Security Affairs

MAY 6, 2020

Hackers have breached the online learning platform Unacademy and are selling the account information for close to 22 million users. Online learning platform Unacademy has suffered a data breach after a hacker gained access to their database and started selling the account information for close to 22 million users.

Accountability 133

Accountability Hacking Data breaches Advertising 133

Security Affairs

MAY 5, 2020

GoDaddy has been notifying its customers of a data breach, threat actors might have compromised their web hosting account credentials. GoDaddy has been notifying its customers of a data breach, attackers might have compromised users’ web hosting account credentials. ” reads the data breach notice submitted by the company.

Data breaches 145

Data breaches Accountability Advertising Internet 145

Security Affairs

MARCH 14, 2020

Slack addressed a critical flaw within 24 hours from its disclosure, the issue allowed attackers to carry out automate account takeover. The researcher Evan Custodio discovered a critical vulnerability in Slack that could have allowed attackers to launch automate account takeover. on slackb.com 3) A request of GET [link] HTTP/1.1

Accountability 144

Accountability Advertising Data breaches Hacking 144

Security Affairs

JUNE 10, 2020

Japanese gaming giant Nintendo has confirmed that hackers have breached 300,000 accounts since early April, financial data were not exposed. The Japanese video game giant Nintendo has admitted that threat actors have breached 300,000 accounts since early April. ” reads a post published by the CNN. Pierluigi Paganini.

Accountability 132

Accountability Advertising Passwords Hacking 132

Security Affairs

APRIL 27, 2020

Experts discovered how to take over Microsoft Teams accounts by just sending recipients a regular GIF, it works for both desktop and web Teams versions. s and could take over an account. After doing all of this, the attacker can steal the victim’s Teams account data.” ” reads the analysis published by CyberArk.

Accountability 145

Accountability Hacking Authentication Advertising 145

Security Affairs

OCTOBER 1, 2020

Twitter removed around 130 Iranian accounts for attempting to disrupt the public recent US Presidential Debate. The social media giant Twitter announced to have removed around 130 Iranian Twitter accounts that attempted to disrupt the public conversation during the recent first Presidential Debate for the US 2020 Presidential Election.

Accountability 143

Accountability Advertising Media Hacking 143

Security Affairs

APRIL 14, 2020

The details of around four million users are now being shared for free on underground hacking forums, according to ZDNet that has obtained samples from different sources, exposed records include usernames, email addresses, and hashed account passwords (bcrypt hashing algorithm). Pierluigi Paganini. SecurityAffairs – Quidd, data breach).

Accountability 144

Accountability Hacking Data breaches Passwords 144

Security Affairs

FEBRUARY 17, 2020

The popular hacker group OurMine has hacked the official Twitter account of the FC Barcelona, along with the accounts of Olympics and the International Olympic Committee (IOC). The popular hacker group has hacked the official Twitter account of the FC Barcelona, along with the accounts of and the International Olympic Committee (IOC).

Accountability 131

Accountability Hacking Advertising Media 131

Security Affairs

AUGUST 19, 2020

Chinese hackers have hacked thousands of Taiwan Government email accounts belonging at least 10 Taiwan government agencies, officials said. Chinese hackers have gained access to around 6,000 email accounts belonging to at least 10 Taiwan government agencies, officials said. Pierluigi Paganini. SecurityAffairs – hacking, Taiwan).

Government 144

Government Hacking Accountability Advertising 144

Security Affairs

AUGUST 3, 2020

As a precaution, we wanted to let you know that we recently became aware of a potential incident that may have affected the security of certain customer accounts. We are working with external security experts to investigate this matter.” Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Data breaches 134

Data breaches Accountability Passwords Advertising 134

Security Affairs

FEBRUARY 2, 2025

Those payments would instead be redirected to a financial account the perpetrators controlled, resulting in significant losses to victims.” ” Source KrebsOnSecurity KrebsOnSecurity first wrote about the Manipulaters in May 2015 , the cybercrime group openly advertised on forums in 2015.

Cybercrime 108

Cybercrime Advertising Phishing Hacking 108

Security Affairs

FEBRUARY 24, 2020

Slickwraps has disclosed a data breach that impacted over 850,000 user accounts, data were accidentally exposed due to security vulnerabilities. Lynx0x00’s Medium and Twitter accounts have mysteriously vanished but, fortunately, the Internet never truly forgets. ” reported Slashgear. Pierluigi Paganini.

