2017 - Cyber Security Informer

U.S. Charges 4 Chinese Military Officers in 2017 Equifax Hack

Krebs on Security

FEBRUARY 10, 2020

Justice Department today unsealed indictments against four Chinese officers of the People’s Liberation Army (PLA) accused of perpetrating the 2017 hack against consumer credit bureau Equifax that led to the theft of personal data on nearly 150 million Americans. Compounding the confusion, on Sept.

Hacking

Hacking Identity Theft Government Phishing

2017 ODNI Memo on Kaspersky Labs

Schneier on Security

JULY 23, 2024

It’s heavily redacted , but still interesting. Many more ODNI documents here.

Chinese EagleMsgSpy Spyware Found Exploiting Mobile Devices Since 2017

The Hacker News

DECEMBER 11, 2024

The Android tool, codenamed EagleMsgSpy by Lookout, has been operational since at least 2017, with artifacts uploaded to the VirusTotal malware scanning platform as recently as

Mobile

Mobile Spyware Surveillance Malware

Documented Death from a Ransomware Attack

Schneier on Security

SEPTEMBER 23, 2020

UK hospitals had to redirect patients during the 2017 WannaCry ransomware attack , but there were no documented fatalities from that event. A Dusseldorf woman died when a ransomware attack against a hospital forced her to be taken to a different hospital in another city. The police are treating this as a homicide.

Ransomware

Ransomware Hacking

On Not Fixing Old Vulnerabilities

Schneier on Security

MARCH 9, 2021

WannaCry was a 2017 cyberattack, based on a NSA-discovered and Russia-stolen-and-published Windows vulnerability. Even if we assume that the report is self-serving to the company that wrote it, and that the statistic is not generally representative, this is still a disaster. The number should be 0%.

Technology

Technology Software Malware

Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax

Krebs on Security

JULY 1, 2021

Equifax’s 2017 megabreach that exposed the personal and financial details of 145.5 million Americans may have shocked the public, but it did little to stop more than a million employers from continuing to sell Equifax their employee payroll data, Bloomberg found in late 2017. Intuit’s FAQ on the changes is here.

Small Business

Small Business Financial Services Government Media

Microsoft Patches ‘Wormable’ Flaw in Windows XP, 7 and Windows 2003

Krebs on Security

MAY 14, 2019

Microsoft today is taking the unusual step of releasing security updates for unsupported but still widely-used Windows operating systems like XP and Windows 2003 , citing the discovery of a “wormable” flaw that the company says could be used to fuel a fast-moving malware threat like the WannaCry ransomware attacks of 2017.

Malware

Malware Ransomware Authentication

Chinese Hackers Stole an NSA Windows Exploit in 2014

Schneier on Security

MARCH 4, 2021

Early 2017: The Equation Group’s tools were teased and then leaked online by a team calling itself the Shadow Brokers. Around that time, Microsoft cancelled its February Patch Tuesday, identified the vulnerability exploited by EpMe (CVE-2017-0005), and fixed it in a bumper March update. Lots of news articles about this.

System Administration

System Administration Government Hacking

Backdoor Built into Android Firmware

Schneier on Security

JUNE 21, 2019

In 2017, some Android phones came with a backdoor pre-installed : Criminals in 2017 managed to get an advanced backdoor preinstalled on Android devices before they left the factories of manufacturers, Google researchers confirmed on Thursday. That meant the malware could directly tamper with every installed app.

Firmware

Firmware Manufacturing Malware Mobile

Fileless Remcos RAT Campaign Leverages CVE-2017-0199 Flaw

Penetration Testing

SEPTEMBER 12, 2024

In a newly uncovered advanced malware campaign, threat actors are using a complex, fileless approach to deliver the Remcos Remote Access Trojan (RAT), leveraging a benign-looking Excel document as the... The post Fileless Remcos RAT Campaign Leverages CVE-2017-0199 Flaw appeared first on Cybersecurity News.

