September 17, 2022

The Week in Ransomware – September 16th 2022 – Iranian Sanctions It has been a fairly quiet week on the ransomware front, with the biggest news being US sanctions on Iranians linked to ransomware attacks. On Wednesday, the US Treasury Department announced sanctions against Iranians affiliated with Iran’s Islamic Revolutionary Guard Corps Read more…

LastPass says Hackers had Internal Access for Four days LastPass says the attacker behind the August security breach had internal access to the company’s systems for four days until they were detected and evicted. In an update to the security incident notification published last month, Lastpass’ CEO Karim Toubba also Read more…

CISA Orders Agencies to Patch Vulnerability Used in Stuxnet Attacks The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added half a dozen vulnerabilities to its catalog of Known Exploited Vulnerabilities and is ordering federal agencies to follow vendor’s instructions to fix them. Of the six security flaws, only one Read more…

Hacker sells stolen Starbucks data of 219,000 Singapore customers The Singapore division of Starbucks, the popular American coffeehouse chain, has admitted that it suffered a data breach incident impacting over 219,000 of its customers. The first clue that they were breached came on September 10, when a threat actor offered Read more…

Bitdefender Releases Free Decryptor for LockerGoga Ransomware Romanian cybersecurity firm Bitdefender has released a free decryptor to help LockerGoga ransomware victims recover their files without paying a ransom. The free tool is available for download from Bitdefender’s servers and allows you to recover encrypted files using instructions in this usage guide [PDF]. Read more…

Uber Hacked, Internal Systems Breached and Vulnerability Reports Stolen Uber suffered a cyberattack Thursday afternoon with an allegedly 18-year-old hacker downloading HackerOne vulnerability reports and sharing screenshots of the company’s internal systems, email dashboard, and Slack server. The screenshots shared by the hacker and seen by BleepingComputer show what appears Read more…

Hackers Trojanize PuTTY SSH Client to Backdoor Media Company North Korean hackers are using trojanized versions of the PuTTY SSH client to deploy backdoors on targets’ devices as part of a fake Amazon job assessment. A novel element in this campaign is the use of a trojanized version of the Read more…

Hive Ransomware Claims Cyberattack on Bell Canada Subsidiary The Hive ransomware gang claimed responsibility for an attack that hit the systems of Bell Canada subsidiary Bell Technical Solutions (BTS). BTS is an independent subsidiary with more than 4,500 employees, specializing in installing Bell services for residential and small business customers Read more…

Akamai Stopped New Record-breaking DDoS Attack in Europe A new distributed denial-of-service (DDoS) attack that took place on Monday, September 12, has broken the previous record that Akamai recorded recently in July. DDoS attacks are cyberattacks that flood servers with fake requests and garbage traffic, rendering them unavailable to legitimate Read more…