A team of vigilante hackers known as One Fist has been recognised by Ukraine's military for their cyber-attacks against Russia. The group that has been involved in stealing data from Russian military firms and hacking cameras to spy on troops has reportedly been sent awards of gratitude for its efforts.

While many nations have official award systems for ethical hacking, this is believed to be the first time a country has awarded hackers for such actions.

<h2>Gratitude for hacking</h2>

As per a BBC report, the certificates of gratitude were sent to the hackers from eight different countries, including the UK, the US, and Poland, for their "significant contribution to the development and maintenance of vital activities of the military".

Also read |&nbsp;<a href="https://www.wionews.com/india-news/russian-deputy-envoy-roman-babushkin-calls-india-a-space-superpower-indicates-support-for-gaganyaan-707451">Russian Deputy Envoy Roman Babushkin calls India a space superpower, indicates support for Gaganyaan</a>

One of the hackers, US man Kristopher Kortright, aka "Voltage," told BBC he was delighted at being officially recognised.

'Voltage' said he has devoted himself to hacking for Ukraine, even at the cost of losing his job and spending all his life's savings.

"I've lost my job doing this and spent all my life savings in pursuit of a victory for Ukraine," he said, adding, "This award is a real morale-booster."

<h2>Concerns around rewarding hacking</h2>

There are concerns about the practice of states encouraging civilian hackers, especially for malicious and possibly criminal hacks.

As per Dr Lukasz Olejnik, author of Philosophy of Cyber-security, such awards can be "dangerous".

Also read |&nbsp;<a href="https://www.wionews.com/world/finland-mass-shooting-finnish-police-say-the-minor-behind-school-shooting-was-target-of-bullying-707425">Finland mass shooting: Finnish police say the minor behind school shooting was target of bullying</a>

"Giving out awards may further blur the lines between combatants and civilians, and even undermine the recent call by the ICRC to limit and end the involvement of civilians in combat operations. In the long run, such an erosion is dangerous," he said.

Emily Taylor, the chief executive of Oxford Information Labs and editor of Chatham House Cyber Policy journal believes that the hacking awards are a landmark moment that might shift thinking about how cyber volunteers are used in conflicts.

"Governments usually discourage non-state actors from taking direct action in the cyber domain, for fear of escalation or unintended consequences, but wartime is often a period of extraordinary technological innovation, and the Ukraine invasion is no exception."

"Sometimes these events force a reconsideration of issues that have previously been taboo," she remarked.

Previously, in October, the International Committee of the Red Cross (ICRC) warned against the use and encouragement of civilian hackers. Emphasising the need to uphold the rules of war, it even published guidelines to reinforce them.

(With inputs from agencies)

A team of vigilante hackers known as One Fist has been recognised by Ukraine's military for their cyber-attacks against Russia. The group that has been involved in stealing data from Russian military firms and hacking cameras to spy on troops has reportedly been sent awards of gratitude for its efforts.

A team of vigilante hackers known as One Fist has been recognised by Ukraine's military for their cyber-attacks against Russia. The group that has been involved in stealing data from Russian military firms and hacking cameras to spy on troops has reportedly been sent awards of gratitude for its efforts. While many nations have official award systems for ethical hacking, this is believed to be the first time a country has awarded hackers for such actions. Gratitude for hacking As per a BBC report, the certificates of gratitude were sent to the hackers from eight different countries, including the UK, the US, and Poland, for their "significant contribution to the development and maintenance of vital activities of the military". Also read | Russian Deputy Envoy Roman Babushkin calls India a space superpower, indicates support for Gaganyaan One of the hackers, US man Kristopher Kortright, aka "Voltage," told BBC he was delighted at being officially recognised. 'Voltage' said he has devoted himself to hacking for Ukraine, even at the cost of losing his job and spending all his life's savings. "I've lost my job doing this and spent all my life savings in pursuit of a victory for Ukraine," he said, adding, "This award is a real morale-booster." Concerns around rewarding hacking There are concerns about the practice of states encouraging civilian hackers, especially for malicious and possibly criminal hacks. As per Dr Lukasz Olejnik, author of Philosophy of Cyber-security, such awards can be "dangerous". Also read | Finland mass shooting: Finnish police say the minor behind school shooting was target of bullying "Giving out awards may further blur the lines between combatants and civilians, and even undermine the recent call by the ICRC to limit and end the involvement of civilians in combat operations. In the long run, such an erosion is dangerous," he said. Emily Taylor, the chief executive of Oxford Information Labs and editor of Chatham House Cyber Policy journal believes that the hacking awards are a landmark moment that might shift thinking about how cyber volunteers are used in conflicts. "Governments usually discourage non-state actors from taking direct action in the cyber domain, for fear of escalation or unintended consequences, but wartime is often a period of extraordinary technological innovation, and the Ukraine invasion is no exception." "Sometimes these events force a reconsideration of issues that have previously been taboo," she remarked. Previously, in October, the International Committee of the Red Cross (ICRC) warned against the use and encouragement of civilian hackers. Emphasising the need to uphold the rules of war, it even published guidelines to reinforce them. (With inputs from agencies)

