Magánszemélyeknek

Reuters reports that cryptocurrency mixing service Sinbad has been sanctioned by the U.S. government for facilitating the laundering of millions of dollars worth of cryptocurrency stolen by North Korea's Lazarus Group from cryptocurrency heists against Horizon Bridge, Axie Infinity, and other cryptocurrency platforms.

Threat actors have begun leveraging the critical Apache ActiveMQ vulnerability, tracked as CVE-2023-46604, to facilitate the distribution of the Golang-based GoTitan botnet and PrCtrl Rat, a .NET program, as well as the Sliver, Kinsing, and Ddostff malware strains, Hackread reports.

Novel DJVU ransomware variant emerges Attacks involving the use of cracked software have been distributing a novel version of the DJVU ransomware dubbed "Xaro" for its use of the .xaro extension for encrypted files, reports The Hacker News.

American discount retail company Dollar Tree had information from almost 2 million individuals, including the personal data of Dollar Tree and Family Dollar store employees in the U.S. and Canada, compromised following an August cyberattack against its third-party service provider Zeroed-In Technologies, BleepingComputer reports.

TechCrunch reports that major Indian on-demand third-party logistics startup Shadowfax had five million users' records claimed to be stolen by a threat actor following a cyberattack this month.

Japan's space agency Japan Aerospace Exploration Agency had its systems breached in a summer cyberattack that may have exposed sensitive data, reports BleepingComputer.

Cyberattacks deployed by China against Taiwan were noted by Google to have significantly increased during the past six months amid rising geopolitical tensions, according to BNN Bloomberg.

BleepingComputer reports that at least $107 million in ransoms have been raked in by the Black Basta ransomware operation from over 90 of its victims since its emergence in April 2022.

A decade and a half after Gh0st RAT first appeared, the "SugarGh0st RAT" variant aims to make life sweeter for cybercriminals.

Security updates are tedious and difficult, so users continue to use a weak version of a core protocol and remain exposed to major attacks on critical infrastructure.