Accused JPMorgan Chase Hacker Plans to Plead Guilty

Mathew J. Schwartz • September 20, 2019

Russian national Andrei Tyurin, who was extradited last year from Eastern Europe to the United States, has stated that he plans to accept a plea deal he's reached with federal prosecutors. Tyurin has been charged with numerous crimes, including hacking JPMorgan Chase and stealing 83 million customer records.

Application Security

US Sanctions 3 North Korean Hacking Groups

Latest

Cybercrime

Report: FBI Subpoenaed Data From Banks, Credit Agencies

Scott Ferguson • September 20, 2019

The FBI has issued hundreds of subpoenas to major banks, the big three credit rating agencies and other corporations as part of an ongoing counterterrorism program that collects personal and financial data, the New York Times reports.

Cybercrime

Other Attackers Reuse Old Magecart Domains: Report

Jeffrey Burt • September 20, 2019

Decommissioned domains that were part of the pervasive Magecart web-skimming campaigns are being put to use by other cybercriminals who are re-activating them for other scams, including malvertising, according to researchers at RiskIQ.

Fraud Management & Cybercrime

Analysis: Fallout From the Snowden Memoir

Nick Holland • September 20, 2019

The latest edition of the ISMG Security Report features a discussion of the controversies surrounding the release of whistleblower Edward Snowden's memoir. Also featured: An update on Lumen PDF's breach disclosure; insights on financial services identity management issues.

Cybercrime

Phony IRS Emails Promise Refund, But Deliver Botnet Instead

Apurva Venkat • September 19, 2019

A new phishing email campaign promises to deliver a tax refund, but instead helps spread a botnet called Amadey, according to researchers at the security firm Cofense.

Cybercrime

Cryptoming Botnet Smominru Returns With a Vengeance

Jeffrey Burt • September 19, 2019

The crypotmining botnet Smominru, which has been around since at least 2017, has resurfaced with a new campaign that has infected 90,000 devices worldwide, including in the U.S., China and Russia, according to security analysts at Guardicore.

Fraud Management & Cybercrime

2 Phishing Attacks Affect Presbyterian Health Plan Members

Marianne Kolbasuk McGee • September 19, 2019

Phishing incidents have had a big impact on members of Albuquerque, New Mexico-based Presbyterian Health Plan in recent weeks. Two separate, apparently unrelated, attacks potentially exposed a wealth of information on plan members.

Cyberwarfare / Nation-State Attacks

Facebook Removes Hundreds of Fake Accounts

Akshaya Asokan • September 19, 2019

Facebook announced this week that it has removed hundreds of fake accounts and pages. The majority of these originated in Ukraine or Iraq and used phony user identifications to spread misinformation in an attempt to influence local politics, the company says.

Governance

Lumin PDF Leak Exposed Data on 24 Million Users

Jeremy Kirk • September 18, 2019

Ignoring a breach disclosure can have ugly consequences. Case in point: Lumin PDF, a PDF editing tool, which saw data for much of its user base - about 24.3 million - published in an online forum late Monday. Data breach expert Troy Hunt says it's sign of the dysfunction in the breach disclosure process.

Governance

Justice Department Sues Snowden Over Memoir

Scott Ferguson • September 18, 2019

The U.S. Justice Department has sued Edward Snowden over his new memoir, claiming that the former NSA contractor violated a nondisclosure agreement he signed when he worked for the government before becoming the world's best-known whistleblower. The suit seeks to collect all profits from the book.

HIPAA/HITECH

Victim Total Soars in County Health Data Breach

Marianne Kolbasuk McGee • September 18, 2019

A Minnesota county that originally reported last December that a hacking incident affected about 600 individuals now says about 118,000 may have had healthcare data exposed. What's behind the huge spike?

Cyberwarfare / Nation-State Attacks

Senators Urge FCC to Review Licenses for Chinese Telecoms

Apurva Venkat • September 18, 2019

U.S. Senators Chuck Schumer, D-N.Y., and Tom Cotton, R-Ark., are asking the Federal Communications Commission to reconsider operating licenses granted to two Chinese telecommunications companies, citing concerns over national security and foreign espionage.

Fraud Management & Cybercrime

Investigation Launched After Ecuadorian Records Exposed

Akshaya Asokan • September 17, 2019

An unsecured database owned by an Ecuadorian consulting company left over 20 million records on the South American country's citizens exposed to the internet, according to a report from two independent security researchers. An official investigation is underway.