Security Affairs

SEPTEMBER 21, 2022

Russia-linked APT group Sandworm has been observed impersonating telecommunication providers to target Ukrainian entities with malware. Russia-linked cyberespionage group Sandworm has been observed impersonating telecommunication providers to target Ukrainian entities with malware. ” reads the report published by Recorded Future.

Malware 81

Malware Telecommunications DNS Hacking 81

Security Affairs

JANUARY 30, 2024

Based on the collected feedback, cybersecurity experts were able to build the following statistics: 45% were not aware about the identified compromised credentials and acknowledged successful password change and enabled 2FA; 16% were already aware about the identified compromised credentials as a result of infection by malicious code and made necessary (..)

Engineering 118

Engineering Passwords Telecommunications Accountability 118

Security Affairs

JUNE 8, 2022

China-linked threat actors have breached telecommunications companies and network service providers to spy on the traffic and steal data. US NSA, CISA, and the FBI published a joint cybersecurity advisory to warn that China-linked threat actors have breached telecommunications companies and network service providers.

Telecommunications 95

Telecommunications Authentication Passwords Accountability 95

Security Affairs

DECEMBER 30, 2020

.” T-Mobile said that threat actors did not access names on the account, physical or email addresses, financial data, credit card information, social security numbers, tax ID, passwords, or PINs. T-Mobile discovered that the attackers had access to the CPNI (Customer Proprietary Network Information).

Data breaches 132

Data breaches Mobile Telecommunications Wireless 132

Security Affairs

JULY 10, 2021

Mint Mobile discloses a data breach, an unauthorized attacker gained access to subscribers’ account information and ported phone numbers. Mint Mobile is an American telecommunications company which sells mobile phone services and operates as an MVNO on T-Mobile’s cellular network in the United States.

Mobile 136

Mobile Data breaches Telecommunications Passwords 136

Security Affairs

JANUARY 7, 2024

The group targets government entities, Kurdish (political) groups like PKK, telecommunication, ISPs, IT-service providers (including security companies), NGO, and Media & Entertainment sectors; Over the years, the group enhanced its evasion capabilities.

Media 109

Media Accountability Telecommunications Government 109

Security Affairs

DECEMBER 14, 2022

Some of the most popular brands don’t enforce a strong password policy, meaning anyone can peer into their owners’ lives. While the default security settings have improved over the review period, some popular brands either offer default passwords or no authentication, meaning anyone can spy on the spies.

Surveillance 127

Surveillance Manufacturing Passwords Internet 127

Security Affairs

APRIL 11, 2020

“The attackers inserted malicious computer code on these websites to steal some users’ login credentials,” reads a message posted to both site’s by the SFO’s Airport Information Technology and Telecommunications (ITT) director. In response to the incident, the SFO Airport reset all email and network passwords.

Data breaches 140

Data breaches Hacking Telecommunications Passwords 140

Security Affairs

MARCH 10, 2023

AT&T is warning some of its customers that some of their information was exposed after the hack of a third-party vendor’s system. AT&T is notifying millions of customers that some of their information was exposed after a third-party vendor was hacked. ”​ Exposed data don’t include financial information (i.e.

Data breaches 89

Data breaches Hacking Wireless Telecommunications 89

Security Affairs

FEBRUARY 27, 2021

The telecommunications giant T-Mobile disclosed a data breach after some of its customers were apparently affected by SIM swap attacks. The telecommunications provider T-Mobile has disclosed a data breach after it became aware that some of its customers were allegedly victims of SIM swap attacks.

Mobile 89

Mobile Telecommunications Data breaches Identity Theft 89

Security Affairs

MAY 1, 2024

The experts noticed that the infection chain was distinct, with 99% of infections originating in Turkey, primarily from two major telecommunications providers. The malware passively monitors network packets for “credential markers,” including usernames, passwords, and authentication tokens.

Malware 99

Malware DNS Authentication Telecommunications 99

Security Affairs

AUGUST 18, 2021

million current T-Mobile postpaid customer accounts’ information appears to be contained in the stolen files, as well as just over 40 million records of former or prospective customers who had previously applied for credit with T-Mobile. . “Our preliminary analysis is that approximately 7.8

Data breaches 99

Data breaches Mobile Telecommunications Wireless 99

Security Affairs

MARCH 16, 2020

Hackers have stolen O2 customers’ data from a database run by Aerial Direct , one of the largest UK partners of the telecommunications services provider. “We recently became aware that some of our customers’ personal information stored on one of our databases has been accessed without permission. Pierluigi Paganini.

