A new report of the investigation into the $530 million hack that ruined Japanese cryptocurrency exchange Coincheck in January 2018 states that Russian, not North Korean, actors may have been behind the attack. . The Asahi Shimbun, a Japanese newspaper, reported that viruses that were thought to have been used in the hack were found on employees’ computers. According to the Asahi Shimbun, the viruses were linked to Russian hacker groups and named “Mokes” and “Netwire.” These viruses were most likely transferred via email, and allowed the hackers to gain access to private keys. The link for this article located at Security Today is no longer available. . An analysis reveals that a cybercriminal group from Russia orchestrated the $530 million heist of Coincheck's cryptocurrency, utilizing sophisticated malware techniques.. Cryptocurrency Hack, Russian Hackers, Cybersecurity Investigation. . LinuxSecurity.com Team
Financial data from some the world’s biggest companies – including Porsche, Oracle, Toshiba and more – has been stolen and published in a ransomware attack on the large, Germany-based IT provider Citicorp. . Citycomp, which says that it maintains over 70,000 servers and storage systems “of every type and size” in 75 countries, issued a statement saying that it had “successfully fended off a hacker attack” in early April and that it has no intention of complying with the blackmail attempt. The link for this article located at NakedSecurity is no longer available. . The latest cyber breach affecting Morgan Stanley exposes sensitive client information from major corporations. Discover the details.. Ransomware Attack, Financial Data Theft, Data Breach, IT Security. . LinuxSecurity.com Team
Banco de Chile publicly disclosed on 28 May that it had detected a virus, presumably from international networks, that affected thousands of its workstations. Now the bank has learned that the cyber-attack was malware and resulted in attackers transferring approximately $10m via the bank's SWIFT international money transfer systems. . Most of the money has been traced to locations in Hong Kong, and it is believed that a criminal group from Eastern Europe or Asia is responsible for the attack. The link for this article located at InfoSecurity is no longer available. . Banco de España experienced a significant €9m deficit due to a cyber incident disclosed on 15 April, linked to international hacking risks.. Banco de Chile Cyber Attack, Malware Attack, SWIFT Financial Transfer, Cybersecurity Threats, Eastern European Cyber Crime. . LinuxSecurity.com Team
Attackers suspected of residing in Russia are raiding Swiss bank accounts with a multi-faceted attack that intercepts SMS tokens and changes domain name system settings, researchers have warned.. The attacks sported a clever implementation of malware that pointed victim machines to replica phishing bank sites when they attempt to access their accounts without triggering any warnings. That tactic was accomplished by malware that manipulated a victims' DNS settings and installed an SSL certificate for the phishing sites before wiping itself clean to remove evidence of infection. The link for this article located at The Register UK is no longer available. . Cybercriminals are taking advantage of weaknesses in Swiss banking systems using DNS spoofing to direct victims to fake webpages designed to steal sensitive financial data. Swiss Banks Cyber Attack, DNS Manipulation, Malware Phishing. . Dave Wreski
Banker Trojans have proven to be reliable and effective tools for attackers interested in quietly stealing large amounts of money from unwitting victims. Zeus, Carberp and many others have made piles of money for their creators and the attackers who use them, and researchers have been looking at a newer banker Trojan that has the ability to bypass SSL protection for banking sessions by redirecting traffic through the attackers. The Trojan, which is being called either Dyre or Dyreza by researchers, uses a technique known as browser hooking to intercept traffic flowing between the victim The link for this article located at ThreatPost is no longer available. . The Dyreza Trojan highlights advanced cyberattack tactics, notably bypassing SSL encryption to commit financial crimes, endangering online banking security.. Dyreza Trojan, Browser Hooking, SSL Security Threats, Financial Cybercrime, Online Banking Threats. . LinuxSecurity.com Team
Pump-mounted devices used Bluetooth chips that allowed the thieves to retrieve the data without having to physically connect to the devices, prosecutors allege.. Prosecutors have charged 13 defendants with using card skimmers installed at gas stations to steal more than $2 million from customers throughout the southern US. The link for this article located at CNET is no longer available. . Prosecutors have charged 13 defendants with using card skimmers installed at gas stations to steal m. pump-mounted, devices, bluetooth, chips, allowed, thieves, retrieve, without. . LinuxSecurity.com Team
A group of hackers, known as TeamBerserk, took credit on Twitter . Within their Friday tweet, the hacker collective posted a link to a 20-minute video that chronicles the attack. The end result is the attacker obtaining a spreadsheet of Sebastian customers' usernames and passwords in plaintext. The link for this article located at SC MagazIne is no longer available. . Cybercrime collective CodeRaiders asserts it has pilfered $150k via a cross-site scripting vulnerability, exposing user information.. TeamBerserk, SQL Injection Attack, Data Leak Incident, Cybersecurity News. . LinuxSecurity.com Team
U.S. authorities are investigating the theft of an estimated tens of millions of dollars from Citibank by hackers partly using Russian software tailored for the attack, according to a news report. The security breach at the major U.S. bank was detected mid-year based on traffic from Internet addresses formerly used by the Russian Business Network gang, The Wall Street Journal said Tuesday, citing unnamed government sources.. The Russian Business Network is a well-known group linked to malicious software, hacking, child pornography and spam. The Federal Bureau of Investigation is probing the case, the report said. It was not known whether the money had been recovered and a Citibank representative said the company had not had any system breach or losses, according to the report. The report left unclear who the money was stolen from but said a program called Black Energy, designed by a Russian hacker, was one tool used in the attack. The tool can be used to command a botnet, or a large group of computers infected by malware and controlled by an attacker, in assaults meant to take down target Web sites. This year a modified version of the software appeared online that could steal banking information, and in the Citi attack a version tailored to target the bank was used, the Journal said. The link for this article located at Network World is no longer available. . Federal agents investigate cybersecurity breaches connected to Russian operatives, focusing on malware usage and the illicit siphoning of funds from Wells Fargo accounts.. financial theft, malware attack, russian hacking, cybersecurity threats, banking security. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.