Ukraine hands out awards to vigilante hackers for cyber-attacks against Russia

Australia, on Tuesday (Jan 23) sanctioned a Russian man named Aleksandr Ermakov for his role in the country’s worst data breach, which impacted nearly 10 million customers of the insurer Medibank. Canberra announced first-of-its-kind sanctions which include a travel ban and financial penalties.&nbsp;

<h2>About the sanctions</h2>

In late 2022, Medibank, Australia’s largest private health insurer, disclosed that a hacker had stolen the personal information of 9.7 million current and former customers, and released the data on the dark web.&nbsp;

The files published online included sensitive information about millions of Australians, including abortion records and treatment received for mental health or addiction.&nbsp;

WATCH |&nbsp;Australia sanctions Russian hacker for role in 2022 Medibank cyberattack

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/australia-sanctions-russian-hacker-for-role-in-2022-medibank-cyberattack-682809/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

Australia has recently witnessed a spike in the number of cyber attacks, prompting the government to overhaul its cyber security rules last year and set up an agency to help coordinate responses.

This is the first time that Australia has imposed its cyber sanctions following a framework which was legislated in 2021.&nbsp;

The sanctions against Ermakov, 33, also include financial sanctions and a travel ban, said Home Affairs Minister Clare O’Neil during a press briefing, describing the Medibank hack as “the single most devastating cyber-attack we have experienced as a nation”.&nbsp;

“Literally millions of people having personal data about themselves, their family members, taken from them and cruelly placed online for others to see,” said O’Neil.&nbsp;

She added, “These people are cowards and they’re scumbags. They hide behind technology and today, the Australian government is saying that when we put our minds to it, we’ll unveil who you are, and we’ll make sure you are accountable.”&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/medibank-data-leak-hackers-now-release-info-related-to-abortion-533115">Medibank data leak: Australian police blame Russian hackers</a>

The sanctions imposed make it a criminal offence, punishable by up to 10 years in jail and fines, to provide Ermakov with any assets, including cryptocurrency wallets or ransomware payments.

O'Neil also said that officials are still investigating the data breach and many more may face penalties. While not much is known about Ermakov, Australian intelligence authorities say he is part of the infamous Russian cyber-crime gang REvil.&nbsp;

<h2>‘Single most devastating cyber-attack’</h2>

A report by the Australian government, in November, showed that state-sponsored cyber groups and hackers had stepped up assaults on Australia's critical infrastructure, businesses and homes.&nbsp;

In the Medibank breach, hackers stole login details which granted them access to all of the insurers’ customer data which included athletes, prominent media figures and even Australian Prime Minister Anthony Albanese.

However, Medibank, with government support, refused to pay a multi-million dollar ransom after which the hackers published the data online.&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/australias-biggest-health-insurer-medibank-reports-huge-data-breach-527061">Australia's biggest health insurer Medibank reports huge data breach</a>

They first released files named “good-list” and “naughty-list” which included records of treatment for mental health, addiction, drug abuse and sexually transmitted infections. These files also contained people’s names, addresses, birthdates, and government ID numbers.&nbsp;

The hacker group which is said to be behind this breach also released a file named “abortions.csv” which comprised information about some customers’ end-of-pregnancy procedures.

