UK in Midst of $200m Crypto Fraud Epidemic

UK in Midst of $200m Crypto Fraud Epidemic

Victims of cryptocurrency fraud have already lost over £146m ($200m) so far this year, a double-digit increase over 2020 figures, according to reports.

Bloomberg received confirmation from the City of London police that losses in the year-to-date had surged 30% over the figure for the whole of 2020.

The police force, which runs the UK’s national fraud and cybercrime reporting center, pointed to 7118 reports in 2021 so far, with over half of the victims aged 18-45-years-old.

“Reports of cryptocurrency fraud have increased significantly over the past few years,” temporary detective chief inspector, Craig Mullish, is quoted as saying. “Being online more means criminals have a greater opportunity to approach unsuspecting victims with fraudulent investment opportunities.”

According to the FBI, over $246m was lost to cybercrime involving virtual currency last year, although these incidents were not further broken down by crime type.

However, Infosecurity has reported on countless cases in the past few months alone.

These include the founder of two cryptocurrency hedge funds pleading guilty to defrauding investors out of $100m in a scheme that roped in actor Steven Seagal to promote one of the fake companies.

In fact, fake celebrity endorsements are a particularly popular tactic among crypto fraudsters. The City of London police claimed that around 79% of all complaints that cite these were tied to cryptocurrency.

There’s also a growing threat from scam apps designed to steal users’ cryptocurrency funds.

In July, researchers found 170 Android apps that scammed tens of thousands of cryptocurrency enthusiasts into paying for non-existent services and losing $350,000 in the process.

Last week, Sophos researchers revealed “CryptoRom,” a variation on the popular romance scams of old in which lonely hearts are approached via their dating site profile before being tricked into investing crypto funds via fake trading applications. It’s apparently netted criminals $1.4m so far.

—————
Boost Internet Speed
Free Business Hosting
Free Email Account
Dropcatch
Free Secure Email
Secure Email
Cheap VOIP Calls
Free Hosting
Boost Inflight Wifi
Premium Domains
Free Domains

Squirrel Bug Lets Attackers Execute Code in Games, Cloud Services

The out-of-bounds read vulnerability enables an attacker to escape a Squirrel VM in games with millions of monthly players – such as Counter-Strike: Global Offensive and Portal 2 – and in cloud services such as Twilio Electric Imp.

—————
Boost Internet Speed
Free Business Hosting
Free Email Account
Dropcatch
Free Secure Email
Secure Email
Cheap VOIP Calls
Free Hosting
Boost Inflight Wifi
Premium Domains
Free Domains

Lyceum APT Returns, This Time Targeting Tunisian Firms

The APT, which targets Middle-Eastern energy firms & telecoms, has been relatively quiet since its exposure but not entirely silent. It’s kept up attacks through 2021 and is working on retooling its arsenal yet again. 

—————
Boost Internet Speed
Free Business Hosting
Free Email Account
Dropcatch
Free Secure Email
Secure Email
Cheap VOIP Calls
Free Hosting
Boost Inflight Wifi
Premium Domains
Free Domains

Feds Warn BlackMatter Ransomware Gang is Poised to Strike

An advisory by the CISA, FBI and NSA reveals hallmark tactics of and shares defense tips against the cybercriminal group that’s picked up where its predecessor DarkSide left off.

—————
Boost Internet Speed
Free Business Hosting
Free Email Account
Dropcatch
Free Secure Email
Secure Email
Cheap VOIP Calls
Free Hosting
Boost Inflight Wifi
Premium Domains
Free Domains

Time to Build Accountability Back into Cybersecurity

Chris Hass, director of information security and research at Automox, discusses how to assign security responsibility, punishment for poor cyber-hygiene and IDing ‘security champions’ to help small businesses.

—————
Boost Internet Speed
Free Business Hosting
Free Email Account
Dropcatch
Free Secure Email
Secure Email
Cheap VOIP Calls
Free Hosting
Boost Inflight Wifi
Premium Domains
Free Domains

Using Machine Learning to Guess PINs from Video

Researchers trained a machine-learning system on videos of people typing their PINs into ATMs:

By using three tries, which is typically the maximum allowed number of attempts before the card is withheld, the researchers reconstructed the correct sequence for 5-digit PINs 30% of the time, and reached 41% for 4-digit PINs.

This works even if the person is covering the pad with their hands.

The article doesn’t contain a link to the original research. If someone knows it, please put it in the comments.

Slashdot thread.

—————
Boost Internet Speed
Free Business Hosting
Free Email Account
Dropcatch
Free Secure Email
Secure Email
Cheap VOIP Calls
Free Hosting
Boost Inflight Wifi
Premium Domains
Free Domains

Ransomware Attacks against Water Treatment Plants

According to a report from CISA last week, there were three ransomware attacks against water treatment plants last year.

WWS Sector cyber intrusions from 2019 to early 2021 include:

  • In August 2021, malicious cyber actors used Ghost variant ransomware against a California-based WWS facility. The ransomware variant had been in the system for about a month and was discovered when three supervisory control and data acquisition (SCADA) servers displayed a ransomware message.
  • In July 2021, cyber actors used remote access to introduce ZuCaNo ransomware onto a Maine-based WWS facility’s wastewater SCADA computer. The treatment system was run manually until the SCADA computer was restored using local control and more frequent operator rounds.
  • In March 2021, cyber actors used an unknown ransomware variant against a Nevada-based WWS facility. The ransomware affected the victim’s SCADA system and backup systems. The SCADA system provides visibility and monitoring but is not a full industrial control system (ICS).

—————
Boost Internet Speed
Free Business Hosting
Free Email Account
Dropcatch
Free Secure Email
Secure Email
Cheap VOIP Calls
Free Hosting
Boost Inflight Wifi
Premium Domains
Free Domains