article thumbnail

Giant health insurer struck by ransomware didn't have antivirus protection

Malwarebytes

The Philippine Health Insurance Corporation (PhilHealth), has confirmed that it was unprotected by antivirus software when it was attacked by the Medusa ransomware group in September. PhilHealth is the government owned and controlled corporation that provides universal health coverage in the Philippines. It was attacked on September 22, 2023.

Antivirus 105
article thumbnail

Okta: Breach Affected All Customer Support Users

Krebs on Security

20, 2023 that identity and authentication giant Okta had suffered a breach in its customer support department, Okta said the intrusion allowed hackers to steal sensitive data from fewer than one percent of its 18,000+ customers. When KrebsOnSecurity broke the news on Oct. In a previous disclosure on Nov. In a previous disclosure on Nov.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Attackers Use Bots to Circumvent Some Two-Factor Authentication Systems

eSecurity Planet

Underground services are cropping up that are designed to enable bad actors to intercept one-time passwords (OTPs), which are widely used in two-factor authentication programs whose purpose is to better protect customers’ online accounts. By using the services, cybercriminals can gain access to victims’ accounts to steal money.

article thumbnail

3 crucial security steps people should do, but don't

Malwarebytes

When asked specifically about the tools and methods that people use to protect themselves online, we found, disappointingly, that: Just 35 percent of people use antivirus software. Just 24 percent of people use multi-factor authentication. Just 35 percent of people have unique passwords for most or all of their accounts.

article thumbnail

YouTube Accounts Hijacked by Cookie Theft Malware

Hacker Combat

Google has reported that it disrupted the phishing attacks where threat actors had tried to hijack various YouTube accounts using cookie theft malware. The hijacker’s intent was to use those accounts to promote different crypto-currency scams. . Such accounts have a buying price ranging from $3 to $4,000. . and email.cz.

article thumbnail

Chinese hackers exploited a Trend Micro antivirus zero-day used in Mitsubishi Electric hack

Security Affairs

Chinese hackers have exploited a zero-day vulnerability the Trend Micro OfficeScan antivirus in the recently disclosed hack of Mitsubishi Electric. Now ZDNet has learned from sources close to the investigation that the Chinese hackers have used a zero-day flaw in the Trend Micro OfficeScan antivirus in the attack on Mitsubishi Electric.

Antivirus 126
article thumbnail

Privileged account management challenges: comparing PIM, PUM and PAM

CyberSecurity Insiders

He is also looking for opportunities to collect additional access parameters (usernames and passwords), elevate privileges, or use already existing compromised accounts for unauthorized access to systems, applications, and data. Once approved, the user's request will be approved for their account. Reaching the goal of the attack.