3.5 million user logins for the MobiFriends dating app are being offered for free on a popular dark web hackers forum.
Tag Archives: spearphishing
309 million Facebook users’ phone numbers (and more) found online
First, 267m records were exposed & sold for 0.0002 cents each on the Dark Web. It was taken down but got reposted with yet more records.
Google sent ~40K warnings to targets of state-backed attackers in 2019
Google has seen a rising number of attackers impersonating news outlets and journalists to spread fake news among other reporters.
Ransomware attack forces 2-day shutdown of natural gas pipeline
The attacker(s) infected both IT and operational networks with an unspecified ransomware strain, though the facility never lost control.
North Carolina county falls for BEC scam, to the tune of $1,728,083
The county could only claw back some of the $2,504,601 it paid to a scammer posing as a contractor working on building a new high school.
Most hackers for hire are scammers, research shows
Google & UC San Diego researchers found that only 5 of 27 hacker-for-hire services actually launched attacks against their targets.
Amnesty sues maker of Pegasus, the spyware let in by WhatsApp zero day
Amnesty International, which was sent the Pegasus spyware via a WhatsApp message, is seeking to stop NSO Group’s “web of surveillance.”
Two people indicted for massive Anthem health data breach
They’re part of a gang that spearphished millions of records out of the health insurer and other businesses, the DOJ says.
Microsoft slaps down 99 APT35/Charming Kitten domains
Court order in hand, Microsoft seized control of the hacker group’s (which it calls Phosphorous) phishing sites.
Veeam leaves MongoDB database wide open, exposes 445m records
The data-management firm’s customer database held names, email addresses, some IP addresses and more: a wealth of ammo for phishers.