SEATTLE, WA - Online shopping retail giant Amazon this week seized multiple internet domains that have been utilized by Russian hackers to launch phishing attacks that targeted users of Microsoft’s Windows operating system. Chief Information Security Officer at Amazon, CJ Moses, announced in a blog post that Midnight Blizzard, otherwise known as APT29 – a threat actor directly sponsored by the Russian government – had been targeting government agencies, empires, … [Read more...]
Ticketmaster Faces Massive Data Breach, Affecting Millions of Users
WEST HOLLYWOOD, CA - Ticketmaster, the ticketing giant, is reeling from a major data breach that may have exposed the personal information of over half a billion users. The notorious hacking group ShinyHunters is claiming responsibility for the attack and is demanding a ransom of $500,000 to prevent the data from being sold. While Ticketmaster has yet to confirm the breach officially, security experts are taking the claims seriously. According to reports, the stolen data … [Read more...]
Thousands of Domain Names Owned by Legitimate Brands Hijacked to Send Spam
TEL AVIV - As part of a sophisticated scheme involving spam proliferation and click monetization, over 8,000 domains and 13,000 sub-domains once owned by major, legitimate brands and institutions have been hijacked to allow millions of spam emails to bypass standard security blocks for nefarious gain. This coordinated malicious activity – dubbed “SubdoMailing” – has been going on since at least September 2022, according to Guardio Labs, the Israeli security … [Read more...]
Scammers Sending Emails from Spoofed Authoritative Domains Via Forwarding Flaws
LA JOLLA, CA - According to research conducted by the University of California San Diego, due to flaws inherent in the process of forwarding emails, the ability for scammers and attackers to send unsuspecting victims e-mails from the spoofed addresses of top-level government or corporate domains is actually much easier than many experts were initially suspecting, opening up disturbingly new and effective avenues for online fraud. The integrity of emails sent from … [Read more...]
Domain Registrar Namecheap Gives Away Half a Million Free .me Domains to Students
PHOENIX, AZ - Namecheap, the Phoenix, Arizona-based domain name registrar and web hosting company originally founded in 2000, recently announced that they have given away a total of 500,000 free .me domain names to students in conjunction with their Namecheap for Education program. The company originally started the program in 2014, which provides students, teachers, and others involved in academia who are located in North America, the United Kingdom, and … [Read more...]
Managed Care Confirms Serious Breach of Nearly 9 Million Patients’ Critical Info
ATLANTA, GA - Managed Care of North America, Inc. (MCNA), a major insurance company, suffered a data breach that exposed the personal information of nearly 9 million patients. The Atlanta-based company claims to be the largest dental insurer in the nation. According to reports, Hackers had access to MCNA systems from February 26 to March 7, 2023, compromising confidential patient information such as full names, addresses, birthdates, driver’s license numbers, phone … [Read more...]
Data Breach: Unauthorized Party Accessed DoorDash Customer Information
SAN FRANCISCO, CA - According to recent reports, a new data security incident has surfaced. DoorDash, a popular food delivery app, detected suspicious activity from the computer network of a third-party vendor, and determined the vendor was compromised by a sophisticated phishing attack. According to the report, certain personal information maintained by DoorDash like names, emails, addresses, phone numbers, and even partial payment card info have been affected. If … [Read more...]
Reported Twitter Data Breach Potentially Affects 5.4 Million Accounts
WEST PALM BEACH, FL – Stolen personal information from 5.4 million Twitter users has been discovered for sale on a hacker forum. With this information, including emails and phone numbers, cybercriminals can create profiles to target victims with spam or phishing attempts which could lead to identity theft. Twitter is currently investigating claims that a near-seven-month-old vulnerability in its software has been exploited and the hacker is asking for $30,000 for the … [Read more...]
10 Simple Yet Effective Security Tips To Keep You Cyber Safe and Worry Less in 2020
PALM BEACH, FL - There is no shortage of security breaches and data leaks reported in the news this past year. As we all move into 2020, here are some simple tips to help keep you stay cyber safe, so you can worry less and have more to look forward to this year. Don't Shorten 2020 in Dates You shouldn’t shorten the year 2020 when signing things. Scammers can easily change the abbreviated date, for example from “3/30/20” to “3/30/2018”. Make sure to write out the full … [Read more...]
Malicious Web Code Added To Macy’s Website Leads to Critical Data Breach
PALM BEACH, FL - Right at the start of the year's busiest shopping season, retailer Macy's notified impacted customers (by letter) that an unauthorized third party was able to access sensitive customer payment information from the Macys.com checkout and wallet pages. The following information may have been accessed if it was typed into the affected web-pages by a customer: Payment card numbersPayment card security codesPayment card expiration datesFull … [Read more...]
Biden Staff Sends Email Blast for Feedback on Debate… [Before Debate Takes Place]
PALM BEACH, FL - Former Vice President Joe Biden and his staff are no newbies when it comes to technical blunders, mispronounced domain names, and faulty web strategies - yesterday came more of the same. According to Politico, Biden sent out a fundraising email asking for feedback on his debate performance more than six hours before the debate even began. The email blast, which went out at approximately 3:00 PM was titled: “Did I make you proud?” Unfortunately, for … [Read more...]
Cryptocurrency Exchange BitMEX Called “Outrageously Incompetent” for Using “CC”
PALM BEACH, FL – BitMex, a peer-to-peer cryptocurrency exchange founded in 2014 has accidentally emailed its users with the CC (carbon copy) field rather than the “private” BCC (blind carbon copy) field leading to outrage by many of its users. In a tweet posted on Nov. 1, crypto-currency attorney Jake Chervinsky said the leak was done in the most “outrageously incompetent way imaginable.” BitMEX released an official statement on the issue, emphasizing that no … [Read more...]
Wild West Domains Must Still Be on List of Registrars Which Facilitate Email Spam
PALM BEACH, FL – Way, way, way back in 2009, Brian Krebs from Krebs on Security, a popular security website came up with a list of the top ten domain registrars (highlighted in a Washington Post article) which facilitate the majority of spam via email, and Wild West Domains, owned by GoDaddy held a spot on that list. Out of roughly 900 accredited domain name registrars at the time, spammers registered Web sites advertised in junk e-mail mostly through the following top … [Read more...]
FTC Warns Consumers of Fake Equifax Data Breach Websites for Settlement Claims
PALM BEACH, FL – The Federal Trade Commission is warning Internet users, all 147 million people who were affected by the Equifax Data Breach in 2017, to beware of fake Equifax settlement websites which have been setup by thieves trying to steal consumers information when they attempt to file a claim online. Typically, users are sent an email that a class action lawsuit has resulted in a settlement making them eligible for credit monitoring services and/or a cash claim … [Read more...]