Tag Archive for: seek

Hamas, Iranian hackers seek to leverage Israeli people’s stress


Tel Aviv [Israel], December 19 (ANI/TPS): The Israel National Cyber Directorate announced on Monday that Iran and Hezbollah were behind an attempted cyberattack on the Ziv Medical Centre in Safed in late November. “The attack was thwarted before it could successfully disrupt hospital operations and impact citizens’ medical treatment,” the INCD stated. “However, the attackers managed to extract private data stored in the hospital’s systems.”

While the INCD defends Israeli civilian and government cyberspace, including hospitals, and Internet and phone service providers, military cybersecurity is a very different matter, according to Alon Arvatz, CEO and co-founder of Stealth Startup. Most computers with any sensitive information are not connected to the Internet, and Israeli soldiers operating in Gaza aren’t allowed to carry cell phones for fear of exposing their locations or other sensitive data, Arvatz told the Tazpit Press Service in an interview last month.

“We read the frustrations from their families, saying, ‘I don’t know what’s going on with my son, or wife or child.’ So it’s heartbreaking,” he said. “But from a security perspective, it means very good things about the army and how it handles it. The worst thing that can happen is that a soldier would accidentally expose his location and the plans of the army.” On Oct. 7 and since, there has been widespread speculation about how Hamas terrorists infiltrated Israel in such large numbers, as well as how they were able to murder, torture and kidnap so many Israelis and others. Despite Israel’s reputation as one of the world’s cyberspace superpowers, Hamas appears to have sought to sabotage Israel’s vaunted rocket-alert system and siphon off donations intended for Oct. 7 victims, Arvatz told TPS.

Hackers Leveraging People’s StressParallel to Hamas’s ground invasion, the terrorists also launched “attacks into cyberspace, targeting various civilian and governmental targets,” said Arvatz, a veteran of the Israel Defense Force’s elite cyber Unit 8200 and author of The Battle for Your Computer: Israel and the Growth of the Global Cyber-Security Industry. Hamas’s multi-pronged attack–from land, sea, air and cyberspace–sought to…

Source…

Lawsuit seek payout for guests, gamblers after hack at Caesars Entertainment


CAMDEN — Patrons of Caesars Entertainment properties in Atlantic City and elsewhere are seeking damages in a class action lawsuit in federal court here.

The suit, filed by a Woodbury attorney, alleges damages of more than $5 million for gamblers and guests affected when hackers accessed customers’ private information in Caesars’ computer system in September.

The Nevada-based firm’s 51 properties include Caesars, Harrah’s and Tropicana casino-hotels in Atlantic City.

The suit seeks court approval to represent all people whose personal identification information was compromised in the data breach.

What is known about the hack at Caesars Entertainment?

Caesars disclosed the hack in a Sept. 14 filing with the U.S. Securities and Exchange Commission.

The intrusion, detected on Sept. 7, was “a social engineering attack on an outsourced IT support vendor used by the company,” the fling said.

It said the hacker obtained a copy of “among other data, our loyalty program database” for a “significant number” of its loyalty club members.

That data included “driver’s license numbers and/or social security numbers,” said the filing.

It reported no evidence “to date” that the hacker had acquired customers’ password or their password/bank account information.

Class action lawsuits in Camden federal court seek damages for patrons of Caesars Entertainment properties in Atlantic City and elsewhere.Class action lawsuits in Camden federal court seek damages for patrons of Caesars Entertainment properties in Atlantic City and elsewhere.

Class action lawsuits in Camden federal court seek damages for patrons of Caesars Entertainment properties in Atlantic City and elsewhere.

Caesars said it had reported the incident to law enforcement and that the company was conducting its own investigation.

What does the lawsuit say about the Caesars hack?

The lawsuit blames the hack on Scattered Spider, a group that allegedly tricks computer users into disclosing sensitive information, then extorts a payment to keep the data private.

Caesars “reportedly” paid about $15 million to placate the hackers, according to a separate lawsuit filed in October on behalf of Caesars’ loyalty club members.

That suit was voluntarily dismissed without prejudice on Nov. 8, meaning it could be filed again.

Stanley King, the attorney pursuing the class action suit, claims Caesars was negligent in protecting its customers and in responding to the hack.

Caesars has offered credit-monitoring services to members of its…

Source…

Russian hackers seek war crimes evidence, Ukraine cyber chief says – World


KYIV: Russian spies are using hackers to target computer systems at law enforcement agencies in Ukraine in a bid to identify and obtain evidence related to alleged Russian war crimes, Ukraine’s cyber defence chief told Reuters on Friday.

The hackers, working across Russia’s foreign, domestic and military intelligence agencies, have stepped up digital intrusion campaigns targeting the Ukrainian Prosecutor General’s office and departments documenting war crimes, said Yurii Shchyhol, head of the State Service of Special Communications and Information Protection of Ukraine (SSSCIP), which handles cyber defence in the embattled country.

“There’s been a change in direction, from a focus on energy facilities towards law enforcement institutions which had previously not been targeted that often,” Shchyhol said.

“This shift, towards the courts, prosecutors and law enforcement units, shows that hackers are gathering evidence about Russian war crimes in Ukraine” with a view to following Ukraine’s investigations, he added.

The espionage activity will be flagged in an upcoming SSSCIP report, due to be published on Monday.

Russian hackers targeted US nuclear scientists

The report, a copy of which was reviewed by Reuters, says hackers were also trying to gather intelligence on Russian nationals arrested in Ukraine, with a view to “help these individuals avoid prosecution and move them back to Russia”.

“The groups we’ve identified as being engaged in this activity are part of Russia’s GRU and FSB intelligence agencies,” Shchyhol said.

Russia’s Foreign Ministry and the Federal Security Service (FSB) did not immediately respond to written requests from Reuters for comment. Russia’s GRU military intelligence agency could not be reached for comment.

Shchyhol declined to identify exactly which units had been targeted by the hacking campaign, citing security concerns. The number of cybersecurity incidents documented by the SSSCIP grew by 123% in the first six months of this year compared with the second half of 2022, he added.

Russian hackers have prioritised targeting government bodies and trying to gain access to their e-mail servers, Shchyhol said, without elaborating. Reuters was unable…

Source…

Hackers changing tactics on Cyber Monday, seek your computer password


Today is Cyber Monday and with all the online shopping comes hackers.

Cyber security company Check Point says this year, they’re especially seeing one type of email called shipping spoofing.

“If I know I didn’t buy anything from Louis Vuitton, I’m gonna know it’s a phishing email,” said Tony Sabaj, head of engineering with Check Point Software. “But everybody’s bought something online and it’s coming via USPS, DHL or FedEx in most cases, so I’m gonna be more likely to fall for a phishing attempt from a shipper than a retailer I may have never shopped at.”

One example claims to be from the postal service, but the actual email address is not from the postal service at all.

That’s the best and easiest way to spot these emails.

”And you can look at that by either mousing over the display name and it’ll show you the actual email address or on a mobile phone,” said Sabaj. “As I said before, I’ll just hit reply. That’s the easiest way to see what the email is. I won’t actually reply.”

He says hackers are either after your passwords or want to put malware on your computer.

So what should you do if you click on a link in one of these emails?

Check Point says to go to the real website the email was spoofing and change your password right away.

If you use that password on any other sites, change those too.

If you’re on a personal device, run a scan with whatever security software you use, and if this happened on a work device, report it right away to your corporate IT.

Source…