Accused JPMorgan Chase Hacker Plans to Plead Guilty

Mathew J. Schwartz • September 20, 2019

Russian national Andrei Tyurin, who was extradited last year from Eastern Europe to the United States, has stated that he plans to accept a plea deal he's reached with federal prosecutors. Tyurin has been charged with numerous crimes, including hacking JPMorgan Chase and stealing 83 million customer records.

Cybercrime

Attacks Targeting IoT Devices and Windows SMB Surge

Latest

Cybercrime

Report: UK Universities Vulnerable to Cyberattacks

Akshaya Asokan • September 20, 2019

U.K. universities will continue to face cyberattacks from nation-state actors and organized criminal gangs in the years ahead, according to a new report issued by the National Cyber Security Center, which calls on schools to take defensive measures.

Cybercrime

Other Attackers Reuse Old Magecart Domains: Report

Jeffrey Burt • September 20, 2019

Decommissioned domains that were part of the pervasive Magecart web-skimming campaigns are being put to use by other cybercriminals who are re-activating them for other scams, including malvertising, according to researchers at RiskIQ.

Application Security

Eight US Cities See Payment Card Data Stolen

Jeremy Kirk • September 20, 2019

Click2Gov municipal payment portals for eight U.S. cities were compromised after an apparent vulnerability in the software. More than 20,000 stolen payment card records have turned up in underground markets, says Gemini Advisory.

Fraud Management & Cybercrime

Analysis: Fallout From the Snowden Memoir

Nick Holland • September 20, 2019

The latest edition of the ISMG Security Report features a discussion of the controversies surrounding the release of whistleblower Edward Snowden's memoir. Also featured: An update on Lumen PDF's breach disclosure; insights on financial services identity management issues.

Cybercrime

Supply Chain Attacks: Hackers Hit IT Providers

Mathew J. Schwartz • September 19, 2019

A hacker group called Tortoiseshell has been hitting targets in the Middle East since at least July 2018, apparently targeting IT service providers to gain access to many potential targets at once. The campaign is fresh proof that criminals and nation-state attackers alike continue to favor supply chain attacks.

Cyberwarfare / Nation-State Attacks

Facebook Removes Hundreds of Fake Accounts

Akshaya Asokan • September 19, 2019

Facebook announced this week that it has removed hundreds of fake accounts and pages. The majority of these originated in Ukraine or Iraq and used phony user identifications to spread misinformation in an attempt to influence local politics, the company says.

Governance

Lumin PDF Leak Exposed Data on 24 Million Users

Jeremy Kirk • September 18, 2019

Ignoring a breach disclosure can have ugly consequences. Case in point: Lumin PDF, a PDF editing tool, which saw data for much of its user base - about 24.3 million - published in an online forum late Monday. Data breach expert Troy Hunt says it's sign of the dysfunction in the breach disclosure process.

Cyberwarfare / Nation-State Attacks

Senators Urge FCC to Review Licenses for Chinese Telecoms

Apurva Venkat • September 18, 2019

U.S. Senators Chuck Schumer, D-N.Y., and Tom Cotton, R-Ark., are asking the Federal Communications Commission to reconsider operating licenses granted to two Chinese telecommunications companies, citing concerns over national security and foreign espionage.

Artificial Intelligence & Machine Learning

Using Artificial Intelligence to Combat Card Fraud

Nick Holland • September 17, 2019

Artificial intelligence is playing an important role in the fight against payment card fraud, says Gord Jamieson, senior director of Canada risk services at Visa. He'll offer a keynote presentation on the latest fraud trends at Information Security Media Group's Cybersecurity Summit in Toronto Sept 24-25.

Cybercrime

For Sale: Admin Access Credentials to Healthcare Systems

Marianne Kolbasuk McGee • September 13, 2019

Cybercriminals are "upping their game" by stealing and then auctioning off on the dark web administrative access credentials to healthcare organizations' clinician and patient portals, says Etay Maor of IntSights.

Fraud Management & Cybercrime

Ransomware Gangs Practice Customer Relationship Management

Mathew J. Schwartz • September 13, 2019

Ransomware-wielding attackers treat infecting endpoints as a business and put customer relationship management principles to work, says Bill Siegel, CEO of ransomware incident response firm Coveware. He notes criminals "go after the low-hanging fruit because it's cheap and the conversion rate is high."

Governance

Tips on Countering Insider Threat Risks

Jeremy Kirk • September 13, 2019

Insider threats are difficult to counter. What happens when an employee goes rogue, and how do you catch them? Charles Carmakal of Mandiant, who says his firm is dealing with more insider threat investigations, shares tips for better defenses.