Скачать или смотреть Episode #26: E skimming Attacks, Stolen AWS Keys, & Iranian Hacker Job Scams

This week has been crazy when it comes to cybersecurity news, with major attacks and critical vulnerabilities making headlines. In this episode, we're breaking down all of the most impactful stories of this week:

An e-skimming attack on the window coverings retailer, SelectBlinds, exposed the data of 206,238 customers. The attack, which went undetected for almost nine months, compromised names, email addresses, shipping and billing information, phone numbers, and complete payment card details, including card numbers, expiration dates, and CVV security codes.

The attack was carried out by injecting malicious JavaScript code into the SelectBlinds website checkout pages in a method known as a Magecart attack.

Cybersecurity professionals across the UK report an increase in ransomware attacks. Eighty-three percent of organizations experienced attacks in the last year, with 46% experiencing four or more incidents. Sixty-one percent of organizations hit by ransomware attacks were offline for at least a day.

Enterprise Resource Planning (ERP) systems, which house a company’s most sensitive and essential data, are increasingly targeted in ransomware attacks.

A malicious Python package called "fabrice," a typosquatted version of the "fabric" library, was discovered in the Python Package Index (PyPI). The package, downloaded over 37,000 times, steals AWS login credentials from developers.

Iranian state-sponsored hackers are impersonating job recruiters to install malware on devices of people working in the aerospace industry.

The threat actors create fake recruitment websites and social media profiles to distribute the malware, SnailResin, which acts as a loader for the SlugResin backdoor. The backdoor is capable of data exfiltration, command-and-control communication, and system persistence.

This campaign uses similar tactics to the North Korean state-sponsored group Lazarus, raising questions about potential collaboration or imitation between the groups.

Stay tuned for a deep dive into these cybersecurity threats, plus tips on how to stay safe online. Hit that subscribe button and turn on notifications so you don't miss future episodes!

#cybersecurity #ransomware #phishing #cyberattacks #databreach #cybercrime #infosec #dataprotection #cybersecurityawareness #cybersecuritynews