Internet Security Week - Issue 68

In the 68th edition of Internet Security Week, JBS pays $11 million ransom, the largest password leak of all time, Belo Horizonte city hall is hacked, and much more.

News

JBS paid an $11 million ransom

JBS, the world's largest beef producer, confirmed it paid an $11 million ransom after the REvil ransomware operation initially demanded $22.5 million.

By Lawrence Abrams in Bleeping Computer

High volume of cyberattacks has led teams to emotional overload

With cyberattacks becoming increasingly frequent, information security professionals are becoming emotionally overwhelmed, according to a Trend Micro study.

By Roseli Andrion on Canaltech

Federal Police arrest suspects in hacking attack on STF system

In total, there are three temporary arrest warrants and five search and seizure warrants in the cities of Itumbiara (GO), Bragança Paulista (SP), Belém do São Francisco (PE), Jaboatão dos Guararapes (PE) and Olinda (PE). Two arrests have already been made, according to the PF.

In Gazeta do Povo

Largest password leak of all time has over 8.4 billion pieces of data

A user on a hacker forum posted a 100 GB TXT file containing 8.4 billion passwords, which were combined from old leaks and breaches.

By Edvardas Mikalauskas in Cybernews

Cybercriminal ordered to return R$648,000 stolen from two different victims

A cybercriminal arrested by the Civil Police of the Federal District is ordered to return R$648,000, which was stolen from two different Banco do Brasil accounts, in addition to having to serve 5 years and 6 months in prison.

By Guilherme Petry in The Hack

BH City Hall's inspection system is hacked

The Digital Inspection System (SIF) of the Belo Horizonte City Hall was hacked in the early afternoon of this Wednesday, 9th. Upon entering the system, the servers found a message that directly attacks Mayor Alexandre Kalil (PSD) because of the restrictions imposed on commerce during the pandemic.

In CISO Advisor

Employees fear being blamed for company data breaches

Workers in small and medium-sized organizations, in particular, do not consider themselves attractive targets for cybercriminals, do not understand the full extent of cyber threats, and are unlikely to report incidents for fear of being blamed.

By Kelvin Zimmer on Lumiun Blog

Audi and Volkswagen data breach affects 3.3 million customers

According to data breach notifications filed with the California and Maine Attorney General's office, VWGoA disclosed that a vendor left unsecured data exposed on the internet between August 2019 and May 2021.

By Lawrence Abrams in Bleeping Computer

Old malware returns in new version to steal logins and passwords

Agent Tesla is now part of a new campaign that uses infected Excel spreadsheets to install itself on victims' computers, capable of stealing passwords saved in the browser, access credentials to corporate systems, and even cryptocurrency wallets, the funds from which are then returned to the criminals.

By Felipe Demartini on Canaltech