Internet Security Week - Edition Nº 46

In edition 46 of Internet Security Week , data from 10 million users for sale on the dark web, Japan trains ethical hackers, first new enterprise ransomware of 2021, and more.

News

Data from more than 10 million users for sale on the dark web

After hacking credit and debit card details of millions of Juspay users, the same hacker possibly known as 'ShinyHunters' is now selling databases belonging to three more Indian companies on the Dark Web.

In Business Insider

Hacker posts data from 10,000 American Express accounts for free

A hacker posted data from 10,000 American Express credit card holders on a hacker forum for free. In the same forum post, the actor claims to sell even more data on Mexican banking customers from American Express, Santander and Banamex.

By Ax Sharma in Bleeping Computer

Dark web has increased exponentially and continues to grow during the pandemic, research concludes

Forums dedicated to cybercrime on the dark web grew by around 44% during the isolation caused by the new coronavirus (COVID-19) pandemic, conclude researchers from the Israeli intelligence and information security firm Sixgill.

By Guilherme M. Petry in The Hack

It only gets worse! Attack on SolarWinds exposed Microsoft source codes

When it comes to information security, we can say that 2020 ended in the worst possible way. In the second week of December, a highly complex campaign — apparently organized by Russian government hackers — was identified against an undefined number of US companies.

By Ramon De Souza on FreeGameGuide

Windows Core OS: canceled 'version' leaks on the internet

A canceled build of Windows Core OS, Microsoft's modular and unified operating system project, has appeared on the internet. Named Polaris, the version does not include anything other than the operating system itself, that is, it does not contain a graphical interface or applications.

By Bruno Felix in Olhar Digital

Pandemic gives cybersecurity the status it deserves on corporate agendas

If personal and professional relationships have migrated to the digital environment, the presence of virtual criminals has also intensified there.

By Jorge Freire in Exame

LGPD fines come into effect within 8 months

The value per infringement can reach R$50 million for companies that are not treating personal data correctly.

By Gabriel in Journal Contábil

Are computers on the same network more vulnerable when other devices have already been attacked?

Answers questions about the security of computers connected to the same network and how the “Public” and “Private” profiles work for networks in Windows.

By Altieres Rohr in G1

Babuk Locker is the first new enterprise ransomware of 2021

It's a new year and with it comes new ransomware called Babuk Locker, which targets corporate victims in human-operated attacks.

By Lawrence Abrams in Bleeping Computer

Japan trains 220 ethical hackers to protect Tokyo Olympics

The 2020 Summer Olympics are sure to fall victim to a wide range of cyberattacks. With this in mind, the Japanese government has already trained an “army” made up of no less than 220 information security experts, who will act during the event as ethical hackers, protecting systems against possible disruptions.

By Ramon De Souza in The Hack

Facebook Messenger is the messenger with the least privacy on the App Store

If you focus your entire life on Facebook Messenger, including very sensitive information, you better rethink your attitude towards the messenger. According to a Forbes survey, this is the chat app that collects the most information linked to the user among all apps of this type, including WhatsApp, which belongs to the same company.

By Felipe Junqueira on Canaltech