Tag:

Ransomware

Scam Targets Airlines As Hacking Group Expands Operations, FBI Warns Scam Targets Airlines As Hacking Group Expands Operations, FBI Warns
Scam Targets Airlines As Hacking Group Expands Operations, FBI Warns A cybercriminal group known for extorting people and companies across the world is now targeting the airline industry. The FBI has issued a warning about Scattered Spider, a hacking group that has  expanded its operations to include major US airlines and their vendors.  The group is known for using convincing impersonation tactics to access corporate networks, often bypassing multi-factor authentication by tricking IT staff into adding unauthorized devices. Scattered Spider impersonates employees or contractors to deceive help desks. "These techniques frequently involve methods …
Many People Fear Cyberattacks But Don't Protect Themselves Properly, Survey Says Many People Fear Cyberattacks But Don't Protect Themselves Properly, Survey Says
Many People Fear Cyberattacks But Don't Protect Themselves Properly, Survey Says Most online users say they're worried about data breaches, but still skip basic ways to improve their cybersecurity, according to a new survey. The Acronis Data Privacy in 2025 Survey polled nearly 2,500 adults in the US and seven other countries, finding that many aren't doing enough to protect their personal data. The Swiss tech company found that while 64% of respondents listed data breaches as their top online privacy concern, only one-third back up their data daily or weekly. Fewer than half (46%) said they use security features like two-factor authentication. "Perhaps …
Hackers Infect 394K+ Computers, Microsoft Disrupts 'Most Popular Infostealer': What To Know Hackers Infect 394K+ Computers, Microsoft Disrupts 'Most Popular Infostealer': What To Know
Hackers Infect 394K+ Computers, Microsoft Disrupts 'Most Popular Infostealer': What To Know A global cybercrime tool used to steal passwords and drain bank accounts was shut down in a major takedown led by Microsoft and federal authorities. The tool called Lumma Stealer had infected more than 394,000 Windows computers worldwide between March and May, Microsoft said in a blog post on Wednesday, May 21. Hackers used the malware to target schools, hospitals, banks, and gaming communities, often holding victims for ransom or committing financial fraud. A federal court order allowed Microsoft's digital crimes unit to seize more than 2,300 web domains that powered the malware's ope…
Online Scammers Using This Method To Steal Personal Info, FBI Says Online Scammers Using This Method To Steal Personal Info, FBI Says
Online Scammers Using This Method To Steal Personal Info, FBI Says The FBI has issued a warning about cybercriminals exploiting victims to distribute malware and steal personal information. ​ Fraudulent free online file converter tools offer services like converting or merging files—such as transforming a .doc file to a .pdf or combining multiple images into a single document. While they perform the advertised tasks, they may also install hidden malware on users' computers.  This malware can grant criminals access to sensitive data, including Social Security numbers, banking details, cryptocurrency information, email addresses, and passwords.  …
Beware Of New Data Stealing Scheme, Feds Warn Beware Of New Data Stealing Scheme, Feds Warn
Beware Of New Data Stealing Scheme, Feds Warn A dangerous ransomware program has taken data from hundreds of victims hostage—and more could be at risk, according to a warning from multiple federal agencies. Medusa, a ransomware-as-a-service variant, has been used in attacks on critical infrastructure sectors, impacting more than 300 known victims, according to a joint cybersecurity advisory from the Cybersecurity and Infrastructure Security Agency (CISA), the FBI, and the Multi-State Information Sharing and Analysis Center (MS-ISAC). The ransomware, which first emerged in 2021, uses common attack methods such as phishing emails and exp…
Alleged Russian Ransomware Mastermind Extradited From South Korea To Maryland Alleged Russian Ransomware Mastermind Extradited From South Korea To Maryland
Alleged Russian Ransomware Mastermind Extradited From South Korea To Maryland A Russian national accused of running a global ransomware operation that extorted more than $16 million from victims worldwide has been extradited from South Korea to Maryland to face federal charges, authorities announced. Evgenii Ptitsyn, 42, is charged with operating and administering the sale, distribution, and deployment of the notorious Phobos ransomware, which targeted over 1,000 public and private organizations globally, including schools, hospitals, and critical infrastructure.  Ptitsyn made his first appearance in U.S. District Court for the District of Maryland earlier this …
