Cybercrime & Digital Threats

A new Rakhni variant was found with the ability to decide whether to install ransomware or cryptominers. It also has a worm component, installs spyware, and can disable Windows Defender.

Big breaches in June: Marketing data firm Exactis inadvertently leaked personal information of American citizens and businesses, while Paris-based Fastbooking and ticketing distributor Ticketmaster UK suffered data breaches.

Researchers reported that the hospitality industry remains a top target for hackers aiming to steal data or access accounts using botnets and stolen credentials.

An old tactic is being used by cybercriminals to bypass Microsoft Office 365 (O365) filters for phishing emails. The technique, called ZeroFont, involves the manipulation of text font sizes to trick O365’s natural language processing.

Researchers found a new malware called MyloBot in the wild that features new attack and evasion techniques — as well as the ability to delete other existing malware in the infected system.

Cryptocurrency exchange Bithumb suspended all services after an attack resulted in losses amounting to approximately US$31 million.

Syscoin's GitHub account was hacked to distribute modified versions of their software. Developers who executed Syscoin 3.0.4.1 are advised to change their unencrypted cryptocurrency wallet passwords and back up their files.

Health savings custodian HealthEquity suffered a security breach after an employee fell for a phishing attack, exposing the personal healthcare information of an estimated 23,000 individuals.

The WEP and WPA2 wireless security protocols have both been discovered with vulnerabilities such as KRACK that hackers can exploit to compromise devices, spy on users, and perform other malicious activities. How can users secure their wireless connections?