Catalin Cimpanu reports: The US government has filed a superseding indictment against Paige A. Thompson, a former Amazon engineer accused of hacking Capital One and stealing the personal data of more than 100 million Americans. According to court documents filed earlier this month and obtained by The Record, the US Department of Justice has added seven new charges…
Category: Financial Sector
EpsilonRed ransomware group hits one of India’s financial software powerhouses
Catalin Cimpanu reports: Nucleus Software Exports, an Indian company that provides lending software to banks and retail stores, has suffered a major ransomware attack that crippled some of its internal networks and encrypted sensitive business information. The incident took place last Sunday, on May 30, according to a document the company filed on Tuesday with…
Two Carbanak hackers sentenced to eight years in prison in Kazakhstan
Catalin Cimpanu reports: Two members of the Carbanak (Cobalt) cybercrime group were sentenced today in a Kazakhstan court to eight years in prison for stealing from Kazakhstan banks. The sentencing was announced today by the Almaty city prosecutor’s office. The two hackers, whose names were not released, were found guilty of hacking into the IT systems of several Kazakh…
Klarna battles data breach with reports of leaked user info
Isabel Woodford reports: Consumers have raised the alarm about a data breach — including users’ names — at Klarna, Europe’s largest private fintech. The company, which is reportedly in the throes of closing a deal valuing it at $40bn, came under fire on Thursday after users complained they were being accidentally logged in as other people, given…
Bizarro banking malware targets 70 banks in Europe and South America
Ionut Ilascu reports: A banking trojan named Bizarro that originates from Brazil has crossed the borders and started to target customers of 70 banks in Europe and South America. Once landed on a Windows system, the malware can force users into entering banking credentials and uses social engineering to steal two-factor authentication codes. Read more…
In Capital One Data Breach Litigation Federal Judge Grants Capital One’s Motion To Certify Question to Virginia Supreme Court
Kristin L. Bryan of Squire Patton Boggs writes: CPW [Consumer Privacy World] has been tracking since last year the Capital One data breach multidistrict litigation (remember that privilege ruling?). Well, today the federal judge overseeing the litigation granted Capital One’s motion to certify to the Virginia Supreme Court a question of whether there exists under Virginia…