Bengaluru Fraud & Breach Prevention Summit: Key Takeaways

Geetha Nandikotkur • June 18, 2018

One of the key lessons offered at ISMG's Fraud & Breach Prevention Summit, held June 12-13 in Bengaluru, was the need for security practitioners to have a better perception of threats and risks so they can build successful detection and defense mechanisms.

Breach Notification

Japanese Merchants Find PCI Compliance Audits Challenging

Latest

Cybercrime as-a-service

'Rex Mundi' Hacker Extortion Group: Busted

Mathew J. Schwartz • June 18, 2018

Cyber extortion group Rex Mundi has been shut down following the arrest of seven suspects in France and a French national in Thailand, police say. Investigators began pursuing the group last year after it stole customer data from a British firm and demanded $770,000 to not publicly release it.

Anti-Malware

EU Claims Kaspersky Lab Software 'Confirmed as Malicious'

Mathew J. Schwartz • June 15, 2018

The anti-Kaspersky Lab rhetoric continues to heat up, with the European Parliament passing a motion that brands the Moscow-based firm's software as being "confirmed as malicious." In response, Kaspersky Lab has halted all work with European institutions, including Europol, pending clarification.

Authentication

Analysis: Distraction Tactics Used in Banco de Chile Hack

Nick Holland • June 15, 2018

Leading the latest edition of the ISMG Security Report: An analysis of how distraction tactics were used during a $10 million SWIFT-related hack at Banco de Chile. Also, a wrapup of Infosecurity Europe.

Cyberwarfare / Nation-state attacks

Visual Journal: Infosecurity Europe 2018

Mathew J. Schwartz • June 14, 2018

When June arrives in the United Kingdom, that means it's time for the annual Infosecurity Europe conference in London. Here are visual highlights from this year's event, which featured 240 sessions, 400 exhibitors and an estimated 19,500 attendees.

Breach Notification

Dixons Carphone Breach: 5.9 Million Payment Cards Exposed

Mathew J. Schwartz • June 13, 2018

The U.K.'s Dixons Carphone is investigating a data breach that resulted in the suspected exposure of 5.9 million payment cards and nonfinancial information for 1.2 million customers. The incident could become the first U.K. breach to fall under the EU's General Data Protection Regulation.

Anti-Malware

Banco de Chile Loses $10 Million in SWIFT-Related Attack

Jeremy Kirk • June 13, 2018

Banco de Chile has become the latest victim of a SWIFT-related malware incident. Attackers first corrupted thousands of PCs' master boot records as a distraction. Then they used fraudulent SWIFT messages to steal $10 million.

Cybercrime

Cryptocurrency Theft: $1.1 Billion Stolen in Last 6 Months

Mathew J. Schwartz • June 12, 2018

As bitcoin continues its massive price fluctuations, a new report says criminals have continued their push to get extortion and ransom payments in more stable cryptocurrencies. But bitcoins remain a top target for hackers, who most often choose to directly target cryptocurrency exchanges.

Breach Notification

PageUp Breach: Personal Data Exposed

Jeremy Kirk • June 12, 2018

PageUp, an HR software developer in Australia with clients worldwide, is warning that malware-wielding attackers may have accessed a raft of personal data stored in its systems. The breach may be the largest to have hit Australia since its mandatory data breach notification law went into effect in February.

Business Email Compromise (BEC)

74 Arrests in Business Email Compromise Takedown

Howard Anderson , Nick Holland • June 11, 2018

A six-month coordinated global law enforcement effort to crack down on business email compromise schemes has resulted in 74 arrests, the U.S. Department of Justice announced Monday.

Cyberwarfare / Nation-state attacks

US Imposes More Russian Sanctions for Cyberattacks

Nick Holland • June 11, 2018

The U.S. Treasury Department announced Monday that it has imposed sanctions on five Russian organizations and three individuals, the latest move by the Trump administration in response to Russian cyberattacks.

Breach Notification

Coinrail Cryptocurrency Exchange in South Korea Hacked

Mathew J. Schwartz • June 11, 2018

South Korean cryptocurrency exchange Coinrail says hackers stole 30 percent of all of the cryptocurrency tokens it was storing, but many have been successfully frozen or recalled. Security experts say cryptocurrency exchanges remain poorly secured, so they're popular targets for hackers.

Compliance

GDPR: UK Privacy Regulator Open to Self-Certification

Mathew J. Schwartz • June 8, 2018

One day, organizations may be able to self-certify their GDPR compliance, says an official at the U.K.'s data privacy regulator. Regardless, experts recommend that organizations ensure they are focusing on continuous GDPR compliance and regularly testing their data breach response plans.