Internet Security Week - Issue 87

In the 87th edition of Internet Security Week , Acer suffers second attack this year, free VPN leaves data exposed, Atento is victim of ransomware attack and much more.

News

Digital kidnapping payments have already exceeded US$5 billion in 10 years

According to the Treasury Department's FinCEN (Financial Crimes Enforcement Network), more than $5.2 billion has been amassed by scammers through digital kidnapping attacks over the past 10 years.

By Felipe Demartini on Canaltech

Cybercrime uses legitimate tools for cyberattacks

Cybercriminals have long used legitimate programs and operating system components to target Microsoft Windows users, a tactic known as Living Off the Land.

By Renato Rodrigues in Kaspersky Daily

China's Free VPN Service Exposed Data of Over a Million Users

Up-to-date personally identifiable information (PII) of more than a million users of the free Chinese VPN service, Quickfox, is exposed on a poorly configured, unencrypted Elasticsearch server available on the surface web without a password.

By Guilherme Petry in The Hack

Acer confirms second cyber attack this year

Acer confirmed a cyber attack on its India offices this week after hackers from the Desorden Group claimed to have breached servers and stolen 60GB of files from the Taiwanese PC maker.

In CISO Advisor

Hacker claims to have stolen data from the entire population of Argentina

A hack at the beginning of the month reportedly gave access to personal information belonging to even President Alberto Fernández and Lionel Messi.

By Fábio Fleury in R7

Most common initial attack vectors

When investigating a cyber incident, we always pay special attention to the initial attack vector. Simply put, the entry point is a weak point, and identifying weaknesses in defense systems is crucial to prevent recurrence.

In Kaspersky Daily

Atento is a victim of ransomware; operations in Brazil are paralyzed

Atento, a multinational telephone and contact center outsourcing company headquartered in Spain but with a large operation in Latin America, revealed that it suffered a cyberattack that paralyzed its operations in Brazil.

By Guilherme Petry in The Hack

Algorithm trained by researchers can guess bank passwords

Every ATM has a sign asking users to make sure no one is watching them when they enter their bank account password, but research has shown that in the future the sign will also have to warn about cyber risks.

By Dácio Castelo Branco on Canaltech

Malware used in ransomware is already affecting companies in Brazil.

After reigning for three consecutive months and falling to second place in August, the banking Trojan Trickbot has returned to the top of the September 2021 Global Threat Index list from Check Point Research (CPR), the threat intelligence division of Check Point Software.

In CISO Advisor

REvil Group Hacked by Cybercrime Agencies

Entities from several countries, including the United States, formed a task force to counterattack and “hack the hackers” from the Russian-based cybercriminal group REvil.

By Carlos Palmeira in Tecmundo