The email account of United States Ambassador to China Nicholas Burns was recently breached by China-based hackers as part of a targeted intelligence-gathering campaign carried out recently, three US government officials told CNN.&nbsp;

Assistant Secretary of State for East Asia Daniel Kritenbrink's email account was also accessed by the hackers as part of the campaign. Kritenbrink had accompanied Secretary of State Antony Blinken on his trip to China.&nbsp;

The hacking report, which was first reported by the Wall Street Journal, further adds to the reports of United States' officials falling to alleged Chinese hackers which was revealed for the first time last week.&nbsp;

<h2>US officials' accounts hacked earlier&nbsp;</h2>

US Commerce Secretary Gina Raimondo's email account was earlier infiltrated by hackers, as reported previously by CNN.&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/semiconductor-wars-china-warns-of-retaliation-if-us-imposes-further-restrictions-617844">Semiconductor wars: China warns of retaliation if US imposes further restrictions</a>

China has been consistently labelled by US officials as the most advanced of US adversaries in cyberspace, which has been an issue of bilateral tension between the two countries in recent years.&nbsp;

When the hacking of Raimondo's email account was disclosed last week, the administration had accepted the breach. US officials have stated that those were among the three most senior targets, however, thousands of email accounts of government officials were at the risk of getting hacked.&nbsp;

While commenting on the report of the account breach, a state department spokesperson stated, “For security reasons, we will not be sharing additional information on the nature and scope of this cybersecurity incident at this time.”

“The department continuously monitors and responds to the activity of concern on our networks. Our investigation is ongoing, and we cannot provide further details at this time," he added. It was unclear how much sensitive information belonging to the US government had been compromised.

<h2>Officials analyse seriousness of the hacking attack</h2>

According to the Wall Street Journal, the email of Secretary of State Antony Blinken was not breached, and neither were those which belonged to his inner circle of advisers.&nbsp;

However, Kritenbrink had accompanied Blinken on his China trip last month, and Burns also took part in meetings held with Chinese President Xi Jinping, and other senior Chinese officials. There is a possibility that the hackers may have got details of US preparations for those internal discussions and meetings that took place.&nbsp;

WATCH |&nbsp;US Climate Envoy John Kerry holds talks in China

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/us-climate-envoy-john-kerry-holds-talks-in-china-617057/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

State Department and the US Cybersecurity and Infrastructure Security Agency's (CISA) senior cyber officials raced to understand how serious the breach was.

“We don’t know exactly what’s going on, but we know there’s a problem,” said a US official while speaking to CNN about how the alarm was sounded by the State Department to other agencies.

Senior CISA official Eric Goldstein, speaking to CNN, said that he fielded calls regarding the hack when he was on a weekend getaway out of Washington with his children.

“The critical work that [the State Department does] conduct on behalf of the American people” made it important to assess how serious the hack was, said Goldstein.

You can&nbsp;now write for wionews.com&nbsp;and be a part of the community. Share your stories and opinions with us&nbsp;<a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

<main>
<section>
WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" data-gtm-yt-inspected-19="true" data-gtm-yt-inspected-24="true" data-gtm-yt-inspected-31="true" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>
</section>
</main>

The email account of United States Ambassador to China Nicholas Burns was recently breached by China-based hackers as part of a targeted intelligence-gathering campaign carried out recently, three US government officials told CNN.

The email account of United States Ambassador to China Nicholas Burns was recently breached by China-based hackers as part of a targeted intelligence-gathering campaign carried out recently, three US government officials told CNN. Assistant Secretary of State for East Asia Daniel Kritenbrink's email account was also accessed by the hackers as part of the campaign. Kritenbrink had accompanied Secretary of State Antony Blinken on his trip to China. The hacking report, which was first reported by the Wall Street Journal, further adds to the reports of United States' officials falling to alleged Chinese hackers which was revealed for the first time last week. US officials' accounts hacked earlier US Commerce Secretary Gina Raimondo's email account was earlier infiltrated by hackers, as reported previously by CNN. ALSO READ | Semiconductor wars: China warns of retaliation if US imposes further restrictions China has been consistently labelled by US officials as the most advanced of US adversaries in cyberspace, which has been an issue of bilateral tension between the two countries in recent years. When the hacking of Raimondo's email account was disclosed last week, the administration had accepted the breach. US officials have stated that those were among the three most senior targets, however, thousands of email accounts of government officials were at the risk of getting hacked. While commenting on the report of the account breach, a state department spokesperson stated, “For security reasons, we will not be sharing additional information on the nature and scope of this cybersecurity incident at this time.” “The department continuously monitors and responds to the activity of concern on our networks. Our investigation is ongoing, and we cannot provide further details at this time," he added. It was unclear how much sensitive information belonging to the US government had been compromised. Officials analyse seriousness of the hacking attack According to the Wall Street Journal, the email of Secretary of State Antony Blinken was not breached, and neither were those which belonged to his inner circle of advisers. However, Kritenbrink had accompanied Blinken on his China trip last month, and Burns also took part in meetings held with Chinese President Xi Jinping, and other senior Chinese officials. There is a possibility that the hackers may have got details of US preparations for those internal discussions and meetings that took place. WATCH | US Climate Envoy John Kerry holds talks in China State Department and the US Cybersecurity and Infrastructure Security Agency's (CISA) senior cyber officials raced to understand how serious the breach was. “We don’t know exactly what’s going on, but we know there’s a problem,” said a US official while speaking to CNN about how the alarm was sounded by the State Department to other agencies. Senior CISA official Eric Goldstein, speaking to CNN, said that he fielded calls regarding the hack when he was on a weekend getaway out of Washington with his children. “The critical work that [the State Department does] conduct on behalf of the American people” made it important to assess how serious the hack was, said Goldstein. You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. WATCH WION LIVE HERE

China hacks into email of US envoy in Beijing Nicholas Burns

Microsoft has claimed that China-based hackers recently compromised over 25 U.S. organisations & 2 govt agencies. Who were the victims? Molly Gambhir reports.

Gravitas: Did China hack American govt accounts?

US Secretary of State Antony Blinken and China's top diplomat Wang Yi embarked on talks in Jakarta, Indonesia, marking their second meeting in consecutive months.

The meeting took place on the sidelines of the Association of Southeast Asian Nations (ASEAN) discussions, reported AFP.

While the two officials exchanged greetings without addressing reporters, their encounter occurred shortly after Microsoft reported a recent breach of US government email accounts by Chinese hackers, including those of the State Department.

<h2>What did the talks entail?</h2>

During discussions in Jakarta, US Secretary of State Antony Blinken conveyed to China's top diplomat, Wang Yi, that the United States will ensure that hackers are held responsible for alleged breaches of US government agencies.

According to an anonymous senior US official, Blinken emphasised that any actions targeting US government entities, American citizens, or US companies are a matter of grave concern.

The official stated that appropriate measures will be taken to hold those responsible accountable, reported AFP.

The Jakarta talks follow Blinken's visit to Beijing, the first by a US secretary of state in nearly five years. During his visit, Blinken engaged with President Xi Jinping, Wang Yi, and Foreign Minister Qin Gang.

However, in Jakarta, Wang represented Beijing instead of Qin, who was unable to attend due to health reasons, as stated by the Chinese foreign ministry.

US-China tensions have escalated significantly in recent years due to various factors, including China's increasing assertiveness in the region and the US imposing extensive restrictions on the export of advanced semiconductors.

Also read |&nbsp;<a href="https://www.wionews.com/world/foreign-ministers-of-asean-kick-off-key-meeting-in-indonesia-chinese-fm-to-abstain-614252">Foreign ministers of ASEAN kick off key meeting in Indonesia, Chinese FM absent</a>

Despite these challenges, Blinken's visit to Beijing initiated a flurry of diplomatic exchanges, with Treasury Secretary Janet Yellen visiting last week and a forthcoming trip by climate envoy John Kerry.

The meeting in Jakarta between Blinken and Wang sets the stage for discussions between the two countries amidst the backdrop of strained relations.

Both nations continue to grapple with complex issues, seeking avenues for cooperation while managing areas of contention.

Also watch |&nbsp;United States confirms hackers breach 2 organisations

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/united-states-confirms-hackers-breach-2-organizations-614998/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

The outcome of these talks could have far-reaching implications for US-China relations and regional dynamics in Southeast Asia.

(With inputs from agencies)

&nbsp;

WATCH WION LIVE HERE:

<iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" style="width:100%;max-width:560px;" width="560"></iframe>

US Secretary of State Antony Blinken and China's top diplomat Wang Yi embarked on talks in Jakarta, Indonesia, marking their second meeting in consecutive months.

US Secretary of State Antony Blinken and China's top diplomat Wang Yi embarked on talks in Jakarta, Indonesia, marking their second meeting in consecutive months. The meeting took place on the sidelines of the Association of Southeast Asian Nations (ASEAN) discussions, reported AFP. While the two officials exchanged greetings without addressing reporters, their encounter occurred shortly after Microsoft reported a recent breach of US government email accounts by Chinese hackers, including those of the State Department. What did the talks entail? During discussions in Jakarta, US Secretary of State Antony Blinken conveyed to China's top diplomat, Wang Yi, that the United States will ensure that hackers are held responsible for alleged breaches of US government agencies. According to an anonymous senior US official, Blinken emphasised that any actions targeting US government entities, American citizens, or US companies are a matter of grave concern. The official stated that appropriate measures will be taken to hold those responsible accountable, reported AFP. The Jakarta talks follow Blinken's visit to Beijing, the first by a US secretary of state in nearly five years. During his visit, Blinken engaged with President Xi Jinping, Wang Yi, and Foreign Minister Qin Gang. However, in Jakarta, Wang represented Beijing instead of Qin, who was unable to attend due to health reasons, as stated by the Chinese foreign ministry. US-China tensions have escalated significantly in recent years due to various factors, including China's increasing assertiveness in the region and the US imposing extensive restrictions on the export of advanced semiconductors. Also read | Foreign ministers of ASEAN kick off key meeting in Indonesia, Chinese FM absent Despite these challenges, Blinken's visit to Beijing initiated a flurry of diplomatic exchanges, with Treasury Secretary Janet Yellen visiting last week and a forthcoming trip by climate envoy John Kerry. The meeting in Jakarta between Blinken and Wang sets the stage for discussions between the two countries amidst the backdrop of strained relations. Both nations continue to grapple with complex issues, seeking avenues for cooperation while managing areas of contention. Also watch | United States confirms hackers breach 2 organisations The outcome of these talks could have far-reaching implications for US-China relations and regional dynamics in Southeast Asia. (With inputs from agencies) WATCH WION LIVE HERE:

Blinken draws the line, meets top Chinese diplomat, pledges to hold hackers 'accountable'

According to a Microsoft report, Chinese state-linked hackers have secretly accessed the email accounts of around 25 organizations in a sweeping cyber Espionage campaign.

