T-Mobile reports bad actor accessed 37M customer records
In a new 8-K report submitted to the SEC, T-Mobile acknowledged a bad actor accessed 37 million T-Mobile customer records via an API flaw without authorization checks.
Cybercrime
Interpol operation “First Light 2022” leads to thousands of arrests of social engineering scammers worldwide
Interpol has arrested thousands and seized millions of US dollars from social engineering scammers worldwide involved in telecommunication fraud, business mail compromise (BEC) and associated money laundering.
IsaacWiper: another disk wiping malware targets Ukraine systems
Following on the footsteps of other destructive disk-wiping malware attacks, ESET researchers have also discovered a second wiper malware dubbed IsaacWiper targeting governmental networks in Ukraine.
SockDetour backdoor targets U.S. defense contractors
An advanced persistent threat (APT) campaign dubbed TiltedTemple has been using a “sophisticated tool” and malicious backdoor SockDetour to target U.S. defense contractors.
Sidewalk backdoor linked to Grayfly espionage group
Researchers have recently discovered the Sidewalk modular backdoor has been linked to a Chinese Grayfly espionage group.
Microsoft and FireEye reveal new details on SolarWinds cyberattack
Microsoft and FireEye have revealed new details on the infamous SolarWinds cyberattack used to spread a virus to 18,000 government and corporate computer networks.
Authorities take down ‘world’s largest’ darknet marketplace
A German-led police operation in coordination with authorities in other countries have taken down the ‘world’s largest’ darknet marketplace. The underground marketplace was used to facilitate the sale of drugs, stolen credit card data and malware.
FBI: Cyber criminals target employee credentials via voice phishing attacks
The FBI issued a private industry notification of cyber criminals targeting employee credentials via voice phishing or “vishing” attacks.
Microsoft takes down TrickBot malware infrastructure
Microsoft has worked with telecommunications providers worldwide to take down TrickBot malware infrastructure. TrickBot traces its roots back to 2016 as a modular banking trojan designed to steal information and distribute other malware to infected systems.
Microsoft takes down malicious domains used in COVID-19 related phishing campaign
Microsoft has disrupted a major cybercriminal operation designed to take advantage of the COVID-19 pandemic and defraud victims in 62 countries around the world.