Loading summary
Transcript1 lines
- [00:04]
A
Russia deployed wipers against Poland's energy grid Microsoft shared BitLocker keys with the FBI, Romania dismantles a murder for hire portal and the EU creates a new anti spyware group. This is the risky bulletin prepared by Catalyn Campanu and read by me, Amberly Jack Today is January 26th and this podcast episode is brought to you by Push Security. In today's top story, Russian hackers deployed a data wiper against Poland's energy grid late last year. The attack was blocked, but if successful, could have cut power to half a million citizens. Security firm ESET linked the malware to Sandworm, an offensive cyber unit inside Russia's military intelligence service. This is believed to be the first time Russian hackers have attempted to deploy wipers against the energy infrastructure of an EU country. The FBI has obtained BitLocker encryption keys from Microsoft as part of a fraud investigation. The keys were stored in Microsoft's cloud and allowed agents to decrypt the laptops of suspects. Microsoft told Forbes it receives about 20 requests for BitLocker keys every year. The US National Institute of Standards and Technology is seeking help from third parties in managing the US national vulnerability database. The agency wants to transfer its vulnerability enrichment responsibilities to CVE numbering authorities. Since February 2024, NIST has been unable to keep up with the pace of vulnerability data. The agency says budget cuts have forced it to prioritise only the most critical reports. The UK House of Lords has voted to ban social media for children under the age of 16 under the Children's Wellbeing and Schools Bill. Anyone under 18 would also be banned from using VPN apps. In January, Australia restricted social media use to people aged 16 and over. Similar efforts are also being considered in France and Russia. The UK bill now moves to the House of Commons. The European Parliament has set up a team to investigate the use of spyware across the bloc. Victims of spyware attacks are being asked to share their stories. The group was established in the aftermath of the Paragon spying scandal in Italy. Sportswear company Under Armour is investigating a data breach. More than 72 million records were leaked online this month. The stolen data includes customer emails, dates of birth and purchase details. The files were allegedly stolen in a breach last year, although no further details are known. American sportswear giant Nike is also investigating a potential security breach. Last week, the World Leak's data Extortion group published a sample of stolen data on the Dark Web. The group claims it stole more than 1.4 terabytes of data from Nike's clothing manufacturing department, a cyber attack has disrupted the IT systems of Dresden museums. Last week's incident took down some digital and phone services. The Dresden State Art Collections is one of the oldest networks of museums in Europe. It oversees 15 museums housing works by Rafael and Rembrandt. The French crypto tax filing company Waltio is being extorted by hackers. The company confirmed that customer tax reports from last year were stolen. Walteo says it has activated incident response procedures but has not said if it will pay the ransom. The Shiny Hunters group is believed to be behind the attack. Romanian authorities have dismantled a murder for hire operation. The group's website allowed anonymous users to commission assassinations paid for with Crypto. Authorities raided three locations and questioned two individuals behind the scheme. They also seized a combined $750,000 in crypto, US dollars and euros. A Russian national has pleaded guilty in the US to leading the zeppelin. Ransomware group Yanis Alexandrovich Antropenko admitted to hacking more than 50 victims between 2019 and 2022. He was detained in August last year but was released on bail the same day authorities seized $2.8 million in crypto from Anchipenko. He faces up to 25 years in prison. A US judge has sentenced two Venezuelan nationals over their roles in ATM jackpotting. Luz Granados was sentenced to time served and Johan Gonzalez Jimenez received an 18 month prison sentence. The pair operated at night physically installing malware into ATMs. Phone numbers linked to Microsoft Teams are being used to carry out PayPal refund scams. The phone numbers are part of what used to be Skype, according to Anti Scam group Demurrage. Microsoft has ignored reports of abuse. Threat actors are exploiting a recently patched vulnerability in the Zimbra collaboration platform. The local file inclusion flaw allows attackers to run malicious code on the server. Active exploitation was reported by CISA last week. Microsoft has retired the Microsoft Deployment toolkit. It was first released in 2003 and was used to automate the deployment of Windows operating systems and applications. The company retired the tool after researchers at Spectrops discovered multiple vulnerabilities. The flaws could have allowed attackers to take over MDT servers and deploy malware. And finally, 21 major Internet backbone providers are vulnerable to BGP vortex attacks that could cripple the global Internet. The attacks leverage legitimate BGP configuration to reroute Internet traffic in a loop. According to a team of European and US academics, a coordinated attack could bring down more than 95% of the Internet. That's all for this podcast edition. Today's show was brought to you by our sponsor, Push Security. Find them@PushSecurity.com thanks for your company.