A week in security (January 16—22)

Categories: News

Tags: Google

Tags: Rust

Tags: Chromium

Tags: Mailchimp

Tags: SweepWizard

Tags: bossware

Tags: TikTok

Tags: surveillance firm

Tags: Voyager Labs

Tags: TracketPacer

Tags: Facebook

Tags: Instagram

Tags: Vice Society

Tags: Liquor Control Board of Ontario

Tags: Zoho ManageEngine

Tags: GitHub

Tags: LastPass

Tags: Git flaw

Tags: ransomware

Tags: credit card fraud

The most interesting security related news from the week of January 16-22.

(Read more…)

The post A week in security (January 16—22) appeared first on Malwarebytes Labs.

Read more

Credit card fraud group member could get up to 30 years in jail

Categories: News

Tags: new york

Tags: card fraud

Tags: credit card

Tags: US

Tags: credit cards

We take a look at a New York based credit card fraud group, and see how the justice system is slowly taking it to task.

(Read more…)

The post Credit card fraud group member could get up to 30 years in jail appeared first on Malwarebytes Labs.

Read more

Ransomware money laundering operation disrupted, founder arrested

Categories: News

Categories: Ransomware

Tags: Cryptocurrency exchange

Tags: Bitzlato

Tags: Conti

Tags: ransomware

Tags: Hydra

Tags: dark web marketplace

The China-based cryptocurrency exchange Bitzlato is accused of processing over $700 million of illicit funds.

(Read more…)

The post Ransomware money laundering operation disrupted, founder arrested appeared first on Malwarebytes Labs.

Read more

Google sponsored ads lead to rogue imitation sites

Categories: News

Tags: google

Tags: ads

Tags: advert

Tags: paid

Tags: sponsored

Tags: result

Tags: listing

Tags: rogue

Tags: malware

Tags: NFT

Tags: phish

Tags: phishing

Tags: data theft

Tags: infostealer

We take a look at a flurry of reports relating to fake products being pushed via sponsored ads in Google search.

(Read more…)

The post Google sponsored ads lead to rogue imitation sites appeared first on Malwarebytes Labs.

Read more

LastPass users should move their crypto funds, experts warn

Categories: News

Tags: LastPass

Tags: breach

Tags: cryptocurrency

Tags: unencrypted data

Tags: vault

Tags: secret key

Tags: lawsuit

Experts are warning LastPass users to move their crypto funds since there are plenty of indications that the breach is actively being exploited against cryptocurrency owners

(Read more…)

The post LastPass users should move their crypto funds, experts warn appeared first on Malwarebytes Labs.

Read more

Update now! Proof of concept code to be released for Zoho ManageEngine vulnerability

Categories: Exploits and vulnerabilities

Categories: News

Tags: Zoho

Tags: ManageEngine

Tags: PoC

Tags: RCE

Tags: CVE-2022-47966

Tags: CVE-2022-35405

Tags: SAML

Tags: Apache Santuario

Proof of Concept code is about to be released for a vulnerability in many ManageEngine products which could enable RCE with SYSTEM privileges.

(Read more…)

The post Update now! Proof of concept code to be released for Zoho ManageEngine vulnerability appeared first on Malwarebytes Labs.

Read more

University suffers leaks, shutdowns at the hands of Vice Society

Categories: News

Tags: vice society

Tags: ransomware

Tags: university

Tags: leak

Tags: data

Tags: locked

Tags: encrypted

Tags:

We take a look at the devastating impact of a ransomware attack on a University which includes leaks and network destruction.

(Read more…)

The post University suffers leaks, shutdowns at the hands of Vice Society appeared first on Malwarebytes Labs.

Read more

“Untraceable” surveillance firm sued for scraping Facebook and Instagram data

Categories: News

Tags: Voyager Labs

Tags: Facebook

Tags: Instagram

Tags: Meta

Tags: surveillance tool

Tags: data scraping

Voyager Labs, a surveillance firm, allegedly created thousands of Facebook and Instagram accounts so it could use its scraping tool to steal data.

(Read more…)

The post “Untraceable” surveillance firm sued for scraping Facebook and Instagram data appeared first on Malwarebytes Labs.

Read more