Malware

Malware Cybersecurity

Malicious Barcode Scanner App

Schneier on Security

FEBRUARY 16, 2021

It’s been around since 2017 and is owned by the Ukrainian company Lavabird Ldt. Interesting story about a barcode scanner app that has been pushing malware on to Android phones. The app is called Barcode Scanner.

Advertising

Advertising Malware

Someone Is Running Lots of Tor Relays

Schneier on Security

DECEMBER 7, 2021

Since 2017, someone is running about a thousand — 10% of the total — Tor servers in an attempt to deanonymize the network: Grouping these servers under the KAX17 umbrella, Nusenu says this threat actor has constantly added servers with no contact details to the Tor network in industrial quantities, operating servers in the realm of hundreds (..)

Hacking the Tax Code

Schneier on Security

FEBRUARY 10, 2023

A recent example comes from the 2017 Tax Cuts and Jobs Act. companies avoided paying nearly US$200 billion in taxes in 2017 alone. That same 2017 U.S. That 2017 earned income tax bug for military families hasn’t yet been fixed. The 2017 tax law capped income tax deductions for property taxes.

Hacking

Hacking Artificial Intelligence Government Software

Theft of CIA's "Vault Seven" Hacking Tools Due to Its Own Lousy Security

Schneier on Security

JUNE 18, 2020

The Washington Post is reporting on an internal CIA report about its "Vault 7" security breach: The breach -- allegedly committed by a CIA employee -- was discovered a year after it happened, when the information was published by WikiLeaks, in March 2017. The anti-secrecy group dubbed the release " Vault 7 ," and U.S.

Hacking

Hacking Cybersecurity

CASMM (The Consumer Authentication Strength Maturity Model)

Daniel Miessler

MARCH 24, 2021

Related posts: My RSA 2017 Recap. Try not to skip steps, i.e., it’s best to make the move to unique, quality passwords stored in a manager before you add 2FA. Thanks to Troy Hunt, Anton Chuvakin, and Tim Dierks for spawning the idea for this. The Real Internet of Things: Details and Examples.

Authentication

Authentication Passwords Internet Internet

The Equifax Breach Settlement Offer is Real, For Now

Krebs on Security

DECEMBER 20, 2022

Millions of people likely just received an email or snail mail notice saying they’re eligible to claim a class action payment in connection with the 2017 megabreach at consumer credit bureau Equifax. Justice Department indicted four Chinese officers of the People’s Liberation Army (PLA) for perpetrating the 2017 Equifax hack.

Identity Theft

Identity Theft Data breaches Data collection Hacking

Two Russians Charged in $17M Cryptocurrency Phishing Spree

Krebs on Security

SEPTEMBER 16, 2020

authorities today announced criminal charges and financial sanctions against two Russian men accused of stealing nearly $17 million worth of virtual currencies in a series of phishing attacks throughout 2017 and 2018 that spoofed websites for some of the most popular cryptocurrency exchanges.

Cryptocurrency

Cryptocurrency Phishing Accountability Cybercrime

Investment Scammer John Davies Reinvents Himself?

Krebs on Security

MAY 7, 2021

The company’s website says Hempton has been around since 2017, but the domain name was only registered in late November 2020. This 2017 story from New Zealand financial news site interest.co.nz Kulikova deleted Bernard’s former companies from her LinkedIn profile shortly after last year’s series). Hemptonllp[.]com

Scams

Scams Cryptocurrency Advertising Marketing

Cybersecurity Firm Imperva Discloses Breach

Krebs on Security

AUGUST 27, 2019

“On August 20, 2019, we learned from a third party of a data exposure that impacts a subset of customers of our Cloud WAF product who had accounts through September 15, 2017,” wrote Heli Erickson , director of analyst relations at Imperva.

Cybersecurity

Cybersecurity Firewall Passwords Data breaches

Interview with the Head of the NSA’s Research Directorate

Schneier on Security

FEBRUARY 3, 2022

. “Everyone thinks their data is the messiest in the world, and mine maybe is because it’s taken from people who don’t want us to have it, frankly,” said Herrera’s immediate predecessor at the NSA, the computer scientist Deborah Frincke, during a 2017 talk at Stanford.

