Latest Cybersecurity News and Articles

---

CBS, Paramount Owner National Amusements Says it was Hacked

National Amusements, the parent company of Paramount and CBS, has confirmed a data breach in which hackers stole personal information from 82,128 people. The breach occurred in December 2022 but was only discovered in August 2023.

---

Hackers Steal Customer Data From Europe’s Largest Parking App Operator

EasyPark Group, the owner of brands including RingGo and ParkMobile, said customer names, phone numbers, addresses, email addresses, and parts of credit card numbers had been taken but said parking data had not been compromised in the cyberattack.

---

Action Against Digital Skimming Reveals 443 Compromised Online Merchants

Europol, along with law enforcement authorities from 17 countries and the European Union Agency for Cybersecurity (ENISA), has partnered with private sector companies to combat digital skimming attacks.

---

Poorly Secured Linux SSH Servers Under Attack for Cryptocurrency Mining

Linux SSH servers with poor security are being targeted by cybercriminals to install port scanners and dictionary attack tools. The attackers aim to compromise other vulnerable servers and use them for cryptocurrency mining and DDoS attacks.

---

New Sneaky Xamalicious Android Malware Hits Over 327,000 Devices

A new Android backdoor has been discovered with potent capabilities to carry out a range of malicious actions on infected devices. Dubbed Xamalicious by the McAfee Mobile Research Team, the malware is so named for the fact that it's developed using an open-source mobile app framework called Xamarin and abuses the operating system's accessibility permissions to fulfill its objectives.

---

LockBit Gang Claims to Have Breached Accountancy Firm Xeinadin

The LockBit ransomware group has targeted Xeinadin, an accountancy firm with over 60,000 clients, and threatens to leak 1.5 terabytes of stolen customer data if not contacted by the company.

---

Biden Signs Short-Term FISA Extension Before Year-End Deadline

President Joe Biden has signed a short-term extension of surveillance efforts authorized under Section 702 of the FISA. The extension, which will keep digital snooping programs running until April 19, was included in the $886 billion NDAA.

---

Nissan Australia Cyberattack Claimed by Akira Ransomware Gang

Nissan is still investigating the cyberattack and working to restore affected systems in Australia and New Zealand, while also notifying authorities and warning customers to be vigilant for suspicious online activity.

---

Warning: Poorly Secured Linux SSH Servers Under Attack for Cryptocurrency Mining

Poorly secured Linux SSH servers are being targeted by bad actors to install port scanners and dictionary attack tools with the goal of targeting other vulnerable servers and co-opting them into a network to carry out cryptocurrency mining and distributed denial-of-service (DDoS) attacks. "Threat actors can also choose to install only scanners and sell the breached IP and account credentials on

---

Ubuntu Security Updates Fixed Vim Vulnerabilities

The vulnerabilities range from denial of service risks to arbitrary code execution possibilities. It emphasizes the importance of regularly updating Vim and applying security patches to mitigate these risks.

---

Mobile Virtual Network Operator Mint Mobile Discloses a Data Breach

The breach exposed customers' names, phone numbers, email addresses, SIM serial numbers, IMEI numbers, and service plan information. Importantly, financial data and passwords were not exposed in the breach.

---

Mend.io Acquires Cyber Startup Atom Security

The integration of Atom Security's technology into Mend.io's product line is expected to enhance coverage and reduce the number of irrelevant findings in code vulnerabilities.

---

Video Game Giant Ubisoft Investigates Reports of a Data Breach

On December 20, an unknown threat actor had access to Ubisoft's infrastructure for 48 hours. The attackers attempted to steal user data from the game R6 Siege but were unsuccessful.

---

Update: GTA 5 Source Code Reportedly Leaked Online a Year After Rockstar Hack

The source code for Grand Theft Auto 5 (GTA 5) has reportedly been leaked. This comes over a year after the Lapsus$ hacking group hacked Rockstar Games and stole company data.

---

Hackers steal customer data from Europe’s largest parking app operator

Owner of RingGo and ParkMobile says data including parts of credit card numbers taken in cyber-attackEurope’s largest parking app operator has reported itself to information regulators in the EU and UK after hackers stole customer data.EasyPark Group, the owner of brands including RingGo and ParkMobile, said customer names, phone numbers, addresses, email addresses and parts of credit card numbers had been taken but said parking data had not been compromised in the cyber-attack. Continue reading...

---

Carbanak Banking Malware Resurfaces with New Ransomware Tactics

The banking malware Carbanak has been observed in ransomware attacks with updated tactics. It has adapted to incorporate new attack vendors and techniques, making it more effective.

---

Stealth Android Backdoor Xamalicious Found Actively Infecting Devices

The Xamalicious backdoor, implemented with Xamarin, targets Android devices by gaining accessibility privileges and communicating with a C2 server to download a second-stage payload, potentially enabling fraudulent actions without user consent.

---

Nim-based Malware Distributed Using Microsoft Word Docs Impersonating the Nepali Government

The Nim-based backdoor communicates with command and control servers, evades analysis tools, and establishes persistence on the compromised machine through startup folders and scheduled tasks.

---

Operation RusticWeb Targets Indian Government Entities With Rust-Based Malware

The phishing emails trick victims into interacting with malicious PDF files that drop Rust-based payloads or PowerShell scripts, enabling the collection of confidential documents and system information.

---

The Rising Threat of Phishing Attacks with Crypto Drainers

The "Angel Drainer" phishing group is notorious for draining cryptocurrency wallets through sophisticated schemes, charging a percentage of the stolen amount from hackers.