Internet Security Week - Edition Nº 87

In edition no. 87 of Internet Security Week , Acer suffers second attack this year, free VPN leaves data exposed, Atento is victim of ransomware attack and much more.

News

Digital kidnapping payments have already surpassed US$5 billion in 10 years

According to the Treasury Department's FinCEN (Financial Crimes Network), more than US$5.2 billion was accumulated by scammers from attacks involving digital kidnapping over the last 10 years.

By Felipe Demartini on Canaltech

Cybercrime uses legitimate tools for cyberattacks

Cybercriminals have long used legitimate programs and operating system components to attack Microsoft Windows users, a tactic known as Living off the Land.

By Renato Rodrigues in Kaspersky Daily

China's free VPN service leaves data of over a million users exposed

Up-to-date personally identifiable information (PII) of over a million users of the free Chinese VPN service, Quickfox, is exposed on a poorly configured, unencrypted Elasticsearch server available on the thin, passwordless internet.

By Guilherme Petry in The Hack

Acer confirms second cyber attack this year

Acer confirmed a cyberattack on its India offices this week after hackers from the Desorden Group claimed to have breached servers and stolen 60GB of files from the Taiwanese PC maker.

In CISO Advisor

Hacker says he stole data from the entire population of Argentina

An invasion at the beginning of the month would have given access to the personal information of even President Alberto Fernández and Lionel Messi.

By Fábio Fleury in R7

Most common initial attack vectors

When we investigate a cyber incident, we always pay special attention to the initial attack vector. Simply put, entry is a weak point, and to prevent recurrence, identifying weak points in defense systems is crucial.

In Kaspersky Daily

Atento is a victim of ransomware; operations in Brazil are paralyzed

Atento, a multinational telephone service and contact center outsourcing company, based in Spain, but with a huge operation in Latin America, revealed that it suffered a cyber attack that paralyzed its operations in Brazil.

By Guilherme Petry in The Hack

Algorithm trained by researchers can guess bank passwords

Every ATM has a warning asking its users to make sure that no one is looking at them when entering their bank account password, but research has shown that the warning, in the future, will also have to warn about virtual risks.

By Dácio Castelo Branco on Canaltech

Malware used in ransomware already affects companies in Brazil

After having reigned for three consecutive months and falling to second place in August, the Trickbot banking Trojan returned to the top of the Global Threat Index list for the month of September 2021 from Check Point Research (CPR), a division of threat intelligence from Check Point Software.

In CISO Advisor

REvil Group is hacked by agencies that fight cybercrime

Entities from several countries, including the United States, formed a task force to counterattack and “hack the hackers” of the cybercriminal group of Russian origin REvil.

By Carlos Palmeira in Tecmundo