Uber’s former Chief Security Officer Joseph Sullivan will have to face wire fraud charges over his alleged role in covering up a 2016 hack that exposed the personal information of millions of Uber passengers and drivers. The breach and its aftermath continue to reverberate after it was disclosed that although Uber knew it had been…
Deepfakes and Stolen PII Utilized to Apply for Remote Work Positions — FBI
An FBI Public Service Announcement June 28, 2022 Alert Number I-062822-PSA The FBI Internet Crime Complaint Center (IC3) warns of an increase in complaints reporting the use of deepfakes and stolen Personally Identifiable Information (PII) to apply for a variety of remote work and work-at-home positions. Deepfakes include a video, an image, or recording convincingly…
Ukraine arrests cybercrime gang operating over 400 phishing sites
Bill Toulas reports: The Ukrainian cyberpolice force arrested nine members of a criminal group that operated over 400 phishing websites crafted to appear like legitimate EU portals offering financial assistance to Ukrainians. The threat actors used forms on the site to steal visitors’ payment card data and online banking account credentials and perform fraudulent, unauthorized…
When the data leak is not from the victim you named, Wednesday edition
Ever since threat actor groups started naming and leaking victims who do not pay their demands, groups have occasionally misidentified their victims. Today’s example is courtesy of Avos Locker, who added the Canadian Mental Health Association to their leak site in April. Inspection of the data in the leak, however, quickly raised questions as to…
“You really don’t understand the situation…. Google about our team,” Hive tells victim
SuperAlloy Industrial Company Ltd. (SAI) is an international company specializing in engineering and manufacturing lightweight metal products predominantly for the automotive industry. You may not recognize their name but might be driving around on their wheels, as SAI has produced lightweight forged aluminum wheels for McLaren, Ferrari, AMG, BMW, Jaguar, Daimler, and other manufacturers. SAI…
StockX LLC Data Breach Canadian Class Action Pre-Approval Notice of Canadian Settlement Approval Hearing
A proposed Canada-wide Settlement has been reached in a putative class action relating to the StockX data breach that occurred on May 14, 2019, when an unknown third-party was able to gain unauthorized access to certain customer data from StockX’s cloud environment. This proposed Settlement is subject to Court approval. On May 2, 2022, the Superior Court of Quebec authorized…