Brian Krebs reports: A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider, a cybercrime group suspected of hacking into Twilio, LastPass, DoorDash, Mailchimp, and nearly 130 other organizations over the past two years. The Spanish daily Murcia Today reports the suspect was wanted by the FBI and arrested in Palma de Mallorca as he…
Category: Miscellaneous
HC3: Analyst Note: Healthcare Sector DDoS Guide
May 30, 2024 HC3: Analyst Note TLP:CLEAR Report: 20240530120 Executive Summary A Distributed-Denial-of-Service (DDoS) attack is a type of cyber attack in which an attacker uses multiple systems, often referred to as a botnet, to send a high volume of traffic or requests to a targeted network or system, overwhelming it and making it unavailable…
Never heard of the Embargo ransomware group? SuspectFile provides some insight.
Marco A. De Felice (aka @amvinfe) writes: Embargo is yet another ransomware group emerging in the digital extortion landscape, a group that some industry analysts compare to the much more well-known Alphv group. However, programming similarities do not align with the statements made by a group member during our interview. The program used by Embargo…
911 S5 Botnet Dismantled and Its Administrator Arrested in Coordinated International Operation
A court-authorized international law enforcement operation led by the U.S. Justice Department disrupted a botnet used to commit cyber attacks, large-scale fraud, child exploitation, harassment, bomb threats, and export violations. As part of this operation, YunHe Wang, 35, a People’s Republic of China national and St. Kitts and Nevis citizen-by-investment, was arrested on May 24…
Did BreachForums get its domain back because NiceNIC was originally nicer to them than to law enforcement? (UPDATE1)
When the FBI and its law enforcement collaborators seized BreachForums on May 15, a splash screen announced the seizure. But by the next morning, BreachForums seemed to have regained control of their domain. How that happened has yet to be explained by law enforcement. On May 20, DataBreaches reported that a Swiss prosecutor had provided CloudFlare…
Swiss law enforcement actions appear linked to seizure of BreachForums
There have been a few developments likely related to the seizure of BreachForums. As a preview, recall that Kantonspolizei Zürich was one of the cooperating entities in the takedown and that the seizure notice had two avatars behind bars. One avatar was Baphomet, the administrator of the forum. The other was a default avatar that…