(With inputs from agencies) 
&nbsp;

Australia, on Tuesday (Jan 23) sanctioned a Russian man named Aleksandr Ermakov for his role in the country’s worst data breach, which impacted nearly 10 million customers of the insurer Medibank.

Australia, on Tuesday (Jan 23) sanctioned a Russian man named Aleksandr Ermakov for his role in the country’s worst data breach, which impacted nearly 10 million customers of the insurer Medibank. Canberra announced first-of-its-kind sanctions which include a travel ban and financial penalties. About the sanctions In late 2022, Medibank, Australia’s largest private health insurer, disclosed that a hacker had stolen the personal information of 9.7 million current and former customers, and released the data on the dark web. The files published online included sensitive information about millions of Australians, including abortion records and treatment received for mental health or addiction. WATCH | Australia sanctions Russian hacker for role in 2022 Medibank cyberattack Australia has recently witnessed a spike in the number of cyber attacks, prompting the government to overhaul its cyber security rules last year and set up an agency to help coordinate responses. This is the first time that Australia has imposed its cyber sanctions following a framework which was legislated in 2021. The sanctions against Ermakov, 33, also include financial sanctions and a travel ban, said Home Affairs Minister Clare O’Neil during a press briefing, describing the Medibank hack as “the single most devastating cyber-attack we have experienced as a nation”. “Literally millions of people having personal data about themselves, their family members, taken from them and cruelly placed online for others to see,” said O’Neil. She added, “These people are cowards and they’re scumbags. They hide behind technology and today, the Australian government is saying that when we put our minds to it, we’ll unveil who you are, and we’ll make sure you are accountable.” ALSO READ | Medibank data leak: Australian police blame Russian hackers The sanctions imposed make it a criminal offence, punishable by up to 10 years in jail and fines, to provide Ermakov with any assets, including cryptocurrency wallets or ransomware payments. O'Neil also said that officials are still investigating the data breach and many more may face penalties. While not much is known about Ermakov, Australian intelligence authorities say he is part of the infamous Russian cyber-crime gang REvil. ‘Single most devastating cyber-attack’ A report by the Australian government, in November, showed that state-sponsored cyber groups and hackers had stepped up assaults on Australia's critical infrastructure, businesses and homes. In the Medibank breach, hackers stole login details which granted them access to all of the insurers’ customer data which included athletes, prominent media figures and even Australian Prime Minister Anthony Albanese. However, Medibank, with government support, refused to pay a multi-million dollar ransom after which the hackers published the data online. ALSO READ | Australia's biggest health insurer Medibank reports huge data breach They first released files named “good-list” and “naughty-list” which included records of treatment for mental health, addiction, drug abuse and sexually transmitted infections. These files also contained people’s names, addresses, birthdates, and government ID numbers. The hacker group which is said to be behind this breach also released a file named “abortions.csv” which comprised information about some customers’ end-of-pregnancy procedures. (With inputs from agencies)

Medibank breach: Russian hacker sanctioned for role in Australia’s biggest data theft

The Scattered Spider, a hacking group, on Thursday (September 14) announced that it successfully infiltrated the systems of two major casino operators, MGM Resorts International and Caesars Entertainment. The group said that it has extracted over six terabytes of data from the two companies&nbsp;

This cyberattack has prompted investigations from both companies as they seek to understand the extent of the breach.

<h2>Ransom demand</h2>

Talking to Reuters, a representative for the Scattered Spider stated that the group had no intentions of making the stolen data public and also denied commenting on whether they had demanded a ransom from either company.&nbsp;

The group's spokesperson emphasised, "If MGM wishes to release that information, they will. We do not do that."

Also read |&nbsp;<a href="https://www.wionews.com/world/libya-floods-thousands-still-missing-after-catastrophic-tragedy-bodies-wash-up-on-far-away-beaches-636330">Libya floods: Thousands still missing after catastrophic tragedy, bodies wash up on far away beaches</a>

Caesars and MGM are yet to respond to inquiries regarding the volume of data that had been compromised.