Chinese spies accuse of worldwide cyber espionage

The hackers behind the recent attack on Microsoft are suspected to have Russian links, reported The Guardian, citing experts. The news report said that it is unlikely that the hackers are an Islamic group with links in Sudan as it is being claimed by them. The hacking attacks that took place in early June caused outages of some of Microsoft's services.

Anonymous Sudan, a group of hackers, has claimed responsibility for denial-of-service attacks on Australian companies. The companies include those from the aviation, healthcare and education sectors. The name of the group suggests that it is from Sudan. The group claimed that it was targetting Australian companies because of clothes worn at the Melbourne fashion festival with the words 'God walks with me' in Arabic.

Watch | AI: Microsoft's ticket to prosperity | World DNA

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/ai-microsofts-ticket-to-prosperity-world-dna-604996/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

The Guardian reported that cybersecurity firm CyberCX released a report on Monday that said that Anonymous Sudan is unlikely to be an authentic hacktivist organisation. The firm said that it is likely that it has links with the Russian state.&nbsp;

<h2>Means used an indication of origin</h2>

The firm said that the organisation used paid infrastructure in the attack. The operation to direct huge amounts of traffic to a service would need tens of thousands of dollars and hence it was unlikely that Anonymous Sudan was a loose collective.&nbsp;

CyberCX said that Anonymous Sudan was part of the pro-Russia hacker group Killnet.

Alastair MacGibbon, CyberCX’s chief strategy officer, told Guardian Australia that Anonymous Sudan's operations may be aimed at driving "division in society" and disrupting the West.

“It really stems from the Russian government's proclivities to drive division in society,” he said as quoted by The Guardian.

“They don’t really care about the issue … anti-racism, pro-environment or whatever – [they] just get into whatever it is that matters to [harm] targets. In this case, the West.”

MacGibbon said that there have been more and more instances of Russia-linked entities have been carrying out attacks against Australia in the recent past.

“There has to be a link to other forms of monetisation, potentially a state or some form of direction coming from the state that says ‘go and cause fear, uncertainty and doubt’,” he said.

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

WATCH WION LIVE HERE

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false"><iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

&nbsp;

The hackers behind the recent attack on Microsoft are suspected to have Russian links, reported The Guardian, citing experts. The news report said that it is unlikely that the hackers are an Islamic group with links in Sudan as it is being claimed by them.

The hackers behind the recent attack on Microsoft are suspected to have Russian links, reported The Guardian, citing experts. The news report said that it is unlikely that the hackers are an Islamic group with links in Sudan as it is being claimed by them. The hacking attacks that took place in early June caused outages of some of Microsoft's services. Anonymous Sudan, a group of hackers, has claimed responsibility for denial-of-service attacks on Australian companies. The companies include those from the aviation, healthcare and education sectors. The name of the group suggests that it is from Sudan. The group claimed that it was targetting Australian companies because of clothes worn at the Melbourne fashion festival with the words 'God walks with me' in Arabic. Watch | AI: Microsoft's ticket to prosperity | World DNA × The Guardian reported that cybersecurity firm CyberCX released a report on Monday that said that Anonymous Sudan is unlikely to be an authentic hacktivist organisation. The firm said that it is likely that it has links with the Russian state. Means used an indication of origin The firm said that the organisation used paid infrastructure in the attack. The operation to direct huge amounts of traffic to a service would need tens of thousands of dollars and hence it was unlikely that Anonymous Sudan was a loose collective. CyberCX said that Anonymous Sudan was part of the pro-Russia hacker group Killnet. Alastair MacGibbon, CyberCX’s chief strategy officer, told Guardian Australia that Anonymous Sudan's operations may be aimed at driving "division in society" and disrupting the West. “It really stems from the Russian government's proclivities to drive division in society,” he said as quoted by The Guardian. “They don’t really care about the issue … anti-racism, pro-environment or whatever – [they] just get into whatever it is that matters to [harm] targets. In this case, the West.” MacGibbon said that there have been more and more instances of Russia-linked entities have been carrying out attacks against Australia in the recent past. “There has to be a link to other forms of monetisation, potentially a state or some form of direction coming from the state that says ‘go and cause fear, uncertainty and doubt’,” he said. You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. WATCH WION LIVE HERE ×

Hackers who caused Microsoft outage have Russian links: Report

The mysterious and dark hacking World worldwide criminals are constantly looking for new ways to exploit cyber security this time hackers have stolen data from the systems of several users of a popular file transfer tool and the tool that we're talking about here is move a transfer it is owned by progress software and is designed to allow Enterprises to transfer files between business partners and customers yes it's a serious case there the news is revealed by a team of U.S security researchers and it comes one day after the softwares maker disclosed that a security flaw had been discovered the exact number and identity of the impacted organizations remain unclear the Chief Information officer has chosen not to disclose these details however he said that progress software has taken prompt action to address the vulnerability.

Criminals exploit cybersecurity once again, MOVEit tool exploited to steal data

Deloitte India has fired an employee accused of running a global hacking gang, a day after the Sunday Times and the Bureau of Investigative Journalism made the expose about the illicit operations.

Deloitte India has fired an employee accused of running a global hacking gang, a day after the Sunday Times and the Bureau of Investigative Journalism made the expose about the illicit operations. “We are aware of the recent media reports outlining serious allegations about an individual who used to work for Deloitte India. This individual no longer works for Deloitte India,” said the company spokesperson. Reportedly, a day before, it was revealed that Aditya Jain, an associate director with the company's cyber unit was running a hacking group named WhiteInt that acted as a 'hack-for-hire' company. As per reports, he was earlier working with one of the Big Four companies. According to reports, Jain's hacking firm had information regarding several famous personalities from across the globe. Former Pakistan president Pervez Musharraf, former Pakistan minister Fawad Chaudhry, former UK chancellor Philip Hammond and Swiss President Ignazio Cassis were among the few whose confidential information was accessed by the gang. He was running the operations from a fourth-floor apartment in the Northern Indian city of Gurugram, known for housing big tech companies. Read more: India: Russian man arrested for hacking JEE Mains software to help students cheat WATCH | Deloitte employee behind global hacking gang; hack firm operate under the name 'Whitein' × Jain joined Deloitte in February earlier this year and was previously employed with one of the Big Four firms of the country, up until March 2021. Notably, EY, Deloitte, PwC and KPMG constitute the Big Four firms and have large cyber-security practices. Their business has grown exponentially during the pandemic as work from home became the trend. In the report that blew the lid on the operations, it was also revealed that several Indian hackers offered their services willingly to hack into confidential and private email accounts of the victims, after receiving intel from autocratic states, and wealthy businessmen. Read more: Optus leak: Singapore Telecommunications appoints Deloitte to assess data breach (With inputs from agencies) WATCH WION LIVE HERE:

Deloitte India fires employee accused of running an international hacking ring

Consumer finance provider Latitude Financial has said that cyber-criminals have leaked the personal data of around 14 million customers, in what is being described as the biggest data breach reported in Australia.

The non-banking lending firm first reported the cyber hack on March 6, saying that 330,000 customers' information was stolen. On Monday, it acknowledged that the cyberattack was far worse than originally thought, and updated the figure to 14 million.

The stolen information consists of driver’s license numbers of customers from Australia and New Zealand, The Sydney Morning Herald newspaper reported.

In an announcement, the firm added that victims include current and former customers dating back more than 10 years, as well as applicants for its consumer credit services.

“It is hugely disappointing that such a significant number of additional customers and applicants have been affected by this incident. We apologise unreservedly,” Latitude chief executive Ahmed Fahour said in a release to the Australian Securities Exchange.

“We are committed to working closely with impacted customers and applicants to minimise the risk and disruption to them, including reimbursing the cost if they choose to replace their ID document. We are also committed to a full review of what has occurred,” Fahour added. He is due to retire on Friday.

Latitude Financial was founded in 2015 after GE Capital sold its Australian and New Zealand business to a consortium led by Deutsche Bank, KKR and Varde Partners.

Cybersecurity Minister Clare O’Neil on Monday expressed concern about the scale of information theft, and ordered the National Coordination Mechanism (NCM) to support government agencies in relation to the attack.

“The government shares the frustration and concern experienced by many citizens who fear their data may now have been stolen on multiple occasions,” she was quoted as saying by the newspaper.

The firm said that it has not detected any cyberattack on its systems since March 16. It added that it is working with the Australian Cyber Security Centre and the incident is being investigated by the Australian Federal Police.

(With inputs from agencies)

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

Consumer finance provider Latitude Financial has said that cyber-criminals have leaked the personal data of around 14 million customers, in what is being described as the biggest data breach reported in Australia.