Data breaches 105

Data breaches Telecommunications Passwords Advertising 105

Security Affairs

OCTOBER 19, 2021

Symantec spotted a previously unknown nation-state actor, tracked as Harvester, that is targeting telecommunication providers and IT firms in South Asia. Sectors targeted include telecommunications, government, and information technology (IT). At this time, the APT group is mostly targeting organizations in Afghanistan.

Telecommunications 96

Telecommunications Government Malware Encryption 96

CyberSecurity Insiders

DECEMBER 12, 2021

The channel’s security must be impenetrable. They generally get into your system by guessing the password, leveraging API loopholes, or exploiting bad codes. For a channel to be secure, it should be reliable and trustworthy. The Best Ways to Secure Communication Channels . You can share passwords and secret notes.

VPN 107

VPN Passwords Encryption Mobile 107

Security Affairs

DECEMBER 31, 2020

The Emotet campaign uses malicious emails that attempt to trick recipients into opening the zipped archive with the password included in the message. Emails accessed in this way require user action: open the file, unzip it with a password. Emails accessed in this way require user action: open the file, unzip it with a password.

Passwords 100

Passwords Malware Telecommunications Banking 100

Security Affairs

FEBRUARY 10, 2022

Do not provide your mobile number account information over the phone to representatives that request your account password or pin. Avoid posting personal information online, such as mobile phone number, address, or other personal identifying information. Use a variation of unique passwords to access online accounts.

Mobile 90

Mobile Cryptocurrency Authentication Accountability 90

Security Affairs

OCTOBER 31, 2019

. “As many as 95% of the credentials contained unencrypted, or bruteforced and cracked by the attackers, plaintext passwords.” ” The following table shows stolen credentials per industry: Most of the login credentials (95%) include plaintext passwords, 76% of them were compromised during the last 12 months.

Passwords 75

Passwords Telecommunications Advertising Retail 75

Security Affairs

MARCH 12, 2022

. “Last week, Ubisoft experienced a cyber security incident that caused temporary disruption to some of our games, systems, and services. As a precautionary measure we initiated a company-wide password reset.” Their scope of interests includes – major telecommunications companies such as Claro, Telefonica and AT&T.

Data breaches 88

Data breaches Telecommunications Hacking Cyber Attacks 88

Security Affairs

NOVEMBER 22, 2019

The US branch of the telecommunications giant T -Mobile disclosed a security breach that according to the company impacted a small number of customers of its prepaid service. The cybersecurity team at T-Mobile discovered an unauthorized access to information associated with a limited number of its prepaid wireless account customers.

Wireless 96

Wireless Data breaches Mobile Telecommunications 96

Security Affairs

OCTOBER 25, 2021

NOBELIUM focuses on government organizations, non-government organizations (NGOs), think tanks, military, IT service providers, health technology and research, and telecommunications providers.

Telecommunications 106

Telecommunications Technology Hacking Malware 106

Security Affairs

OCTOBER 18, 2021

Sinclair Broadcast Group is a Fortune 500 media company, the group is a publicly-traded American telecommunications conglomerate having annual revenues of $5.9 In July, the company suffered another security incident, in response to the security breach it forced all Sinclair stations to reset their passwords.

Ransomware 84

Ransomware Media Telecommunications Marketing 84

Security Affairs

AUGUST 27, 2019

The activity of the Lyceum APT group was first documents earlier of August by researchers at ICS security firm Dragos that tracked it as Hexane. Security experts at Dragos Inc. reported that Hexane is targeting organizations in the oil and gas industry and telecommunication providers. Another tool used by the group is kl.

DNS 81

DNS Passwords Penetration Testing Social Engineering 81

Security Affairs

APRIL 15, 2020

“The attackers inserted malicious computer code on these websites to steal some users’ login credentials,” reads a message posted to both site’s by the SFO’s Airport Information Technology and Telecommunications (ITT) director. In response to the incident, the SFO Airport reset all email and network passwords.

Data breaches 115

Data breaches Passwords Telecommunications Advertising 115

Security Affairs

JUNE 25, 2020

Just after the WorldNet Telecommunications, the LG electronics fall as a victim of the Maze ransomware operators.” . “As part of our regular darkweb monitoring, our researchers came across the data leak of LG Electronics been published by the Maze ransomware operators. ” reads the post published by Cyble.