Pair Convicted In Worldwide Ransomware Attacks, Victimizing NJ Residents: Feds Pair Convicted In Worldwide Ransomware Attacks, Victimizing NJ Residents: Feds
Pair Convicted In Worldwide Ransomware Attacks, Victimizing NJ Residents: Feds Two foreign nationals pleaded guilty and were convicted on Thursday, July 18 to participating in the LockBit ransomware group and to deploying attacks on computer systems in New Jersey and worldwide, authorities said. LockBit was described as "one of the most destructive ransomware groups in the world," by U.S. Justice Department officials. Ruslan Magomedeovic Astamirov, 21, a Russian national from the Chechen Republic and Mikhail Vasiliev, 34, from Bradford, Ontario, a dual citizen in Canada and Russia, pleaded guilty to participating in the LockBit ransomware group that targeted critical …
Cyberattack Hits School District In Hudson Valley Cyberattack Hits School District In Hudson Valley
Cyberattack Hits School District In Hudson Valley A school district in the Hudson Valley was the target of a cyberattack that disabled computer services and access to phones and email. In Orange County, the Goshen Central School District announced on Thursday, July 11, that it was the subject of the ransomware incident. Superintendent of Schools Dr. Kurtis Kotes said the district notified law enforcement and is working with cyber security experts to determine the source of the attack and take the necessary steps to repair the problems as quickly as possible. In an update late Friday afternoon, July 12, Kotes said: "The disaster reco…
Hospital ERs in Bergen, Montclair Closed By Nationwide Ransomware Attack Hospital ERs in Bergen, Montclair Closed By Nationwide Ransomware Attack
Hospital ERs in Bergen, Montclair Closed By Nationwide Ransomware Attack The latest in a continuing series of nationwide ransomware attacks closed two hospital emergency rooms in New Jersey. Authorities haven't disclosed what's been demanded by the cybercriminals who forced ambulances to divert to other hospitals from Pascack Valey Medical Center in Westwood and Mountainside Medical Center in Montclair beginning on Thanksgiving evening. Lab work, radiology, scheduling, billing -- basically anything involving computer software -- apparently were affected. "No one can use the computers in the buildings," a source said. "The hospitals are doing everything by paper…
Ransomware Attacks Mass Health Insurance Company With 2 Million Customers Ransomware Attacks Mass Health Insurance Company With 2 Million Customers
Ransomware Attacks Mass Health Insurance Company With 2 Million Customers A health insurance conglomerate is dealing with the fallout of a cybersecurity ransomware incident that impacted systems used to service customers, accounts, brokers, and health care providers.  Point32Health, a parent company for Tufts Health Plan and Harvard Pilgrim Health Care, announced that the security incident occurred on Monday, April 17 and mostly impacted systems used for Harvard Pilgrim Health Care.  "After detecting the unauthorized party, and out of an abundance of caution, we proactively took certain systems offline to contain the threat," Point32Health's statement reads.  …
Foreigner Charged In $100M Ransomware Assault That Victimized Innocent Computer Users Foreigner Charged In $100M Ransomware Assault That Victimized Innocent Computer Users
Foreigner Charged In $100M Ransomware Assault That Victimized Innocent Computer Users A Russian and Canadian national who participated in a campaign that extorted tens of millions of dollars from Internet users will be brought to New Jersey to face federal charges, authorities announced. Mikhail Vasiliev, 33, of Bradford, Ontario, was among a group that began attacking more than 1,000 computer users in the U.S. and throughout the world as early as January 2020, federal officials said on Thursday, Nov. 10. Vasiliev and his fellow LockBit members demanded at least $100 million in ransom demands after locking up the victims' devices, they said. Vasiliev was arrested on Wednesd…
Suffolk County Will Notify Anyone Whose Data Was Compromised In Cyber Attack, Bellone Says Suffolk County Will Notify Anyone Whose Data Was Compromised In Cyber Attack, Bellone Says
