Shiva Parasram’s Post

As mentioned by Shiva Parasram last week, here's a joint effort between Computer Forensics and Security Institute (CFSI) and Tier 10 Technology where the ransomware attacks of 2023 in the Caribbean and Canada have been documented with comparisons to prior years and impacted locations. #databreach #dataleaks #cybersecurity #ransomware #caricom #canada

Check out this awesome article written by Shiva Parasram and Alex Samm Great work as always guys!

Here's the report from Shiva Parasram and Alex Samm where they've documented all their research on Ransomware attacks for 2023 in the CARICOM and Caribbean Regions and also included attacks on Canadian organizations for comparison. Information on attacks in CARICOM and Caribbean nations and islands is very difficult to obtain (if any exists at all) and have decided to share this information with other researchers and the public. The names of organizations are not disclosed but the groups responsible and the sectors affected are listed for each affected country within the specified regions. This report only contains information on data leaks published by Ransomware groups of their respective official dark web sites. Feel free to or contact us and also add them on LinkedIn. Computer Forensics and Security Institute (CFSI) Tier 10 Technology #ransomwareattack #ransomwareawareness #caricom #caribbean #canada

Every year at this time, we look back at the year before in the vainglorious hope that we will learn from our past mistakes, and—like Lucy holding the football for Charlie Brown—hope that next year will be different. So here is my list (aided by #ChatGPT) of the #top #10 #cybercrime cases from 2023. Remember, your mileage may vary. These are the cases that appear to be the most impactful—#not the most #extensive or #expensive—just the most #interesting. QakBot Malware Takedown (U.S. and others) The Guardian Cyberattack (UK) Toronto SickKids (Canada) FAA Incident (U.S.) Cloud Exploitation by Automated Libra (South Africa) LastPass Breach Royal Mail Ransomware Attack (UK) Hive Ransomware Gang Infiltration and Shutdown (U.S. and others) MOVEit Software Exploit (U.S. and others) Caesars Scattered Spider Attack (U.S.) Microsoft Storm-0558 Exploit (U.S. and others) @laninfotech @glenbenjamin #laninfotech #becybersmart #becyberfit #besafe LAN Infotech, LLC

🔍 FBI Seizes BreachForums Hacking Forum The FBI has taken down the notorious BreachForums hacking forum, which was used to leak and sell stolen corporate data to cybercriminals. Here are the key points: 1️⃣ Recent Seizure: ▪ The seizure occurred after the site was used to leak data stolen from a Europol law enforcement portal. ▪ The FBI now controls both the site’s servers and domains. 2️⃣ Forum Administrators: ▪ The site administrators, known as Baphomet and ShinyHunters, have been targeted. ▪ Law enforcement has gained access to the forum’s backend data, potentially exposing members. 3️⃣ Investigation and Collaboration: ▪ The FBI, along with international partners, is reviewing the data. ▪ The takeover involved authorities from the US, UK, Australia, New Zealand, Iceland, Switzerland, and Ukraine. 4️⃣ Second Takedown: ▪ This is the second time BreachForums has been seized within a year. ▪ The first takedown occurred in June 2023 after the arrest of the forum’s original admin, Conor Brian Fitzpatrick (aka Pompompurin). The full article is in the comments. #Cybersecurity #Hacking #LawEnforcement #bleepingcomputer #fbi #takedown #breachforums

CISA, FBI, and MS-ISAC Release Advisory on Phobos Ransomware #StopRansomware: #Phobos_Ransomware. Release DateFebruary 29, 2024 The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) are releasing this joint CSA, to disseminate known TTPs and IOCs associated with the Phobos ransomware variants observed as recently as February 2024, according to open source reporting. Phobos is structured as a ransomware-as-a-service (RaaS) model. Since May 2019, Phobos ransomware incidents impacting state, local, tribal, and territorial (SLTT) governments have been regularly reported to the MS-ISAC. These incidents targeted municipal and county governments, emergency services, education, public healthcare, and other critical infrastructure entities to successfully ransom several million U.S. dollars. https://lnkd.in/eUCgRzUk https://lnkd.in/eAgNhYjn https://lnkd.in/eJ2V3AjN

Heads-up! New free daily report now going out on post-exploitation frameworks (includes Cobalt Strike, Sliver and over a dozen others) observed in daily scans: https://lnkd.in/eEwgxVEP Currently over 1200 unique IPs reported daily. Country distribution: https://lnkd.in/eJVgEYNk You can also track the various framework families on our Dashboard (updated once per day): https://lnkd.in/ePPtikpS (for related Dashboard searches use ''beacon' as source) Data shared as part of the EU Internal Security Fund MISP-LEA project: https://misp-lea.org/ CIRCL (Computer Incident Response Center Luxembourg) #cybersecurity #cybercrime #situationalawareness #apt #threatintelligence #cti #cyberthreatintelligence #shadowserver

Well worth checking out. Cyber-crime/risk-management is only getting more prevalent as well as the severity of cases associated. Protecting yourself and your businesses has never been more important. In our experience the scariest things we find are the fact that it's already happened and the data is loose in the underbelly of the web, not to mention the vulnerabilities and exploits used to get there in the first place are still present.

Ukraine’s SBU security service reported that it had successfully blocked the operation of webcams in Kyiv that had been hacked by Russian special services to spy on the activities of Ukrainian air defenses. Check out today's Metacurity to find out more about this top development and other important infosec news you should know, including --Xerox confirms ransomware attack, --Cactus gang attacks Swedish supermarket chain, --Emsisoft calls for ransomware payment ban, --Black Basta subverts decryptor, --Radiant Capital exploited, --much more #sbu #webcams #coop #cactusgang #emsisoft #ransompaymentban #blackbasta #radiantcapital #hackers #databreach #infosec #cybersecurity https://lnkd.in/emk-Q2x2

Ukraine’s SBU security service reported that it had successfully blocked the operation of webcams in Kyiv that had been hacked by Russian special services to spy on the activities of Ukrainian air defenses. Check out today's Metacurity to find out more about this top development and other important infosec news you should know, including --Xerox confirms ransomware attack, --Cactus gang attacks Swedish supermarket chain, --Emsisoft calls for ransomware payment ban, --Black Basta subverts decryptor, --Radiant Capital exploited, --much more #sbu #webcams #coop #cactusgang #emsisoft #ransompaymentban #blackbasta #radiantcapital #hackers #databreach #infosec #cybersecurity https://lnkd.in/esEsj8xD