Microsoft gains control of domains used by Iranian hackers linked to U.S. fugitive

TwitterFacebook

A U.S. court has granted Microsoft the authority to seize domain names in order to take down a phishing campaign run by a notorious group of Iranian hackers.

In a post on Microsoft’s official blog, Customer Security & Trust VP Tom Burt shared details from the now unsealed case it filed in the U.S. District Court for Washington D.C against the hacker group called Phosphorus. The group is also known under the names APT 35, Charming Kitten, and Ajax Security Team.

Microsoft’s Digital Crimes Unit was allowed to take control of 99 domains in order to stop the hackers’ attacks. Domains such as outlook-verify.net, yahoo-verify.net, and verification-live.com were being used in spear-phishing campaigns by the Iranian hackers. Read more…

More about Microsoft, Hackers, Iran, Espionage, and Domain Names

View More Microsoft gains control of domains used by Iranian hackers linked to U.S. fugitive

Users complain of account hacks, but OkCupid denies a data breach

It’s bad enough that dating sites are a pit of exaggerations and inevitable disappointment, they’re also a hot target for hackers. Dating sites aren’t considered the goldmine of personal information like banks or hospitals, but they’re still an intimate part of millions of people’s lives and have long been in the sights of hackers. If […]

View More Users complain of account hacks, but OkCupid denies a data breach

Have your passwords been stolen by hackers? New Chrome extension will let you know

If you have multiple online accounts (you probably do), and you’ve been on the internet for more than a few years, chances are at least some of your passwords have ended up in the wrong hands. Proof: Huge databases of stolen email/password combinatio…

View More Have your passwords been stolen by hackers? New Chrome extension will let you know

Review: The Helm personal email server puts you in control of your data

TwitterFacebook

Recent days have not been good to your private dataScandals follow data breaches, which are followed by yet additional scandals, as the big tech companies continue to worm their way even deeper into our lives. It has become increasingly clear that almost every action you take — be it online or off — is collected, categorized, and sold by entities that never had your best interests at heart. 

But it doesn’t have to be that way. Or, at least not to that same troubling degree. Services like Tor, Signal, and ProtonMail offer real alternatives to the data collection that has become the norm. And, now, we can add one more offering to the mix. Say hello the the Helm personal email server.  Read more…

More about Security, Reviews, Gmail, Email, and Hackers

View More Review: The Helm personal email server puts you in control of your data

Russia attempted to hack the DNC again after the 2018 Midterms, claim Democrats

TwitterFacebook

New court documents filed by the Democratic National Committee unveiled a previously unknown infiltration attempt by Russian hackers.

“On November 14, 2018, dozens of DNC email addresses were targeted in a spearphishing campaign,” claim the DNC in the documents, which were filed on Thursday night. “The content of these emails and their timestamps were consistent with a spearphishing campaign that leading cybersecurity experts have tied to Cozy Bear (APT 29).”

Cozy Bear is the Russian intelligence agency-linked hacker group that infiltrated the DNC during the 2016 presidential elections

The DNC says there is no evidence that the group was successful in the attempt, which was made one week after the 2018 Midterms. Read more…

More about Russia, Hackers, Dnc, Democratic National Committee, and Tech

View More Russia attempted to hack the DNC again after the 2018 Midterms, claim Democrats

The huge ‘Collection #1’ data breach is only a small part of much larger hacker dataset

TwitterFacebook

I guess they wouldn’t have numbered it if it was the only one. 

On Jan. 16, security research Troy Hunt uploaded a massive cache of leaked emails and passwords to his invaluable website have i been pwned. The 87GB dataset, dubbed “Collection #1,” was admittedly years old, and had been passed around by hackers for some time now. Still, the sheer scale of it — containing over 772 million email addresses — turned heads. Hold onto your digital butts, because as Krebs on Security reports, you ain’t seen nothing yet. 

According to Krebs, the Collection #1 data breach is, unsurprisingly, part of a much larger collection of stolen online credentials being sold online. And, taken as a whole, it dwarfs Collection #1’s size.  Read more…

More about Hackers, Hacking, Tech, and Cybersecurity

View More The huge ‘Collection #1’ data breach is only a small part of much larger hacker dataset

Defeat hackers and become a cyber security specialist for just £12.99

Keeping you guys informed is a big responsibility, whether it’s concerning a new deal or an upcoming event, but we believe that it’s our job to make sure you are in the know.
Well, there’s a deal you should know about, and an event, too. They go hand…

View More Defeat hackers and become a cyber security specialist for just £12.99

‘Fortnite’ vulnerability put millions of accounts at risk

TwitterFacebook

It turns out that for the millions of people playing Fortnite, there was more than just a Victory Royale at stake. 

On Jan. 16, internet security firm Check Point Research disclosed a vulnerability in the popular online video game that could have allowed malicious actors to take over practically any Fortnite account — all a player had to do was click a malicious link. 

“By discovering a vulnerability found in some of [Fortnite owner] Epic Games’ sub-domains, an XSS attack was permissible with the user merely needing to click on a link sent to them by the attacker,” explains the report. “Once clicked, with no need even for them to enter any login credentials, their Fortnite username and password could immediately be captured [by] the attacker.” Read more…

More about Hackers, Epic Games, Fortnite, Tech, and Cybersecurity

View More ‘Fortnite’ vulnerability put millions of accounts at risk