Blog - Page 102 of 152 - SecureBlitz Cybersecurity

-

March 5, 2024

Cryptojacking Post Office exposed in Russia

Russian police have arrested the former head of a post office branch in Mineralnye Vody, southern Russia, on suspicion of cryptojacking.

Local media reports allege he misused computers entrusted to him for mining cryptocurrency.

Table of Contents

Cryptojacking Post Office: Investigation and Accusations

The investigation revealed the suspect installed and connected unauthorized crypto-mining equipment to the national power grid. This act bypasses standard procurement procedures and raises questions about potential fire hazards from unapproved equipment.
He is accused of using this equipment for personal gain for approximately six months, causing damages estimated at 30,000 rubles (around $427). The cost of the stolen electricity is likely just a fraction of the potential profits from mining cryptocurrency, making it a potentially lucrative but risky scheme.
Currently, charges haven’t been officially filed as the investigation is ongoing, with authorities focusing on evidence collection. The suspect’s identity remains undisclosed, but this may change depending on the outcome of the investigation.
The accusation falls under “abuse of power.” This charge highlights the potential breach of trust associated with the suspect’s position as a public servant.

Similarities to Previous Case

This incident bears resemblance to a 2019 case where Denis Baykov, a Russian nuclear warhead factory employee, was fined for using state computers to mine Bitcoin.

Two other employees were also implicated in using the factory’s supercomputers for personal mining.

These cases suggest a pattern of cryptojacking attempts within Russian institutions, potentially due to lax security measures or a lack of awareness about the consequences.

Contextualizing Cryptojacking in Russia

This recent arrest highlights a broader trend of cryptojacking in Russia. It’s unclear if this is an isolated incident or part of a more extensive network. Further investigations may reveal if there were any accomplices or if the suspect was operating alone.
In March 2023, authorities apprehended individuals suspected of stealing electricity worth $200,000 per month to mine Bitcoin using tampered meters. This case demonstrates the lengths some individuals will go to mine cryptocurrency illegally.

Overall

The case raises concerns about the potential abuse of power and unauthorized resource utilization within Russian institutions. It also emphasizes the ongoing battle against cryptojacking schemes worldwide.

Law enforcement agencies around the globe are working to develop strategies to counter these increasingly sophisticated cybercrimes.

Cryptojacking Post Office: Frequently Asked Questions

The recent arrest of a former Russian post office head for allegedly using office computers to mine cryptocurrency has sparked questions. Here are some frequently asked questions to shed light on the situation:

What is cryptojacking?

Cryptojacking is the unauthorized use of someone else’s computer to mine cryptocurrency. This process consumes processing power and generates revenue for the attacker, while the victim experiences slower computer performance and potentially higher electricity bills.

How did the post office head allegedly carry out cryptojacking?

Reports suggest he installed unauthorized crypto-mining equipment and connected it to the national power grid. This raises concerns about bypassing standard procurement procedures and potential fire hazards from unapproved equipment.

What are the potential consequences for the suspect?

The investigation is ongoing, and charges haven’t been officially filed. However, the accusation of “abuse of power” suggests a potential breach of trust due to his position as a public servant. He could face fines or even imprisonment, depending on the severity of the offense and the evidence collected.

Is this an isolated incident, or is cryptojacking a bigger problem in Russia?

This incident seems to be part of a more significant trend. There have been previous cases of cryptojacking attempts within Russian institutions, like the 2019 incident involving a nuclear warhead factory employee. Additionally, authorities apprehended individuals in March 2023 for stealing electricity to mine Bitcoin. These cases suggest a need for stricter security measures and increased awareness about the consequences of cryptojacking.

Note: This was initially published in June 202 but has been updated.

RELATED POSTS

Do You Still Need Antivirus Protection For Your Business?

Tutorials

Christian Schmitz

-

March 5, 2024

0

Here’s an answer: do you still need antivirus protection for your business?

Cyber attacks are becoming one of the most pressing dangers to everyday business operations.

While it is increasingly common for modern operating systems to come equipped with various built-in security features, they are still insufficient to cover your most frequent attacks.

Unfortunately, most business owners get so enmeshed in the daily challenges of running a business that many ignore their security baseline and think free packs or built-in security software is enough to protect them from attacks.

Managed IT Services Provider states that hackers count on security vulnerabilities like these. This can expose entire businesses (and their associated partner, vendor, and client network) to permanent and long-term cyberattack damage.

Viruses can be created and used by anyone from a business competitor to espionage agencies to random groups of miscreants looking to make a quick buck or achieve notoriety.

The damage can temporarily or permanently turn off your systems, steal information, or force you to pay a ransom (doubled with fines or legal hassle, as many local or regional governments have deemed paying ransom illegal).

READ ALSO: Best Antivirus For 2022

The safer way out is always to use a reliable antivirus program to detect worms and viruses and a firewall to protect you against attacks. Good antivirus and security software are usually packaged together to root out compatibility problems and make it more straightforward for users to protect their systems.

Your local IT Support Provider should be able to provide you with recommended packages that suit both your needs and budget.

Table of Contents

How Does Antivirus Work?

Antivirus software can detect malware and viruses on your system. Users often think that it should be enough to protect them if they take ‘common sense’ protection, such as not clicking on suspicious links or attachments.

But as cybercrime evolves, many malicious programs are designed to be ‘sleeper’ in nature, i.e., they can lie dormant in your system and be activated at will. These programs are hard to detect and harder to get rid of. An antivirus program runs in the background, does periodic system scans, and can alert you to anomalies whenever it detects them.

If it suspects malicious activities, it will stop that program or file from executing further and put it in quarantine.

Depending on settings and permissions, the program can automatically delete such files or keep them in quarantine until the user decides to restore them (in case of a false alarm).

READ ALSO: Is RAV Antivirus Safe?

Why Do You Need An Antivirus For Your Business?