Suffolk County Will Notify Anyone Whose Data Was Compromised In Cyber Attack, Bellone Says Suffolk County Executive Steve Bellone announced that residents whose private information is comprised due to a cyber attack this month will be notified by county officials. Cybercriminals on the "dark web" hacked into the county government system on Thursday, Sept. 8, and since that time have demanded a "ransom," to get the system back online, although county officials have not confirmed a ransom has been demanded. Bellone said on Tuesday, Sept. 20, anyone whose data was compromised will be offered free identity theft protection services. Officials added that it does not have a number of …
Iranian Nationals Coordinated Cyberattacks On Boston Children's Hospital, Others: FBI Iranian Nationals Coordinated Cyberattacks On Boston Children's Hospital, Others: FBI
Iranian Nationals Coordinated Cyberattacks On Boston Children's Hospital, Others: FBI The FBI said three Iranian nationals have hacked and attacked computer systems around the world, including the Boston Children's Hospital.  Mansour Ahmadi, 34, Ahmad Khatibi Aghda, 45, and Amir Hossein Nickaein Ravari, 30, "engaged in a pattern of hacking, cyber-theft, and extortion largely for personal gain," FBI Director Christopher Wray said. The agency indicted the men earlier this week, though they remain in Iran and have escaped capture.  The FBI is offering a $10 million reward for information leading to their capture.  The FBI says since October 2020, the men have hacked scores of …
Destructive USB Flash Drives Are Being Mailed By Cybercriminals, FBI Warns Destructive USB Flash Drives Are Being Mailed By Cybercriminals, FBI Warns
Destructive USB Flash Drives Are Being Mailed By Cybercriminals, FBI Warns The FBI is warning that USB thumb drives are being mailed by cybercriminals in an attempt to lure recipients into plugging them into their computers and installing ransomware. Two different schemes are being used, says the FBI: The first contains a package that appears to come from the US Department of Health and Human Services that reportedly contains information on current pandemic guidelines.  The second comes as an Amazon gift box which contains a thank you letter, USB, and counterfeit gift card. Both packages contain USBs that when connected to a computer will send prec…
Hackers Targeted NY Subway System, MTA Says, As Fears Of More Cyberattacks Grow Hackers Targeted NY Subway System, MTA Says, As Fears Of More Cyberattacks Grow
Hackers Targeted NY Subway System, MTA Says, As Fears Of More Cyberattacks Grow The New York subway system was targeted by hackers, the Metropolitan Transportation Authority (MTA) confirmed, according to a new report. In the wake of hackers hitting the Colonial Pipeline Company, a large North American meat producer, and the Steamship Authority of Massachusetts, the New York Times is reporting that on Tuesday, April 20, the FBI, CISA, and National Security Agency announced they had been targeted by Chinese hackers. Earlier story - Ransomware Attack Hits Mass Steamship Authority, Delaying Martha's Vineyard, Nantucket Ferries Fixes and patches to the problem were reporte…
Ransomware Attack Hits Mass Steamship Authority, Delaying Martha's Vineyard, Nantucket Ferries Ransomware Attack Hits Mass Steamship Authority, Delaying Martha's Vineyard, Nantucket Ferries
Ransomware Attack Hits Mass Steamship Authority, Delaying Martha's Vineyard, Nantucket Ferries A cyberattack on the Steamship Authority of Massachusetts threw the company’s ferry schedules for a loop as officials scrambled to combat the ransomware attack. The company, which operates the largest ferry service to the islands of Martha’s Vineyard and Nantucket, was targeted by hackers on Wednesday morning, June 2, causing delays for some travelers. “The Woods Hole, Martha’s Vineyard, and Nantucket Steamship Authority was the target of a ransomware attack early Wednesday, June 2, 2021," the company posted on social media. "The Authority continues to work internally, as well as with fed…
Ruthless But Reliable? Ransom Group Tied To Colonial Pipeline Hack Says They're Not Bad Guys Ruthless But Reliable? Ransom Group Tied To Colonial Pipeline Hack Says They're Not Bad Guys