Consumer finance provider Latitude Financial has said that cyber-criminals have leaked the personal data of around 14 million customers, in what is being described as the biggest data breach reported in Australia. The non-banking lending firm first reported the cyber hack on March 6, saying that 330,000 customers' information was stolen. On Monday, it acknowledged that the cyberattack was far worse than originally thought, and updated the figure to 14 million. The stolen information consists of driver’s license numbers of customers from Australia and New Zealand, The Sydney Morning Herald newspaper reported. In an announcement, the firm added that victims include current and former customers dating back more than 10 years, as well as applicants for its consumer credit services. “It is hugely disappointing that such a significant number of additional customers and applicants have been affected by this incident. We apologise unreservedly,” Latitude chief executive Ahmed Fahour said in a release to the Australian Securities Exchange. “We are committed to working closely with impacted customers and applicants to minimise the risk and disruption to them, including reimbursing the cost if they choose to replace their ID document. We are also committed to a full review of what has occurred,” Fahour added. He is due to retire on Friday. Latitude Financial was founded in 2015 after GE Capital sold its Australian and New Zealand business to a consortium led by Deutsche Bank, KKR and Varde Partners. Cybersecurity Minister Clare O’Neil on Monday expressed concern about the scale of information theft, and ordered the National Coordination Mechanism (NCM) to support government agencies in relation to the attack. “The government shares the frustration and concern experienced by many citizens who fear their data may now have been stolen on multiple occasions,” she was quoted as saying by the newspaper. The firm said that it has not detected any cyberattack on its systems since March 16. It added that it is working with the Australian Cyber Security Centre and the incident is being investigated by the Australian Federal Police. (With inputs from agencies) WATCH WION LIVE HERE

Australian lending firm Latitude Financial says data of 14 million customers stolen in cyberattack

Italian automaker Ferrari on Monday informed a significant data breach took place at the company and that customers and their personal data may be at risk. A hacker was reportedly able to infiltrate the IT system of the luxury sports car maker and made a call for ransom in return for the data.

Italian automaker Ferrari on Monday informed a significant data breach took place at the company and that customers and their personal data may be at risk. A hacker was reportedly able to infiltrate the IT system of the luxury sports car maker and made a call for ransom in return for the data. "We regret to inform you of a cyber incident at Ferrari, where a threat actor was able to access a limited number of systems in our IT environment," Ferrari informed in a statement. The letter dated March 21 added that Ferrari was "recently contacted by a threat actor with a ransom demand related to certain client contact details". However, the Maranello-based company said it was not going to bow in front of the hacker and pay the ransom. ALSO READ | Already expensive Ferrari supercars to get even more costly. Supply chain and inflation to be blamed "As a policy, Ferrari will not be held to ransom as paying such demands funds criminal activity and enables threat actors to perpetuate their attacks." It added that the best course of action remains to inform the customers about the potential data exposure and the nature of the incident. The customer information exposed to the hacker includes names, addresses, email addresses and telephone numbers. Ferrari CEO Benedetto Vigna tried to calm down the situation by stating that no payment details, bank account numbers and/or sensitive payment information had been accessed by the alleged hacker. Ferrari added it had been working with third-party experts to secure its IT systems whilst informing about hiring a leading cybersecurity firm to investigate the matter. The concerned authorities have also been informed. Watch | World Business Watch: Ferrari says no evidence of system breach Ferrari's 7GB of internal documents hacked Notably, this is not the first instance when Ferrari has fallen prey to a ransomware attack, Last year in October, internal documents belonging to the brand had been posted online. ALSO READ | Ferrari falls victim to ransomware attack; 7GB of its internal documents made public Ransomware gang, RansomEXX, on its Tor leak site claimed that it has breached Ferrari stealing 6.99 GB of data, which not only included internal documents but also datasheets and repair manuals amongst other items. (With inputs from agencies) WATCH WION LIVE HERE:

Ferrari taken for a spin: Hackers demand ransom after harvesting customer data

Threat actors are having a field day using Artificial Intelligence (AI) to hack people. A new report has claimed that hackers are using AI-generated videos on YouTube to spread malware and steal&nbsp;confidential information.&nbsp;

According to&nbsp;IT security intelligence company CloudSEK, there has been a 200-300 per cent increase in the number of AI-generated videos that contain links to stealer malware such as&nbsp;Vidar, RedLine, and Raccoon in the description.&nbsp;

YouTube is one of the most popular media platforms with over 2.5 billion active users. The vast demography of users makes it an ideal place for hackers to lay their traps.

In most instances, the videos are presented as tutorials to download cracked versions of popular software such as Adobe Photoshop, Premiere Pro,&nbsp;Autodesk 3ds Max, AutoCAD. Once the viewer watches the video and looks for links to download the said software, they are directed to the description section where the malicious link is pasted.&nbsp;

Watch |&nbsp;ChatGPT is making waves, but can it trusted?

<iframe allowfullscreen="" autoplay="1" frameborder="0" height="350" src="https://www.wionews.com/videos/chatgpt-is-making-waves-but-can-it-trusted-563976/embed" width="560"></iframe>

While earlier such videos used to have a screen recording or audio walkthrough, the new-age hackers had developed their tools using technology.&nbsp;

"There has recently been an increase in the use of AI-generated videos from platforms such as Synthesia and D-ID, being used in the videos," read the report.&nbsp;

It is a well-known fact that watching a human face on the screen, especially with certain facial features increases familiarity and trustworthiness. The hackers play on this psychology and use AI tools to feature humans that sell the 'malware' packaged as a tutorial.&nbsp;

<a href="https://www.wionews.com/technology/ai-based-chatgpt-will-soon-let-you-convert-text-into-video-heres-all-you-need-to-know-571446">Read more:&nbsp;AI based ChatGPT will soon let you convert text into video. Here's all you need to know</a>

Once the user clicks on the malicious link, infostealers software is installed on the system. The said software is designed to steal sensitive information such as bank account numbers, credit card information, passwords and other private data.

Afterward, the harvested data is uploaded to the attacker's Command and Control server, providing them the full authority to misuse the data.&nbsp;

(With inputs from agencies) 
 
&nbsp;

WATCH WION LIVE HERE:&nbsp;

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

Threat actors are having a field day using Artificial Intelligence (AI) to hack people. A new report has claimed that hackers are using AI-generated videos on YouTube to spread malware and steal confidential information.

Threat actors are having a field day using Artificial Intelligence (AI) to hack people. A new report has claimed that hackers are using AI-generated videos on YouTube to spread malware and steal confidential information. According to IT security intelligence company CloudSEK, there has been a 200-300 per cent increase in the number of AI-generated videos that contain links to stealer malware such as Vidar, RedLine, and Raccoon in the description. YouTube is one of the most popular media platforms with over 2.5 billion active users. The vast demography of users makes it an ideal place for hackers to lay their traps. In most instances, the videos are presented as tutorials to download cracked versions of popular software such as Adobe Photoshop, Premiere Pro, Autodesk 3ds Max, AutoCAD. Once the viewer watches the video and looks for links to download the said software, they are directed to the description section where the malicious link is pasted. Watch | ChatGPT is making waves, but can it trusted? While earlier such videos used to have a screen recording or audio walkthrough, the new-age hackers had developed their tools using technology. "There has recently been an increase in the use of AI-generated videos from platforms such as Synthesia and D-ID, being used in the videos," read the report. It is a well-known fact that watching a human face on the screen, especially with certain facial features increases familiarity and trustworthiness. The hackers play on this psychology and use AI tools to feature humans that sell the 'malware' packaged as a tutorial. Read more: AI based ChatGPT will soon let you convert text into video. Here's all you need to know Once the user clicks on the malicious link, infostealers software is installed on the system. The said software is designed to steal sensitive information such as bank account numbers, credit card information, passwords and other private data. Afterward, the harvested data is uploaded to the attacker's Command and Control server, providing them the full authority to misuse the data. (With inputs from agencies) WATCH WION LIVE HERE:

Hackers are using AI-generated YouTube videos to steal data. Here's how

A new report has claimed that hackers are using AI-generated videos on YouTube to spread malware. They can also steal passwords, credit card information, bank account numbers, and other confidential data.

Hackers using YouTube videos to steal user information

In a huge development, hackers were reported to have got hold on login credentials to data centres in Asia which are used by world's biggest businesses. In its report, Bloomberg said that this could open doors for espionage or hacking. E-mails and passwords of customer support websites or two of Asia's biggest data centre operators: GDS Holdings Ltd. and ST Telemedia Global Data Centres.

About 2000 customers of GDS and STT GDC have reportedly been affected. According to the report, login credentials of at least five of them have been used. These include four companies in India and China's main foreign exchange and debt trading platform.

The credentials which have been acquired by the hackers include those of major companies like Amazon, Apple, Alibaba, Huawei and more.

Bloomberg reported that both, GDS and STT GDC said that data breach did not pose threat to their clients' systems.

Nevertheless, the data breach has highlighted the risks companies face when they depend on third-parties for their data and IT equipment.&nbsp;

“This is a nightmare waiting to happen,” said Michael Henry, former chief information officer for Digital Realty Trust Inc. as quoted by Bloomberg.

“If they can achieve that, they can potentially disrupt communications and commerce on a massive scale.”

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

WATCH WION LIVE HERE

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false"><iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

&nbsp;

In a huge development, hackers were reported to have got hold on login credentials to data centres in Asia which are used by world's biggest businesses. In its report, Bloomberg said that this could open doors for espionage or hacking.

In a huge development, hackers were reported to have got hold on login credentials to data centres in Asia which are used by world's biggest businesses. In its report, Bloomberg said that this could open doors for espionage or hacking. E-mails and passwords of customer support websites or two of Asia's biggest data centre operators: GDS Holdings Ltd. and ST Telemedia Global Data Centres. About 2000 customers of GDS and STT GDC have reportedly been affected. According to the report, login credentials of at least five of them have been used. These include four companies in India and China's main foreign exchange and debt trading platform. The credentials which have been acquired by the hackers include those of major companies like Amazon, Apple, Alibaba, Huawei and more. Bloomberg reported that both, GDS and STT GDC said that data breach did not pose threat to their clients' systems. Nevertheless, the data breach has highlighted the risks companies face when they depend on third-parties for their data and IT equipment. “This is a nightmare waiting to happen,” said Michael Henry, former chief information officer for Digital Realty Trust Inc. as quoted by Bloomberg. “If they can achieve that, they can potentially disrupt communications and commerce on a massive scale.” You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. WATCH WION LIVE HERE ×

Hackers hack data centres in Asia, get credentials of major companies

In a hacking episode that can be unnerving for many large co-operations. Reports say that hackers got hold of login credentials for data centers in Asia are used by some of world's biggest experts.

Hackers selling data center logins, had credentials for over a year

On Saturday, the Islamic Republic marked the Iranian revolution's 44th anniversary with state-organised rallies, as President Ebrahim Raisi's televised speech was briefly interrupted by anti-government hackers.

Raisi, who is being called out by young protesters to step down, asked the “deceived youth” to repent so that the supreme leader of Iran can pardon them.