Accountability 134

Accountability Data breaches Passwords Advertising 134

Security Affairs

FEBRUARY 19, 2020

A new flaw was discovered in a WordPress plugin, this time experts found a zero-day vulnerability in the ThemeREX Addons to create admin accounts. Security experts from WordFence have discovered a zero-day vulnerability in the ThemeREX Addons that was actively exploited by hackers in the wild to create user accounts with admin permissions.

Accountability 144

Accountability Advertising Account Security Authentication 144

Security Affairs

AUGUST 2, 2020

A critical flaw in the wpDiscuz WordPress plugin could be exploited by remote attackers to execute arbitrary code and take over the hosting account. Security experts from Wordfence discovered a critical vulnerability impacting the wpDiscuz WordPress plugin that is installed on over 80,000 sites. Pierluigi Paganini.

Accountability 145

Accountability Advertising Account Security Hacking 145

Security Affairs

JUNE 4, 2020

The Japanese cryptocurrency exchange Coincheck announced that threat actors have accessed their account at the Oname.com domain registrar and hijacked one of its domain names. “The domain registration information has been amended at around 20:52 on June 1, 2020, and there is no impact on the customer’s assets at this time.”

Accountability 128

Accountability Phishing DNS Cryptocurrency 128

Security Affairs

MARCH 23, 2020

107 million records include personal data and basic account information such as the user ID, number of Weibo tweets, number of followers and accounts users are following, account gender, geographic location and more. When we found the security vulnerability we took measures to fix it. 5.38??????????????

Accountability 144

Accountability Passwords Advertising Internet 144

Security Affairs

AUGUST 12, 2020

for-profit company founded in 1989 that specializes in information security, cybersecurity training, and selling certificates. The staff discovered an anomalous forwarding rule on one email account, which was set to forward emails to an unknown external address. The rule was active only for a single email account.

Data breaches 145

Data breaches Accountability Advertising Information Security 145

Security Affairs

FEBRUARY 20, 2025

.” Threat actors could exploit the flaw to extract information on gateways, including password hashes for all local accounts. ShadowPad is a modular backdoor considered a hallmark of China-linked APT groupssince at least 2015. ” reads the report Orange Cyberdefense CERT.

Healthcare 84

Healthcare Ransomware VPN Malware 84

Security Affairs

MARCH 23, 2020

The University of Utah Health disclosed a security breach, it has discovered malware on its systems and revealed unauthorized access to some employee email accounts. “From January 22 to February 27, 2020, we became aware that there was unauthorized access to some employees’ email accounts. . ” continues the alert.

Accountability 134

Accountability Advertising Malware Phishing 134

Security Affairs

SEPTEMBER 21, 2020

Over 500,000 Activision accounts may have been hacked in a new data breach that the gaming firm suffered on September 20. More than 500,000 Activision accounts may have compromised as a result of a data breach suffered by the gaming firm on September 20, reported the eSports site Dexerto. ” reads the post published by Dexerto.

Hacking 142

Hacking Data breaches Accountability Passwords 142

Security Affairs

NOVEMBER 4, 2020

150 PAGESLOADED WITH EXCELLENT CONTENT Learn from the experts, cybersecurity best practices Find out about upcoming information security related conferences, expos and trade shows. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Always free, no strings attached.

InfoSec 135

InfoSec DNS Advertising Marketing 135

Security Affairs

NOVEMBER 24, 2019

Twitter announced that its users can protect their accounts with 2-Factor Authentication (2FA) even if they don’t have a phone number. Twitter is going to allow its users to protect their accounts with 2-Factor Authentication (2FA) even if they don’t have a phone number. Pierluigi Paganini.

Authentication 143

Authentication Mobile Advertising Accountability 143

Security Affairs

MARCH 5, 2020

. “Our Cybersecurity team recently identified and shut down a malicious attack against our email vendor that led to unauthorized access to certain T-Mobile employee email accounts, some of which contained account information for T-Mobile customers and employees.” ” reads the data breach notification.

Mobile 145

Mobile Data breaches Telecommunications Wireless 145

Security Affairs

JUNE 27, 2020

In April 2015, the TV5Monde was hit by a severe cyber attack that compromised broadcasting of transmissions across its medium. The attackers also hijacked the Channel TV5Monde website and social media accounts of the French broadcaster. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Cyber Attacks 145

Cyber Attacks Backups Advertising Media 145

Security Affairs

FEBRUARY 11, 2022

One of the vulnerabilities is an elevation of privilege vulnerability in Microsoft Windows SAM (Security Accounts Manager) vulnerability. “An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.An ” reads the advisory published by Microsoft.