The FBI, in a statement, said it was investigating&nbsp;both the MGM and Caesars incidents.

Reuters reports that on September 7th, Caesars had reported to regulators that hackers accessed data belonging to a significant number of its loyalty program members.&nbsp;

The stolen information reportedly included "driver's licence numbers and/or social security numbers.".&nbsp;

Although reports from Bloomberg and The Wall Street Journal suggested that Caesars paid a ransom, the company is yet to comment on the matter.

<h2>Cybersecurity issue</h2>

MGM, one of the world's largest casino and hotel operators, acknowledged that it was addressing a "cybersecurity issue."

Also read |&nbsp;<a href="https://www.wionews.com/business-economy/britain-to-pump-621mn-into-tata-steel-to-decarbonise-its-welsh-site-636364">UK government pumps $621mn into Tata Steel to decarbonise its Welsh site, 3,000 jobs at risk</a>

Four days after the attack came to light, disruptions persisted in MGM's operations. Social media posts showed slot machines displaying error messages at its Las Vegas casinos.

<h2>Scattered Spider</h2>

Scattered Spider, also known as UNC3944, is renowned for its effective social engineering tactics.&nbsp;

The group often contacts an organisation's information security teams via phone, posing as employees in need of password resets.&nbsp;

Google's Mandiant Intelligence has linked Scattered Spider to over 100 intrusions within the past two years, targeting various industries, including gaming, technology, retail, telecoms, and insurance.&nbsp;

The Scattered Spider, a hacking group, on Thursday (September 14) announced that it successfully infiltrated the systems of two major casino operators, MGM Resorts International and Caesars Entertainment.

The Scattered Spider, a hacking group, on Thursday (September 14) announced that it successfully infiltrated the systems of two major casino operators, MGM Resorts International and Caesars Entertainment. The group said that it has extracted over six terabytes of data from the two companies This cyberattack has prompted investigations from both companies as they seek to understand the extent of the breach. Ransom demand Talking to Reuters, a representative for the Scattered Spider stated that the group had no intentions of making the stolen data public and also denied commenting on whether they had demanded a ransom from either company. The group's spokesperson emphasised, "If MGM wishes to release that information, they will. We do not do that." Also read | Libya floods: Thousands still missing after catastrophic tragedy, bodies wash up on far away beaches Caesars and MGM are yet to respond to inquiries regarding the volume of data that had been compromised. The FBI, in a statement, said it was investigating both the MGM and Caesars incidents. Reuters reports that on September 7th, Caesars had reported to regulators that hackers accessed data belonging to a significant number of its loyalty program members. The stolen information reportedly included "driver's licence numbers and/or social security numbers.". Although reports from Bloomberg and The Wall Street Journal suggested that Caesars paid a ransom, the company is yet to comment on the matter. Cybersecurity issue MGM, one of the world's largest casino and hotel operators, acknowledged that it was addressing a "cybersecurity issue." Also read | UK government pumps $621mn into Tata Steel to decarbonise its Welsh site, 3,000 jobs at risk Four days after the attack came to light, disruptions persisted in MGM's operations. Social media posts showed slot machines displaying error messages at its Las Vegas casinos. Scattered Spider Scattered Spider, also known as UNC3944, is renowned for its effective social engineering tactics. The group often contacts an organisation's information security teams via phone, posing as employees in need of password resets. Google's Mandiant Intelligence has linked Scattered Spider to over 100 intrusions within the past two years, targeting various industries, including gaming, technology, retail, telecoms, and insurance.

Huge data breach strikes casino giants MGM and Caesars, cybersecurity investigation underway

The White House on Wednesday released a statement saying that it had come up with a multimillion-dollar cyber contest to stimulate the use of artificial intelligence (AI) in order to find out and fix flaws in the security system of the United States government infrastructure.

"Cybersecurity is a race between offence and defence," said Anne Neuberger, the U.S. government's deputy national security adviser for cyber and emerging technology.

