We have collected the most important news from the world of cybersecurity for the week.
Europol has destroyed a large-scale malware distribution network.BreachForums came to life and was marked by a series of large drains.The founders of the HashFlare cloud mining service were extradited to the United States.Telegram has added an anti-fake feature to the beta version code.Europol has destroyed a large-scale malware distribution network
Law enforcement officers from several European countries seized over a hundred servers and 2,000 domains to distribute malware, including IcedID, Pikabot, Trickbot, Bumblebee, Smokeloader and SystemBC. Three people were arrested in Ukraine, one in Armenia.
🚨Largest ever operation against botnets hits dropper malware ecosystem.
Operation Endgame, coordinated from Europol headquarters, has led to four arrests and the takedown of over 100 servers worldwide.
More information in our press release⤵️https://t.co/SNZW5SpLnF
According to the investigation, the key suspect earned over $74.5 million in cryptocurrencies by leasing infrastructure to ransomware operators.
The search continues for seven defendants behind the botnet activity.
BreachForums came to life and was marked by a series of large drains
The site of the closed hacker forum BreachForums has resumed operation. A user under the nickname ShinyHunters put up for sale the bases of the American ticket operator Ticketmaster and the Spanish bank Santander. This is reported by Bleeping Computer.
In the first case, the attacker claimed to have the data of 560 million Ticketmaster customers with a volume of 1.3 TB. They allegedly contain names, home addresses, emails, phone numbers, and credit card information, including their hashed numbers and expiration dates. For all this, the hacker is asking for $500,000.
Allegedly stolen Ticketmaster data. Data: Bleeping Computer.Ticketmaster did not comment on the situation, US law enforcement authorities confirmed the fact of the cyber incident to the media, without specifying its scale.
Information about 30 million Santander customers and employees in Chile, Spain and Uruguay was reportedly stolen two weeks earlier. This dump with bank account data is estimated at $2 million.
Data: BleepingComputer.ShinyHunters claims that both leaks came to him as a result of hacking into the account of an employee of the Snowflake cloud storage company. Representatives of the latter confirmed the incident, linking it to poor protection of the user account and denying the existence of vulnerabilities in their products.
The founders of the HashFlare cloud mining service were extradited to the United States
The United States has secured the extradition from Estonia of the founders of the HashFlare cloud mining service and the Polybius Bank digital bank Sergey Potapenko and Ivan Turygin. They are accused of fraud with cryptocurrencies and money laundering in the amount of $ 575 million — a total of 18 points.
According to court documents, entrepreneurs created financial pyramids through their companies, which they deceived investors into. The accomplices were detained in November 2022 at the request of the FBI.
They face up to 20 years in prison on the combined charges.
Coinbase, Circle and Kraken joined the Cyber Threat Group
The Crypto ISAC industry group, created to protect against cyber threats and exploits, has disclosed information about its members. This is reported by CoinDesk.
One of the first to join were the cryptocurrency exchanges Coinbase and Kraken, as well as the co—issuer of the USDC stablecoin, Circle company.
Among the founders of the association: The non—profit organization behind the development of Solana is the Solana Foundation, the developer of the MetaMask wallet is ConsenSys and the provider of Fireblocks cryptographic services.
In the same list:
privacy-focused Aleo blockchain platform;L2-the Arbitrum solution;Hedera Blockchain;Cybersecurity startup Red Balloon Security;Ribbit Capital Venture Fund;audit company Trail of Bits.Evertas, an insurer in the field of cryptocurrencies, led the creation of the group.
ISAC members share information about cybersecurity vulnerabilities and incidents between businesses and governments, increasing the legitimacy and trust of the industry for the latter.
Telegram has added an anti-fake feature to the beta version code
The Fact Check function has appeared in the source code of the beta version of the Telegram messenger for Android. This was noticed by a developer under the nickname MarshalX.
Changes in the Telegram source code. Data: GitHub.The function will allow you to add clarifying information to posts. Fact-checking will be handled by agencies appointed by the governments of the countries in which Telegram operates. Their name will be reflected in the post.
Ordinary users will not be able to influence the content.
Hackers Head Mare took responsibility for hacking the logistics company SDEK
On May 26, a large-scale technical failure occurred at the Russian parcel and cargo delivery operator SDEK, which caused the company's application and website to stop working for several days. In addition, in order to avoid mistakes, the receipt and delivery of shipments were suspended.
The hacker group Head Mare took responsibility for the incident. They claim that they used a cryptographic virus to crack it. In a comment to Vedomosti, this was confirmed by two sources.
1/7 Had Marais did not give #SDEK time to defend herself. The sysadmins turned out to be too weak. And the security policies have not justified themselves. #SDEK continues to carry the banner of the worst delivery in Russia, overtaking even the Russian post pic.twitter.com/8FuWmTCd3I
— Head Mare (@head_mare) May 27, 2024On May 31, SDEK restored most of the functionality and the ability to receive shipments. An internal investigation is ongoing.
Also on ForkLog:
The DMM Bitcoin crypto exchange was hacked for $305 million.The United States has arrested the creator of a botnet that earned more than $130 million in cryptocurrencies.The Wallet wallet has increased the collection of user data.An ex-employee of Deutsche Bank received a prison sentence for crypto fraud.Hackers attacked the X accounts of celebrities to promote the scam.What should I read on the weekend?
Together with the SHARD company, we talk about current fraud schemes in the Telegram messenger.
https://forklog.com/exclusive/vse-insajdy-zdes-kak-telegram-stal-glavnoj-ploshhadkoj-dlya-skama