Ransomware Protection

Ransomware attacks are getting increasingly common, with data from not just individual users but large public institutions like schools, hospitals, and private businesses being held hostage with threats from malicious actors.

Also, ransomware can act by restricting access to systems or simply stealing the information stored on systems until the demands from the attackers are met.

Ransomware can result in total access or permanent data loss, apart from the financial and legal pressures it creates for unfortunate victims. These attacks can bypass the feeble protection offered by bundled and free security software and antiviruses.

Data Protection

One of the primary reasons for using a robust and reliable antivirus is to protect your system from spyware that can try to ‘read’ and steal your valuable personally identifiable information (PII) and financial data.

This is primarily a sensitive use case for businesses where many workers can handle transactions. Tapping into the system of any of them can give hackers access to the entirety of your financial operations.

E-mail Protection

Following from above, phishing attacks are now commonplace among businesses of all sizes where malicious actors can try to ‘scope’ your employees to try and gain a foothold in your business network.

Apart from phishing attacks, e-mails can also be used as a distribution channel for viruses and Trojanslure people to enter their data on spoofed websites.

Strong antiviruses can prevent human error by clicking on seemingly innocuous images, text files, and links. They scan all incoming files, including attachments, and alert you early about suspicious activity.

Improved Online Security

It is crucial for businesses engaged in e-commerce activities to have a high-functioning antivirus solution. This can help your business block phishing attacks, spyware, and more trying to snoop in on your financial data and all your stored customer information.

Look for security solutions offering enhanced security features, such as data encryption during financial transactions.

Ease of Use and Management

Why choose business packs over standard or home edition antivirus? Well, for one, business editions have much more centralized control.

You can manage the security of all your systems with a single administrator interface on this centralized console. This means ease of management through remote management and intuitive controls.

You are free to add/ modify permissions/ delete as many devices as you like and don’t need a specialized IT employee to manage it.

Professional Support

Professional technical support is only a click away with business-class antivirus, as many manufacturers provide exclusive on-demand services for business customers.

Additional features include having a personal manager, 24/7 support, firewall, file shredder, anti-spam filter, VPN services, on-demand phone and video consultations, and more.

Background scanning without system slowdown

Your systems need to be monitored 24/7 to be protected against malicious attacks. However, due to poor resource management, many free antivirus solutions slow down your systems to a crawl when performing these periodic background checks.

This is another reason premium business antiviruses are an excellent long-term investment in ensuring round-the-clock protection with minimal impact on system performance.

Conclusion

Antivirus for business has become a critical necessity in the post-pandemic environment as cybercrimes rise to an all-time high.

Your local dedicated IT Support Services Provider often has security experts who can help you find the highest quality and cost-effective antivirus and security solution for your business.

Interesting Reads:

How Hackers Impersonate Big Brands And Scam People

CyberBust

Christian Schmitz

-

March 5, 2024

0

This post will show how hackers impersonate big brands and scam people.

When you receive an email saying that it is from a company that you do business with, it features the company’s logo. It appears professional; you may trust it, especially from a reputable business.

Unfortunately, hackers know this and piggyback reputable brands to try to accomplish their nefarious objectives.

Here is what you need to know about impersonation and phishing – and how to protect yourself.

Table of Contents

Phishing Explained

They were wondering how hackers impersonate big brands. Phishing is the most common way for criminals to gain entry into networks. This is because it is one of the easiest and cheapest cybercrimes to commit.

If successful, the criminal can potentially gain valuable information from their targets. Scammers use phishing to try to obtain the following from people and businesses:

Money and other monetary benefits
Login credentials
Financial data
Identities

Most phishing attacks are carried out over email, but some occur on social media or other platforms.

In a typical phishing scam, the criminal tries to get the victim to take a specific action, such as providing login information, updating their account, or making a payment.

The victims may be asked to click on a link, download an attachment with malware, or respond directly with the information.

The Brands That Hackers Impersonate

Statistics on identity theft indicate that hackers like to impersonate reputable companies. The more trustworthy the impersonated business, the more its customers may be able to give the scammers what they want.

Additionally, the statistics on identity theft clearly show that it is on the rise. Yet, there is still not a very clear solution to it, nor enough coverage about this issue.

According to a Vade Secure analysis of recent phishing attacks, the most popular brands hackers are impersonating include:

Microsoft – Microsoft remains the most prominent brand hackers use in phishing attacks. In a year-over-year comparison, there are 15.5% more URLs in emails claiming to come from Microsoft. Microsoft is appealing to hackers who may use Office 365 accounts to view and steal restricted files in larger-scale attacks or use a legitimate address to access other accounts.
Netflix – Netflix’s recent price adjustment gave hackers a new opportunity to spoof customers.
PayPal is the most widely used global online payment service and is a trusted brand, two characteristics that make it particularly attractive to hackers.
Bank of America – Banks are often an attractive target to hackers because of the quick financial payoff.
Chase – 9 out of 25 brands in the full report, including Chase, come from the financial industry.
DHL – This global logistics firm realized an increase of 24.5% in phishing attacks.
Facebook – Fake URLs listing Facebook as their source increased by 176% in a year. Hackers who get login credentials from Facebook could obtain additional information that may be used in other attacks.
DocuSign – Electronic document service company DocuSign made the top ten list. This account could allow hackers access to critical financial documents and data.
LinkedIn – LinkedIn experienced an increase of 15.8% in phishing attacks.
Dropbox – A document storage company rounded out the tenth position.

Other reputable companies also find themselves targets for these phishing campaigns. For example, Amazon experienced an increase of more than 400% in phishing emails citing the conglomerate.

According to Barracuda researchers, Google brand sites make up 4% of spear-phishing attacks in 2020.

Apple also experienced a significant number of attacks.

Not only that, but many big corporations also suffer from data breaches, the most famous being Amazon’s. Hence, this should not be taken lightly.