"We know malicious actors are already using AI to accelerate identifying vulnerabilities or build malicious software," she added in a statement to Reuters.

In recent times, several organisations in the United States, from healthcare groups to manufacturing firms and government institutions, have been a victim of hacking attacks.&nbsp;

Neuberger's comments about artificial intelligence were somewhat similar to those made by Canada's cybersecurity head Samy Khoury last month.

Also read: <a href="https://www.wionews.com/world/maui-wildfires-death-toll-rises-to-53-president-joe-biden-declares-it-major-disaster-624392">Maui wildfires death toll rises to 55, President Joe Biden declares it ‘major disaster’</a>

He said that his agency had witnessed AI being deployed for things like creating phishing emails, writing malicious computer code and spreading disinformation.

The White House released a statement saying that the two-year contest includes around $20 million in rewards and will be ushered by the Defense Advanced Research Projects Agency (DARPA), the United States government body which is in charge of creating technologies for national security.

The government said that the tech giants at the forefront of the AI revolution which include Alphabet's Google, Anthropic, Microsoft, and OpenAI, will make their systems available for the challenge.

"Our goal with the DARPA AI challenge is to catalyze a larger community of cyber defenders who use the participating AI models to race faster – using generative AI to bolster our cyber defences," Neuberger said.

The Open Source Security Foundation (OpenSSF), a US group of experts attempting to enhance open source software security, will be in charge of guaranteeing the "winning software code is put to use right away," the US government said.

(With inputs from agencies) 
&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

The White House on Wednesday released a statement saying that it had come up with a multimillion-dollar cyber contest to stimulate the use of artificial intelligence (AI) in order to find out and fix flaws in the security system of the United States government infrastructure.

The White House on Wednesday released a statement saying that it had come up with a multimillion-dollar cyber contest to stimulate the use of artificial intelligence (AI) in order to find out and fix flaws in the security system of the United States government infrastructure. "Cybersecurity is a race between offence and defence," said Anne Neuberger, the U.S. government's deputy national security adviser for cyber and emerging technology. "We know malicious actors are already using AI to accelerate identifying vulnerabilities or build malicious software," she added in a statement to Reuters. In recent times, several organisations in the United States, from healthcare groups to manufacturing firms and government institutions, have been a victim of hacking attacks. Neuberger's comments about artificial intelligence were somewhat similar to those made by Canada's cybersecurity head Samy Khoury last month. Also read: Maui wildfires death toll rises to 55, President Joe Biden declares it ‘major disaster’ He said that his agency had witnessed AI being deployed for things like creating phishing emails, writing malicious computer code and spreading disinformation. The White House released a statement saying that the two-year contest includes around $20 million in rewards and will be ushered by the Defense Advanced Research Projects Agency (DARPA), the United States government body which is in charge of creating technologies for national security. The government said that the tech giants at the forefront of the AI revolution which include Alphabet's Google, Anthropic, Microsoft, and OpenAI, will make their systems available for the challenge. "Our goal with the DARPA AI challenge is to catalyze a larger community of cyber defenders who use the participating AI models to race faster – using generative AI to bolster our cyber defences," Neuberger said. The Open Source Security Foundation (OpenSSF), a US group of experts attempting to enhance open source software security, will be in charge of guaranteeing the "winning software code is put to use right away," the US government said. (With inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

White House to launch AI-based contest aimed at fixing flaws in security systems

Italian luxury sports car manufacturer Ferrari might have become the latest victim of a ransomware attack. As per a Reuters report, internal documents belonging to the brand had been posted online.

The carmaker refuted that this was a ransomware attack, adding that there was no evidence of it or of a breach of the company's system.&nbsp;

However, Ferrari said that it was working to identify how the documents were made public and that appropriate actions would be taken as needed, adding that there has been no disruption to its business and operations.