Speaking to the crowd gathered at Tehran's expansive Azadi Square, he said that if that is the case then “the Iranian people will embrace them with open arms”.

ALSO READ | <a href="https://www.wionews.com/world/watch-iranian-women-released-out-of-jail-chant-anti-regime-slogans-outside-prison-complex-560762">WATCH | Iranian women, released out of jail, chant anti-regime slogans outside prison complex</a>

For almost a minute, the hackers interrupted his live televised speech on the internet as a logo of the anti-government hackers displayed on the screen, who goes by the name of “Edalate Ali (Justice of Ali)”. In that one minute, a voice shouted in the background “Death to the Islamic Republic.”

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<blockquote class="twitter-tweet">
The Islamic Republic of Iran Broadcasting was hacked today while broadcasting mass murderer Ebrahim Raisi's speech during the regime’s anniversary “celebrations” 
 
The hackers put up the slogan "Death to Khamenei” 
👏 <a href="https://twitter.com/hashtag/IranRevoIution?src=hash&amp;ref_src=twsrc%5Etfw">#IranRevoIution</a> 
<a href="https://t.co/s5wb4xKBEB">pic.twitter.com/s5wb4xKBEB</a>
— Emily Schrader - אמילי שריידר امیلی شریدر (@emilykschrader) <a href="https://twitter.com/emilykschrader/status/1624369667996282883?ref_src=twsrc%5Etfw">February 11, 2023</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

On the eve of the anniversary, fireworks were shown by the state media as part of the celebrations sponsored by the government as people were seen chanting "Allahu Akbar! (God is Greatest!)".

However, many people were heard shouting “Death to the Islamic Republic” and "Death to the dictator!” in the videos shared on social media.

Live footage of state rallies was aired on Saturday by the government television. In the capital city, an anti-submarine cruiser, drone, domestic-made anti-ballistic missiles, and other military equipment were displayed as part of the celebrations.

“People have realised that the enemy’s problem is not woman, life, or freedom,” said Raisi in the live televised speech at Azadi Square in Tehran, as he referred to the signature slogan of protesters.

WATCH | Activists say 'death to Islamic Republic' in video

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/iran-ebrahim-raisis-online-speech-on-islamic-revolution-day-hacked-561064/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

“Rather, they want to take our independence,” he stated.

Chants of “Death to America” repeatedly interrupted his speech as the crowd also chanted “Death to Israel.”

Raisi said that the “enemies” are promoting “the worst kind of vulgarity, which is homosexuality”.

Iran was swept by nationwide protests after the 22-year-old Mahsa Amini died in police custody in September 2022 after she was detained by the morality police for not following the strict Islamic dress code.

(With inputs from agencies)

You can&nbsp;now write for wionews.com&nbsp;and be a part of the community. Share your stories and opinions with us&nbsp;<a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

On Saturday, the Islamic Republic marked the Iranian revolution's 44th anniversary with state-organised rallies, as President Ebrahim Raisi's televised speech was briefly interrupted by anti-government hackers.

On Saturday, the Islamic Republic marked the Iranian revolution's 44th anniversary with state-organised rallies, as President Ebrahim Raisi's televised speech was briefly interrupted by anti-government hackers. Raisi, who is being called out by young protesters to step down, asked the “deceived youth” to repent so that the supreme leader of Iran can pardon them. Speaking to the crowd gathered at Tehran's expansive Azadi Square, he said that if that is the case then “the Iranian people will embrace them with open arms”. ALSO READ | WATCH | Iranian women, released out of jail, chant anti-regime slogans outside prison complex For almost a minute, the hackers interrupted his live televised speech on the internet as a logo of the anti-government hackers displayed on the screen, who goes by the name of “Edalate Ali (Justice of Ali)”. In that one minute, a voice shouted in the background “Death to the Islamic Republic.” The Islamic Republic of Iran Broadcasting was hacked today while broadcasting mass murderer Ebrahim Raisi's speech during the regime’s anniversary “celebrations” The hackers put up the slogan "Death to Khamenei” 👏 #IranRevoIution pic.twitter.com/s5wb4xKBEB — Emily Schrader - אמילי שריידר امیلی شریدر (@emilykschrader) February 11, 2023 × On the eve of the anniversary, fireworks were shown by the state media as part of the celebrations sponsored by the government as people were seen chanting "Allahu Akbar! (God is Greatest!)". However, many people were heard shouting “Death to the Islamic Republic” and "Death to the dictator!” in the videos shared on social media. Live footage of state rallies was aired on Saturday by the government television. In the capital city, an anti-submarine cruiser, drone, domestic-made anti-ballistic missiles, and other military equipment were displayed as part of the celebrations. “People have realised that the enemy’s problem is not woman, life, or freedom,” said Raisi in the live televised speech at Azadi Square in Tehran, as he referred to the signature slogan of protesters. WATCH | Activists say 'death to Islamic Republic' in video “Rather, they want to take our independence,” he stated. Chants of “Death to America” repeatedly interrupted his speech as the crowd also chanted “Death to Israel.” Raisi said that the “enemies” are promoting “the worst kind of vulgarity, which is homosexuality”. Iran was swept by nationwide protests after the 22-year-old Mahsa Amini died in police custody in September 2022 after she was detained by the morality police for not following the strict Islamic dress code. (With inputs from agencies) You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. WATCH WION LIVE HERE

WATCH | 'Death to the Islamic Republic': Hackers take over Raisi's revolution anniversary speech

Disclaimer: A number of claims and counterclaims are being made on the Ukraine-Russia conflict on the ground and online. While WION takes utmost care to accurately report this developing news story, we cannot independently verify the authenticity of all statements, photos and videos.

Russian Deputy Foreign Minister Oleg Syromolotov, while speaking to the Russian news agency TASS, said that Moscow is aware of the operations being conducted by the United States against them in the information space by recruiting hackers and providing training to Ukraine's IT army.

"It is telling that the United States is putting its aggressive policies into action. They made no attempt to conceal the fact that their cyber command is conducting operations against our country. We are well aware that Washington is aggressively recruiting hackers, training the so-called IT Army of Ukraine, and using information and communication technologies of their partners and controlled private companies to carry out cyberattacks against Russia's information infrastructure," Syromolotov said while speaking to TASS.

He added that Washington and its allies have been supporting risky digital tactics. The Russian deputy foreign minister said that the United States is "openly moving towards the militarisation of the information domain," although the majority of United Nations member states wish that the information technologies be used peacefully.

ALSO READ | <a href="https://www.wionews.com/world/ukraine-war-eu-official-claims-russia-is-now-at-war-with-nato-and-the-west-556543">Ukraine war: EU official says ‘Russia has changed ‘special operation’ into war with NATO and West’</a>

"They are enforcing NATO developments on cyberwarfare standards, attempting to change international law to fit them. Unfortunately, this falls within Washington's aggressive bloc-thinking, which is moving the globe toward ultimate confrontation," stated Syromolotov.&nbsp;

'US burned the bridges to continue cybersecurity dialogue'

Minister Syromolotov further alleged the US of "burning the bridges" to continue any kind of dialogue with Moscow over global cybersecurity issues.

"We don’t see any prerequisites for resuming dialogue on global cybersecurity with Washington at this point. I would like to reiterate that it wasn’t our choice, it was the Americans who burned the bridges. We won’t run after anyone. We aren’t interested in dialogue for the sake of dialogue. When those overseas sober up from their Russophobic frenzy and get in the mood for a constructive conversation, then we will probably think about resuming contact," he stated.

Syromolotov further stated that dialogue on the cybersecurity issue between the Kremlin and the White House was suspended by the US, citing the military operation being carried out by Russia in Ukraine.

WATCH | Russia brands tank move 'direct involvement by West'

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/russia-brands-tank-move-direct-involvement-by-west-556347/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

"Instead of constructive discussions on&nbsp;the global cybersecurity issue, the Americans launched a Russophobic campaign on the international stage. US Federal Bureau of Investigation Director Christopher Wray’s recent address to the World Economic Forum in Davos is another vivid example of that. He sought to indiscriminately paint our country as pretty much the biggest threat to peace and security in the cyber field," the minister stated.

"All these attempts by our opponents will definitely fail. However, this politicised farce seriously impedes the operation of crucial multilateral negotiation mechanisms on the use of information and communication technologies," he added.

(With inputs from agencies)

You can&nbsp;now write for wionews.com&nbsp;and be a part of the community. Share your stories and opinions with us&nbsp;<a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

Disclaimer: A number of claims and counterclaims are being made on the Ukraine-Russia conflict on the ground and online. While WION takes utmost care to accurately report this developing news story, we cannot independently verify the authenticity of all statements, photos and videos.

Disclaimer: A number of claims and counterclaims are being made on the Ukraine-Russia conflict on the ground and online. While WION takes utmost care to accurately report this developing news story, we cannot independently verify the authenticity of all statements, photos and videos. Russian Deputy Foreign Minister Oleg Syromolotov, while speaking to the Russian news agency TASS, said that Moscow is aware of the operations being conducted by the United States against them in the information space by recruiting hackers and providing training to Ukraine's IT army. "It is telling that the United States is putting its aggressive policies into action. They made no attempt to conceal the fact that their cyber command is conducting operations against our country. We are well aware that Washington is aggressively recruiting hackers, training the so-called IT Army of Ukraine, and using information and communication technologies of their partners and controlled private companies to carry out cyberattacks against Russia's information infrastructure," Syromolotov said while speaking to TASS. He added that Washington and its allies have been supporting risky digital tactics. The Russian deputy foreign minister said that the United States is "openly moving towards the militarisation of the information domain," although the majority of United Nations member states wish that the information technologies be used peacefully. ALSO READ | Ukraine war: EU official says ‘Russia has changed ‘special operation’ into war with NATO and West’ "They are enforcing NATO developments on cyberwarfare standards, attempting to change international law to fit them. Unfortunately, this falls within Washington's aggressive bloc-thinking, which is moving the globe toward ultimate confrontation," stated Syromolotov. 'US burned the bridges to continue cybersecurity dialogue' Minister Syromolotov further alleged the US of "burning the bridges" to continue any kind of dialogue with Moscow over global cybersecurity issues. "We don’t see any prerequisites for resuming dialogue on global cybersecurity with Washington at this point. I would like to reiterate that it wasn’t our choice, it was the Americans who burned the bridges. We won’t run after anyone. We aren’t interested in dialogue for the sake of dialogue. When those overseas sober up from their Russophobic frenzy and get in the mood for a constructive conversation, then we will probably think about resuming contact," he stated. Syromolotov further stated that dialogue on the cybersecurity issue between the Kremlin and the White House was suspended by the US, citing the military operation being carried out by Russia in Ukraine. WATCH | Russia brands tank move 'direct involvement by West' "Instead of constructive discussions on the global cybersecurity issue, the Americans launched a Russophobic campaign on the international stage. US Federal Bureau of Investigation Director Christopher Wray’s recent address to the World Economic Forum in Davos is another vivid example of that. He sought to indiscriminately paint our country as pretty much the biggest threat to peace and security in the cyber field," the minister stated. "All these attempts by our opponents will definitely fail. However, this politicised farce seriously impedes the operation of crucial multilateral negotiation mechanisms on the use of information and communication technologies," he added. (With inputs from agencies) You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. WATCH WION LIVE HERE