How Hackers Impersonate Big Brands

Some signs that you are receiving a phishing message include:

Denied access – Many phishing scams purport to tell you that you cannot access your account if you do not update it. Others may say that fraudulent activity was detected on your account and may urge you to provide new login credentials.
Mismatched email address or URL – The sender’s email address or the URL where you are redirected may differ slightly from the one you have received from the company before.
Poor spelling or grammar – The message may contain spelling or grammar errors since many of these attacks are carried out by people who speak different languages.
Urgency in the content – Hackers may try to bypass your better judgment by claiming that you must take action NOW.
Too good to be true messaging – If you receive a message congratulating you for winning a prize or lottery, you should be very hesitant.

How To Protect Yourself From Phishing

The FTC recommends taking the following steps to protect yourself from phishing scams:

Install and regularly update security software
Set up your mobile phone to update automatically since many attacks target mobile devices
Use multi-factor authentication to protect your accounts
Back up your data regularly

If you run a business, you will want to take extra precautions to safeguard your corporate accounts and customer data, including:

Providing ongoing training to your workers to spot and avoid phishing attacks
Disabling macros from being run on your business computers
Restricting access to confidential information to only those workers who need it

READ ALSO: Popular Types Of Cybercrimes

How Hackers Impersonate Big Brands: Frequently Asked Questions

Why do hackers impersonate big brands?

Their main goal is identity theft and financial gain. By impersonating trusted brands, hackers leverage the brand’s reputation and familiarity to:

Steal login credentials trick victims into entering usernames and passwords on fake login pages that appear legitimate.
Deploy malware: They lure victims into clicking on infected links or downloading attachments that contain malware, giving hackers access to their devices and data.
Commit financial fraud: They exploit stolen information like credit card details or bank account numbers to make unauthorized transactions.

How do hackers impersonate big brands?

They employ various tactics to make their scams appear genuine:

Phishing emails: These emails appear to be from the brand, often with urgent demands or tempting offers. They might contain typos, grammatical errors, or a sender address that doesn’t quite match the brand’s official email format.
Spoofed phone calls: Hackers can use technology to make caller ID appear as the brand’s contact number, tricking victims into picking up and potentially revealing sensitive information.
Fake social media accounts: Hackers might create fake social media profiles imitating the brand, often with slightly altered usernames or logos. They may attempt to connect with victims and send them direct messages containing malicious links or requests for personal information.
Malicious websites: Hackers can create websites that closely resemble the brand’s official website, using similar layouts, logos, and even stolen content. These websites often trick victims into entering their login credentials or downloading malware.

What are some red flags to watch out for?

Sense of urgency: Emails or messages demanding immediate action, like threats of account suspension or promising unrealistic rewards, are often used to create panic and prevent victims from thinking critically.
Grammatical errors and inconsistencies: Legitimate companies typically maintain high standards for professionalism. Typos, grammatical errors, or inconsistencies in email addresses, website URLs, or branding are red flags.
Suspicious requests for personal information: Reputable companies rarely request sensitive information through email or unexpected phone calls. Be wary of any requests for passwords, credit card details, or Social Security numbers.
Unfamiliar links or attachments: Never click on links or open attachments in emails or messages from unknown senders, even if they appear to be from a familiar brand.

How can I protect myself from being impersonated?

Be cautious with unsolicited communication: Don’t click on links or open attachments in emails or messages from unknown senders, even if they appear legitimate.
Verify the source: If you receive a message from a brand, contact them through their official website or verified social media channels to confirm its authenticity before taking any action.
Enable two-factor authentication (2FA): This adds an extra layer of security to your online accounts, requiring a secondary verification code beyond your password when logging in from a new device.
Keep your software updated: Regularly update your operating system, web browser, and other software to ensure you have the latest security patches and bug fixes.
Use strong and unique passwords: Avoid using the same password for multiple accounts, and create strong passwords using a combination of uppercase and lowercase letters, numbers, and symbols.

What to do if you suspect you’ve been targeted?

Don’t respond to the sender.
Change your passwords immediately: If you’ve entered any information on a suspicious website or shared your log in credentials, change your passwords for all associated accounts.
Report the incident: Report the fraudulent attempt to the brand directly and consider reporting it to relevant authorities, depending on the nature of the impersonation attempt.

What To Do If You’ve Been Catfished?

If you think you were a victim of this attack and may have given out your personal information, go to IdentityTheft.gov and follow the steps. Also, update your computer’s security software if you accidentally downloaded malware.

Conclusion

In this post, we’ve shown you how hackers impersonate big brands and scam people.

Even if you trust a company, you may not be able to charge an email or other message. These online privacy tips can help you outsmart hackers and protect your personal information.

Staying vigilant and informed about these tactics can help you stay safer online and avoid falling victim to impersonation scams. Remember, if something seems too good to be true, it probably is.

Always exercise caution when dealing with any unsolicited communication, even if it appears to come from a trusted source.

RELATED POSTS

Online Video Editors For Adding Subtitles To Videos: Frequently Asked Questions

What format should my subtitles be in?

The most common subtitle format is SRT (SubRip Text). SRT files are plain text files containing timestamps and the subtitles’ text. You can create SRT files using a text editor or a subtitle editing program.

How can I create subtitles if I don’t have a transcript?

If you don’t have a video transcript, you can use a speech-to-text program to generate subtitles automatically. However, speech-to-text programs are not always accurate, so you may need to edit the subtitles afterward.

How can I translate my subtitles into another language?

There are several online translation services that you can use to translate your subtitles into another language. However, if possible, it is always best to have your subtitles translated by a human translator.

How can I make sure my subtitles are accessible to everyone?

There are a few things you can do to make sure your subtitles are accessible to everyone:

Use a clear and easy-to-read font.
Use a large enough font size.
Use a high-contrast color scheme for the subtitles (e.g., white text on a black background).
Make sure the subtitles are appropriately timed.

Conclusion

As you can see, there are exciting options to subtitle videos. Get to know them, and it will be worth it.