Watch |&nbsp;World Business Watch: Ferrari says no evidence of system breach

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/world-business-watch-ferrari-says-no-evidence-of-system-breach-522243/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

Earlier on Monday, Corriere della Sera newspaper, citing the Italian website&nbsp;the Red Hot Cyber, reported that the luxury carmaker had been a &nbsp;victim of a cyber attack.&nbsp;

As per Red Hot Cyber, ransomware gang,&nbsp;RansomEXX, on its Tor leak site claimed that it has breached Ferrari stealing 6.99 GB of data, which not only included internal documents but also datasheets and repair manuals etc.&nbsp;As of yet the source of these documents remains unclear.&nbsp;

In the recent past, ransomware attacks have grown exponentially. From big brands like Ferrari to public service organisations like UK's National Health Service, many have fallen prey to these attacks. Ransomware attacks use malware to block access to data or threaten to publish sensitive data unless the victim pays a substantial ransom.&nbsp;

Also read |&nbsp;<a href="https://www.wionews.com/world/ransomware-attack-hits-uk-nhss-software-experts-fear-theft-of-sensitive-patient-data-506036">Ransomware attack hits UK NHS's software, experts fear theft of sensitive patient data</a>

As per Security Affairs and Hack Notice, in December of last year, another ransomware attack indirectly targeted Ferrari. The attack by Everest ransomware allegedly hacked Speroni Spa's systems. The company is part of the supply chain of multiple car makers including Ferrari. Reportedly, 850 GB of the company's data, including customer and employee data, technical data, financial documents, bank statements, and "other very important documents" were put up for sale after the attack.

(With inputs from agencies)

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

Italian luxury sports car manufacturer Ferrari might have become the latest victim of a ransomware attack. As per a Reuters report, internal documents belonging to the brand had been posted online.

Italian luxury sports car manufacturer Ferrari might have become the latest victim of a ransomware attack. As per a Reuters report, internal documents belonging to the brand had been posted online. The carmaker refuted that this was a ransomware attack, adding that there was no evidence of it or of a breach of the company's system. However, Ferrari said that it was working to identify how the documents were made public and that appropriate actions would be taken as needed, adding that there has been no disruption to its business and operations. Watch | World Business Watch: Ferrari says no evidence of system breach Earlier on Monday, Corriere della Sera newspaper, citing the Italian website the Red Hot Cyber, reported that the luxury carmaker had been a victim of a cyber attack. As per Red Hot Cyber, ransomware gang, RansomEXX, on its Tor leak site claimed that it has breached Ferrari stealing 6.99 GB of data, which not only included internal documents but also datasheets and repair manuals etc. As of yet the source of these documents remains unclear. In the recent past, ransomware attacks have grown exponentially. From big brands like Ferrari to public service organisations like UK's National Health Service, many have fallen prey to these attacks. Ransomware attacks use malware to block access to data or threaten to publish sensitive data unless the victim pays a substantial ransom. Also read | Ransomware attack hits UK NHS's software, experts fear theft of sensitive patient data As per Security Affairs and Hack Notice, in December of last year, another ransomware attack indirectly targeted Ferrari. The attack by Everest ransomware allegedly hacked Speroni Spa's systems. The company is part of the supply chain of multiple car makers including Ferrari. Reportedly, 850 GB of the company's data, including customer and employee data, technical data, financial documents, bank statements, and "other very important documents" were put up for sale after the attack. (With inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

Ferrari falls victim to ransomware attack; 7GB of its internal documents made public

Meta, the parent company of Facebook, banned an array of "cyber mercenary" groups on Thursday, alerting 50,000 users who may have been targeted by firms that spy on activists, dissidents, and journalists.

Meta shut down 1,500 Facebook and Instagram webpages linked to groups with services ranging from snooping up public information online to building trust with targets with fake personas to performing digital snooping via hacking attacks.

Also read |&nbsp;<a href="https://www.wionews.com/world/fretting-about-data-security-chinese-government-expands-its-use-of-golden-shares-437299">Fretting about data security, Chinese government expands its use of 'golden shares'</a>

Furthermore, Facebook is warning about 50,000 users in more than 100 countries who may have been targeted by firms including several from Israel, a leading player in the cyber surveillance business.

"The surveillance-for-hire industry... looks like indiscriminate targeting on behalf of the highest bidder," Nathaniel Gleicher, head of security policy at Meta, told a press briefing.

