Internet Security Week – Edition No. 132

In edition no. 132 of Internet Security Week , Google pays a reward to anyone who discovers vulnerabilities, hackers attack a Russian taxi company, Brazil returns to the list of countries most attacked by ransomware and much more.

News

LockBit ransomware gang's aggressive three-pronged extortion tactic

The LockBit ransomware gang has announced that it is improving defenses against distributed denial of service (DDoS) attacks and working to take the operation to triple extortion level.

By Ionut Ilascu in Bleeping Computer

84% of companies have suffered scams related to identity theft

Innovation does not always match legacy, and proof of this can be found in a report on trends in identity security, published in June. The study points out that 84% of companies suffered some type of breach or cyber incident related to user verification in the last 12 months, maintaining growth that, in the previous year, was 79%.

By Felipe Demartini on Canaltech

WhatsApp scam promotes free football album and stickers

This is a fever that comes back every four years. Football sticker albums are a national passion, and cybercriminals weren't going to waste the opportunity. Our analysts discovered a new fake campaign circulating on WhatsApp in Brazil: a promotion that promises the new football sticker album of the moment, in addition to 400 stickers, for free.

In Kaspersky Daily

Google will pay up to R$164,000 to anyone who discovers vulnerabilities

This week, Google announced a bug bountry program aimed at improving the security of its Open Source (Google OSS) projects. Through this rewards program called Open Source Software Vulnerability Rewards Program, the company invites researchers to report vulnerabilities and bugs that may affect the ecosystem of Open Source projects.

By Juan Manuel Harán in We Live Security

Cybercrime announces sale of 3 TB of Brazilian government data

The group that operates the Everest ransomware is announcing the sale of two digital assets attributed to the Brazilian government: access to a network and also data totaling more than 3 terabytes (TB). The ad has only two lines and does not contain any links to samples, like others already made by the same group, nor does it include the price.

In CISO Advisor

Hackers attack Russia's largest taxi company and send dozens to the same location in Moscow

The taxi arm of troubled Russian tech giant Yandex has been hit by hackers who yesterday ordered dozens of taxis to a single address in central Moscow, resulting in a massive traffic jam.

By Lindsay Clark in The Register

Windows malware delays patch installation by a month to avoid detection

Fake applications are being distributed through legitimate open source websites, providing widespread exposure to malicious applications for both regular website visitors and search engines.

By Bill Toulas in Bleeping Computer

In a scam via corporate email, criminals pretend to be financial directors

In a new type of financial scam, reported in August 2021 by the cybersecurity company Avanan, the attacker pretended to be the financial director (CFO) of a large sports company. In fraud, the criminal offered high profit margins, but to do so, he asked for a bank transfer.

By Kaique Lima on Canaltech

Brazil returns to the list of those most attacked by ransomware

Brazil returned to the ranking of the five countries that most suffer ransomware attacks, according to the Fast Facts report for the month of June published by Trend Micro. The five, in order of attacks suffered, are the United States, Japan, Taiwan, Brazil and Turkey. In the previous month, the list also included, in order, the United States, Turkey, Japan, Taiwan and India.

In CISO Advisor