Latest Cybersecurity News and Articles

---

Chat Apps Used to Target Gambling Firms

ESET tracked a series of attacks, dubbed Operation ChattyGoblin, against Southeast Asian gambling companies. The operation has been ongoing since October 2021 and leverages chat apps. The campaign is believed to be used to target organizations in the industrial, technology, healthcare, insurance, manufacturing, and telecom sectors in Europe and North America.

---

Severe Security Flaw Exposes Over a Million WordPress Sites to Hijack

A security vulnerability has been disclosed in the popular WordPress plugin Essential Addons for Elementor that could be potentially exploited to achieve elevated privileges on affected sites. The issue, tracked as CVE-2023-32243, has been addressed by the plugin maintainers in version 5.7.2 that was shipped on May 11, 2023. Essential Addons for Elementor has over one million active

---

Canada: Ontario school district hit by cyber attack discovers additional info stolen

The Huron-Superior Catholic District School Board has sent letters to students and former students informing them their personal information was compromised in a cyber attack that was first announced on December 15, 2022.

---

Australia: Ambulance Victoria data breach reveals drug and alcohol tests of graduate paramedics

The confidential drug and alcohol test results of graduate paramedics were available for every Ambulance Victoria staff member to view under a significant breach that is set to be reported to the state’s privacy watchdog.

---

Absolute to be acquired by Crosspoint Capital Partners

Under the terms of the Arrangement Agreement, Absolute shareholders will receive $11.50 per Common Share in cash on completion of the Acquisition, corresponding to an enterprise value of approximately $870 million, inclusive of the debt.

---

Data Breach Incident at WhizComms Affected About 24,000 Customers

About 24,000 customers of broadband service provider WhizComms, or roughly half its customer base, had their personal information stolen by an external party in a data breach incident detected on April 21.

---

Twitter Finally Rolling Out Encrypted Direct Messages — Starting with Verified Users

Twitter is officially beginning to roll out support for encrypted direct messages (DMs) on the platform, more than six months after its chief executive Elon Musk confirmed plans for the feature in November 2022.

---

47% of all internet traffic came from bots in 2022

A new report reveals that in 2022, 47.4% of all internet traffic came from bots, a 5.1% increase over the previous year.

---

North Korean Hackers Breached Major Hospital in Seoul to Steal Data

The Korean National Police Agency (KNPA) warned that North Korean hackers had breached the network of one of the country's largest hospitals, Seoul National University Hospital (SNUH), to steal sensitive medical information and personal details.

---

Hackers devise new tactics to ensure ransomware payment

Ransomware remains one of the biggest cyber threats for private organizations and governments. However, hackers are engineering new ways to extract ransom from their victims as organizations take a conscious call to decline ransom payment demands.

---

New APT Group Red Stinger Targets Military and Critical Infrastructure in Eastern Europe

A previously undetected advanced persistent threat (APT) actor dubbed Red Stinger has been linked to attacks targeting Eastern Europe since 2020. "Military, transportation, and critical infrastructure were some of the entities being targeted, as well as some involved in the September East Ukraine referendums," Malwarebytes disclosed in a report published today. "Depending on the campaign,

---

Ambulance Victoria data breach reveals drug and alcohol tests of graduate paramedics

Privacy watchdog will be asked to investigate after information became available for all employees to view on the staff intranetGet our morning and afternoon news emails, free app or daily news podcastThe confidential drug and alcohol test results of graduate paramedics were available for every Ambulance Victoria staff member to view under a significant breach that is set to be reported to the state’s privacy watchdog.According to an email sent late Thursday to members of the Victorian Ambulance Union, confidential spreadsheets relating to pre-employment testing of graduate paramedics in 2017 and 2018 were available on the staff intranet until the union alerted Ambulance Victoria to the problem. Continue reading...

---

Babuk Source Code Sparks Nine Different Ransomware Strains Targeting VMware ESXi Systems

Multiple threat actors have capitalized on the leak of Babuk (aka Babak or Babyk) ransomware code in September 2021 to build as many as nine different ransomware families capable of targeting VMware ESXi systems.

---

Transact appoints David Shaw as Chief Information Security Officer

David Shaw has joined Transact Campus as CISO. Shaw has experience in identity & access management, regulatory compliance and incident response.

---

Ransomware insurance claims jump back up

The number of ransomware claims filed by U.S. clients of insurance broker Marsh spiked 77% in the first quarter of the year compared with the prior three-month period, the company told CFO Dive.

---

Spanish Police Takes Down Massive Cybercrime Ring, 40 Arrested

The National Police of Spain said it arrested 40 individuals for their alleged involvement in an organized crime gang called Trinitarians. Among those apprehended include two hackers who carried out bank scams through phishing and smishing techniques and 15 other members of the crime syndicate, who have all been charged with a number of offenses such as bank fraud, forging documents, identity

---

69% of IT professionals have adopted SLOs for the first time

A recent survey indicates a focus on system reliability due to the pandemic driving cloud adoption, remote workers and supply chain issues. 

---

RedStinger Cyber Operations Target Eastern Europe Since 2020

While looking for activities from the usual suspects, one of our former coworkers at Malwarebytes Threat Intelligence Team discovered a new interesting lure that targeted the Eastern Ukraine region and reported that finding to the public.

---

Security leaders chime in after ex-Uber security chief is sentenced

An ex-Uber chief security officer has been sentenced to probation after being found guilty of trying to cover up a 2016 data breach.

---

Beware! Crooks are Using Malicious QR Codes to Steal Your Money

The convenience of using QR codes is being abused by cybercriminals who are creating fraudulent QR codes for survey forms or parking ticket payment portals to rob users of their money and credentials. Follow the FBI’s advisory to avoid falling victim to such scams.