Krebs on Security

OCTOBER 31, 2022

A 26-year-old Ukrainian man is awaiting extradition from The Netherlands to the United States on charges that he acted as a core developer for Raccoon , a popular “malware-as-a-service” offering that helped paying customers steal passwords and financial data from millions of cybercrime victims. The Raccoon v.

Malware 292

Malware Identity Theft Cybercrime Accountability 292

Adam Levin

DECEMBER 3, 2018

Shodan’s most popular search terms include “unprotected webcams” and “routers with default passwords.” Side note: always change the default password on your devices.). The data is thought to have originated from Data&Leads, Inc. which promptly took down their entire website as soon as the exposure was made public.

Identity Theft 194

Identity Theft Data collection Engineering Passwords 194

Security Affairs

OCTOBER 17, 2023

POEMGATE is a malicious PAM module that is used by attackers to authenticate with a statically determined password and saves logins and passwords entered during authentication in a file in XOR-encoded form. Sandworm employed two backdoors, named Poemgate and Poseidon, in the attacks against the Ukrainian telecommunications providers.

Telecommunications 107

Telecommunications Authentication Data collection Passwords 107

Thales Cloud Protection & Licensing

FEBRUARY 7, 2024

Consumer Expectations Privacy Rights and Seamless Online Experiences An overwhelming 87% of consumers expect privacy rights from online interactions, with the most significant expectations being the right to be informed about data collection (55%) and the right to data erasure (53%).

Media 78

Media Passwords Authentication Digital transformation 78

SecureWorld News

AUGUST 16, 2023

Their findings, which spanned data collected between 2018 and 2023, revealed an intriguing reality. As the researchers peered deeper into the realm of cybercrime forums, they discovered a complex interplay of password strength.

Cybercrime 73

Cybercrime Passwords Data collection Data breaches 73

Cytelligence

DECEMBER 8, 2023

It heightens our awareness of extensive data collection about us, revealing potential uses and instigating concerns about potential misuse. Privacy policies from these tech giants, while intricate, are crucial in understanding the data collected and its uses. The impact of Big Tech on privacy is multifaceted.

Data collection 59

Data collection Ransomware Advertising Risk 59

Security Affairs

JULY 12, 2021

For the third time in the past four months, LinkedIn seems to have experienced another massive data scrape conducted by a malicious actor. Once again, an archive of data collected from hundreds of millions of LinkedIn user profiles surfaced on a hacker forum, where it’s currently being sold for an undisclosed sum.

Social Engineering 140

Social Engineering Data collection Media Passwords 140

Hot for Security

MARCH 17, 2021

The attacker managed to steal the names, email addresses, usernames, hashed passwords (salted), associated phone numbers, linked Facebook IDs and any requested password reset tokens. If you were a victim of the Zynga data breach, you’ve probably changed the password for your account already.

Data breaches 105

Data breaches Passwords Accountability Media 105

SecureWorld News

JUNE 21, 2023

This includes data from browsers, such as saved credentials, browsing history, and cookies, as well as information from instant messengers and emails. Info stealers are also indiscriminate, infecting as many computers as possible to maximize the amount of data collected.

Accountability 123

Accountability Data collection Cyber threats Cybersecurity 123

Krebs on Security

MARCH 20, 2023

A new breach involving data from nine million AT&T customers is a fresh reminder that your mobile provider likely collects and shares a great deal of information about where you go and what you do with your mobile device — unless and until you affirmatively opt out of this data collection.

Mobile 286

Mobile Wireless Advertising Telecommunications 286

Malwarebytes

JANUARY 18, 2021

Simply by having to explain the differences between forms of messaging, data collection is thrown into sharp relief. That is to say, you may not have known prior to this how much…or little…your favourite apps collect. The data collection genie is out of the bottle, and yet it may not matter too much.

Data collection 72

Data collection Encryption Accountability Passwords 72

eSecurity Planet

NOVEMBER 29, 2022

In a recent study of 1,237 Chrome extensions with a minimum of 1,000 downloads, Incogni researchers found that nearly half ask for permissions that could potentially expose personally identifiable information (PII), distribute adware and malware , or even log everything users do online, including accessing passwords and financial data.