Big data

Big data Surveillance Technology Data collection

Russian Operator of BTC-e Crypto Exchange Pleads Guilty to Money Laundering

The Hacker News

MAY 7, 2024

A Russian operator of a now-dismantled BTC-e cryptocurrency exchange has pleaded guilty to money laundering charges from 2011 to 2017. Alexander Vinnik, 44, was charged in January 2017 and taken into custody in Greece in July 2017. He was subsequently extradited to the U.S. in August 2022.

Cryptocurrency

More on the SolarWinds Breach

Schneier on Security

DECEMBER 17, 2020

One of those offering claimed access over the Exploit forum in 2017 was known as “fxmsp” and is wanted by the FBI “for involvement in several high-profile incidents,” said Mark Arena, chief executive of cybercrime intelligence firm Intel471.

Software

Software Passwords Cybercrime Government

Merck Wins Insurance Lawsuit re NotPetya Attack

Schneier on Security

JANUARY 25, 2022

billion in business interruption losses from the Notpetya cyber attack of 2017 which were claimed against “all risks” property re/insurance policies providing coverage for losses resulting from destruction or corruption of computer data and software. Merck suffered US$1.4

Insurance

Insurance Cyber Attacks Government Malware

Booter Boss Busted By Bacon Pizza Buy

Krebs on Security

FEBRUARY 4, 2020

That’s interesting because the article in question was actually a 2017 KrebsOnSecurity story about a mobile app tied to a competing booter service that happened to share some of the same content as Quantum Stresser. Attorney Adam Alexander.

Internet

Internet Internet Government Accountability

NSA on Authentication Hacks (Related to SolarWinds Breach)

Schneier on Security

DECEMBER 18, 2020

This SAML forgery technique has been known and used by cyber actors since at least 2017.

Authentication

Authentication Hacking Accountability Cybersecurity

Medical Debt Collection Firm R1 RCM Hit in Ransomware Attack

Krebs on Security

AUGUST 14, 2020

Defray was first spotted in 2017, and its purveyors have a history of specifically targeting companies in the healthcare space. R1 RCM declined to discuss the strain of ransomware it is battling or how it was compromised. Sources close to the investigation tell KrebsOnSecurity the malware is known as Defray.

Ransomware

Ransomware Healthcare Insurance Phishing

KrebsOnSecurity in New Netflix Series on Cybercrime

Krebs on Security

JUNE 7, 2022

But these dangerous hoaxes can quickly turn deadly: In March 2019, 26-year-old serial swatter Tyler Barriss was sentenced to 20 years in prison for making a phony emergency call to police in late 2017 that resulted in the shooting death of an innocent Kansas resident.

Cybercrime

Cybercrime Internet Internet Web Fraud

MyEquifax.com Bypasses Credit Freeze PIN

Krebs on Security

MARCH 8, 2019

In the wake of Equifax’s epic 2017 data breach impacting some 148 million Americans, many people did freeze their credit files at the big three in response. This has been the reality for years, and was so well before Equifax announced its big 2017 breach. Consumers in every U.S. But Equifax has changed a few things since then.

Accountability

Accountability Identity Theft Authentication Passwords

Analyzing IoT Security Best Practices

Schneier on Security

JUNE 25, 2020

Back in 2017, I catalogued nineteen security and privacy guideline documents for the Internet of Things. We hope that our work provides a basis for the community to build on in order to better understand best practices, identify and reach consensus on specific practices, and then find ways to motivate relevant stakeholders to follow them.

IoT

IoT Manufacturing Internet Internet

UK Ad Campaign Seeks to Deter Cybercrime

Krebs on Security

MAY 28, 2020

The ad campaign follows a similar initiative launched in late 2017 that academics say measurably dampened demand for such services by explaining that their use to harm others is illegal and can land potential customers in jail. For example, search in Google for the terms “booter” or “stresser” from a U.K.

