Security Leftovers

posted by Roy Schestowitz on Mar 07, 2023,
updated Mar 07, 2023

• European raid targeted notorious ransomware gang DoppelPaymer [Ed: DoppelPaymer = Microsoft Windows TCO]

  The DoppelPaymer ransomware gang is considered one of the world's most dangerous after it was linked to the death at a hospital in Germany.

• Germany and Ukraine hit two high-value ransomware targets [Ed: DoppelPaymer = Microsoft Windows TCO]

  On 28 February 2023, the German Regional Police (Landeskriminalamt Nordrhein-Westfalen) and the Ukrainian National Police (Націона́льна полі́ція Украї́ни), with support from Europol, the Dutch Police (Politie) and the United States Federal Bureau of Investigations, targeted suspected core members of the criminal group responsible for carrying out large-scale cyberattacks with the DoppelPaymer ransomware.

• Alleged security breach leaves millions of dollars missing from Flutterwave accounts

  Last month, Flutterwave, Africa’s largest startup by private valuation, was involved in a hack that resulted in over ₦2.9 billion (~$4.2 million) missing from its accounts, according to local tech publication Techpoint Africa.

  According to the documents seen by the publication and reviewed by TechCrunch, unknown actors transferred the funds across 28 accounts in 63 transactions in early February. Police investigations are ongoing as Flutterwave, via legal counsel and law enforcement parties, has filed a motion and seeks to freeze accounts across 27 financial institutions that interacted with the missing funds, Techpoint Africa reported.

• Cyberattack at l’Hospital Clínic has affected laboratory, pharmacy, and emergency services (updated)

  “We won’t pay them a cent,” said Catalan Telecommunications Director Sergi Marcen, adding that the hackers have not asked for payments in exchange for the data yet.

• HDFC Bank Denies Data Breach as 7.5GB of Customer Information Allegedly Leaked for Free on Hacker Forum

  One of the largest private sector banks in India, HDFC Bank, has allegedly fallen victim to a data breach. A user on a well known underground hacker forum has posted 7.5GB of HDFC Bank data for download. There is no payment required to download the data, which means the hacker is not really selling the data; in fact, he is giving it away for free.

• New National Cybersecurity Strategy

  Last week the Biden Administration released a new National Cybersecurity Strategy (summary here). There is lots of good commentary out there.