Tag Archive for: target

10 celebrities that scammers ‘use’ to target users with virus, malware


Gadgets Now Bureau27 Oct, 2023, 07:05AM IST

FacebookTwitterLinkedinEMail

McAfee, revealed that Ryan Gosling, star of this summer’s hit movie, Barbie, topped the list of celebrities whose names are used most by scammers to create malware or risky sites. McAfee Labs created the list by identifying the big-name celebrities who most frequently generate unsafe search results that could lead consumers to unknowingly install malware and jeopardise their data, privacy, and identity. Within the top ten list, the popularity of Barbie shines through, with three of its stars making the Hacker Celebrity Hot list. The top ten list, which includes a combination of longtime talent and more recently well-known names, is as follows:

Ryan Gosling

110

​Ryan Gosling​

He is a critically acclaimed actor and star of this summer’s hit film, Barbie.

Emily Blunt

210

​Emily Blunt​

She is an esteemed actress known for her critically acclaimed roles, and star of this summer’s hit film “Oppenheimer.”

Jennifer Lopez

310

​Jennifer Lopez​

An iconic figure in pop culture, known for her achievements as a singer, actress, and producer, with a string of critical acclaim.

Zendaya

410

Zendaya

She is a critically acclaimed actress and singer

Kevin Costner

510

Kevin Costner

An acclaimed actor and director, renowned for his role in the popular series “Yellowstone.”

Elon Musk

610

Elon Musk

A prominent business magnate and tech entrepreneur, driving innovation across various industries.

Al Roker

710

​Al Roker

The weather expert of TODAY, is an author, and an accomplished journalist.

Margot Robbie

810

Margot Robbie

A critically acclaimed actress and star of this summer’s hit film, Barbie

Bad Bunny

910

Bad Bunny

A highly acclaimed singer, and the first non-English language artist to claim Spotify’s title of the year’s most streamed artist.

America Ferrera

1010

America Ferrera

A distinguished actress noted for her performances, featuring in this summer’s blockbuster “Barbie.”

Source…

New York State Gaming Commission Is Latest Casino Hacking Target


First casinos, and now the regulators. It’s been a tough couple of months for cyber security teams in the casino industry. That continued over the weekend at the New York State Gaming Commission.

The state’s casino regulator was hacked, bringing some grief not just to the gaming commission, but also for some New York slot venues. The commission’s slot management system was left inoperable for a time on Oct. 17, affecting some operators.

“Everi, the licensed operator of New York’s video lottery gaming central system, experienced a cybersecurity event that remains under investigation,” commission representative Brad Maione told the New York Post. “The commission has no indication that personal identifiable information was compromised. The Commission continues to monitor the situation.”

Latest Casino Industry Entity Victimized by Cyber Attack

MGM Resorts was recently victimized in a cyber attack that crippled many of the company’s operations around the country, including slot machines. In Canada, Gateway Casinos experienced a similar issue in April, leading to the closure of several casinos north of the border.

Caesars Entertainment also saw a similar ransomware attack as well. That company chose instead to pay a $30 million ransom to regain access to its computer systems, according to the Wall Street Journal. That may have been the best financial decision, given MGM recent disclosure that the hack will cost the company upwards of $100 million before insurance payouts.

New York State Gaming Commission representatives don’t believe any personal data was retrieved by hackers during the Empire State attack. The commission continues to investigate, but the attack has been another wake-up call for some in the industry.

“We shut down for a brief period,” James Featherstonhaugh, a part owner of Saratoga Casino, told the Post. “It got cleared up fairly quickly. It was all the same issue. It got everyone’s attention.”

Prevention Steps

Cyber crimes have cost MGM, Caesars, and Gateway millions of dollars in lost revenue and additional IT work. As the industry faces a growing number of cyber security issues, some experts say additional planning and training could…

Source…

Brunswick woman target of ‘phantom hacker’ scam


A document that scammers sent a Brunswick woman as they attempted to steal $90,000 in the “phantom hacker” scam. Courtesy photo

A Brunswick woman was recently targeted in an elaborate “phantom hacker” scam involving people posing as tech support workers, banking agents and government officials.

The FBI last month issued an alert regarding this sort of scam and said some victims have lost their life savings.

That nearly happened to a 64-year-old Brunswick woman targeted through a pop-up ad she said she received when she was trying to log into her Social Security and Facebook accounts using the Chrome browser late last month.

“They are so good at what they do,” said the woman, who requested anonymity because she said she’s embarrassed she fell for the scam. “This is ‘Better Call Saul’-level crime.”

The ad said her computer was frozen and her Microsoft account was hacked and directed her to call a customer service number. She called and was asked to download a program that the FBI said gives the scammers remote access to her computer, which she did. The impostor said her account was used to download child pornography and her credit card information was compromised on the dark web.

She was told to call “Det. John Krebs” of the Federal Trade Commission, who claimed criminals involved in drug and human trafficking had used her personal information to set up shell companies and the FTC was investigating whether she was involved. He texted her official-looking documents with the FTC seal and told her to not disclose the information to anyone because the agency viewed her as a possible cooperating witness.

“They had me so convinced I was a suspect in an international crime ring and the only reason they weren’t battering down my door was I was being a cooperative witness,” she said.

She was then called by “Financial Officer Eric Miles” of the FTC, who told her to give him her Social Security number and attempted to persuade her to transfer $90,000 out of her banking accounts to keep it safe from the traffickers. “John Krebs” called her and reminded her not to disclose the information to anyone. “Eric Miles” said the traffickers were…

Source…

Hackers Impersonate Meta Recruiter to Target Aerospace Firm


Cyberwarfare / Nation-State Attacks
,
Fraud Management & Cybercrime
,
Social Engineering

Lazarus Deploys New Backdoor to Target Aerospace Firm

Hackers Impersonate Meta Recruiter to Target Aerospace Firm

Researchers discovered an undocumented backdoor named LightlessCan being used by the North Korea-backed Lazarus Group to target a Spanish aerospace company.

See Also: Live Webinar | Cyber Resilience: Recovering from a Ransomware Attack

Eset researchers said an employee of the aerospace firm was lured with a fake job opportunity. The attacker masquerading as a Meta recruiter and tricked the victim into downloading and executing the malicious codes on a company device.

The hackers obtained initial access to the company’s network last year after a successful spear-phishing campaign and masquerading as a recruiter for Meta.

The ongoing attack campaign called “Operation DreamJob” is run by Lazarus, where a fake recruiter reach out to the victim via LinkedIn and sends two coding challenges required as part of the hiring process.

“The most worrying aspect of the attack is the new type of payload, LightlessCan, a complex and possibly evolving tool that exhibits a high level of sophistication in its design and operation, representing a significant advancement in malicious capabilities compared to its predecessor, BlindingCan,” researchers said.

Recently, federal authorities warned of “significant risk” for potential attacks on healthcare and public health sector entities by the Lazarus group involving exploitation of a critical vulnerability in 24 ManageEngine IT management tools from Zoho.

The alert issued by the U.S. Department of Health and Human Services’ Health Sector…

Source…