With the chosen tool, we don’t measure effort and invest time and attention not only in the form of the subtitles but also mainly in the spelling and typing of the words. In this material, any error is obvious. So, attention and good luck!

INTERESTING POSTS

The Ultimate IPVanish VPN Backup Review For Cloud Storage Users

Reviews

Christian Schmitz

-

March 5, 2024

0

The Ultimate IPVanish VPN Backup Review For Cloud Storage Users

IPVanish VPN and Backup; why pair them together? Well, IPVanish believes that this combination would create a complete security suite.

In this IPVanish VPN Backup review, we will look at how this combination works, its features, pricing, and other helpful information you may require.

Table of Contents

What Is IPVanish VPN + Backup?

IPVanish VPN + Backup is a security solution that simultaneously secures users’ connections and guards their essential data.

This software combines the IPVanish VPN and SugarSync Backup and encrypts and protects everything from your files to your internet connection.

It shields your online activities, grants access to restricted sites, and protects and manages your documents, photos, and videos.

Best IPVanish Backup Alternatives

Paragon Backup & Recovery

Your best backup and recovery solution for home and business use.

Your best backup and recovery solution for home and business use. Show Less

pCloud

Offers collaborative solutions for your cloud storage needs.

Offers collaborative solutions for your cloud storage needs. Show Less

Carbonite

Carbonite offers reliable and automatic cloud backup solutions, ensuring your critical data is protected and easily...Show More

Carbonite offers reliable and automatic cloud backup solutions, ensuring your critical data is protected and easily recoverable, so you can have peace of mind and focus on what matters most. Show Less

How Does IPVanish VPN + Backup Work?

The IPVanish VPN + Backup works as a privacy tool that encrypts both your internet connection and files.

The VPN service uses a secured server to tunnel users’ web traffic and mask their IP addresses. The cloud backup supports different video, photo, music, and document types and provides secured file backup, syncing, and sharing.

How To Download And Install IPVanish VPN + Backup

The IPVanish VPN + Backup application is available for most major platforms and web browsers,s including Android, iOS, Windows, macOS, and Chrome OS.

To download and install the IPVanish VPN + Backup application on Windows,

Go to the IPVanish website, and on the navigation bar, click on Apps.
Click on Windows, then select Download Windows App to start the Download.
After it’s been downloaded, double-click on the file.
To start the installation, choose the file location, then click on Install
In the pop-up window, click Yes, select Run, then select Yes to start the installation.

To download and install the IPVanish VPN + Backup application on macOS,

Open the IPVanish website and select Apps from the navigation bar.
Click on Mac and then select Download.
After downloading it from your device’s Downloads folder, open the downloaded app and drag it to the Application folder for installation.

To download and install the IPVanish VPN + Backup application on Chrome OS,

On your Chrome OS device, open the Google Play Store.
Search for IPVanish using the search box.
Look for the app from the presented list and click on Install.
When the installation is complete, click Open.

To download and install the IPVanish VPN + Backup application on Android,

Go to Google Play Store.
In the search box, type ‘IPVanish, and select the app from the results.
Select the Install button and click Open after the app has been installed.

To download and install the IPVanish VPN + Backup application on iOS,

Go to the App Store.
In the search box, type ‘IPVanish’ to pull up the app.
Select the Download icon to start downloading and installing the app.
Click on Open to launch it after the app has been installed.

IPVanish VPN + Backup Features

Secure Backup Space

SugarSync provides 500 GB of backup space for users to copy and store files, photos, videos, music, etc.

Continuous File Syncing

SugarSync cloud backup allows you to sync files across unlimited multiple devices continuously.

Data Sharing Controls

The security settings help users control their file permissions, dictating who can view or edit them.

Unmetered Device Connections

IPVanish VPN does not meter active connections. This means that you can protect all your devices at the same time.

Zero Traffic Logs

IPVanish’s no-logs privacy policy ensures that no web traffic and user activity is tracked or saved.

Proxy Web Server

The server saves as an intermediary between you and websites. It provides all the resources you may require for any website.

Multiple Servers and Shared IPs

The software provides users over 40,000 shared IPs and over 2,000 VPN servers in over 75 locations worldwide.

Strong Encryption Protocols

256-bit AES, OpenVPN, IKEv2, and L2TP/IPsec VPN protocols encrypt users’ activities.

IPVanish VPN + Backup Customer Support & Resources

Subscribers of the IPVanish VPN + Backup enjoy 24/7 customer support from IPVanish and SugarSync Support Centers via live chat for assistance concerning the VPN and Backu, respectively.

Users can also get help by sending a request or navigating through the setup guides, featured articles, and FAQs.

IPVanish VPN + Backup Pricing

The IPVanish VPN + Backup has two pricing plans, allowing users to subscribe monthly or yearly, depending on their available resources.

The Monthly Plan costs $12.99 while the Yearly Plan costs $54.99; that’s $4.58 per month for the first year of subscription and then $109.99 every other year.

The Yearly Plan includes a 30-day money-back guarantee and helps you to save 64% of the monthly purchase fee.

Is IPVanish VPN + Backup Safe?

Considering how the software protects users’ online activities and personal data, we can say that IPVanish VPN + Backup is safe.

Is IPVanish VPN + Backup Legit?

Undoubtedly, IPVanish VPN + Backup is legit. It serves as a shield that protects users’ online activities from cyber criminals and safeguards their sensitive personal files.

Is SugarSync Free With IPVanish?

SugarSync is not accessible with IPVanish but is paid for at a reduced price along with the IPVanish VPN subscription. Individual SugarSync Cloud Backup (500 GB) plans cost $18.95 Monthly, with no Yearly plan. IPVanish VPN plans, without SugarSync Backup, cost $10.99 monthly and $89.99 yearly.

IPVanish VPN + Backup Review: Frequently Asked Questions

Is IPVanish VPN + Backup a good value?

This depends entirely on whether IPVanish currently offers a bundled service with cloud storage and the specific provider they partner with (if any).