Russia accuses US of training ‘Ukrainian IT Army’, recruiting hackers for cyberattacks

South Korea's intelligence service reported on&nbsp;Thursday that North Korean hackers had stolen an estimated 1.5 trillion won (USD 1.2 billion) in bitcoin and other virtual assets over the previous five years, with more than half of it happening this year alone. As per experts,&nbsp;North Korea has turned to crypto hacking and other illegal cyber operations as a source of desperately needed foreign cash to maintain its fragile&nbsp;economy and fund its nuclear development in response to tough UN sanctions and the COVID-19 pandemic.&nbsp;

North Korea's concentration on cybercrimes after UN economic sanctions were strengthened in 2017 in response to its nuclear programme has made it one of the world's finest countries at stealing digital assets, according to South Korea's major spy agency, the National Intelligence Service.

The UN sanctions that were imposed in 2016–17 prohibited North Korea from exporting goods including coal, textiles, and seafood, and forced member nations to bring home North Koreans who had been working abroad. After enacting some of the most severe restrictions in the world to combat the epidemic, its economy experienced significant blows.

In accordance with the NIS, state-sponsored North Korean hackers are suspected of stealing 800 billion won (USD 626 million) in virtual assets this year alone, for a total estimated theft of 1.5 trillion won (USD 1.2 billion) since 2017. It was stated that South Korea contributed more than 100 billion won (USD 78 million) to the total.

It stated that further assaults by North Korean hackers are most likely&nbsp;to target South Korean innovative technology and private data in the next year.

Despite its economic issues, North Korea has conducted a record number of missile launches in an effort, according to some experts, to upgrade its arsenal and increase its negotiating power in the event that it has to negotiate sanctions relief or other concessions from its adversaries.

(With inputs from agencies)

WATCH WION LIVE HERE:

<iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" style="width:100%;max-width:560px;" width="560"></iframe>

South Korea's intelligence service reported on Thursday that North Korean hackers had stolen an estimated 1.5 trillion won (USD 1.2 billion) in bitcoin and other virtual assets over the previous five years, with more than half of it happening this year alone.

South Korea's intelligence service reported on Thursday that North Korean hackers had stolen an estimated 1.5 trillion won (USD 1.2 billion) in bitcoin and other virtual assets over the previous five years, with more than half of it happening this year alone. As per experts, North Korea has turned to crypto hacking and other illegal cyber operations as a source of desperately needed foreign cash to maintain its fragile economy and fund its nuclear development in response to tough UN sanctions and the COVID-19 pandemic. North Korea's concentration on cybercrimes after UN economic sanctions were strengthened in 2017 in response to its nuclear programme has made it one of the world's finest countries at stealing digital assets, according to South Korea's major spy agency, the National Intelligence Service. The UN sanctions that were imposed in 2016–17 prohibited North Korea from exporting goods including coal, textiles, and seafood, and forced member nations to bring home North Koreans who had been working abroad. After enacting some of the most severe restrictions in the world to combat the epidemic, its economy experienced significant blows. In accordance with the NIS, state-sponsored North Korean hackers are suspected of stealing 800 billion won (USD 626 million) in virtual assets this year alone, for a total estimated theft of 1.5 trillion won (USD 1.2 billion) since 2017. It was stated that South Korea contributed more than 100 billion won (USD 78 million) to the total. It stated that further assaults by North Korean hackers are most likely to target South Korean innovative technology and private data in the next year. Despite its economic issues, North Korea has conducted a record number of missile launches in an effort, according to some experts, to upgrade its arsenal and increase its negotiating power in the event that it has to negotiate sanctions relief or other concessions from its adversaries. (With inputs from agencies) WATCH WION LIVE HERE:

Seoul: North Korean hackers steal US$ 1.2 billion by crypto hacking and other illicit cyber activities

A secret service report says, Chinese hackers have stolen tens of millions of dollars worth of US Covid relief benefits since 2020. The secret service declined to provide any other details.

World Business Watch | Chinese hackers stole millions worth of US Covid relief benefits: Report

In November, a group of hackers compromised the data of the health insurer Medibank and demanded a hefty ransom amount or else had threatened to sell the data of the firm's customers online. The hackers on Thursday dumped the final batch&nbsp;of that data on the dark web as they ended their extortion attempt data online, declaring: "Case closed".&nbsp;

The hackers had demanded Medibank to pay $9.7 million to keep the Australian health records off the internet. They placed another demand of one dollar for each of&nbsp;the company's impacted customers, which also included Prime Minister Anthony Albanese.&nbsp;Medibank refused to pay anything on the urging of the federal government, which considers it illegal for hacked companies to pay the ransom amount.&nbsp;&nbsp;

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<blockquote class="twitter-tweet">
We’re aware stolen Medibank customer data has been released on the dark web overnight. We’re in the process of analysing the data, but it appears to be the data we believed the criminal stole. <a href="https://t.co/fS0PCJppNx">https://t.co/fS0PCJppNx</a>
— Medibank (@medibank) <a href="https://twitter.com/medibank/status/1598105937075929088?ref_src=twsrc%5Etfw">December 1, 2022</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

The final news from the hackers came on Thursday morning when they said that they had posted the last of the data online and chose this day as it coincides&nbsp;with International Computer Security Day.&nbsp; 
 
They wrote, "Happy Cyber Security Day. Added folder full. Case closed."

Also Read |&nbsp;<a href="https://www.wionews.com/world/tiktok-to-ban-videos-that-promote-tanning-and-sunburn-after-medical-experts-raise-concerns-539014">TikTok to ban videos that promote tanning and sunburn after medical experts raise concerns</a>

The first batches of stolen data were uploaded on a dark web forum on 9th&nbsp;November, in curated posts highlighting the medical records about drug addiction, pregnancy terminations, and sexually transmitted infections.

In a statement after the data dump, Medibank said on Thursday, "While our investigation continues, there are currently no signs that financial or banking data has been taken."&nbsp;

In November, Australian Federal Police Commissioner Reece Kershaw stated that the hackers were a group of "loosely affiliated cyber criminals" based in Russia. Cybersecurity experts believe they are linked to the Russian hacker group REvil.

The hackers have been dubbed "scumbags," "scummy criminals," and "rolled gold mongrels" by Australian government ministers.

(With inputs from agencies)

&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

In November, a group of hackers compromised the data of the health insurer Medibank and demanded a hefty ransom amount or else had threatened to sell the data of the firm's customers online.

In November, a group of hackers compromised the data of the health insurer Medibank and demanded a hefty ransom amount or else had threatened to sell the data of the firm's customers online. The hackers on Thursday dumped the final batch of that data on the dark web as they ended their extortion attempt data online, declaring: "Case closed". The hackers had demanded Medibank to pay $9.7 million to keep the Australian health records off the internet. They placed another demand of one dollar for each of the company's impacted customers, which also included Prime Minister Anthony Albanese. Medibank refused to pay anything on the urging of the federal government, which considers it illegal for hacked companies to pay the ransom amount. We’re aware stolen Medibank customer data has been released on the dark web overnight. We’re in the process of analysing the data, but it appears to be the data we believed the criminal stole. https://t.co/fS0PCJppNx — Medibank (@medibank) December 1, 2022 × The final news from the hackers came on Thursday morning when they said that they had posted the last of the data online and chose this day as it coincides with International Computer Security Day. They wrote, "Happy Cyber Security Day. Added folder full. Case closed." Also Read | TikTok to ban videos that promote tanning and sunburn after medical experts raise concerns The first batches of stolen data were uploaded on a dark web forum on 9th November, in curated posts highlighting the medical records about drug addiction, pregnancy terminations, and sexually transmitted infections. In a statement after the data dump, Medibank said on Thursday, "While our investigation continues, there are currently no signs that financial or banking data has been taken." In November, Australian Federal Police Commissioner Reece Kershaw stated that the hackers were a group of "loosely affiliated cyber criminals" based in Russia. Cybersecurity experts believe they are linked to the Russian hacker group REvil. The hackers have been dubbed "scumbags," "scummy criminals," and "rolled gold mongrels" by Australian government ministers. (With inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

Not paid ransom, hackers dump Australian health data on dark web, wish 'Happy Cyber Security Day'

The Australian Federal Police (AFP) has blamed Russian hackers for the Medibank hack, hours after another tranche of data from the medical insurer firm related to abortion was leaked online.

“The AFP is undertaking covert measures and working around the clock with our domestic agencies and our international networks including Interpol. This is important, because&nbsp;we believe those responsible for the breach are in Russia,” AFP chief&nbsp;Reece Kershaw&nbsp;said on Friday.

The hackers had released data of customers of Australia’s largest health insurer, including documents related to abortions.

Abortion data was the second time in two weeks that the personal information of policyholders was released. Last week, data relating to medical procedure history, along with names and addresses of the users of Medibank was leaked after the insurer refused to pay a ransom.

“Added one more file Boozy.csv ...,” the ransomware group wrote in a blog update on the dark web in the early hours of Friday.

Medibank leak: Hackers demand ransom to stop leaking records

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/elon-musk-sells-tesla-shares-worth-nearly-4-bn-after-twitter-deal-532512/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

“But we warned you. we always keep our word, if we wouldn’t receive a ransom – we should post this data, because nobody will believe us in the future.”

