Latest

Breach Notification

PageUp Breach: Job Winners Hit Hardest

Jeremy Kirk  •  June 15, 2018

Nearly three weeks after human resources software vendor PageUp discovered malware on its system, the tally of what data was exposed remains unclear, although successful job applicants appear to have been hardest hit.

Authentication

Analysis: Distraction Tactics Used in Banco de Chile Hack

Nick Holland  •  June 15, 2018

Leading the latest edition of the ISMG Security Report: An analysis of how distraction tactics were used during a $10 million SWIFT-related hack at Banco de Chile. Also, a wrapup of Infosecurity Europe.

Anti-Malware

Banco de Chile Loses $10 Million in SWIFT-Related Attack

Jeremy Kirk  •  June 13, 2018

Banco de Chile has become the latest victim of a SWIFT-related malware incident. Attackers first corrupted thousands of PCs' master boot records as a distraction. Then they used fraudulent SWIFT messages to steal $10 million.

Breach Notification

PageUp Breach: Personal Data Exposed

Jeremy Kirk  •  June 12, 2018

PageUp, an HR software developer in Australia with clients worldwide, is warning that malware-wielding attackers may have accessed a raft of personal data stored in its systems. The breach may be the largest to have hit Australia since its mandatory data breach notification law went into effect in February.

Business Email Compromise (BEC)

74 Arrests in Business Email Compromise Takedown

Howard Anderson , Nick Holland  •  June 11, 2018

A six-month coordinated global law enforcement effort to crack down on business email compromise schemes has resulted in 74 arrests, the U.S. Department of Justice announced Monday.

Cyberwarfare / Nation-state attacks

US Imposes More Russian Sanctions for Cyberattacks

Nick Holland  •  June 11, 2018

The U.S. Treasury Department announced Monday that it has imposed sanctions on five Russian organizations and three individuals, the latest move by the Trump administration in response to Russian cyberattacks.

Cybercrime

Era of the eBay-Like Underground Markets Is Ending

Jeremy Kirk  •  June 8, 2018

The era of the underground marketplace may be ending as concerns over law enforcement infiltration rise, says threat intelligence company Digital Shadows. Cybercriminals' deals are shifting toward encrypted chat and other decentralized services, the company says.

Artificial Intelligence & Machine Learning

Analysis: Swiping Cryptocurrencies Through a Back Door

Nick Holland  •  June 8, 2018

Leading the latest edition of the ISMG Security Report: Our exclusive report on an Australian criminal investigation into a company that apparently swiped cryptocurrency using a software backdoor. Also, cutting through the hype on artificial intelligence and machine learning.

Breach Notification

HR Service Provider PageUp Discloses Data Breach

Jeremy Kirk  •  June 7, 2018

Australian HR service provider PageUp, which serves a variety organizations worldwide, says malicious software on its systems may have compromised client data as well as usernames and passwords. PageUp believes systems that store documents, resumes and employment contracts are not affected.

Anti-Fraud

Artificial Intelligence and Machine Learning: Beyond the Hype

Nick Holland  •  June 7, 2018

Companies offering cybersecurity products are using the terms "artificial intelligence" and "machine learning" in many different ways. But the real meanings of the terms are far more nuanced than marketing hyperbole would lead us to believe, says Grant Wernick of Insight Engines.

Application Security

RSA Fraud Report: Newsjacking-Based Phishing on the Rise

Nick Holland  •  June 6, 2018

RSA's most recent Quarterly Fraud Report shows that "newsjacking" is increasingly empowering phishing attacks, says Angel Grant, RSA's director of identity fraud and risk intelligence. The report also shows a continuing surge in mobile app fraud.

Anti-Money Laundering (AML)

Cryptocurrency: A Gold Mine for Open-Source Intelligence

Jeremy Kirk  •  June 4, 2018

Experts have long warned that bitcoin is not as private as it appears. The very design of bitcoin, as well as some other virtual currencies, can lend a surprising amount of information about the groups using it to transact. In fact, it's sometimes easier to track than if criminals used the banking system.