IoT 139

IoT Accountability Authentication Hacking 139

Security Affairs

MARCH 10, 2020

which is a Shopify-like platform that has been hosting hundreds of online shops used for the sale of hacked accounts and stolen user data. international financial and corporate data, Personally Identifiable Information (PII), and compromised user accounts from many U.S. store ACCOUNTS-MARKET. storefront.”

Accountability 144

Accountability Advertising Passwords Hacking 144

Security Affairs

OCTOBER 5, 2020

According to the SonntagsZeitung , the Basel public prosecutor’s office confirmed that hackers compromised the systems at the universities, then the threat actors hijacked the employee salary transfers by changing the beneficiaries’ accounts. It added that part of the misappropriated funds was now in foreign accounts.”

Advertising 145

Advertising Phishing Cybercrime Hacking 145

Security Affairs

AUGUST 3, 2020

2gether has disclosed a security breach, hackers have stolen roughly €1.2 million worth of cryptocurrency from cryptocurrency investment accounts. . Hackers stole roughly €1.183 million worth of cryptocurrency from investment accounts of 2gether, 26.79% of overall funds stored by the accounts. Pierluigi Paganini.

Cryptocurrency 143

Cryptocurrency Accountability Hacking Advertising 143

Security Affairs

JULY 9, 2020

The credentials are sold for an average of $15.43, the most expensive pairs relate to banking and financial services accounts, with an average price of nearly $71. “Account accesses for antivirus programs garner the second-highest prices: around $21.67. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Cybercrime 145

Cybercrime Antivirus Marketing Accountability 145

Security Affairs

APRIL 29, 2020

State-sponsored hackers have compromised a small number of accounts of the Estonian email provider Mail.ee Alleged state-sponsored hackers have hijacked a small number of accounts at the Estonian email provider Mail.ee, they exploited a zero-day vulnerability in the attack. belonging to high-profile people.

Accountability 143

Accountability Advertising Hacking Phishing 143

Security Affairs

APRIL 12, 2022

1, 2015, and on or about Jan. ” RaidForums was launched in 2015, its community reached over half a million users. These contained information for millions of credit cards, bank account numbers and routing information, and the usernames and associated passwords needed to access online accounts.”

Cybercrime 145

Cybercrime Banking Accountability Hacking 145

Security Affairs

APRIL 29, 2020

Matthew Keys is a former Reuters journalist who was convicted in October 2015 of supporting the Anonymous collective and that was sentenced to 24 months in prison for computer hacking charges in April 2016. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. ” states the Sacramento Bee.

Hacking 129

Hacking Advertising Accountability Media 129

Security Affairs

APRIL 12, 2020

The archive included credentials for Zoom accounts belonging to organizations in various industries, including banking, consultancy, healthcare software companies. ” reads the report published by security firm IntSights. ” reads the report published by security firm IntSights. Pierluigi Paganini.

Accountability 145

Accountability Healthcare Phishing Banking 145

Security Affairs

OCTOBER 18, 2020

. “Comprised of several layers of members mainly from Latvia, Georgia, Bulgaria, Romania, and Belgium, the QQAAZZ network opened and maintained hundreds of corporate and personal bank accounts at financial institutions throughout the world to receive money from cybercriminals who stole it from accounts of victims.”

Malware 140

Malware Banking Cryptocurrency Cybercrime 140

Security Affairs

FEBRUARY 20, 2020

The CVE-2020-3158 flaw is related to the presence of a system account that has a default and static password in the Smart Software Manager tool. “The vulnerability is due to a system account that has a default and static password and is not under the control of the system administrator.” Pierluigi Paganini.

Software 142

Software System Administration Advertising Accountability 142

Security Affairs

SEPTEMBER 16, 2020

Once the hackers gained access to a system, they downloaded an initial assm.exe file to achieve persistence and to add a backdoor account for future access. Tencent researchers observed the use of an account with the username “ Default ” and a password of “ @fg125kjnhn987.” Pierluigi Paganini.

Malware 144

Malware Advertising Cryptocurrency Accountability 144

Security Affairs

OCTOBER 19, 2020

The GravityRAT malware Access Trojan (RAT) is believed to be the work of Pakistani hacker groups, it is under development at least since 2015. “Today, Cisco Talos is uncovering a new piece of malware, which has remained under the radar for the past two years [since 2015] while it continues to be developed.”

Malware 136

Malware Computers and Electronics Spyware Advertising 136