Latest Cybersecurity News and Articles

---

Why You Should Opt Out of Sharing Data With Your Mobile Provider

A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device -- unless and until you affirmatively opt out of this data collection. Here's a primer on why you might want to do that, and how. Certain questions might be coming to mind right now, like "What the heck is CPNI?" And, 'If it's so 'customer proprietary,' why is AT&T sharing it with marketers?" Also maybe, "What can I do about it?" Read on for answers to all three questions.

---

Is your organization among the 1 in 10 with malware traffic? DNS data reveals scary truth

EXECUTIVE SUMMARY: In a new report, cyber security researchers have highlighted just how widespread malware threats really are, illuminating the dangers of threats specific to DNS infrastructure. Last year, between 10% and 16% of organizations saw DNS traffic originating on their networks towards command-and-control (C2) servers associated with botnets and other malicious threats. Over 25% […] The post Is your organization among the 1 in 10 with malware traffic? DNS data reveals scary truth appeared first on CyberTalk.

---

Mispadu Banking Trojan Targets Latin America to Steal Credentials and Deliver Other Payloads

Mispadu has been linked to multiple spam campaigns targeting countries like Bolivia, Chile, Mexico, Peru, and Portugal with the goal of stealing credentials and delivering other payloads.

---

CISA starts ransomware vulnerability pilot program

CISA announces the Ransomware Vulnerability Warning Pilot to help determine vulnerabilities commonly associated with known ransomware exploitation.

---

Bitcoin ATM Maker General Bytes Shuts Cloud Service After Security Breach

In a patch release bulletin, General Bytes warned that a hacker has been able to remotely upload and run a Java application via the master service interface into its terminals aimed at stealing user information and sending funds from hot wallets.

---

New DotRunpeX Malware Delivers Multiple Malware Families via Malicious Ads

A new piece of malware dubbed dotRunpeX is being used to distribute numerous known malware families such as Agent Tesla, Ave Maria, BitRAT, FormBook, LokiBot, NetWire, Raccoon Stealer, RedLine Stealer, Remcos, Rhadamanthys, and Vidar. "DotRunpeX is a new injector written in .NET using the Process Hollowing technique and used to infect systems with a variety of known malware families," Check

---

Orlando Family Physicians data breach class action settlement

The settlement benefits consumers who received a data breach notification from Orlando Family Physicians informing them their personal information or protected health information may have been compromised in a data breach on April 15, 2021.

---

Researchers Shed Light on CatB Ransomware's Evasion Techniques

CatB, also referred to as CatB99 and Baxtoy, emerged late last year and is said to be an "evolution or direct rebrand" of another ransomware strain known as Pandora based on code-level similarities.

---

IT security spending to reach nearly $300 billion by 2026

Investments in cybersecurity are expected to reach nearly $300 billion in 2026, driven by the ongoing threat of cyberattacks, the demands of providing a secure hybrid work environment, and the need to meet data privacy and governance requirements.

---

Mispadu Banking Trojan Targets Latin America: 90,000+ Credentials Stolen

A banking trojan dubbed Mispadu has been linked to multiple spam campaigns targeting countries like Bolivia, Chile, Mexico, Peru, and Portugal with the goal of stealing credentials and delivering other payloads. The activity, which commenced in August 2022, is currently ongoing, Ocelot Team from Latin American cybersecurity firm Metabase Q said in a report shared with The Hacker News. Mispadu (

---

Play Ransomware Gang Hit Dutch Shipping Firm Royal Dirkzwager

The ransomware group added the company to its Tor data leak site and announced the theft of stolen private and personal confidential data, employee IDs, passports, contracts, etc.

---

Most mid-sized businesses lack cybersecurity experts, incident response plans

According to a Huntress report, 49% of mid-sized businesses plan to budget more for cybersecurity in 2023. 61% of mid-sized businesses do not have dedicated cybersecurity experts in their organization.

---

FakeCalls Impersonates Leading Financial Institutions, Targets South Korea

Check Point Research found FakeCalls, a new Android vishing malware tool, targeting victims in South Korea by impersonating 20 leading financial institutions in the region. It lures victims with a fake loan form that would request users’ personal details and banking details including credit card numbers. To stay protected, experts suggest downloading apps only from official and reliable sources.

---

Lowe’s Market Exposes Sensitive Data and Credentials via Publicly Accessible Environment File

Researchers found a publicly accessible environment file (.env) hosted on the Lowe’s Market website. Public access to the file posed a risk to the security of the company’s systems, as it was leaking sensitive data and numerous credentials.

---

BianLian Ransomware Evolves into Pure Data Exfiltration-Focused Group

Changing its ransom tactics, the BianLian ransomware group appears to have decided not to encrypt its victims' files, rather only extract data and demand a ransom against that. The ransomware operation surfaced in the wild in July 2022. The ransomware operators, in some of the cases, also referenced the subsections of several laws and statutes that a victim firm can face if its breach news goes public.

---

Update: Hackers post more stolen Minneapolis Public School data to dark web

The data dumped online included payroll information, protected health information, home addresses, phone numbers, disciplinary records, student records, pictures, safety plans, union grievances, misconduct complaints, and civil rights investigations.

---

SEC proposes new cyber rules to secure financial sector

The new proposed regulations would require broker-dealers to notify customers within 30 days of a data breach, immediately inform the government, and expand the type of customer information protected by data privacy regulations.

---

New Cyber Platform Lab 1 Decodes Dark Web Data to Uncover Hidden Supply Chain Breaches

This article has not been generated by ChatGPT.  2022 was the year when inflation hit world economies, except in one corner of the global marketplace – stolen data. Ransomware payments fell by over 40% in 2022 compared to 2021. More organisations chose not to pay ransom demands, according to findings by blockchain firm Chainalysis. Nonetheless, stolen data has value beyond a price tag, and in

---

Researchers Shed Light on CatB Ransomware's Evasion Techniques

The threat actors behind the CatB ransomware operation have been observed using a technique called DLL search order hijacking to evade detection and launch the payload. CatB, also referred to as CatB99 and Baxtoy, emerged late last year and is said to be an "evolution or direct rebrand" of another ransomware strain known as Pandora based on code-level similarities. It's worth noting that the use

---

Ukraine's cyberpolice arrests RAT developer for infecting 10,000 PCs with malware

"The 25-year-old offender was exposed by employees of the Khmelnychchyna Cybercrime Department together with the regional police investigative department and the SBU regional department," reads the cyberpolice's announcement.