-
New FoxBlade Malware Hit Ukraine Hours Before Invasion, Microsoft Says
Threat actors used a new malware strain against Ukrainian networks hours before the Russian invasion started on Feb. 24, according to Microsoft. The company’s Threat Intelligence Center (MSTIC) noticed cyberattacks aimed at Ukraine and identified a novel type of malware they labeled FoxBlade. “Several hours before the…
-
Bitdefender and Romania National Cyber Security Directorate Expand Collaboration to Aid Ukraine
BUCHAREST, Romania – Feb. 28, 2022 – Bitdefender, a global cybersecurity leader, today announced it has expanded its collaboration with Romania’s National Cyber Security Directorate (DNSC) to provide cybersecurity expertise, threat intelligence and technology at no charge to support the people of Ukraine and its allies.…
-
Cyber Horror Stories. Have you ever been hacked?
Ever since hacking became a way of life and a profitable business for the bad guys, cyber attacks have caused major disruptions, chaos, compromised data and gruesome financial losses. As we rely more and more on the internet in our daily lives, there is much at stake and security should be on our priority list, since we…
-
A US Hacker Blasted North Korea off the Internet Following Missile Tests
Last month, as North Korea's supreme leader Kim Jong-un oversaw a series of sabre-rattling hypersonic missile tests, cyber attacks disrupted the country's internet infrastructure. The finger of suspicion pointed at nation states in the West, who might have launched the distributed denial-of-service attacks,…
-
2022 Cybersecurity Predictions: What Can We Expect?
If 2022 is anything like 2021, cybersecurity personnel will be extremely busy this year. There is little doubt that the previous two years bear high-tide marks for ransomware. It is simple enough to find evidence of this. From high-profile breaches to major increases in attacks and attempted attacks, criminals are going…
-
FBI: Watch Out for Spoofed Online Job Listings From Scammers
Fraudsters are using the fake job listings to trick victims into handing over sensitive personal information, which can be used for identity theft. The FBI is warning that scammers are posting fake job listings using the names of real companies to try to dupe applicants into handing over sensitive information. The scheme…
-
Relics Corner. A place for vintage computing and old stuff
The computers have been with us as far as we can remember. They have significantly changed throughout the decades and we’ve managed to store a Walkman, a calculator, a camera, games, calendars and letters in a single device. The first computer was available to the public in the 60’s and until then, such devices were…
-
Ongoing phishing campaign on Messenger goes after Facebook accounts
Finland's National Cyber Security Centre (NCSC-FI) warns of an ongoing phishing campaign attempting to hijack Facebook accounts by impersonating victims' friends in Facebook Messenger chats. In the alert, the NCSC-FI says that all Facebook users who received messages from online acquaintances asking for their phone numbers…
-
DDoS attack takes out Internet for whole country
Andorra Telecom, the tiny microstate's only internet service provider, tweeted that a barrage of distributed denial-of-service (DDoS) attacks had impacted the country's internet and 4G service. According to reports, the DDoS attackers' true targets were participants in a Spanish-speaking online gaming tournament that was…
-
Lost data - The Memorial
Have you ever lost any precious data that was never to be recovered? I remember losing hundreds of photos forever due to a system malfunction. I tried to resuscitate my laptop for ages, but it was long departed in the digital heavens. At the end of the day, choosing a cloud provider might be one of the best ways to store…
-
OpenSubtitles Data Breach Affects 6.7 Million Users
OpenSubtitles, one of the world’s largest online repositories of subtitle files, has confirmed a cyberattack leading to the exposure of personal data of nearly 7 million subscribers. According to a notification posted by ‘OSS’, one of the site admins, a malicious actor notified them of the breach via Telegram in August…
-
Bitdefender researchers find Teabot malware dropping Android apps
Most believe the official Google Play Store is completely safe to download and vetted for security purposes before they become available to the public. That's true most of the time but not always. Sometimes malicious apps are missed and stay active on official stores accruing thousands of downloads before they are noticed…
-
Have you updated your Apple devices recently?
Apple is preparing new versions of iOS and macOS that include an important fix for a recently discovered flaw in WebKit, the web browser engine used by Safari and many other apps on the two operating systems. On January 14, researchers from FingerprintJS made a worrying disclosure: a bug in Safari 15’s implementation of…
-
Malware Posing as Ransomware Responsible for Ukraine Cyberattack
Microsoft has published a more in-depth analysis of the recent Ukraine cyberattack, showing that the destructive malware is more like ransomware and follows a known pattern. Following cyberattacks against Ukrainian government websites of the State Treasury, State Emergency Service, Cabinet of Ministers, Ministry of Foreign…
-
Cybersecurity Myths you may have heard
We've all heard some cybersecurity myths at some point. For example, someone once argued that we cannot be attacked on Social Networks. If we are using a specific operating system, we cannot be infected. If we have strong passwords, we cannot be hacked. Or that security costs too much and attackers can't steal anything…
-
Crypto.com admits security incident, assures clients ‘funds are safe’
Crypto.com, a cryptocurrency exchange app based in Singapore with over 10 million users, temporarily suspended withdrawal of funds Monday after a users reported suspicious activity in their accounts. The app, which is endorsed by Matt Damon and has sponsorship contracts with Formula 1, the Italian Seria A football league…
-
Scammers Use Fake COVID-19 Test Websites to Steal Your Personal Info, BBB Warns
Highly opportunistic scammers have been capitalizing on the pandemic in any way possible to compromise the financial and personal information of consumers worldwide. The Better Business Bureau (BBB) is warning US consumers of scammers who set up fake websites that offer COVID-19 testing to harvest personal and insurance…
-
If you're running Android you should probably check this
"Are you worried that someone may be intercepting your phone calls and SMSs? Well, you might not be just paranoid, and it’s not just about spying programs installed on your mobile device. The privacy and information security community has been warning people for years about stingray attacks, a technique that consists of…
-
When is the last time you cleaned up your computer?
