Page 2 - Sayprajeet Nair News Today : Breaking News, Live Updates & Top Stories | Vimarsana
Apple Pay-Visa Vulnerability May Enable Payment Fraud
govinfosecurity.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from govinfosecurity.com Daily Mail and Mail on Sunday newspapers.
Apple Pay-Visa Vulnerability May Enable Payment Fraud
bankinfosecurity.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from bankinfosecurity.com Daily Mail and Mail on Sunday newspapers.
Chinese APT Group Reportedly Develops Custom Backdoor
@prajeetspeaks) • June 9, 2021
Full infection chain (Source: Check Point Research)
Check Point researchers have uncovered an ongoing campaign by a Chinese advanced persistent threat group that has spent the last three years testing and refining a custom backdoor in its arsenal to conduct espionage campaigns targeting governments in Southeast Asia.
The group, dubbed SharpPanda, uses spear-phishing attacks to gain initial access and leverage old Microsoft Office vulnerabilities together with a chain of in-memory loaders to attempt to install a previously unknown backdoor on victims’ machines.
Researchers note that the first stage of the infection chain s command-and-control servers is hosted by two different cloud services, located in Asia, in Hong Kong and Malaysia. The backdoor command-and-control server is hosted on Zenlayer, a U.S.-based p
The WeLeakInfo domain was seized by police in January. (Source: U.S. Justice Department)
Britain s National Crime Agency says 21 individuals have been arrested on suspicion of purchasing personally identifiable information from the WeLeakInfo website. Authorities say the site provided access to more than 12 billion personal records culled from 10,000 data breaches.
The arrests, which took place over a five-week period starting in November, are part of an ongoing investigation that stems from the seizure of the WeLeakInfo website in January by law enforcement agencies from the U.S., the U.K. and EU (see:
During its time in operation, the WeLeakInfo domain developed a reputation for selling names, email addresses, usernames, phone numbers and passwords for online accounts to criminals, who could purchase a subscription to the site for as little as $2 a day, according to the U.S. Justice Department, which helped facilitate the January seizure of the site.