Facebook said it removed accounts from Cobwebs Technologies, Cognyte, Black Cube and Bluehawk CI -- all of which are based or founded in Israel.

BellTroX, a company based in India, Cytrox based in Macedonia, and another entity with an unidentified location in China also had their Meta accounts removed.

Researchers at Canadian cybersecurity organisation Citizen Lab also accused Cytrox of developing and selling spyware used to hack Egyptian opposition figure Ayman Nour's phone.

Also read |&nbsp;<a href="https://www.wionews.com/world/this-is-how-huawei-is-associated-with-chinas-state-surveillance-436995">This is how Huawei is associated with China’s state surveillance</a>

"These cyber mercenaries often claim that their services only target criminals and terrorists," said a Meta statement.&nbsp;

"Targeting is in fact indiscriminate and includes journalists, dissidents, critics of authoritarian regimes, families of opposition members and human rights activists," it added. "We have banned them from our services."

In most cases, the companies selling "web intelligence services" gather information from publicly available online sources, such as news reports and Wikipedia, before beginning the surveillance process.

Cyber mercenaries then created fake accounts on social media sites to gather info about users, Meta investigators said, joining groups and conversations to get further details.

A third tactic is to gain a target's trust on a social network and then trick the person into clicking a booby-trapped link or file that installs software that can then steal information from their devices.

Watch |&nbsp;Meta crackdown on spy firms: 1,500 accounts suspended

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/meta-crackdown-on-spy-firms-1500-accounts-suspended-437605/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

This kind of access allows mercenaries to steal data from a target's phone or computer. In addition, they can silently activate microphones, cameras, and tracking systems.

While Meta was not being able to pinpoint who ran the Chinese operation, it tracked "command and control" of the surveillance tool to servers that appeared to be used by law enforcement officials in China.

(With inputs from agencies)

Meta, the parent company of Facebook, banned an array of "cyber mercenary" groups on Thursday, alerting 50,000 users who may have been targeted by firms that spy on activists, dissidents, and journalists.

Meta, the parent company of Facebook, banned an array of "cyber mercenary" groups on Thursday, alerting 50,000 users who may have been targeted by firms that spy on activists, dissidents, and journalists. Meta shut down 1,500 Facebook and Instagram webpages linked to groups with services ranging from snooping up public information online to building trust with targets with fake personas to performing digital snooping via hacking attacks. Also read | Fretting about data security, Chinese government expands its use of 'golden shares' Furthermore, Facebook is warning about 50,000 users in more than 100 countries who may have been targeted by firms including several from Israel, a leading player in the cyber surveillance business. "The surveillance-for-hire industry... looks like indiscriminate targeting on behalf of the highest bidder," Nathaniel Gleicher, head of security policy at Meta, told a press briefing. Facebook said it removed accounts from Cobwebs Technologies, Cognyte, Black Cube and Bluehawk CI -- all of which are based or founded in Israel. BellTroX, a company based in India, Cytrox based in Macedonia, and another entity with an unidentified location in China also had their Meta accounts removed. Researchers at Canadian cybersecurity organisation Citizen Lab also accused Cytrox of developing and selling spyware used to hack Egyptian opposition figure Ayman Nour's phone. Also read | This is how Huawei is associated with China’s state surveillance "These cyber mercenaries often claim that their services only target criminals and terrorists," said a Meta statement. "Targeting is in fact indiscriminate and includes journalists, dissidents, critics of authoritarian regimes, families of opposition members and human rights activists," it added. "We have banned them from our services." In most cases, the companies selling "web intelligence services" gather information from publicly available online sources, such as news reports and Wikipedia, before beginning the surveillance process. Cyber mercenaries then created fake accounts on social media sites to gather info about users, Meta investigators said, joining groups and conversations to get further details. A third tactic is to gain a target's trust on a social network and then trick the person into clicking a booby-trapped link or file that installs software that can then steal information from their devices. Watch | Meta crackdown on spy firms: 1,500 accounts suspended This kind of access allows mercenaries to steal data from a target's phone or computer. In addition, they can silently activate microphones, cameras, and tracking systems. While Meta was not being able to pinpoint who ran the Chinese operation, it tracked "command and control" of the surveillance tool to servers that appeared to be used by law enforcement officials in China. (With inputs from agencies)

Meta bans array of 'cyber mercenary' groups, warns 50,000 people that were targeted

A new attack is affecting SMS messaging with the users never finding out. The attack, uncovered by Motherboard, uses text-messaging management services to redirect messages to hackers from the user.