Cybercrime

Cybercrime DDOS Advertising Hacking

SecureMySocial Issued 5th US Patent For Social Media Security Technology

Joseph Steinberg

DECEMBER 2, 2022

US 9,813,419 – Granted in November of 2017. Those patents, all of which are entitled Systems and Methods for Securing Social Media for Users and Businesses and Rewarding for Enhances Security , bear the following numbers and issue dates: 1. US 9,374,374 – Granted in June of 2016. US 10,771,464 – Granted in September 2020.

Media

Media Technology Artificial Intelligence Risk

Body Found in Canada Identified as Neo-Nazi Spam King

Krebs on Security

NOVEMBER 8, 2020

Homicide detectives said they originally thought the man found June 14, 2017 in a torched SUV on a logging road in Squamish, British Columbia was a local rock climber known to others in the area as a politically progressive vegan named Jesse James. in 1999, according to news reports. Davis Wolfgang Hawke.

Banking

Banking Government Technology

GhostRace – New Data Leak Vulnerability Affects Modern CPUs

The Hacker News

MARCH 15, 2024

Dubbed GhostRace (CVE-2024-2193), it is a variation of the transient execution CPU vulnerability known as Spectre v1 (CVE-2017-5753). A group of researchers has discovered a new data leakage attack impacting modern CPU architectures supporting speculative execution. The approach combines speculative execution and race conditions.

Architecture

Data Enrichment, People Data Labs and Another 622M Email Addresses

Troy Hunt

NOVEMBER 22, 2019

For example, there's Dun & Bradstreet's NetProspex which leaked 33M records in 2017 , Exactis who had 132M records breached last year and the Apollo data breach which exposed 126M accounts, one of which was my own.

Data breaches

Data breaches Technology Software Accountability

Spam Kingpin Peter Levashov Gets Time Served

Krebs on Security

JULY 20, 2021

Levashov was arrested in 2017 while in Barcelona, Spain with his family. According to a lengthy April 2017 story in Wired.com , he got caught because he violated a basic security no-no : He used the same log-in credentials to both run his criminal enterprise and log into sites like iTunes.

Antivirus

Antivirus Cybercrime Identity Theft Scams

Google Pixel Devices Shipped with Vulnerable App, Leaving Millions at Risk

The Hacker News

AUGUST 16, 2024

A large percentage of Google's own Pixel devices shipped globally since September 2017 included dormant software that could be used to stage nefarious attacks and deliver various kinds of malware.

Risk

Risk Malware Software

Telegram Offers Premium Subscription in Exchange for Using Your Number to Send OTPs

The Hacker News

MARCH 28, 2024

In June 2017, a study of more than 3,000 Massachusetts Institute of Technology (MIT) students published by the National Bureau for Economic Research (NBER) found that 98% of them were willing to give away their friends' email addresses in exchange for free pizza.

Technology

EagleMsgSpy: Unmasking a Sophisticated Chinese Surveillance Tool

Penetration Testing

DECEMBER 11, 2024

The tool, operational since at least 2017,... The post EagleMsgSpy: Unmasking a Sophisticated Chinese Surveillance Tool appeared first on Cybersecurity News. Researchers at the Lookout Threat Lab have identified a sophisticated surveillance tool, dubbed EagleMsgSpy, reportedly used by law enforcement agencies in mainland China.

Surveillance

Surveillance Cybersecurity Spyware Malware

Who’s Behind the NetWire Remote Access Trojan?

Krebs on Security

MARCH 9, 2023

That Facebook profile is no longer active, but back in January 2017, the administrator of WorldWiredLabs posted that he was considering adding certain Android mobile functionality to his service. ’s Companies House shows that in 2017 Mr. Zanko became an officer in a company called Godbex Solutions LTD.

DNS

DNS Cybercrime Passwords Accountability

White House Announces AI Cybersecurity Challenge

Schneier on Security

AUGUST 21, 2023

China has been doing this every year since 2017.) I was a big fan of DARPA’s AI capture-the-flag event in 2016 , and am happy to see that DARPA is again inciting research in this area.

Cybersecurity

Cybersecurity Small Business Government Software

Actions Target Russian Govt. Botnet, Hydra Dark Market

Krebs on Security

APRIL 7, 2022

The other indictment named Russians affiliated with a skilled hacking group known as “Triton” or “Trisis,” which infected a Saudi oil refinery with destructive malware in 2017, and then attempted to do the same to U.S. energy facilities. and international companies and entities, including U.S. ” HYDRA. .