Prime Minister Anthony Albanese termed the leak “disgusting and … totally reprehensible,” and said that the government was trying to curb the impact of the data breach and aiding people who have been affected by it.

The hackers stole data of 9.7 million Medibank customers last month.

Also read |&nbsp;<a href="https://www.wionews.com/world/millions-of-personal-data-leaked-online-after-medibank-refuses-to-pay-ransom-532442">Millions of personal data leaked online after Medibank refuses to pay ransom</a>&nbsp;

AFP chief Kershaw said that they will be holding talks with the Russian law effacement to nab the cybercriminals.

“Our intelligence points to a group of loosely affiliated cybercriminals who are likely responsible for past significant breaches in countries across the world. These cybercriminals are operating like a business with affiliates and associates who are supporting the business. We also believe some affiliates may be in other countries,” he said.

Also read |&nbsp;<a href="https://www.wionews.com/world/cyberattacks-rise-four-fold-in-australia-says-government-report-531148">Cyberattacks rise four-fold in Australia, 76,000 complaints registered last year: Govt report</a>

“Everyone involved in this attack is the focus of the ongoing investigation through the AFP-led operation Pallidus.&nbsp;We believe we know which individuals are responsible but I will not be naming them.&nbsp;What I will say is that we’ll be holding talks with Russian law enforcement about these individuals,” he added.

WATCH WION LIVE HERE: 

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

The Australian Federal Police (AFP) has blamed Russian hackers for the Medibank hack, hours after another tranche of data from the medical insurer firm related to abortion was leaked online.

The Australian Federal Police (AFP) has blamed Russian hackers for the Medibank hack, hours after another tranche of data from the medical insurer firm related to abortion was leaked online. “The AFP is undertaking covert measures and working around the clock with our domestic agencies and our international networks including Interpol. This is important, because we believe those responsible for the breach are in Russia,” AFP chief Reece Kershaw said on Friday. The hackers had released data of customers of Australia’s largest health insurer, including documents related to abortions. Abortion data was the second time in two weeks that the personal information of policyholders was released. Last week, data relating to medical procedure history, along with names and addresses of the users of Medibank was leaked after the insurer refused to pay a ransom. “Added one more file Boozy.csv ...,” the ransomware group wrote in a blog update on the dark web in the early hours of Friday. Medibank leak: Hackers demand ransom to stop leaking records “But we warned you. we always keep our word, if we wouldn’t receive a ransom – we should post this data, because nobody will believe us in the future.” Prime Minister Anthony Albanese termed the leak “disgusting and … totally reprehensible,” and said that the government was trying to curb the impact of the data breach and aiding people who have been affected by it. The hackers stole data of 9.7 million Medibank customers last month. Also read | Millions of personal data leaked online after Medibank refuses to pay ransom AFP chief Kershaw said that they will be holding talks with the Russian law effacement to nab the cybercriminals. “Our intelligence points to a group of loosely affiliated cybercriminals who are likely responsible for past significant breaches in countries across the world. These cybercriminals are operating like a business with affiliates and associates who are supporting the business. We also believe some affiliates may be in other countries,” he said. Also read | Cyberattacks rise four-fold in Australia, 76,000 complaints registered last year: Govt report “Everyone involved in this attack is the focus of the ongoing investigation through the AFP-led operation Pallidus. We believe we know which individuals are responsible but I will not be naming them. What I will say is that we’ll be holding talks with Russian law enforcement about these individuals,” he added. WATCH WION LIVE HERE:

Medibank data leak: Australian police blame Russian hackers

Reports say, at least $718 million has been stolen so far in October alone, taking the gross tally for the year past $3 billion and putting 2022 on course to be a record for the total value hacked.

World Business Watch: Crypto hackers set for record year after looting over $3 billion

A couple of hackers claimed to have carried out a cyber-attack against British hotel chain Holiday Inn owner Intercontinental Hotels Group (IHG) “for fun”, causing massive booking disruptions.

The firm operates 6,000 hotels around the world, including the Holiday Inn, Crowne Plaza and Regent brands.

Following the attack, the hackers, calling themselves TeaPea, contacted BBC on the Telegram messaging app, providing screenshots as evidence that they carried out the hack.

The couple, who claimed to be from Vietnam, told BBC that they deleted large amounts of data after they were&nbsp;prevented from carrying out a ransomware attack.

"Our attack was originally planned to be ransomware but the company's IT team kept isolating servers before we had a chance to deploy it, so we thought to have some funny [sic]. We did a wiper attack instead," one of the hackers was quoted as saying

Through a wiper attack, data, documents and files are destroyed irreversibly, without having the possibility of recovering them.

They said that they were able to access the hotel chain's database due to a weak password that is found to be prevalent---Qwerty1234.

The firm's servers were hacked Monday last week after customers reported widespread problems with booking and check-in.

The problem persisted for over 24 hours, following which IHG posted its response on Twitter saying that the company was "undergoing system maintenance".

Later on Tuesday afternoon, the company confirmed that it fell prey to a cyber-attack.

"Booking channels and other applications have been significantly disrupted since yesterday," it said in an official notice lodged with the London Stock Exchange.

WATCH WION LIVE HERE:&nbsp;

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

A couple of hackers claimed to have carried out a cyber-attack against British hotel chain Holiday Inn owner Intercontinental Hotels Group (IHG) “for fun”, causing massive booking disruptions.

A couple of hackers claimed to have carried out a cyber-attack against British hotel chain Holiday Inn owner Intercontinental Hotels Group (IHG) “for fun”, causing massive booking disruptions. The firm operates 6,000 hotels around the world, including the Holiday Inn, Crowne Plaza and Regent brands. Following the attack, the hackers, calling themselves TeaPea, contacted BBC on the Telegram messaging app, providing screenshots as evidence that they carried out the hack. The couple, who claimed to be from Vietnam, told BBC that they deleted large amounts of data after they were prevented from carrying out a ransomware attack. "Our attack was originally planned to be ransomware but the company's IT team kept isolating servers before we had a chance to deploy it, so we thought to have some funny [sic]. We did a wiper attack instead," one of the hackers was quoted as saying Through a wiper attack, data, documents and files are destroyed irreversibly, without having the possibility of recovering them. They said that they were able to access the hotel chain's database due to a weak password that is found to be prevalent---Qwerty1234. The firm's servers were hacked Monday last week after customers reported widespread problems with booking and check-in. The problem persisted for over 24 hours, following which IHG posted its response on Twitter saying that the company was "undergoing system maintenance". Later on Tuesday afternoon, the company confirmed that it fell prey to a cyber-attack. "Booking channels and other applications have been significantly disrupted since yesterday," it said in an official notice lodged with the London Stock Exchange. WATCH WION LIVE HERE:

Hackers launch cyber-attack on UK hotel chain for 'fun'

A look now at some cyber security threats that are impacting the digital landscape. Hackers are using sophisticated techniques to dupe people on popular apps like Facebook, WhatsApp and Instagram, we now get you three of the most common scams on these applications.

Tech Talk | Watch out for scams on WhatsApp, Instagram, Facebook

A hacker organisation from Iran has released the personal information of nearly 300,000 Israelis. Over 20 travel booking websites were attacked by the hackers.

Iranian hackers leak data of over 300,000 Israelis from travel booking websites

Russian President Vladimir Putin was slated to give the opening speech in Russia’s flagship economic forum on Friday, but it was delayed by hackers. According to Kremlin spokesperson Dmitry Peskov, it was a ‘denial of service’ attack from the hackers that was aimed at interrupting the internet services at the venue. Reuters reported that the hackers attacked the servers with bogus traffic that resulted in sluggish internet speeds. The speech from Putin did not start on time due to an issue with the connectivity at the venue and Kremlin confirmed that it was delayed by a little over 100 minutes.

Also read |&nbsp;<a href="https://www.wionews.com/world/french-elections-emmanuel-macron-ask-voters-for-solid-majority-in-polls-489300">French elections: Emmanuel Macron ask voters for 'solid majority' in polls</a>

Russia did not blame anyone for the attacks directly but according to the Reuters report, sources claimed that this can be a response from a group of "hacktivists" for the ongoing invasion of Ukraine.

During the speech, Putin said that this is the "the era of the unipolar world" as he defended Russia’s ongoing invasion of Ukraine once again at the St. Petersburg International Economic Forum.

"When they won the Cold War, the US declared themselves God's own representatives on earth, people who have no responsibilities -- only interests. They have declared those interests sacred. Now it's one-way traffic, which makes the world unstable," Putin told the audience.

Also read |&nbsp;<a href="https://www.wionews.com/world/orgy-at-a-military-barracks-british-paratroopers-banned-from-nato-deployment-489292" hreflang="en">'Orgy at a military barracks': British paratroopers banned from Nato deployment</a>

The ongoing crisis has already crossed 100 days in Ukraine and Putin said that the “special operation” has provided the West with an opportunity to put the blame for their problems on Russia.

"They live in the past on their own under their own delusions ... They think that ... they have won and then everything else is a colony, a back yard. And the people living there are second-class citizens."

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

Russian President Vladimir Putin was slated to give the opening speech in Russia’s flagship economic forum on Friday, but it was delayed by hackers. According to Kremlin spokesperson Dmitry Peskov, it was a ‘denial of service’ attack from the hackers that was aimed at interrupting the internet services at the venue.