If it’s a current bundled service:
- Evaluate the reputation and features of the cloud storage provider.
- Consider the total cost compared to purchasing the VPN and cloud storage separately.
If IPVanish only offers VPN:
- You’ll need to research and choose a separate cloud storage provider based on your needs.

What are some alternatives to IPVanish VPN + Backup?

VPN Services: Surfshark, ExpressVPN, NordVPN, and CyberGhost are popular VPN options.
Cloud Storage Providers: well-known options are Google Drive, Dropbox, and OneDrive.

Is a VPN necessary for cloud storage backup?

Not necessarily. Cloud storage providers typically implement their security measures. However, using a VPN can add an extra layer of security by encrypting your internet traffic while transferring data to the cloud storage.

What features should I look for in a cloud storage backup service?

Storage capacity to meet your needs.
Robust encryption protocols to protect your data.
Automatic backups to ensure your data is always up-to-date.
Easy-to-use interface for managing your backups.
Reliable customer support.

Conclusion: IPVanish VPN + Backup Review

With this IPVanish VPN Backup review, we can conclude that IPVanish VPN + Backup is an excellent combination for users seeking to protect their online data and files. Its yearly pricing is fair, it has fantastic features, and it is safe.

INTERESTING POSTS

Scattered Canary: How A Nigerian Fraud Ring Hijacked Washington Unemployment System

CyberBust

Gina Lynch

-

March 5, 2024

0

Scattered Canary: How A Nigerian Fraud Ring Hijacked Washington Unemployment System

Here, we will show how a Nigerian Fraud ring hijacked the Washington unemployment system in one of the most significant business email compromise (BEC) scams.

It is no longer news that Washington and about six other US states have been victims of fraud attacks by the Scattered Canary. According to an ongoing investigation from the Federal Department of Justice, hundreds of millions of dollars were siphoned from the endless unemployment benefits pay-out due to the economic and financial effects caused by the coronavirus pandemic.

In what appears to be the biggest COVID-19 unemployment fraud to have ever come out of Africa, the world was woken to the scattering report from multiple sources involving millions of dollars fraudulently stolen by hackers.

A West African-based cybercrime group allegedly spearheaded these named the “Scattered Canary,” as revealed by Agari, a security research firm. The group used stolen identities from a previous consumer data breach.

Seattle Times and other local media outlets reported the COVID-19 unemployment fraud. However, Agari’s Cyber Intelligence Division (ACID) has been trailing and investigating the cybercriminal group of hackers involved and has managed to penetrate the group’s activities.

When the news broke out about Washington State losing millions of dollars to cyber-criminals, the security research firm intensified its investigation to expose the criminal masterminds behind the group.

Table of Contents

Scattered Canary And The 35 Cybercriminals

This West African-based cybercrime group did not start big, but it was founded in 2008, so they’ve had enough time to hit big while being un-identified until now. From a “one-man gang” known as Alpha, whose operation was centered on Craigslist, eBay, check, and romance scams, to a full-blown cartel of criminals strengthened by 35 members engaged in various kinds of frauds running concurrently.

Before now, Alpha, who had a mentor called Omega (under whose nose he sharpened his nefarious activities), carried out profitable scams by exchanging about 1,950 emails. Reportedly, he made up to $23,500 monthly.

Presently, the “Scattered Canary” group has evolved into sensitive data phishing, romance scams, tax fraud, employment scams, social security fraud, W-2 scams, credit card fraud, fake job listing, payroll diversion, business email compromise (BEC) amongst others as outlined by ACID.

According to ACID, “one common fallacy is that crime rings run within set steeps; believing that cybercrime groups only run business email compromise (BEC) scams and concentrate only on such is a misconception. They are like entrepreneurs in any industry; cybercriminal gangs operate to achieve growth by designing and evaluating extensible business models through various sets of revenue streams.”

The security research firm continued, “During the research into Scattered Canary, records of how the main cybercrime leaders encountered situations where opportunities for diversification came calling saw them delve into them like genuine entrepreneurs.”

Based on their agile working methods, they expanded by recruiting more “skilled” cybercriminals through material and financial enticement by displaying their wealth on social media and other possible platforms.

“With trust, a biased approach to candidate selection can be achieved, and many relationships were built while still in the tertiary institutions within West Africa where talent is effortlessly noticed, and recruitment is easily done.” The research firm alluded.

Scattered Canary’s Operations

Since 2008, when the group became active, they have been linked to several significant attacks:

Covid-19 Unemployment Benefit scams (2019-2020)

This, without argument, overshadows their previous engagements, not because it is the most recent and currently trending, but because it is the biggest so far and happened due to the ongoing coronavirus pandemic.

According to the Seattle Times, the group filed about 174 unemployment and insurance claims using stolen identities in Washington alone, which are estimated to be worth about $1,339 a week per claim. Experts estimate that about 1 out of 4 claims are said to be from cyber criminals, of whom Scattered Canary remains a top suspect.

Most of their proceeds end up in Asia, Nigeria, and other parts of West Africa after being converted to Green dot prepaid cards and cryptocurrencies,

Targeting of top CEOs (2018)

It was reported in 2018 that a group called London Blues (suspected to be in collaboration with Scattered Canary) attacked top business executives and chief financial officers around the world through business email compromise (BEC), requesting vast sums of money to be paid to an external account while posing as insiders in these companies.

Businesses around the world lost an estimated $12 million between 2013 and 2018, according to the FBI. Even though the scam looks common, about 50,000 top CEOs were targeted by the group.

Active Toolkits Used By Scattered Canary

Members of the Scattered Canary group deploy various tools to help them WORK faster and easier. This includes phishing message templates and multiple VPNs to mask their location as they exchange scam emails with their victims.

VOIP phone numbers were also gotten from online service providers like Hushed, Google Voice, and TextMe while operating from Nigeria or any part of West Africa. ACID investigation revealed that the group used the same call-back number for previous cyberattacks, making it easy for the research firm to dig deep into their activities.

