Some breaches may be more embarrassing to admit to than others. Kudos to this therapist for forthrightly informing the Washington state attorney general what happened: I am writing to advise you of a computer data breach, which occurred from December 2 to December 4, 2022. I was contacted by a person representing himself as an…
Category: Phishing
Lawsuits come, lawsuits go (settle), Friday edition
Three more recent announcements of lawsuit settlements involving healthcare entities. Two of the following involve ransomware and Massachusetts entities; the third is a phishing attack on an Arkansas entity. North Shore Pain Management and Resolve I.T. North Shore Pain Management has set aside $200,000 to settle a class action lawsuit that claimed the company and…
Disneyland Malware Team: It’s a Puny World After All
Brian Krebs reports: A financial cybercrime group calling itself the Disneyland Team has been making liberal use of visually confusing phishing domains that spoof popular bank brands using Punycode, an Internet standard that allows web browsers to render domain names with non-Latin alphabets like Cyrillic. The Disneyland Team uses common misspellings for top bank brands in its domains….
A state-appointed receiver is investigating a phishing scam that drained $400K from Chester’s coffers
Vinny Vella reports: A phishing scam siphoned more than $400,000 from Chester in June, and the state-appointed receiver who is handling the beleaguered city’s finances wants to know why his office wasn’t notified until two weeks ago. In a memo sent to Mayor Thaddeus Kirkland and Chester’s city council on Monday, Michael T. Doweary said…
Robin Banks phishing service returns to steal banking accounts
Bill Toulas reports: The Robin Banks phishing-as-a-service (PhaaS) platform is back in action with infrastructure hosted by a Russian internet company that offers protection against distributed denial-of-service (DDoS) attacks. Robin Banks faced operational disruption in July 2022, when researchers at IronNet exposed the platform as a highly threatening phishing service targeting Citibank, Bank of America, Capital One, Wells…
Sg: Victims lose $237,000 amid resurgence in SingPost and Singtel phishing scams: Police
Aqil Hamzah reports: At least 85 people here have lost about $237,000 since January 2022 after falling victim to phishing scams involving purported e-mails from Singapore Post (SingPost) and telco Singtel. It comes amid a resurgence in scammers impersonating both firms and sending out e-mails with unrelated domains, said the police on Thursday. The e-mails…