Internet Security Week – Edition No. 108

In issue #108 of Internet Safety Week , Operation Anakin, 8 tips for identifying online scams, dangers with CAPTCHAs and more.

News

Police arrest Brazilian phishing group that stole R$10 million from 200 victims

The Civil Police of the Federal District carried out 30 search and seizure warrants and temporary arrest warrants against a group of criminals specializing in phishing, as part of the Deep Sea operation. According to the authority, the gang claimed 200 victims and caused losses of R$10 million.

By Dácio Castelo Branco on Canaltech

Cybercrime leaks confidential documents from Lopes real estate agency

Another large real estate company is hit by a cyber attack in Brazil: firstly Gafisa, on February 17th. Now, images of documents supposedly owned by the Lopes real estate agency and a link to a data file measuring 2.15MB have been published on the Internet.

By Paulo Brito in CISO Advisor

Operation Anakin: PF arrests 4 suspects of hacking Caixa’s information system

The PF arrested 4 suspects of obtaining data and access to bank accounts of Caixa Econômica Federal customers. The scams can reach R$140 million.

By Francisco Camurça in We Live Security

8 more tips for identifying online scammers

Before transferring money or entering card information, it's worth spending a little extra time and effort checking emails and websites.

By Roman Dedenok in Kaspersky Daily

How CAPTCHAs Can Hide Phishing URLs in Emails

CAPTCHA puzzles, designed to distinguish people from computer code, are being used to separate people from their login credentials.

By Thomas Claburn in The Register

How to identify data leaks in your company

A requirement, when the intention is to prevent and avoid losses resulting from this type of security incident. A challenge for managing internet access and information security in small and medium-sized companies.

By Kelvin Zimmer on Lumiun Blog

Android viruses disguise themselves as WhatsApp and invade Play Store

Two large-scale campaigns aimed to contaminate Android smartphones with viruses, using malware that disguised itself as utilities, cryptocurrency wallets and even modifications for WhatsApp on the Google Play Store. In some cases, the malicious apps exceeded tens of thousands of downloads, with one of them reaching the mark of more than 500 thousand installations.

By Felipe Demartini on Canaltech

Excel files used again in Emotet campaign

More than 500 Microsoft Excel files have been used to disseminate a new variant of Emotet. Emotet uses social engineering such as email to lure recipients into opening attached documents including Word, Excel, PDF, etc.

In CISO Advisor