The cybercriminal gang also uses a variety of model text documents called “formats,” which speed up their phishing process. ACID revealed that “the group gathered their potential victim’s leads by signing up with Lead411 lead generation service and using 7-day trial accounts totaling twenty times within three years.” “We could identify a format containing 26 different message templates that could be used to target corporations in various BEC scams, including W-2 fraud and direct deposit”, ACID concluded.

Scattered Canary And The Present Reality: 4 Years After

Scattered Canary And The Present Reality (1) — **Hushpuppi Wealth Display – one of the Scattered Canary Syndicate**

ACID relayed all evidence and reports gathered from their investigation to the FBI and Interpol. This helped the security agencies in the recent raid that led to the arrest of some of the Scattered Canary gang members like Woodberry (Mr. Woodbery) and Hushpuppi (Raymond Igbalodeyl) in Dubai with their properties allegedly seized.

In Nigeria, their arrest trended on popular social media sites like Instagram, Facebook, and Twitter. The duo is known to display their luxurious lifestyles, with the “in your face” show of expensive cars, houses, clothes, and even drinks on these platforms.

Many Nigerians, including KCee, an influential Nigerian musician, have often questioned their sources of wealth to afford such a lifestyle.

With this new development, it appears that more cybercriminal gangs will undoubtedly end up in the net of law enforcement agencies.

The group’s present reality revolves around sophisticated cybercrime operations. Business Email Compromise (BEC) scams have become their weapon, infiltrating company email systems to divert funds to their accounts.

During the COVID-19 pandemic, Scattered Canary capitalized on vulnerable unemployment systems, stealing millions of dollars in government aid. Their reach extends beyond BEC, encompassing tax return fraud and credit card scams, demonstrating a diverse and adaptable criminal repertoire.

A Persistent Threat

Scattered Canary’s continued success highlights the ever-present threat of cybercrime. Their longevity underscores the need for robust cybersecurity measures at both individual and organizational levels. Businesses must prioritize employee training to identify phishing attempts and secure email systems.

Looking Forward

As technology continues to evolve, so will the tactics of cybercriminals like Scattered Canary. Staying informed about the latest threats, employing online solid security practices, and remaining vigilant are crucial steps toward a safer digital future.

By understanding the present reality of cybercrime groups like Scattered Canary, we can proactively protect ourselves and mitigate their potential impact.

RELATED POSTS

Multi-Platform Malware Framework ‘MATA’ On A Global Rampage

News

Amaya Paucek

-

March 5, 2024

0

Multi-Platform Malware Framework ‘MATA’ On A Global Rampage

Security researchers have identified a new and concerning malware threat: a multi-platform framework called “MATA.” This framework has been targeting victims globally since at least April 2018.

Table of Contents

Kaspersky Lab’s Analysis

Early Detection: Kaspersky Lab identified the first traces of MATA in April 2018.
Global Reach: The malware has targeted victims across various regions, including India, South Korea, Germany, Japan, Turkey, and Poland.
Diverse Targets: MATA attacks have spanned various industries, including e-commerce, software development, and internet service providers (ISPs).
Multiple Motivations: The hackers behind MATA have employed the framework for various malicious purposes. Examples include:
- Stealing customer data from a company’s database.
- Deploying VHS ransomware against another victim.
Multiple Variants: Kaspersky Lab identified three variants of MATA targeting Windows, macOS, and Linux.

MATA Technical Details (Windows Variant)

The Windows version features a layered architecture with an orchestrator component.
The orchestrator loads plugins from memory using a hardcoded string and executes them directly.
These plugins grant attackers capabilities like file manipulation, creating an HTTP proxy server, and more.

Distribution Methods

The Linux variant can be downloaded from a seemingly legitimate website.
The macOS variant is disguised as trojanized two-factor authentication (2FA) software.

Lazarus Group Connection

Kaspersky Lab’s analysis suggests a link between the MATA framework and the infamous Lazarus APT group, known for various cyberattacks.

The Takeaway

The emergence of MATA highlights the evolving tactics of cybercriminals. Businesses and individuals should remain vigilant, maintain robust cybersecurity measures, and stay updated on the latest threats.

MATA Malware: Frequently Asked Questions

What is MATA?

MATA is a multi-platform malware framework that can infect Windows, macOS, or Linux devices. It has been used to target victims globally since at least April 2018.

Who is behind MATA?

Kaspersky Lab’s analysis suggests a link between MATA and the Lazarus Group, a notorious cybercrime group responsible for various attacks.

What are the targets of MATA attacks?

MATA has targeted companies across various sectors, including e-commerce, software development, and internet service providers (ISPs).

What are the goals of MATA attacks?

The attackers have used MATA for malicious purposes, such as stealing customer data and deploying ransomware.

How can I protect myself from MATA?

Stay informed about the latest cyber threats.
Use reputable security software and keep it updated.
Be cautious when downloading files from unknown sources.
Implement strong passwords and enable two-factor authentication (2FA) when available.
Back up your data regularly.

Note: This was initially published in May 2020 but has been updated.

RELATED POSTS

5 Amazing Ways To Host The Perfect Live Event

Editor's Pick

Daniel Segun

-

March 5, 2024

0

5 Amazing Ways To Host The Perfect Live Event

Hosting a live event of any size can be very stressful. Consider many things if you want the day to be perfect. Many business professionals, advertisers, and vendors seek live niche events.

Such occasions provide an excellent chance for networking and interacting with people from the same industry. It can be a very lucrative opportunity.

So much is at stake when trying to pull together a live business or any other event. But it’s not all bad; there is a blueprint you can follow to create a fantastic event. Here are five tips to consider.

Table of Contents

5 Amazing Ways To Host The Perfect Live Event

1. Develop A Singular Theme

When selecting the theme, focus on something simple you can execute flawlessly. Look for the right decorations, colors, and furniture; a simple mistake can destroy all the great things you have tried to achieve.

