March 30, 2022

FTC Sues Intuit for Misleading TurboTax ‘free tax filing’ Ads Today, the US Federal Trade Commission (FTC) sued Intuit, the maker of tax preparation software TurboTax, over deceptive advertising campaigns pitching free tax filing products that millions couldn’t use. As the consumer protection watchdog explained, Intuit allegedly pushed supposedly “free” Read more…

FBI Warns Election Officials of Credential Phishing Attacks The Federal Bureau of Investigation (FBI) warned US election officials on Tuesday of an ongoing and widespread phishing campaign trying to steal their credentials since at least October 2021. “If successful, this activity may provide cyber actors with sustained, undetected access to Read more…

Hackers Use Modified MFA tool Against Indian Govt Employees A new campaign from the hacking group tracked as APT36, aka ‘Transparent Tribe’ or’ Mythic Leopard,’ has been discovered using new custom malware and entry vectors in attacks against the Indian government. The particular threat actor has been active since at Read more…

CISA Warns of Attacks Targeting Internet-connected UPS Devices In a joint advisory with the Department of Energy, the Cybersecurity and Infrastructure Security Agency (CISA) warned U.S. organizations today to secure Internet-connected UPS devices from ongoing attacks. UPS devices are regularly used as emergency power backup solutions in mission-critical environments, including data centers, Read more…

Wyze Cam Flaw Lets Hackers Remotely Access your Saved Videos A Wyze Cam internet camera vulnerability allows unauthenticated, remote access to videos and images stored on local memory cards and has remained unfixed for almost three years. The bug, which has not been assigned a CVE ID, allowed remote users Read more…

Sophos Warns Critical Firewall Bug is Being Actively Exploited British-based cybersecurity vendor Sophos warned that a recently patched Sophos Firewall bug allowing remote code execution (RCE) is now actively exploited in attacks. The security flaw is tracked as CVE-2022-1040, and it received a critical severity rating with a 9.8/10 CVSS base score.  It enables remote Read more…

Europol Dismantles Massive Call Center Investment Scam Operation Europol has announced the arrest of 108 people suspected of being involved in an international call center operation that tricked victims into investment scams. The operation was conducted in collaboration with law enforcement from Lithuania and Latvia, who coordinated raids between March Read more…

Europol Dismantles Massive Call Center Investment Scam Operation Europol has announced the arrest of 108 people suspected of being involved in an international call center operation that tricked victims into investment scams. The operation was conducted in collaboration with law enforcement from Lithuania and Latvia, who coordinated raids between March Read more…

Verblecon Malware Loader Used in Stealthy Crypto Mining Attacks Security researchers are warning of a relatively new malware loader, that they track as Verblecon, which is sufficiently complex and powerful for rannsomware and erespionage attacks, although it is currently used for low-reward attacks. Verblecon was spotted earlier this year and Read more…