According to security researcher Dominic Alvieri, notorious ransomware gang BlackCat allegedly breached an Alabama based mental health provider. Safe Not Scammed is not naming the facility so it can focus on securing its systems and protecting its patients. The breach BlackCat claims to have stolen “patient logs, patient mental illness records, SSNs, DLs, [and] Employees …
Despite Musk’s claims to the contrary, Twitter is still full of scams. Crypto scams, in particular, are rampant on the platform. In this post, I’ll explain one I came across recently so you’ll be able to avoid it. You can also watch this one-minute video I made for a quick overview: The scam Tweets promoting …
You receive an email supposedly from Ace Hardware, saying you’ve won a prize, like a fancy drill or a space heater. All you have to do to receive it is take part in a short survey. Should you do it? Nope! It’s a common scam! In this post, I’ll break down one such scam email …
2-factor authentication (2FA) provides essential protection for your online accounts. Without it, you might wake up one day to find your accounts hacked and your money stolen. In this post, I’ll explain what 2FA is and why you need it, before pointing out some of its limitations. Let’s dive in! What is 2FA? 2FA adds …
The fallout from ransomware gang Cl0p’s massive, worldwide attack continues to grow. Police departments, state and federal agencies, and numerous companies are among the known victims. Recap Cl0p stole data from hundreds of organizations by exploiting a vulnerability in popular file transfer software MOVEit at the end of May. The cybercriminals then told organizations to …
Yesterday, ransomware gang Cl0p began listing organizations affected by its exploit of file transfer software MOVEit. The gang used the exploit to steal data from potentially hundreds of companies around the world at the end of May. The gang had previously instructed affected companies to begin negotiations by June 14th to avoid being named and …
On Friday, the State of Illinois and the Minnesota Department of Education both revealed they were victims of the Cl0p ransomware gang. Cl0p exploited a vulnerability in file transfer software MOVEit at the end of May, breaching up to hundreds of organizations worldwide. Minnesota Department of Education The Minnesota Department of Education (MDE) reported that …
Ransomware gang Cl0p has exploited a vulnerability in file transfer software MOVEit to compromise companies around the world. Security researcher Kevin Beaumont estimates “there are over one hundred” organizations affected by the attack, with British Airways, the BBC and Boots already confirmed as victims. Cl0p posted a message to companies who use MOVEit on their …
Valéry Marchive, a cybersecurity journalist, has published chat logs of negotiations between ransomware gangs and their victims. The goal, he explained in a Twitter thread, is to provide a resource for ransomware victims and researchers, since “What happens during #ransomware negotiations is rarely widely shared.” Background to the chats The chats take place after companies …
2-factor authentication (2FA) keeps your online accounts safe by requiring more than just your password to log in. But there are a variety of different 2FA methods to choose from, so how do you know which one is right for you? Here I’ll give you the low-down on each method to help you decide. There …
Did you know anyone can now register a domain name that ends in .zip or .mov? That’s thanks to Google, who opened up registrations for these domain extensions earlier this month. This has riled up many in the security community, who warn that .zip and .mov domains can be used maliciously. The potential for scams …