Exhibition flooring can be the focal point for the whole event. But ensure the flooring pair with the theme you select. When you pick a centralized theme, it’s easy to implement everything around it.

The theme should resonate with your audience. As a seasoned event planner, picking a theme won’t be hectic, especially when you know what the attendees want. Even the activities or performers you include in the event should align with the theme. If this is not your area of expertise, it’s okay to seek help from a professional.

2. Focus On the Target Group

Different people demand different things when it comes to events. Your target group will influence most choices, including the venue and the theme. All events have an agenda; people don’t just show up for events for the free drinks and food.

You shouldn’t have performers from start to finish if it’s a networking event. You have to allow some time for the audience to interact. Without understanding what your audience wants, the event will lack direction.

The era of making your audience sit in theatre-style rows, listening to endless people speak, is over. You have to give your audience a bit of fun without deviating from the day’s agenda.

Sometimes, including the participants in the planning can show you which way to go. Also, plan the logistics to match your event. Be aware of things like food allergies, transportation, and room sizes. Try as much as possible to try everyone as VVIP.

3. Embrace Technology

Make technological tools your best friends throughout the planning process. Use social media platforms to create some buzz around your event. It will boost attendance and make communication with the participants easy. Many event hosts monetize their work.

If you plan to set a ticket price for those attending, it’s critical to ensure cybersecurity. Secure the online payment platforms. Use Technology to remind attendees of essentials like starting time. You must communicate to the audience if there are changes to the program or venue.

4. A Backup Plan Is Always Wise

Remember, this is a live event; anything can go wrong anytime. So, having a backup can be very beneficial in times of need. Be in a position to tackle all the issues that might occur. The fewer interruptions you have, the better the outcome.

Create a pre-event checklist and ensure everything is in order before the big day. The sound system is notorious for causing trouble. Focus your energy on getting the best sound system and include a backup.

Ensure you consistently communicate with the vendors and other suppliers for the event. If they cancel at the last minute, you should have another way of getting the required supplies, whether it’s food, speakers, or chairs. It’s essential to choose a location that’s easily accessible by suppliers and attendees.

5. Encourage Audience Participation

You didn’t work this hard to make your audience lose interest and bored. When planning the day’s activities, ensure you include audience participation. People start to lose interest when they stare at their phones, looking for entertainment.

Even if it’s a speaker-focused or conference, you can find ways to include everyone. Include interactive questions between the speeches. If it’s not a formal event, incorporate friendly games or competitions. These can be very fun and act as icebreakers.

5 Amazing Ways To Host The Perfect Live Event: Frequently Asked Questions

How far in advance should I start planning my live event?

The ideal timeframe depends on the event’s scale. Start planning at least 3-6 months for more significant events and 1-2 months for smaller gatherings.

What’s the best way to promote my live event?

Utilize a multi-channel marketing approach. Promote your event on social media, email marketing, industry publications, and relevant websites.

How can I manage the budget effectively?

Set a realistic budget: Determine your financial resources and allocate funds appropriately for various aspects like venue rental, catering, Technology, and speaker fees.
Explore cost-effective options: Consider alternative venues, seek sponsorships, and choose technology solutions that fit your budget without compromising quality.
Negotiate with vendors: Negotiate pricing with vendors and service providers to potentially secure better deals.

How can I ensure my event runs smoothly on the day?

Create a detailed event plan and timeline: Outline critical tasks, responsibilities, and deadlines for all involved parties.
Assemble a reliable team: Delegate tasks efficiently and ensure clear communication between team members and volunteers.
Prepare for contingencies: Have backup plans to address unforeseen technical difficulties or delays.

How can I measure the success of my live event?

Track critical metrics: Monitor event attendance, website traffic, audience engagement during the event, and post-event feedback surveys.
Evaluate ROI (Return on Investment): Compare your event costs with revenue generated, brand exposure gained, and audience engagement to assess the overall effectiveness.
Use feedback to improve future events: Analyze input from attendees and speakers to identify areas for improvement and enhance future events.

Final Thoughts

Coming up with a successful live event is not an easy feat. It’s time-consuming and demands a lot of attention to detail. Hopefully, these five tips will go a long way in making your big day a success.

Help the guests navigate easily when the event starts. Focus on what the attendees want and require to enjoy the day.

By embracing Technology, focusing on the audience experience, curating compelling content, promoting strategically, and gathering feedback, you can significantly increase your chances of hosting a successful and memorable live event.

INTERESTING POSTS

Swissbit launches miniaturized PCIe M.2 BGA SSD

News

John Raymond

-

March 5, 2024

0

Swissbit launches miniaturized PCIe M.2 BGA SSD

Swissbit, a renowned European manufacturer of embedded IoT and storage solutions, has unveiled the EN-20, a miniaturized and highly reliable PCIe M.2 BGA SSD explicitly designed for demanding industrial applications.

Table of Contents

Ultra-Compact Design for Space-Constrained Environments

The EN-20 boasts a tiny footprint, measuring only 16mm x 20mm with a 0.8mm pitch.

This compact size, achieved through a single-component SSD design with a BGA footprint of just 3.2cm², makes it ideal for space-constrained industrial deployments like factory automation systems, routers and switches, medical devices, and cloud computing environments.

Industrial-Grade Performance and Reliability

Despite its miniature size, the EN-20 packs a punch in terms of performance and durability. It leverages a 4x PCIe interface and industrial-grade 3D NAND flash memory to deliver exceptional read speeds of up to 1600 MB/s and write speeds of up to 770 MB/s.

Additionally, the EN-20 operates reliably in wide temperature ranges of -40°C to 85°C, ensuring consistent performance in harsh industrial settings.

