sensitive information.

---

China Warns of Apple AirDrop De-Anonymization Flaw

The Beijing Wangshendongjian Judicial Appraisal Institute Institute's claim that AirDrop's anonymization techniques can be easily circumvented raises concerns about the vulnerability of user identities and the potential for surveillance.

---

Amazon Appeals Privacy Fine of $817 Million

Amazon is challenging a significant privacy fine imposed by the Luxembourg data protection authority, accusing them of attacking the company based on unfounded allegations.

---

Australian Travel Agency Data Leak Puts Thousands of Tourists at Risk

The exposed data includes high-resolution passport images, travel visa certificates, and itinerary or ticket files, putting the affected individuals at risk of identity theft and fraud.

---

CISA Urges Critical Infrastructure to Patch Urgent ICS Vulnerabilities

The CISA's ICS advisories highlight high and critical severity vulnerabilities in products from companies like Rapid Software, Horner Automation, Schneider Electric, and Siemens.

---

FCC Presses Carmakers, Wireless Providers to Protect Domestic Abuse Survivors From Stalking Tools

The FCC is requesting detailed information from auto manufacturers and wireless providers on how they support survivors, handle geolocation data, and comply with the Safe Connections Act.