These services are&nbsp;used by businesses, but now hackers are capitalising on the service’s loopholes. The service essentially provides the hackers access to everything in your texts, ranging from two-factor authentication codes, login links, and one-time passwords that are usually delivered via SMS.

As if that was not enough to scare users, the hackers can also respond to messages on your behalf without you even finding out.

It is common for companies to not tell the user that their messages are being redirected to someone else. And the worst part of it all? Anybody can deploy the attack, and it costs less than $16, as uncovered by a Motherboard reporter, Joseph Cox, who was able to successfully hack his own phone using the exploits already in place within the industry.

Also read:&nbsp;<a href="https://www.wionews.com/world/just-111-facebook-users-spread-half-of-covid-vaccine-doubts-370729" hreflang="en">Just 111 Facebook users spread half of Covid vaccine doubts&nbsp;</a>

Not many companies are doing anything, or worse - lack awareness about the loophole which allows such attacks to continue unabated.

It’s not the attack which could compromise one’s data, but the content of our private SMSs - a service now largely used just for authentication purposes, as users have moved on to app-based messaging like WhatsApp and Telegram.

Also read:&nbsp;<a href="https://www.wionews.com/technology/twitter-users-experiencing-bizarre-bug-banning-users-for-mentioning-memphis-370619" hreflang="en">Twitter users experiencing bizarre bug banning users for mentioning 'Memphis'</a>

SMSing has become largely obsolete for private conversations, but could still be exploited to access important links, for companies still using SMSs to send password reset links - ranging from banks to social media companies. In addition, many also send login links on SMS.

The attacker can easily click on these links to change passwords of your important accounts and services. Easiest way to avoid being hacked? Stop using SMS services for anything security-related.

A new attack is affecting SMS messaging with the users never finding out. The attack, uncovered by Motherboard, uses text-messaging management services to redirect messages to hackers from the user.

A new attack is affecting SMS messaging with the users never finding out. The attack, uncovered by Motherboard, uses text-messaging management services to redirect messages to hackers from the user. These services are used by businesses, but now hackers are capitalising on the service’s loopholes. The service essentially provides the hackers access to everything in your texts, ranging from two-factor authentication codes, login links, and one-time passwords that are usually delivered via SMS. As if that was not enough to scare users, the hackers can also respond to messages on your behalf without you even finding out. It is common for companies to not tell the user that their messages are being redirected to someone else. And the worst part of it all? Anybody can deploy the attack, and it costs less than $16, as uncovered by a Motherboard reporter, Joseph Cox, who was able to successfully hack his own phone using the exploits already in place within the industry. Also read: Just 111 Facebook users spread half of Covid vaccine doubts Not many companies are doing anything, or worse - lack awareness about the loophole which allows such attacks to continue unabated. It’s not the attack which could compromise one’s data, but the content of our private SMSs - a service now largely used just for authentication purposes, as users have moved on to app-based messaging like WhatsApp and Telegram. Also read: Twitter users experiencing bizarre bug banning users for mentioning 'Memphis' SMSing has become largely obsolete for private conversations, but could still be exploited to access important links, for companies still using SMSs to send password reset links - ranging from banks to social media companies. In addition, many also send login links on SMS. The attacker can easily click on these links to change passwords of your important accounts and services. Easiest way to avoid being hacked? Stop using SMS services for anything security-related.

Telecom companies may be redirecting your SMSs to hackers for less than $16!

hacking-attack

Hacking Attack, News on Hacking Attack, stories on Hacking Attack, articles on Hacking Attack, Hacking Attack stories at Wion, Hacking Attack news, Hacking Attack latest news