IT Security Newsletter - 12/01/2020
Healthcare provider AspenPointe data breach affects 295K patients
U.S. healthcare provider AspenPointe notified patients of a data breach stemming from a September 2020 cyberattack that enabled attackers to steal protected health information (PHI) and personally identifiable information (PII). AspenPointe is a nonprofit funded by Medicaid, state, federal, and local government contracts, as well as donations, that manages 12 organizations serving over 50,000 individuals and families every. READ MORE...
Hacker Gets 8 Years in Prison for Threats to Schools, Airlines
A North Carolina man was sentenced to 95 months in federal prison for his involvement in multiple cyber and swatting attacks. The man, Timothy Dalton Vaughn, 22, known online under monikers such as "WantedbyFeds" and "Hacker_R_US," was indicted in early 2019 and pleaded guilty in November 2019. He admitted to sending threats, conveying false information concerning the use of explosives, intentionally damaging a computer, hacking, and possessing child pornography. READ MORE...
Magecart Attack Convincingly Hijacks PayPal Transactions at Checkout
Just in time for a busy online holiday shopping season, the Magecart gang has come up with a new credit-card skimming technique for hijacking PayPal transactions during checkout. A security researcher who identifies himself as Affable Kraut discovered the technique, which uses postMessage to inject convincing PayPal iframes into the checkout process of an online purchase, "the first skimmer to deploy such a method," he said on Twitter. BleepingComputer first reported his research. READ MORE...
Truck routing provider Rand McNally hit by cyberattack
Chicago-based transportation technology firm Rand McNally is working on restoring network functionality following a cyberattack that hit its systems earlier this week. Rand McNally is an American company founded in 1856 that provides leading route mileage optimization and fleet management software to carriers, shipping companies, and third-party logistics providers. The firm also owns a cloud-based telematics platform and distributes connected vehicle technology, consumer travel. READ MORE...
Brazilian Plane Maker Embraer Targeted in Cyberattack
Brazilian airplane maker Embraer on Monday disclosed a cyberattack that, according to some reports, involved ransomware. Embraer manufactures commercial, executive, military, and agricultural aircraft, and its website says the company is the third largest commercial jets maker, with more than 8,000 airplanes delivered to date. In a press release, the company said its IT systems were breached recently as part of an attack that was detected on November 25. READ MORE...
German users targeted with Gootkit banker or REvil ransomware
On November 23, we received an alert from a partner about a resurgence of Gootkit infections in Germany. Gootkit is a very capable banking Trojan that has been around since 2014 and possesses a number of functionalities such as keystroke or video recording designed to steal financially-related information. In this latest campaign, threat actors are relying on compromised websites to socially engineer users by using a decoy forum template instructing them to download a malicious file. READ MORE...
Mobile payment apps: How to stay safe when paying with your phone
While cash transactions aren't going anywhere anytime soon, the convenience of electronic payment solutions has been steadily growing in popularity over the years. According to a recent survey by the US Federal Reserve, cash payments accounted for just 26% of all payments. Meanwhile, credit and debit cards and electronic payment methods were used for 65% of all payments. The COVID-19 pandemic has also triggered changes in how people shop, with e-commerce experiencing a surge in demand. READ MORE...
- ...in 1913, Henry Ford establishes the first assembly line for automobile production, which he modeled after the production line at Kahn's Meat Packing in Cincinnati.
- ...in 1940, comedian/actor/writer Richard Pryor ("Silver Streak", "Jo Jo Dancer, Your Life is Calling") is born in Peoria, IL.
- ...in 1945, actress/singer/comedian Bette Midler ("The Rose", "Hocus Pocus") is born in Honolulu, HI
- ...in 1955, activist Rosa Parks is jailed for protesting Montgomery, Alabama's racial segregation laws, by refusing to give up her bus seat for a white passenger.