January is National Clean Up Your Computer Month! There’s no better way to celebrate than giving a makeover to this important tool that supports both your professional and personal life. Here are six tips from Bitdefender to get your computer off to a productive 2022: Back up your data Regularly backing up your data is an…
-
Scam Alert: Tens of thousands of users targeted in pyramid scheme spam campaign
This week, Bitdefender Antispam researchers have been monitoring an ongoing spam campaign that leads recipients to pyramid scheme websites. The bogus correspondence is disguised as an employment opportunity, directing recipients to check a password-protected PDF attachment for more info. The email body contains a…
-
Recent Windows Updates Lead to Failed L2TP VPN Connections
After applying the latest KB5009543 and KB5009566 cumulative updates, several Windows users discovered they could no longer establish L2TP VPN connections. As part of Patch Tuesday, Microsoft this week rolled out a series of Windows updates to address various bugs and security flaws. The list of updates…
-
iOS 15.2.1 Fixes ‘doorLock’ HomeKit Flaw and Other Bugs
Apple today started rolling out iOS 15.2.1 for iPhones and iPads, addressing a security flaw in the HomeKit framework that could be exploited to trigger denial of service and lock users out of their devices. According to the release notes (pictured below), iOS 15.2.1 is a bug-fix release, addressing an issue with Messages…
-
Backscatter Spam Attack Used to Deliver Bitcoin Extortion Messages to Eastern Europe
Bitdefender Antispam Lab researchers have been analyzing a wave of extortion messages sent via backscatter spam or “non-delivery report messages” (NDR). Beginning Jan. 4, spammers have been focusing on delivering tens of thousands of messages to recipients in Eastern Europe, including Romania, Hungary and Croatia.…
-
Is VPN Legal? Understanding VPN and the Law around the World
The surge in popularity of VPNs among privacy-conscious netizens stems from their ability to anonymize your connection, encrypt your traffic, and circumvent geo-restrictions set in place by various entities. It’s no surprise that their usefulness in protecting individual privacy often leaves them at the center of legal…
-
Accounts of Top FIFA 22 Gamers Hijacked in Hacking Wave
The FIFA game franchise, enjoyed by millions of gamers worldwide, isn’t just about breaking controllers and tantrums anymore. For some, it’s also about breaking into accounts. Over the last few weeks, several high-profile FIFA 22 players, streamers, and traders have vented on Twitter, saying their EA accounts were…
-
Finalsite Ransomware Attack Freezes Thousands of School Websites
A major cyber attack on Finalsite, a leading school platform provider, disrupted thousands of schools worldwide over several days this week. Finalsite offers website, communications, enrollment and marketing platforms to more than 8,000 schools and universities in 115 countries around the world. On Jan. 4, an unexpected…
-
Hackers Are Sending Malicious Links Via Google Docs
Security firm Avanan says it "observed a new, massive wave of hackers leveraging the comment feature in Google Docs, targeting primarily Outlook users" starting in December 2021. Attackers reportedly created Google Docs and left comments using tags (the "@" symbol followed by the victim's name) so Google would notify the…
-
Bitdefender Honeypots Signal Active Log4Shell 0-Day Attacks Underway
Log4Shell is a 0-day vulnerability in the Log4j Java library that allows attackers to download and run scripts on targeted servers, leaving them open to complete remote control. After a user posted a proof-of-concept (PoC) on Twitter, Bitdefender’s honeypots started to register attacks using the PoC, underlining just how…
-
Rookie Researcher Finds Potential Ransomware Attack Vector for iPhone
A rookie security researcher claims to have discovered a potential ransomware attack vector for iPhones and iPads that exploits a weakness in Apple’s HomeKit framework. He calls the exploit ‘doorLock’ and says any iPhone or iPad running iOS 14.7 through iOS 15.2 is vulnerable, with older iOS 14 releases likely affected as…
-
Ukrainian Police Arrest 51 Suspects Allegedly Peddling Data of 300 Million European and US Citizens
Ukraine cyber police have arrested 51 individuals suspected of illegally distributing stolen personal information of 300 million people from the US, Ukraine and several European countries. The large-scale operation, fittingly dubbed “DATA,” involved 117 searches throughout the Ukraine in November 2021. “As a result of the…