Russian President Vladimir Putin was slated to give the opening speech in Russia’s flagship economic forum on Friday, but it was delayed by hackers. According to Kremlin spokesperson Dmitry Peskov, it was a ‘denial of service’ attack from the hackers that was aimed at interrupting the internet services at the venue. Reuters reported that the hackers attacked the servers with bogus traffic that resulted in sluggish internet speeds. The speech from Putin did not start on time due to an issue with the connectivity at the venue and Kremlin confirmed that it was delayed by a little over 100 minutes. Also read | French elections: Emmanuel Macron ask voters for 'solid majority' in polls Russia did not blame anyone for the attacks directly but according to the Reuters report, sources claimed that this can be a response from a group of "hacktivists" for the ongoing invasion of Ukraine. During the speech, Putin said that this is the "the era of the unipolar world" as he defended Russia’s ongoing invasion of Ukraine once again at the St. Petersburg International Economic Forum. "When they won the Cold War, the US declared themselves God's own representatives on earth, people who have no responsibilities -- only interests. They have declared those interests sacred. Now it's one-way traffic, which makes the world unstable," Putin told the audience. Also read | 'Orgy at a military barracks': British paratroopers banned from Nato deployment The ongoing crisis has already crossed 100 days in Ukraine and Putin said that the “special operation” has provided the West with an opportunity to put the blame for their problems on Russia. "They live in the past on their own under their own delusions ... They think that ... they have won and then everything else is a colony, a back yard. And the people living there are second-class citizens." WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

Vladimir Putin forced to delay keynote speech after hackers crash internet

Advanced hackers have shown they can take control of an area of devices that help run power station and manufacturing plants. US cyber security and other government agencies issued a joint advice advisory saying the hacker's malicious software could affect the devices.

US claims advanced hackers have shown ability to hijack critical infrastructure

United States officials announced on Wednesday that the Federal Bureau of Investigation (FBI) has taken&nbsp;control of thousands of firewall appliances and routers away from Russian military hackers by hijacking the technology that they were using in order to operate the devices.<o:p></o:p>

According to Reuters, an unsealed redacted affidavit stated that the operation was a pre-emptive move on the part of the authorities to stop the hackers from using the devices into forming a ‘botnet’ which is described as a network of hacked systems that can attack other servers.<o:p></o:p>

"Fortunately, we were able to disrupt this botnet before it could be used,” US Attorney General Merrick Garland was quoted as saying by the Reuters news agency.

<o:p>Also read |&nbsp;</o:p><a href="https://www.wionews.com/india-news/india-and-israel-to-convert-passenger-aircraft-into-strategic-transporters-as-part-of-make-in-india-468989" hreflang="en">India and Israel to convert passenger aircraft into strategic transporters</a><o:p></o:p>

The affidavit further stated that the botnet was supposed to be controlled through a malware known as Cyclops Blink, which the US and UK agencies attribute to one of the Russian military service’s hacking teams called ‘Sandworm’ who are known for these kinds of attacks.<o:p></o:p>

Research conducted by private cybersecurity firms believe that Cyclops Blink was designed to hijack a number of devices manufactured by ASUSTek computers and Watchguard technologies.<o:p></o:p>

According to the Reuters report, Watchguard confirmed that they were working with the US Justice Department in the operation and in their statement, the company stated that the percentage of devices affected by the malware was just one percent.

<o:p>Also read |&nbsp;</o:p><a href="https://www.wionews.com/india-news/china-backed-hackers-waged-cyberattacks-on-indian-power-grid-system-near-ladakh-report-468983">China-backed hackers waged cyberattacks on Indian power grid system: Report</a><o:p></o:p>

The FBI took court’s approval before taking over thousands of routers and other appliances in order to delete the necessary malwares, according to organisation director Chris Wray.<o:p></o:p>

"We removed malware from devices used by thousands of mostly small businesses for network security all over the world," Wray said. "We shut the door the Russians had used to get into them."

<o:p>WATCH |&nbsp;</o:p>Russia-Ukraine conflict: Ukraine asks for more weapons from NATO

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/russia-ukraine-conflict-ukraine-asks-for-more-weapons-from-nato-469098/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

(With inputs from agencies)

United States officials announced on Wednesday that the Federal Bureau of Investigation (FBI) has taken control of thousands of firewall appliances and routers away from Russian military hackers by hijacking the technology that they were using in order to operate the devices.

United States officials announced on Wednesday that the Federal Bureau of Investigation (FBI) has taken control of thousands of firewall appliances and routers away from Russian military hackers by hijacking the technology that they were using in order to operate the devices. According to Reuters, an unsealed redacted affidavit stated that the operation was a pre-emptive move on the part of the authorities to stop the hackers from using the devices into forming a ‘botnet’ which is described as a network of hacked systems that can attack other servers. "Fortunately, we were able to disrupt this botnet before it could be used,” US Attorney General Merrick Garland was quoted as saying by the Reuters news agency. Also read | India and Israel to convert passenger aircraft into strategic transporters The affidavit further stated that the botnet was supposed to be controlled through a malware known as Cyclops Blink, which the US and UK agencies attribute to one of the Russian military service’s hacking teams called ‘Sandworm’ who are known for these kinds of attacks. Research conducted by private cybersecurity firms believe that Cyclops Blink was designed to hijack a number of devices manufactured by ASUSTek computers and Watchguard technologies. According to the Reuters report, Watchguard confirmed that they were working with the US Justice Department in the operation and in their statement, the company stated that the percentage of devices affected by the malware was just one percent. Also read | China-backed hackers waged cyberattacks on Indian power grid system: Report The FBI took court’s approval before taking over thousands of routers and other appliances in order to delete the necessary malwares, according to organisation director Chris Wray. "We removed malware from devices used by thousands of mostly small businesses for network security all over the world," Wray said. "We shut the door the Russians had used to get into them." WATCH | Russia-Ukraine conflict: Ukraine asks for more weapons from NATO (With inputs from agencies)

FBI disrupts Russian hackers, takes away control of routers and firewall appliances

Facebook's parent company Meta has been hit with security concerns yet again after the social media giant gave user information to hackers who pretended to be law enforcement officials.

Facebook's parent company Meta gave user data to hackers

In recent weeks, Russian hackers well-known to law enforcement have been engaging in phishing campaigns, espionage and other attacks targetting Ukraine and its European allies, said Alphabet Inc's Google. These hackers include FancyBear. &nbsp;

In a blog post on Monday, Google’s Threat Analysis Group, which focuses on disrupting computer hackers and issuing warnings about them to users, said that for the last two weeks, Russian hacking unit FancyBear, which is also known as APT28, has been sending phishing emails to Ukrainian media company, UkrNet. &nbsp;

Also Read:&nbsp;<a href="https://www.wionews.com/world/to-allow-civilians-to-leave-russia-proposes-humanitarian-corridors-in-five-ukrainian-cities-say-reports-460072" hreflang="en">To allow civilians to leave, Russia proposes humanitarian corridors in five Ukrainian cities, say reports</a>

Russia has denied that it uses hackers to attack its foes. The phishing messages look to steal account login information from users to breach a target's computers and online accounts. &nbsp;

Google did not say whether the attacks were successful. &nbsp;

Ghostwriter/UNC1151, which has been described as a Belarusian threat actor by Google, has been trying to steal account credentials through phishing attempts on Polish and Ukrainian government and military organisations. &nbsp;

Also Read:&nbsp;<a href="https://www.wionews.com/world/us-allies-plan-ways-to-help-establish-support-a-ukrainian-government-in-exile-459791" hreflang="en">US, allies plan ways to help establish, support a Ukrainian government-in-exile</a>

Mustang Panda or Temp.Hex, which Google described as China-based, has been sending virus-laden attachments to "European entities" with file names, such as "Situation at the EU borders with Ukraine.zip." &nbsp;&nbsp;

The effort has been described by Google as a deviation from Mustang Panda's standard focus on Southeast Asian targets. &nbsp;&nbsp;

(With inputs from agencies)&nbsp;

In recent weeks, Russian hackers well-known to law enforcement have been engaging in phishing campaigns, espionage and other attacks targetting Ukraine and its European allies, said Alphabet Inc's Google.

In recent weeks, Russian hackers well-known to law enforcement have been engaging in phishing campaigns, espionage and other attacks targetting Ukraine and its European allies, said Alphabet Inc's Google. These hackers include FancyBear. In a blog post on Monday, Google’s Threat Analysis Group, which focuses on disrupting computer hackers and issuing warnings about them to users, said that for the last two weeks, Russian hacking unit FancyBear, which is also known as APT28, has been sending phishing emails to Ukrainian media company, UkrNet. Also Read: To allow civilians to leave, Russia proposes humanitarian corridors in five Ukrainian cities, say reports Russia has denied that it uses hackers to attack its foes. The phishing messages look to steal account login information from users to breach a target's computers and online accounts. Google did not say whether the attacks were successful. Ghostwriter/UNC1151, which has been described as a Belarusian threat actor by Google, has been trying to steal account credentials through phishing attempts on Polish and Ukrainian government and military organisations. Also Read: US, allies plan ways to help establish, support a Ukrainian government-in-exile Mustang Panda or Temp.Hex, which Google described as China-based, has been sending virus-laden attachments to "European entities" with file names, such as "Situation at the EU borders with Ukraine.zip." The effort has been described by Google as a deviation from Mustang Panda's standard focus on Southeast Asian targets. (With inputs from agencies)

Russian, Belarusian hackers target Ukraine, European allies through phishing campaigns, says Google

'Anonymous,' a cyber hacker group, has declared a "cyber war" against Russian President Vladimir Putin's administration as it launches a full-scale invasion of Kyiv in the midst of the continuing Russia-Ukraine conflict.

The hacking collective's goal, according to international media, is to deactivate several Russian government websites.

RT.com, a Russian state-controlled international television network, was also targeted by the gang.

According to sources, RT.com and a number of other websites were targeted in a broad denial-of-service (DDoS) attack.

Following Russia's invasion of Ukraine, the hacker collective 'Anonymous,' known for accessing foreign government accounts, declared a "cyberwar" on Russia on Thursday.

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<blockquote class="twitter-tweet">
The Anonymous collective is officially in cyber war against the Russian government. <a href="https://twitter.com/hashtag/Anonymous?src=hash&amp;ref_src=twsrc%5Etfw">#Anonymous</a> <a href="https://twitter.com/hashtag/Ukraine?src=hash&amp;ref_src=twsrc%5Etfw">#Ukraine</a>
— Anonymous (@YourAnonOne) <a href="https://twitter.com/YourAnonOne/status/1496965766435926039?ref_src=twsrc%5Etfw">February 24, 2022</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

The group announced their move on social media, claiming to have taken down a number of Russian government websites.&nbsp;

A social media account purporting to represent the group wrote on Thursday that "The Anonymous collective is officially in cyber war against the Russian government."

"The "Anonymous collective has taken down the website of the Russian propaganda channel RT News," it added, confirming the RT.com hack.&nbsp;

Meanwhile, the Russian government's websites, the Kremlin, the Duma, and the Ministry of Defense were all hit by the hacker collective's 'cyberattack.'