Computers and Electronics 101

Computers and Electronics Ransomware Mobile Telecommunications 101

Security Affairs

JULY 13, 2019

“ Malware then guesses routers’ passwords , which new research from Avast shows are often weak. The router attacks involved an exploit kit that attempts to find the router IP on a network, then attempts to guess the password using common login credentials. ” reads a blog post published by Avast. concludes Avast.

DNS 72

DNS Passwords Advertising Banking 72

Security Affairs

OCTOBER 13, 2021

The experts analyzed the case of a campaign targeting the customers of the telecommunication giant Verizon, attackers used a square root symbol, a logical NOR operator, or the checkmark symbol itself. The trick adopted by the crooks aims at creating a sort of optical interference that could allow bypassing anti-spam solutions.

Phishing 87

Phishing Telecommunications Accountability Marketing 87

SecureList

DECEMBER 12, 2023

To find out, in 2022 we created a list of 700 companies worldwide from different industries: industrial, telecommunication, financial, retail, and others. In the case of leakage, there is no time to regret your unrealized security controls or not conducted information security training. And what you should do with it?

Data breaches 80

Data breaches Accountability Telecommunications Malware 80

eSecurity Planet

MARCH 7, 2023

For example, some methods meet national security and federal standards, while others are focused on private companies. NIST Developed by NIST, an agency of the United States Department of Commerce, NIST Special Publication 800-115 , Technical Guide to Information Security Testing and Assessment is the most specific from start to finish.

Penetration Testing 98

Penetration Testing Wireless Passwords Social Engineering 98

The Security Ledger

MARCH 13, 2019

» Related Stories Podcast Episode 129: Repair Eye on the CES Guy and Sensor Insecurity EU calls for End to Default Passwords on Internet of Things Podcast Episode 134: The Deep Fake Threat to Authentication and analyzing the PEAR Compromise. Forget about Congress’s latest attempt to regulate IoT security. Here’s why.

IoT 40

IoT Cybersecurity Internet Internet 40

Krebs on Security

APRIL 11, 2024

New York City based Sisense has more than 1,000 customers across a range of industry verticals, including financial services, telecommunications, healthcare and higher education. ” “We are taking this matter seriously and promptly commenced an investigation,” Dash continued.

CISO 251

CISO Encryption Telecommunications Financial Services 251

Security Boulevard

MARCH 24, 2022

The German Federal Office for Information Security (BSI) issued a warning about the use of Kaspersky products. [ In a post made in a Telegram group - allegedly run by the actor - the adversary recruits employees working at telecommunication, technology, or software companies.

Ransomware 59

Ransomware Malware Government Antivirus 59

Security Affairs

JUNE 25, 2019

Once compromised the networks of telecommunication companies, attackers can access to mobile phone users’ call data records. “Based on the data available to us, Operation Soft Cell has been active since at least 2012, though some evidence suggests even earlier activity by the threat actor against telecommunications providers.

Telecommunications 74

Telecommunications Hacking Mobile Advertising 74

Security Affairs

DECEMBER 15, 2021

Researchers uncovered a new Seedworm campaign targeting telecommunication and IT service providers in the Middle East and Asia. In the recent campaign against telecommunication, the attackers may have attempted to pivot to other targets by connecting to the Exchange Web Services (EWS) of other organizations.

Telecommunications 91

Telecommunications Passwords Phishing Hacking 91

Spinone

DECEMBER 26, 2018

Cyber threat management , being an advanced discipline, craves analytical attention and a commander’s strategic skills of information security executives to confront and overcome the multi-dimensional cyber threats.

Security Awareness 40

Security Awareness Risk Cyber threats Cyber Risk 40

Security Affairs

OCTOBER 25, 2021

The Red Team Research (RTR), the bug’s research division from Italian Telecommunication firm TIM, found 2 new vulnerabilities affecting the Ericsson OSS-RC. What is the OSS (Operations Support System)? The Operations Support System – Radio and Core (OSS-RC) provides a centralized interface into the radio and core components. CVE-2021-32571.

Telecommunications 87

Telecommunications Software Passwords Hacking 87

Security Affairs

JANUARY 20, 2023

T-Mobile suffered a new data breach, threat actor stole the personal information of 37 million current postpaid and prepaid customer accounts. The telecommunications company discovered the intrusion on January 5, 2023, the attackers obtained data through a single Application Programming Interface (“API”) without authorization.

Data breaches 74

Data breaches Mobile Accountability Telecommunications 74