Cyber-attack hackers threaten to share US police informant data

Washington DC’s Metropolitan Police Department has said its computer network has been breached in a targeted cyber-attack, US media report.

A ransomware group called Babuk is reportedly threatening to release sensitive data on police informants if it is not contacted within three days.

The FBI is investigating the extent of the breach, US media reported, citing the Washington DC police department.

Ransomware is used to scramble computer networks and steal information.

Share

Data of 1.3 million Clubhouse users leaked online, with fears ‘real damage’ will be caused – media

A major data breach from a recently popular social media platform, Clubhouse, has been reported. The latest suggested leak may have compromised the personal information of 1.3 million users.

The apparent disclosure was reported by Cyber News this weekend. A Structured Query Language database containing user records such as names in connection with profile names, photo URLs, and numbers of followers, as well as related usernames on other social media accounts, including Instagram and Twitter, was “leaked for free on a popular hacker forum,” it said. Clubhouse – a social media app to tune into conversations – has not confirmed the leak so far.

This has become such a regular thing its not even scary any longer, people have grown to expect it.

Share

‘We have your porn collection’: The rise of extortionware

Cyber-security companies are warning about the rise of so-called ‘extortionware’ where hackers embarrass victims into paying a ransom.

Experts say the trend towards ransoming sensitive private information could affect companies not just operationally but through reputation damage.

It comes as hackers bragged after discovering an IT Director’s secret porn collection.

The targeted US firm has not publicly acknowledged that it was hacked.

In its darknet blog post about the hack last month, the cyber-criminal gang named the IT director whose work computer allegedly contained the files.

Share

CRA suspends about 800,000 taxpayers’ accounts after login credentials found on dark web

CRA suspends about 800,000 taxpayers’ accounts after login credentials found on dark web

OTTAWA – About 800,000 Canadians will be blocked out of their Canada Revenue Agency online account until they change their login credentials after identical information was found for sale on the dark web.

The number is a significant jump from the agency’s initial assessment that caught over 100,000 potentially compromised accounts, and the agency believes that number will continue to balloon as external data breaches remain prevalent and people re-use identical login credentials for multiple web services.

Share

CRA suspends online accounts of over 100,000 Canadians after login credentials found for sale on dark web

OTTAWA – The Canada Revenue Agency had to suspend the accounts of more than 100,000 users of its online service because it detected troves of leaked login information on the dark web that could have led to data breaches.

If you received an unexpected and cryptic email on Feb. 16 from CRA warning you that your email had been deleted from the agency’s web platform, MyCRA, do not worry: your account has not been breached.

Share

US charges three North Koreans over $1.3bn theft

Three North Koreans have been charged by US authorities over a scheme to steal and extort more than $1.3bn (£940m) from banks and businesses around the world.

They are also accused of deploying malicious cryptocurrency programs.

A Canadian-American citizen was also charged with money laundering.

The men are also accused of being part of the Wannacry cyber-attack of 2017, which crippled UK health service computer systems on a national scale.

Share

Audit Finds ‘No Formal Tracking’ of IT Security Incidents at Public Safety Canada

OTTAWA—An internal review has uncovered weak security practices when it comes to information technology at Public Safety Canada—from lax controls on the use of portable flash drives to inadequate awareness and training.

The review found employees who were no longer with the department “still had privileged access to the network” and that some current employees had unnecessary administrative access to “mission critical applications.”

Share

Kremlin-backed hackers breach US Treasury and Commerce: Report

A “sophisticated hacking group” backed by the Russian government reportedly infiltrated the Department of Treasury’s systems and stole information related to internet and telecommunications policymaking as part of a broader campaign that also hacked the Commerce Department and other government agencies.

The FBI is investigating the attacks and is looking into the Russian hacking group APT29, also known as Cozy Bear, as a potential culprit, according to the Washington Post. The foreign-backed hack was first reported by Reuters.

As a result of the hack, the National Security Council held a meeting at the White House on Sunday.

Share