← Risky Bulletin
Loading summary
Transcript1 lines
- [00:04]
A
Russia fines 33 telcos for surveillance, non compliance Avcheck Admin is arrested in Amsterdam Poland repels an attack on its power grid and voice cloning defences can be bypassed. This is the Rescue bulletin prepared by Catalyn Campanu and read by me, Amberly Jack Today is January 14th and this podcast episode is brought to you by cloud security company Prowler. In today's top story, Russia's telecommunications Watchdog has fined 33 telcos for failing to install traffic inspection equipment. Fines were imposed on the telcos as well as relevant employees. After Russia's invasion of Ukraine, the roscomnadzor mandated that telcos install equipment to inspect user traffic and block access to sites the government doesn't like. India has updated its know your customer requirements for cryptocurrency exchanges. Crypto platforms will soon require government IDs, tax numbers, selfies and geolocation data from customers. Platforms will also have to verify bank accounts, email addresses and phone numbers. Vietnam's Central bank will require local banks to disable their mobile apps on rooted devices. Mobile apps will also be disabled if a debugger is attached to the device. The new requirements will go into effect in March. They were imposed to fight the rising number of fraud reports and malware infections. Poland says it repelled a cyber attack against its power grid in late December. The attack targeted the communications between renewable generation and power distribution operators. Polish Energy Minister Milosz Motjeka described it as the largest cyber attack against its power grid in years. Officials have not attributed the attack to any group or country. American retailer Target has taken its git server offline to investigate a possible breach. Hackers claim to have accessed the company's internal code and developer documentation. Sample data has been posted online and the attacker is seeking a buyer. American bank JP Morgan Chase is notifying customers affected by a law firm data breach data from 700 customers was stolen from a shared network drive at the law firm Fried, Frank, Harris, Shriver and Jacobsen Last month. Goldman Sachs notified its customers about the same incident. Spain's second largest energy provider has disclosed a security breach. Indesa says hackers accessed information about customers contracts. The stolen Data included names, ID numbers and bank account information. A ransomware attack has crippled the operations of South Korean elearning company the Kyowon Group. The attack has taken down the company's Kumon and Red Pen education portals. The attack occurred on Monday and the company has shut down the platforms while it restores systems. South Korean authorities may impose a travel ban on the CEO of Coupang after the company suffered a significant data breach last year. Coupang's general counsel, Harold Rogers, was appointed interim CEO after Park Daejun resigned from the position in December. Rogers failed to appear in front of a government committee in January. The Coupang data breach exposed the personal details of 33.7 million customers. Dutch police have arrested the administrator of the Avchek cybercrime service. A 33 year old Dutch national was detained at the airport in Amsterdam after returning from the United Arab Emirates. Dutch police seized Avchek in May. The service was used to test malware against a variety of antivirus software before deploying it in real attacks. Leaked internal documents from Stalkaware maker MSPY have exposed the owner of a rival operation. The documents included details of a transaction by the owner of Spy X Stalkaware. He bought a license for mspy, refunded it and reported it as credit card fraud. The credit card appeal process exposes cardholder data and connection to Spy X. A new malware strain is infecting Linux based cloud environments. The Void Link malware is modern, modular and focused on operating in cloud and container environments. It includes plugins for reconnaissance, credential harvesting, privilege escalation, persistence and lateral movement across Docker and Kubernetes environments. Check Point believes the malware was coded by Chinese speaking developers. Russian cyber espionage group Laundry Bear has launched several campaigns against members of the Ukrainian military. The group poses as charities via messaging apps and lures soldiers to malicious sites. The campaign began in October. Instagram has fixed a vulnerability in its password reset process. The bug has been abused in the wild to spam users with password reset emails. The company also denied recent reports that its API was scraped after user data was put up for sale. And finally, a team of academics has created an attack that bypasses voice cloning defenses. The Vocal Bridge technique can remove noise added to audio tracks by online platforms. The noise is meant to protect a user's voice from being cloned. The Vocal Bridge attack cleans the audio and allows AI voice cloning tools to create high quality impressions. That's all for this podcast edition. Today's show was brought to you by our sponsor Prowler. Find them@prowler.com thanks for your company.