Risk 111

Risk Adware Data collection Passwords 111

Security Affairs

SEPTEMBER 3, 2019

We’ve been alerted that portions of the PHPBB user table from our forums showed up in a leaked data collection.” ” read a message published on the XKCS forum “The data includes usernames , email addresses, salted, hashed passwords, and in some cases an IP address from the time of registration,”.

Data breaches 82

Data breaches Passwords Advertising Data collection 82

Security Boulevard

JANUARY 16, 2024

Put into context, it would make little sense to use a privacy-oriented browser and all the features such a browser may have to offer, but continue to reuse passwords across online accounts. Security and privacy overlap, both inside and outside the digital space.

Accountability 111

Accountability Engineering Passwords Internet 111

CyberSecurity Insiders

FEBRUARY 11, 2021

All these days we have seen many media speculations that Google collects some personalized data of its users for advertising and development purposes. On Wednesday, Google made an official announcement on the data collection it does and is as follows-.

Advertising 96

Advertising Data collection Internet Internet 96

Malwarebytes

SEPTEMBER 29, 2022

A slick tool with its own fully functional dashboard, its sights are set on targets not entirely dissimilar to other data stealers. System data collection, drive enumeration, and loading processes and DLLs into memory are all tell-tale signs that bad things are afoot on the target computer.

Cryptocurrency 71

Cryptocurrency Malware Password Management Data collection 71

Malwarebytes

JANUARY 16, 2024

While at CWRU, he was accused of “cracking passwords” on a CWRU network. The FBI found more than 20 million files collected from victim machines on hardware confiscated from Durachinsky’s home. The IP address was linked to the malware using data collected by CWRU, Malwarebytes, and AT&T.)

Malware 83

Malware Passwords Identity Theft Data collection 83

CyberSecurity Insiders

MAY 2, 2023

It amends the 2018 California Consumer Privacy Act (CCPA) introduced in response to rising consumer data privacy concerns. It has significantly impacted data collection and handling practices, giving consumers more control over how businesses handle their data. How does CPRA impact business operations?

Data collection 52

Data collection Data breaches Password Management Data privacy 52

CyberSecurity Insiders

JANUARY 29, 2021

Coming to password security, all the companies like iRobots, Ecovacs, Samsung RoboVac and Shark have won an excellent rating as they offer a digital standard of allowing its users to frame only 8 character passwords that involve alpha-numeric characters along with special ones. But the report doesn’t say to never buy such goods.

Data privacy 85

Data privacy Data collection Passwords Manufacturing 85

SecureList

APRIL 22, 2024

Data collection tools Cuthead for data collection Recently, ToddyCat started using a new tool we named cuthead to search for documents. 0.85.4.369 is used for creating archives ( T1560.002 Archive Collected Data: Archive via Library ). The open-source tool icsharpcode/SharpZipLib v. bbmouseme[.]com

VPN 105

VPN Passwords Encryption Malware 105

Joseph Steinberg

APRIL 20, 2021

It is also not uncommon for firms in the healthcare vertical to symbiotically share various types of information with one another; private healthcare-related data is also almost always shared during the M&A process – even before deals have closed.

Healthcare 165

Healthcare Insurance Computers and Electronics Data collection 165

Security Affairs

DECEMBER 30, 2020

.” T-Mobile said that threat actors did not access names on the account, physical or email addresses, financial data, credit card information, social security numbers, tax ID, passwords, or PINs. The company reported the incident to the authorities and is investigating the incident with the heal of a cybersecurity firm.

Data breaches 134

Data breaches Mobile Telecommunications Wireless 134

Security Affairs

OCTOBER 27, 2022

Thomson Reuters, a multinational media conglomerate, left an open database with sensitive customer and corporate data, including third-party server passwords in plaintext format. A simple human error can lead to devastating attacks, from data exfiltration to ransomware,” Sasnauskas said. Original post at [link].

IoT 118

IoT Engineering Passwords Media 118

eSecurity Planet

JUNE 8, 2022

However, be careful in that if you ever need to do a password reset with that temporary email address, or access the account for any reason in the future, you may not be able to. Once you are ready to install the collector role, first log into the InsightIDR portal : From the menu on the left side of the screen, click Data Collection.

DNS 97

DNS Data collection Marketing Passwords 97

Webroot

JUNE 25, 2021

They often have weak or non-existent passwords set as the default. Security experts warn that while the internet of things (IoT) isn’t inherently a bad thing, it does present concerns that must be considered. Many devices come pre-configured with inherently poor security.