Ruthless But Reliable? Ransom Group Tied To Colonial Pipeline Hack Says They're Not Bad Guys Darknet cyberhackers whose ransomware forced the shutdown of a 5,500-mile pipeline between New Jersey and Texas said Monday that they’re in it for the money and not to disrupt society. DarkSide, which popped up last summer, has presented itself as a band of online Robin Hoods who sell the tools to extort businesses and organizations to cyber-burglars and then donate a portion of their take to charitable organizations. It remained unclear exactly who targeted the Colonial Pipeline on Friday, jamming an estimate 2.5 million daily barrels of jet fuel, gasoline and other refined product deliver…
Former Employee Arrested For 'Ransomware' Scheme At Fairfield County Business, Police Say Former Employee Arrested For 'Ransomware' Scheme At Fairfield County Business, Police Say
Former Employee Arrested For 'Ransomware' Scheme At Fairfield County Business, Police Say A 33-year-old out-of-state man has been arrested on a warrant for allegedly hacking into a former Fairfield County employer's computer system, causing the business to become the victim of a "ransomware" attack. Yigitali Ercan, of Philadelphia, was arrested on Tuesday, Feb. 9, for the incident which took place in September in Westport, said Lt. David Wolf of the Westport Police.  According to Wolf, the company told police that the former employee hacked into their computer and made some modifications to their website. The next day, the company became the victim of ransomware and were un…
No Timeline For Hartford Students To Return To School After Cyber Attack No Timeline For Hartford Students To Return To School After Cyber Attack
No Timeline For Hartford Students To Return To School After Cyber Attack It’s not clear when Hartford students will be going back to school following a ransomware attack. On Tuesday, Sept. 8 - the day students were scheduled to start the new academic year - Hartford Mayor Luke Bronin said there is no time frame for when the school year will begin for the city’s public school district. There be no in-person or online classes until the city gets the ransomware issue cleared up, the mayor said. There are about 20,000 students and 3,000 staff in the Hartford School District. Bronin said the cyber attack was more aggressive than what Hartford officials typically …
COVID-19: Alert Issued For Contact Tracer Scam COVID-19: Alert Issued For Contact Tracer Scam
Covid-19: Alert Issued For Contact Tracer Scam Fraudsters posing as contact tracers have been exploiting the COVID-19 crisis to ascertain personal information from residents in the region. Multiple reports of scammers posing as COVID-19 contact tracers have been reported since the pandemic began, prompting officials to issue an alert and provide guidance on how to avoid becoming a victim. Officials said that the imposters claim to work on behalf of local law enforcement or health departments and are required to install contact tracing software onto their victims’ computers. The scammers have threatened fines, asked for personal financi…
DV Plus - Westchester, NY
Westchester Library System Attacked By Ransomware Virus Westchester Library System Attacked By Ransomware Virus
Westchester Library System Attacked By Ransomware Virus A ransomware virus attack on the Westchester Library System is being investigated, an IT official said in July. Public access PCs were turned off temporarily as a precaution and restored to service on Friday, July 5 and Saturday, July 6. In a public statement to library system patrons, WLS announced that the "virus disabled servers that control services used by PCs such as network management, printing and authentication." "The server that contains patron data, the circulation system and online catalog was not impacted by this event and no data breach is suspected," the announceme…
'Digital Blackmail': FBI Hunts Iranian Duo Named In $30M International 'Ransomware' Plot 'Digital Blackmail': FBI Hunts Iranian Duo Named In $30M International 'Ransomware' Plot
'Digital Blackmail': FBI Hunts Iranian Duo Named In $30M International 'Ransomware' Plot Two Iranian men were being sought by the FBI for what one official called “21st-century digital blackmail” that netted them more than $6 million while racking up over $30 million in losses to hospitals, municipalities and public agencies across North America. Faramarz Shahi Savandi, 34, and Mohammad Mehdi Shah Mansouri, 27, operated an international computer hacking and extortion racket for more than 2½ years, a grand jury indictment unsealed Wednesday morning in U.S. District Court in Newark charges. Working from inside Iran, Savandi and Mansouri authored “SamSam Ransomware” that was “capa…