Advanced Features for Demanding Applications

The EN-20 boasts several features tailored for industrial applications:

High Endurance: Supports a wide range of read/write cycles, making it suitable for data-intensive workloads.
Advanced Error Correction: Utilizes LDPC error correction for data integrity and full-page fail recovery to safeguard data during unexpected power interruptions.
Security: Features AES 256 encryption and End-to-End Data Path Protection (ETEP) for robust security.

Power Efficiency and Compatibility

The EN-20 prioritizes low power consumption using an HMB (Host Memory Buffer) instead of a traditional DRAM cache. This approach leverages the system’s DRAM memory for the flash translation table, optimizing power usage.

Additionally, the EN-20 offers compatibility with both single-lane and dual-lane systems, adhering to the PCIe 3.1 specification.

Impressive Performance at Low Power

The EN-20 delivers exceptional performance exceeding 145,000/130,000 IOPS for read/write operations.

It boasts a high bandwidth of 770 MB/s for serial write and 1600 MB/s for serial read, surpassing the capabilities of SATA SSDs in terms of bandwidth.

Strong Industry Adoption

The EN-20 has garnered significant interest from vital industrial customers, with its technology powering the upcoming Swissbit G-2” CFexpress™ cards.

This signifies the EN-20’s potential to revolutionize data storage in space-constrained and performance-critical industrial applications.

Swissbit EN-20 M.2 BGA SSD: FAQs

What are the key benefits of the Swissbit EN-20 SSD?

Miniaturized design: Perfect for space-constrained applications with a footprint of only 16mm x 20mm and a 3.2cm² BGA size.
High-performance: Delivers exceptional read speeds (up to 1600 MB/s) and write speeds (up to 770 MB/s) thanks to the 4x PCIe interface and industrial-grade 3D NAND.
Industrial-grade reliability: Operates reliably in wide temperatures (-40 °C to 85°C) and features advanced error correction and data protection for harsh environments.
Low power consumption: Utilizes an HMB for the flash translation table, reducing power usage.

What applications is the EN-20 SSD suited for?

The EN-20 is ideal for industrial settings with limited space and demanding performance needs. Here are some examples:

Factory automation systems
Routers and switches
Medical devices
Cloud computing environments

What security features does the EN-20 offer?

The EN-20 prioritizes data security with:

AES 256 encryption: Protects your data from unauthorized access.
End-to-End Data Path Protection (ETEP): Provides an additional layer of security for data transfers.

How does the EN-20 compare to traditional SATA SSDs?

While both offer storage solutions, the EN-20 boasts several advantages for industrial applications:

Smaller size: Ideal for space-constrained environments.
Higher performance: Delivers significantly faster read and write speeds.
Industrial-grade durability: Operates reliably in broader temperature ranges.
Lower power consumption: Optimizes energy usage through an HMB design.

Takeaway

Overall, the Swissbit EN-20 M.2 BGA SSD offers a compelling combination of miniaturization, high performance, industrial-grade reliability, and power efficiency. This makes it a strong choice for designers integrating storage solutions into demanding industrial environments.

Note: This was initially published in September 2020 but has been updated.

RELATED POSTS

Cryptojacking Post Office: Investigation and Accusations

Similarities to Previous Case

Contextualizing Cryptojacking in Russia

Overall

Cryptojacking Post Office: Frequently Asked Questions

What is cryptojacking?

How did the post office head allegedly carry out cryptojacking?

What are the potential consequences for the suspect?

Is this an isolated incident, or is cryptojacking a bigger problem in Russia?

How Does Antivirus Work?

Why Do You Need An Antivirus For Your Business?

Ransomware Protection

Data Protection

E-mail Protection

Improved Online Security

Ease of Use and Management

Professional Support

Background scanning without system slowdown

Conclusion

Phishing Explained

The Brands That Hackers Impersonate

How Hackers Impersonate Big Brands

How To Protect Yourself From Phishing

How Hackers Impersonate Big Brands: Frequently Asked Questions

Why do hackers impersonate big brands?

How do hackers impersonate big brands?

What are some red flags to watch out for?

How can I protect myself from being impersonated?

What to do if you suspect you’ve been targeted?

What To Do If You’ve Been Catfished?

Conclusion

Top 4 Online Video Editors For Adding Subtitles To Videos

1. RecordCast

2. Adobe Spark

3. Kapwing

4. Veed.io

Online Video Editors For Adding Subtitles To Videos: Frequently Asked Questions

What format should my subtitles be in?

How can I create subtitles if I don’t have a transcript?

How can I translate my subtitles into another language?

How can I make sure my subtitles are accessible to everyone?

Conclusion

What Is IPVanish VPN + Backup?

Best IPVanish Backup Alternatives

How Does IPVanish VPN + Backup Work?

How To Download And Install IPVanish VPN + Backup

IPVanish VPN + Backup Features

Secure Backup Space

Continuous File Syncing

Data Sharing Controls

Unmetered Device Connections

Zero Traffic Logs

Proxy Web Server

Multiple Servers and Shared IPs

Strong Encryption Protocols

IPVanish VPN + Backup Customer Support & Resources

IPVanish VPN + Backup Pricing

Is IPVanish VPN + Backup Safe?

Is IPVanish VPN + Backup Legit?

Is SugarSync Free With IPVanish?

IPVanish VPN + Backup Review: Frequently Asked Questions

Is IPVanish VPN + Backup a good value?

What are some alternatives to IPVanish VPN + Backup?

Is a VPN necessary for cloud storage backup?

What features should I look for in a cloud storage backup service?

Conclusion: IPVanish VPN + Backup Review

Scattered Canary And The 35 Cybercriminals

Scattered Canary’s Operations

Covid-19 Unemployment Benefit scams (2019-2020)

Targeting of top CEOs (2018)

Active Toolkits Used By Scattered Canary

Scattered Canary And The Present Reality: 4 Years After

A Persistent Threat

Looking Forward

Kaspersky Lab’s Analysis

MATA Technical Details (Windows Variant)

Distribution Methods

Lazarus Group Connection

The Takeaway

MATA Malware: Frequently Asked Questions