IoT 91

IoT Internet Internet Data collection 91

Hot for Security

FEBRUARY 16, 2021

Seismic monitoring devices linked to the internet are vulnerable to cyberattacks that could disrupt data collection and processing, according to Michael Samios of the National Observatory of Athens and his fellow colleagues who put together a new study published in Seismological Research Letters.

IoT 128

IoT InfoSec Data collection Encryption 128

Security Affairs

SEPTEMBER 19, 2018

In the first half of 2018, researchers at Kaspersky Lab said that the most popular attack vector against IoT devices remains cracking Telnet passwords (75,40%), followed by cracking SSH passwords (11,59%). Top 10 countries from which Kaspersky traps were hit by Telnet password attacks is led by Brazil, China, and Japan.

IoT 81

IoT Passwords Malware Advertising 81

SecureWorld News

JANUARY 4, 2024

From an information security department's perspective, the more data collected on employee actions, the more effectively potential incidents can be investigated. On the flip side, employees often lack access to the data collected by UAM solutions. This is particularly relevant for remote workers.

Data collection 105

Data collection Artificial Intelligence Surveillance Risk 105

CyberSecurity Insiders

MARCH 23, 2023

BlackGuard main folder with stolen data divided into folders. When it finishes collecting sensitive data, the malware will zip the main folder using the password “xNET3301LIVE” and send it to its command & control. Zipping exfiltrated data with password and uploading to command & control.

Malware 121

Malware Cryptocurrency Passwords VPN 121

Security Affairs

SEPTEMBER 11, 2018

Former NSA white hat hacker Patrick Wardle reported last week that Trend Micro apps were also collecting users’ personal data including their browsing history and then uploaded that data in a password-protected archive to a server. And what do you think that might be? ” wrote Wardle.

Adware 80

Adware Data collection Advertising Antivirus 80

Malwarebytes

AUGUST 3, 2022

According to security researcher Anurag Sen , who discovered the open database, the messages were stored unencrypted, and the database itself was not locked behind a password. It also houses hundreds of gigabytes of data and is hosted on a Huawei cloud server in China.

Internet 77

Internet Internet Data collection Technology 77

Security Affairs

MARCH 7, 2021

jailbreaking tool Attackers took over the Perl.com domain in September 2020 Bug bounty hunter awarded $50,000 for a Microsoft account hijack flaw Clop ransomware gang leaks data allegedly stolen from cybersecurity firm Qualys Cyber Defense Magazine – March 2021 has arrived.

Data breaches 70

Data breaches Data collection Ransomware Hacking 70

Google Security

MAY 5, 2023

Silvia Convento, Senior UX Researcher and Court Jacinic, Senior UX Content Designer In recognition of World Password Day 2023, Google announced its next step toward a passwordless future: passkeys. Passkeys are not just easier to use, but also significantly faster than passwords. On average, a user can successfully sign in within 14.9

Authentication 119

Authentication Passwords Technology Password Management 119

McAfee

JANUARY 28, 2020

Don’t reuse passwords. Password reuse is a common problem, especially in consumer cloud services. When using a cloud service for the first time, it’s easy to think that if the data you are using in that particular service isn’t confidential, then it doesn’t matter if you use your favorite password. One password….

Passwords 71

Passwords Mobile Identity Theft VPN 71

Identity IQ

FEBRUARY 2, 2022

The CFPB issued orders to BNPL apps Affirm, Afterpay, Klarna, PayPal and Zip to explain how they gather detailed information about consumers´ shopping behavior, fees, loan performance, users´ demographics, data collection and other elements of their business models. The companies have until March 1 to send the information to the CFPB.

Identity Theft 119

Identity Theft Consumer Protection Data collection Accountability 119

Malwarebytes

AUGUST 3, 2022

According to security researcher Anurag Sen , who discovered the open database, the messages were stored unencrypted, and the database itself was not locked behind a password. It also houses hundreds of gigabytes of data and is hosted on a Huawei cloud server in China.

Internet 59

Internet Internet Data collection Mobile 59

The Last Watchdog

APRIL 9, 2020

Data collected by IoT devices will increasingly get ingested into cloud-centric networks where it will get crunched by virtual servers. That’s why it is common for IoT devices to get shipped with default passwords that can’t be changed, or settings that transmit passwords in clear text.

Internet 195

Internet Internet IoT Technology 195