Latest Cybersecurity News and Articles

---

Tampered OpenCart Authentication Aids Credit Card Skimming Attack

Using outdated software is the main reason for website compromise. In one case, an e-commerce store running on an old version of OpenCart led to credit card theft and fraud.

---

Authorities Seize Control of RagnarLocker Ransomware Dark Web Site

The RagnarLocker ransomware group’s dark web leak site has been seized in a coordinated law enforcement operation. The post Authorities Seize Control of RagnarLocker Ransomware Dark Web Site appeared first on SecurityWeek.

---

Spec Secures $15M Series A Funding, Accelerating Innovation in Fraud Defense

Cybersecurity firm Spec has successfully closed a $15M Series A funding round led by SignalFire, with participation from Legion Capital and Rally Ventures, enabling the company to advance its platform and expand its threat labs.

---

Fraud Detection Firm Spec Raises $15 Million

Silicon Valley fraud detection startup attracts $15 million in new financing from SignalFire, Legion Capital and Rally Ventures. The post Fraud Detection Firm Spec Raises $15 Million appeared first on SecurityWeek.

---

SMBs Seek Help as Cyber Threats Reach an All-Time High

Cultivating a strong cybersecurity culture and empowering employees to make informed security decisions is crucial for SMBs to protect themselves and gain customer trust.

---

Play Ransomware Threatens to Reveal Stolen Data From Associated Wholesale Grocers

The Play ransomware group has threatened Associated Wholesale Grocers (AWG) with a cyberattack, stating their intention to release sensitive data stolen from the firm on October 22, 2023.

---

Malvertisers Using Google Ads to Target Users Searching for Popular Software

Details have emerged about a malvertising campaign that leverages Google Ads to direct users searching for popular software to fictitious landing pages and distribute next-stage payloads. Malwarebytes, which discovered the activity, said it's "unique in its way to fingerprint users and distribute time sensitive payloads." The attack singles out users searching for Notepad++ and PDF converters to

---

Ransomware Realities in 2023: One Employee Mistake can Cost a Company Millions

Ransomware attacks can cost victim organizations millions of dollars, leading to significant financial and reputational damage, particularly for small and mid-sized businesses.

---

Hackers Exploit QR Codes with QRLJacking for Malware Distribution

Quishing involves circulating QR codes embedded with malicious links or malware downloads, while QRLJacking exploits the login with QR code feature to trick users into logging into fake websites and steal their sensitive data.

---

Vietnamese Hackers Target U.K., U.S., and India with DarkGate Malware

Attacks leveraging the DarkGate commodity malware targeting entities in the U.K., the U.S., and India have been linked to Vietnamese actors associated with the use of the infamous Ducktail stealer. "The overlap of tools and campaigns is very likely due to the effects of a cybercrime marketplace," WithSecure said in a report published today. "Threat actors are able to acquire and use multiple

---

Pentagon Moves Closer to Picking Leader for Top Cyber Job

The U.S. Defense Department has received a report from the RAND Corporation on the creation of a new lead cyber policy chief. The report will inform decisions on the organizational structure and workforce of the new office.

---

ExelaStealer: A New Info-stealer Gaining Traction on Dark Web

ExelaStealer, written in Python, is designed to capture sensitive data from compromised Windows systems. It can steal passwords, Discord tokens, credit card information, cookies, keystrokes, screenshots, and clipboard content. As this remains a prevalent threat, organizations are recommended to protect their critical assets and infrastructure with strong security measures.

---

Iranian Hackers Lurked for 8 Months in Government Network

Iran-linked hacking group Crambus spent eight months inside a compromised network of a Middle Eastern government, Broadcom’s Symantec cybersecurity unit reports. The post Iranian Hackers Lurked for 8 Months in Government Network appeared first on SecurityWeek.

---

RagnarLocker Ransoms Its Last Victim as Law Enforcement Takes Down its Leak Site

RagnarLocker, known for its double extortion tactic and refusal to negotiate ransom demands, has been a significant threat to critical infrastructure organizations, with 52 successful attacks reported.

---

Unleashing the Power of the Internet of Things and Cyber Security

Due to the rapid evolution of technology, the Internet of Things (IoT) is changing the way business is conducted around the world. This advancement and the power of the IoT have been nothing short of transformational in making data-driven decisions, accelerating efficiencies, and streamlining operations to meet the demands of a competitive global marketplace. IoT At a Crossroads IoT, in its most

---

New ExelaStealer Malware Steals Passwords, Discord Tokens, Credit Cards, Cookies, and More

The initial infection vector of ExelaStealer is not known, but it can be deployed through a decoy document and collects various data from infected systems, including screenshots and system information.

---

BlackCat Climbs the Summit With a New Tactic

The BlackCat ransomware operators have introduced a new tool called Munchkin, which allows them to spread their malware to remote machines and shares on a victim organization's network.

---

How to go From Collecting Risk Data to Actually Reducing Risk?

Implementing automated workflows, bi-directional ticketing system integration, and tracking performance metrics enables efficient and scalable risk reduction across the organization.

---

Clever Malvertising Attack Uses Punycode to Look Like Keepass’s Official Website

Threat actors are using sophisticated techniques like Punycode and brand impersonation to deceive users and distribute malicious software. Users need to be cautious when downloading programs and should verify the authenticity of websites and ads.

---

US House Panel: AI Regulation Begins With Privacy

Members of a House panel expressed concerns about China setting global expectations for data collection and use, and emphasized the need for the U.S. to lead in AI development and deployment.