lapsus$

MalwareBytesSecurity

A week in security (October 17 – 23)

Categories: News

Tags: week in security

Tags: awis

Tags: typosquatting

Tags: cyberstalking

Tags: Snapchat

Tags: student loan relief scam

Tags: Gas

Tags: LAPSUS$

Tags: Microsoft

Tags: Ducktail

Tags: Venus

Tags: ransomware

Tags: BYOD

Tags: SMB security tips

Tags: Log4Text

Tags: DeadBolt

Tags: spot a scam

Tags: FaceStealer

Tags: fake tractor fraud

Tags: ThermoSecure

The most important and interesting computer security stories from the last week.

(Read more…)

The post A week in security (October 17 – 23) appeared first on Malwarebytes Labs.

Read More
SecuritySophos

Uber, Rockstar fall to social-engineering attacks; and you?

Credit to Author: Chester Wisniewski| Date: Thu, 22 Sep 2022 18:31:26 +0000

Security pros often talk of security being a process and a system, not a destination, and the recent news from Uber and Rockstar Games is just another example. Details are still emerging, but we can still analyze these breaches at a high level and apply these lessons to our own information security programs. Similar to […]

Read More
IndependentKrebs

DEA Investigating Breach of Law Enforcement Data Portal

Credit to Author: BrianKrebs| Date: Thu, 12 May 2022 11:00:30 +0000

The U.S. Drug Enforcement Administration (DEA) says it is investigating reports that hackers gained unauthorized access to an agency portal that taps into 16 different federal law enforcement databases. KrebsOnSecurity has learned the alleged compromise is tied to a cybercrime and online harassment community that routinely impersonates police and government officials to harvest personal information on their targets.

Read More
IndependentKrebs

Leaked Chats Show LAPSUS$ Stole T-Mobile Source Code

Credit to Author: BrianKrebs| Date: Fri, 22 Apr 2022 13:09:39 +0000

KrebsOnSecurity recently reviewed a copy of the private chat messages between members of the LAPSUS$ cybercrime group in the week leading up to the arrest of its most active members last month. The logs show LAPSUS$ breached T-Mobile multiple times in March, stealing source code for a range of company projects. T-Mobile says no customer or government information was stolen in the intrusion. LAPSUS$ is known for stealing data and then demanding a ransom not to publish or sell it. But the leaked chats indicate this mercenary activity was of little interest to the tyrannical teenage leader of LAPSUS$, whose obsession with stealing and leaking proprietary computer source code from the world’s largest tech companies ultimately led to the group’s undoing.

Read More