← Risky Bulletin
Loading summary
Transcript1 lines
- [00:04]
Claire Aird
An Israeli linked hacktivist group claims an attack on an Iranian bank. Chrome gets a new prompt to prevent local network attacks, a century old German napkin company goes under following a ransomware attack and Europol takes down the archetype Dark web market. This is the risky bulletin prepared by Catalyn Kim Pannu and read by me, Claire aird. Today is the 18th of June and this podcast episode is brought to you by island, the enterprise browser company that keeps data inside organisations boundaries across the browser and beyond. Hacktivist group Predatory Sparrow claims to have wiped the servers of Iranian bank SEPA. The attack took down ATMs, payment systems and access to bank accounts. The Iranian government also uses SEPA to pay its employees. The incident took place as Israel launched a military operation targeting Iran's nuclear and military assets. The group behind the attacks has been surprisingly linked to Israel. In other news, Google Chrome will now prompt users before websites connect to local hosts or local networks. Some websites use exploits to hack devices on users local networks and abuse them for ad fraud or other malicious activity. The new feature will ship in Chrome 138, scheduled to be released this week. The U.S. securities and Exchange Commission has withdrawn two proposed cybersecurity regulations. The proposed rules targeted investment advisors and company within securities markets. They were introduced during the Biden administration in 2023. The agency hasn't said why they were withdrawn. A 100-year-old German napkin company has filed for insolvency following a cyber attack. Farzana was a victim of a ransomware attack in May. The company resumed operations three weeks later, but said it lost millions of euros due to unfulfilled orders. Fazana was founded in 1919 in and has more than 240 employees. The personal information of more than 16 million Kazakh citizens has been leaked on Telegram. The data, covering 80% of Kazakhstan's population, appears to originate from a government database. The information includes full names, phone numbers, home addresses and national identity numbers. Earlier this month, Kazakh police detained over 140 people involved in an underground community selling data on Telegram. South Korean mobile operator SK Telecom has resumed new customer sign ups. The company suffered a major breach in April when hackers stole the SIM card data of all its users. SK stopped accepting new customers while it replaced existing SIM cards. Thai police have detained six Chinese nationals over their involvement in ransomware attacks. Officials say the suspects targeted Chinese companies with ransomware. The group operated from the eighth floor of a hotel in Pattaya and was allegedly part of a larger criminal network involved in illegal online gambling. Europol has dismantled the archetype Dark Web Marketplace in a coordinated takedown spanning six countries. Archetype launched in 2020 and was one of the few Dark web markets that allowed the sale of fentanyl. The site had over 600,000 registered users and has been linked to more than 250 million euros in illicit transactions. The market's servers were seized in the Netherlands. Its alleged admin, a 30 year old German national was detained in Spain. The FBI has recovered $680,000 in assets stolen from the Safemoon cryptocurrency platform. A hacker stole almost $9 million in crypto in 2023 but agreed to return 7 million as part of a so called white hat reward. Despite the agreement, Safemoon reported the incident to authorities. The FBI says it's not yet identified the attacker. Safemoon ceased trading months after the attack. The SE have been put into its bankruptcy trust. A Russian national has been sentenced in the US to eight months in prison for manipulating cryptocurrency markets. Alexei Andrunyan was the CEO of Gotbit, a company that boosted the value of cryptocurrency firms by inflating trading volumes. He was arrested in Portugal last year after the FBI set up a fake crypto token to expose his business. Google Mandiant says that Scattered Spider has begun targeting the insurance industry. The attack started more than a week week ago and several US insurance companies have been hit. Earlier this year, individuals linked to the group targeted the UK retail sector. Affected chains included Co Op and Marks and Spencer. The U.S. state Department is offering a $10 million reward for information about a hacker known as Mr. Soul. The individual is believed to have used the IO Control malware in attacks against U.S. critical infrastructure. They're an alleged member of the Cyber Avengers hacking group, which the State Department has linked to Iran's Cy Cyber Electronic command. Last August, the US offered a similar reward for a separate member of the Cyber Avengers group. A third of all public facing Grafana servers are vulnerable to account takeovers. The servers are exposed to a vulnerability allowing attackers to force a Grafana server to use a malicious plugin that can then run commands on their behalf. The vulnerability was disclosed late last month. Sitecore CMS websites are vulnerable to a new exploit chain that abuses a hardcoded password. Password is the letter B. It grants access to an account that can inject malicious code into the site. Sitecore has released security updates for the three bugs that comprise the exploit chain. Watchtower Labs says it discovered seven bugs in total and is working to get the rest patched There are more than 22,000 instances of Sitecore exposed on the Internet. Tenable has discovered a vulnerability in the Garrett Code collaboration platform that allows unauthorized submissions. Garrett is an internal Google platform similar to Gith. Tenable says the vulnerability could have been abused to submit malicious code to Google projects such as Chromium and the Dart programming language. And finally, Meta is adding ads and promoted channels to WhatsApp. Users will see ads based on their Facebook and Instagram activity and not the content of the messages, Meta says. Messages will remain private and separate from its advertising platform. And that is all for this podcast edition. Today's show is brought to you by our sponsor, enterprise browser maker Island. Find them at Island. Thanks for your company.