Several users reported that the websites targeted by the gang slowed down and went offline for long periods of time during the day on social media networks.

In a series of tweets, the group made it clear that it was opposed to Putin's recent actions against Ukraine.&nbsp;

(With inputs from agencies)

'Anonymous,' a cyber hacker group, has declared a "cyber war" against Russian President Vladimir Putin's administration as it launches a full-scale invasion of Kyiv in the midst of the continuing Russia-Ukraine conflict.

'Anonymous,' a cyber hacker group, has declared a "cyber war" against Russian President Vladimir Putin's administration as it launches a full-scale invasion of Kyiv in the midst of the continuing Russia-Ukraine conflict. The hacking collective's goal, according to international media, is to deactivate several Russian government websites. RT.com, a Russian state-controlled international television network, was also targeted by the gang. According to sources, RT.com and a number of other websites were targeted in a broad denial-of-service (DDoS) attack. Following Russia's invasion of Ukraine, the hacker collective 'Anonymous,' known for accessing foreign government accounts, declared a "cyberwar" on Russia on Thursday. The Anonymous collective is officially in cyber war against the Russian government. #Anonymous #Ukraine — Anonymous (@YourAnonOne) February 24, 2022 × The group announced their move on social media, claiming to have taken down a number of Russian government websites. A social media account purporting to represent the group wrote on Thursday that "The Anonymous collective is officially in cyber war against the Russian government." "The "Anonymous collective has taken down the website of the Russian propaganda channel RT News," it added, confirming the RT.com hack. Meanwhile, the Russian government's websites, the Kremlin, the Duma, and the Ministry of Defense were all hit by the hacker collective's 'cyberattack.' Several users reported that the websites targeted by the gang slowed down and went offline for long periods of time during the day on social media networks. In a series of tweets, the group made it clear that it was opposed to Putin's recent actions against Ukraine. (With inputs from agencies)

Russia-Ukraine war: Hackers' group 'Anonymous' declares 'cyber war' on Moscow

A group of hackers have leaked personal information, appointment details and test results of nearly 290,000 patients of Israel's Machon Mor medical institute.<o:p></o:p>

Black Shadow, a hacker group linked to Iran, uploaded the directory of patients of an Israeli hospital on Tuesday night. As per the local reports, the data released in public includes names, personal information, vaccine status, appointments and medical test results of more than 290,000 patients of a specific medical center.<o:p></o:p>

Describing this as "one of the most serious attacks on privacy that Israel has ever seen,"&nbsp;the Head of the Israel Internet Association Yoram Hacohen told the Times of Israel that "Israeli citizens are experiencing cyber terrorism... This is terrorism in every sense and the focus now must be on minimizing the damage and suppressing the distribution of the information as much as possible."

<o:p>Also read |&nbsp;<a href="https://www.wionews.com/world/watch-you-are-the-most-popular-man-in-israel-come-and-join-my-party-israeli-pm-naftali-bennett-tells-modi-426193">Watch: You are the most popular man in Israel, come and join my party, Israeli PM Naftali Bennett tells Modi</a></o:p>

He also blamed Telegram for the increase in hacking activities in the country. The chief said that Telegram has failed to establish boundaries and is partially responsible for this as the social media platform does not limit the spread of private information.<o:p></o:p>

This hack of patients' records comes a few hours after the same hacker group released the whole user database of an LGBTQ dating website of the country.<o:p></o:p>

The Iran-backed group, Black Shadow, uploaded information from the database of Atraf LGBTQ dating website on Telegram, during the early hours of Tuesday. The information released included sensitive details about users such as name, age, location, HIV status and more.

<o:p><a href="https://www.wionews.com/videos/cop26-climate-conference-israel-energy-minister-on-wheelchair-stranded-at-glasgow-426134">WATCH |</a></o:p>

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/cop26-climate-conference-israel-energy-minister-on-wheelchair-stranded-at-glasgow-426134/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

This was done by Black Shadow as a punishment to the dating website as the owners of the dating platform had refused to pay a ransom of $1 million in digital currency that the hackers had demanded, in exchange of giving up the private information safely.<o:p></o:p>

In addition to this, the group had also hacked the systems of Israeli internet hosting company, CyberServe, which had adversely affected the LGBTQ dating website, websites of tourism company Pegasus, public transportation company Dan and children's museum Kavim.<o:p></o:p>

Israel claims they are being targeted with cyber crime more frequently now, especially since Iran’s gas distribution system had suffered a major loss due to a similar hack on October 26 — Iran had blamed the US and Israel for their loss.<o:p></o:p>

A group of hackers have leaked personal information, appointment details and test results of nearly 290,000 patients of Israel's Machon Mor medical institute. Black Shadow, a hacker group linked to Iran, uploaded the directory of patients of an Israeli hospital on Tuesday night.

A group of hackers have leaked personal information, appointment details and test results of nearly 290,000 patients of Israel's Machon Mor medical institute. Black Shadow, a hacker group linked to Iran, uploaded the directory of patients of an Israeli hospital on Tuesday night. As per the local reports, the data released in public includes names, personal information, vaccine status, appointments and medical test results of more than 290,000 patients of a specific medical center. Describing this as "one of the most serious attacks on privacy that Israel has ever seen," the Head of the Israel Internet Association Yoram Hacohen told the Times of Israel that "Israeli citizens are experiencing cyber terrorism... This is terrorism in every sense and the focus now must be on minimizing the damage and suppressing the distribution of the information as much as possible." Also read | Watch: You are the most popular man in Israel, come and join my party, Israeli PM Naftali Bennett tells Modi He also blamed Telegram for the increase in hacking activities in the country. The chief said that Telegram has failed to establish boundaries and is partially responsible for this as the social media platform does not limit the spread of private information. This hack of patients' records comes a few hours after the same hacker group released the whole user database of an LGBTQ dating website of the country. The Iran-backed group, Black Shadow, uploaded information from the database of Atraf LGBTQ dating website on Telegram, during the early hours of Tuesday. The information released included sensitive details about users such as name, age, location, HIV status and more. WATCH | This was done by Black Shadow as a punishment to the dating website as the owners of the dating platform had refused to pay a ransom of $1 million in digital currency that the hackers had demanded, in exchange of giving up the private information safely. In addition to this, the group had also hacked the systems of Israeli internet hosting company, CyberServe, which had adversely affected the LGBTQ dating website, websites of tourism company Pegasus, public transportation company Dan and children's museum Kavim. Israel claims they are being targeted with cyber crime more frequently now, especially since Iran’s gas distribution system had suffered a major loss due to a similar hack on October 26 — Iran had blamed the US and Israel for their loss.

Israel: Iran-based hacker group leaks private information of 290,000 patients

In a massive 'virtual heist' on exclusive jewellery firm 'Graff', hackers have looted the personal details of several bigwigs including world leaders, top Hollywood actors and billionaire tycoons, The Mail revealed on Sunday. &nbsp;

Around 69,000 confidential documents have already been leaked on the 'dark web' by the cyber criminals. These files carry information regarding former US president Donald Trump, Sir Philip Green, David Beckham and Oprah Winfrey. &nbsp;

Also Read |&nbsp;<a href="https://www.wionews.com/world/lucky-strike-us-man-wins-2-million-from-a-lottery-ticket-for-second-time-425477" hreflang="en">Lucky strike: US man wins $2 million from a lottery ticket—for second time</a>

To stop the release of more sensitive information, they seem to be demanding tens of millions of pounds in ransom money. &nbsp;

Conti, the notorious Russian hacking gang, is behind the data theft. It also claims the information published, which involves about 11,000 of Graff's wealthy clients, is just one per cent of the files it has stolen. &nbsp;

The documents taken may include invoices, receipts, client lists and credit notes, etc. They may prove to be embarrassing for some people, who may have bought gifts for secret lovers or taken jewellery as bribes. &nbsp;

Also Read:&nbsp;<a href="https://www.wionews.com/world/american-airlines-cancels-100s-of-flights-due-to-staff-shortage-425462" hreflang="en">American Airlines cancels 100s of flights due to staff shortage</a>

Philip Ingram, former colonel, British military intelligence, said, "Given the profile of the customer database, this is absolutely massive." &nbsp;&nbsp;

"This is going to bring the highest levels of international law enforcement down on the gang, and that's going to give them a whole lot of headaches in trying to get the ransom paid and then get away with it," added Ingram. &nbsp;

(With inputs from agencies) &nbsp;&nbsp;

In a massive 'virtual heist' on exclusive jewellery firm 'Graff', hackers have looted the personal details of several bigwigs including world leaders, top Hollywood actors and billionaire tycoons, The Mail revealed on Sunday.

In a massive 'virtual heist' on exclusive jewellery firm 'Graff', hackers have looted the personal details of several bigwigs including world leaders, top Hollywood actors and billionaire tycoons, The Mail revealed on Sunday. Around 69,000 confidential documents have already been leaked on the 'dark web' by the cyber criminals. These files carry information regarding former US president Donald Trump, Sir Philip Green, David Beckham and Oprah Winfrey. Also Read | Lucky strike: US man wins $2 million from a lottery ticket—for second time To stop the release of more sensitive information, they seem to be demanding tens of millions of pounds in ransom money. Conti, the notorious Russian hacking gang, is behind the data theft. It also claims the information published, which involves about 11,000 of Graff's wealthy clients, is just one per cent of the files it has stolen. The documents taken may include invoices, receipts, client lists and credit notes, etc. They may prove to be embarrassing for some people, who may have bought gifts for secret lovers or taken jewellery as bribes. Also Read: American Airlines cancels 100s of flights due to staff shortage Philip Ingram, former colonel, British military intelligence, said, "Given the profile of the customer database, this is absolutely massive." "This is going to bring the highest levels of international law enforcement down on the gang, and that's going to give them a whole lot of headaches in trying to get the ransom paid and then get away with it," added Ingram. (With inputs from agencies)

In 'virtual heist' on jewellery firm, hackers steal several bigwigs’ details

hackers

Hackers, News on Hackers, stories on Hackers, articles on Hackers, Hackers stories at Wion, Hackers news, Hackers latest news