Bite Sized Cyber Crime

Kia Exploit Almost Allowd Remote Control Over Millions of Cars

Cars are just big computers now, and that means they are vulnerable to exploits that could allow a concerning amount of control over them. Security researchers discovered a vulnerability in the Kia dealer portal that could allow a hacker remote control over millions of cars made after 2013.
Sources: https://pastebin.com/tsJGg8jq

Was the Tor Network Just Cracked?

The Tor network allows for anonymous connections to unindexed search engines, including to online criminal services. Recently though, German authorities claimed to have de-anonymized a user using Tor and made an arrest. Has Tor finally been cracked, or is this a scare tactic to instill fear in threat actors?
Sources: https://pastebin.com/Hfrrbdag

YubiKey Vulnerability Allows for Device Cloning

YubiKeys are physical authentication devices that have a lot of flexibility and are compatible with just about every service, but as it turns out if you know a lot about math and electronics you can uncover the private keys and clone the device!
 
Sources: https://pastebin.com/WacbUmA1

Columbus Ohio Sues Researcher for Exposing Severity of Data Breach

The city of Columbus, Ohio had a data breach occur in July. According to the mayor, the information leaked was nothing important to hackers. A security researcher proved that this was not the case, that the data was incredibly sensitive. In response, the city sued him.
Sources: https://pastebin.com/C632hthD

GPO Used to Steal Credentials from Chrome Browser

Using native Windows tools rather than custom malware is becoming a better technique of pulling off attacks while remaining under the radar. Qilin was caught doing just this to steal credentials right from the Chrome web browser.
 
Sources: https://pastebin.com/Ccvhs7Pd

Malware That Uses a Driver to Kill EDR Software

Antimalware solutions like EDR are meant to keep a careful watch on our systems to ensure they are protected from even sneaky threats. But what happens when malware can take out an EDR solution before it is spotted?
Sources: https://pastebin.com/6uRVy4Yd

3 Billion Impacted in Background Check Company Breach

Often times we can reduce our risk to cyber crime by being careful about the websites we sign up for, but what if someone has our data that we never consented to giving them and ends up being breached? Just that happened, with a company you've probably never heard of.
Sources: https://pastebin.com/Yms285F5

Dark Angels Recieved the Biggest Ever Ransomware Payout

Ransomware threat actors are one of the biggest modern threats, and things will only ramp up when threat actors see just how much an organization is willing to pay to have their data back. Recently it was uncovered that a covert ransomware group quietly received the largest payout ever recorded in ransomware history.
Sources: https://pastebin.com/uLQ9sFh0