Marketing

Marketing Energy and Utilities Malware Ransomware

Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

The Hacker News

APRIL 10, 2023

Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware called Balada Injector since 2017. The massive campaign, per GoDaddy's Sucuri, "leverages all known and recently discovered theme and plugin vulnerabilities" to breach WordPress sites.

Malware

This Service Helps Malware Authors Fix Flaws in their Code

Krebs on Security

MAY 18, 2020

His final post on Exploit in May 2017 somewhat jokingly indicated he was joining an upstart ransomware affiliate program. 2016 and July 2017 that sought to corner the increasingly lucrative and competitive market for ransomware-as-a-service offerings. RANSOMWARE DREAMS.

Malware

Malware Cybercrime Ransomware Marketing

Due Diligence That Money Can’t Buy

Krebs on Security

SEPTEMBER 14, 2020

Another “capital investment” company tied to John Bernard’s Swiss address is liftinvest.ch , which was registered in November 2017. Another Seychelles concern tied to Mr. Bibi was effectivebets.com , which in 2017 and 2018 promoted sports betting via cryptocurrencies and offered tips on picking winners.

Scams

Scams Cryptocurrency Accountability Technology

U.S. Charges 4 Chinese Military Officers in 2017 Equifax Hack

2017 ODNI Memo on Kaspersky Labs

Trending Sources

Chinese EagleMsgSpy Spyware Found Exploiting Mobile Devices Since 2017

Documented Death from a Ransomware Attack

On Not Fixing Old Vulnerabilities

Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax

Microsoft Patches ‘Wormable’ Flaw in Windows XP, 7 and Windows 2003

Chinese Hackers Stole an NSA Windows Exploit in 2014

Backdoor Built into Android Firmware

Fileless Remcos RAT Campaign Leverages CVE-2017-0199 Flaw

Malicious Barcode Scanner App

Someone Is Running Lots of Tor Relays

Hacking the Tax Code

Theft of CIA's "Vault Seven" Hacking Tools Due to Its Own Lousy Security

CASMM (The Consumer Authentication Strength Maturity Model)

The Equifax Breach Settlement Offer is Real, For Now

Two Russians Charged in $17M Cryptocurrency Phishing Spree

Investment Scammer John Davies Reinvents Himself?

Cybersecurity Firm Imperva Discloses Breach

Interview with the Head of the NSA’s Research Directorate

Russian Operator of BTC-e Crypto Exchange Pleads Guilty to Money Laundering

More on the SolarWinds Breach

Merck Wins Insurance Lawsuit re NotPetya Attack

Booter Boss Busted By Bacon Pizza Buy

NSA on Authentication Hacks (Related to SolarWinds Breach)

Medical Debt Collection Firm R1 RCM Hit in Ransomware Attack

KrebsOnSecurity in New Netflix Series on Cybercrime

MyEquifax.com Bypasses Credit Freeze PIN

Analyzing IoT Security Best Practices

UK Ad Campaign Seeks to Deter Cybercrime

SecureMySocial Issued 5th US Patent For Social Media Security Technology

Body Found in Canada Identified as Neo-Nazi Spam King

GhostRace – New Data Leak Vulnerability Affects Modern CPUs

Data Enrichment, People Data Labs and Another 622M Email Addresses

Spam Kingpin Peter Levashov Gets Time Served

Google Pixel Devices Shipped with Vulnerable App, Leaving Millions at Risk

Telegram Offers Premium Subscription in Exchange for Using Your Number to Send OTPs

EagleMsgSpy: Unmasking a Sophisticated Chinese Surveillance Tool

Who’s Behind the NetWire Remote Access Trojan?

White House Announces AI Cybersecurity Challenge

Actions Target Russian Govt. Botnet, Hydra Dark Market

Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

This Service Helps Malware Authors Fix Flaws in their Code

Due Diligence That Money Can’t Buy

Stay Connected