Bite Sized Cyber Crime

Sitting Duck Attack Allows Hackers to Hijack Websites

Simple misconfiguration can often lead to disaster, and sometimes that disaster is a threat actor sneakily taking over your trusted website and using it to host malware, send phishing emails, or control botnets. Here's a surprisingly easily exploited DNS oversight that has allowed threat actors to take over 70,000 websites.
Sources: https://pastebin.com/DqXL1BRb

Ransomware Group Requests Payment in Baguettes

Ransomware groups typically request payments in the form of crypto, but newcomers Hellcat wanted to get this bread in a more literal sense. So why bread? There may be a more realistic reason than you'd think...
Sources: https://pastebin.com/kAkdLJD5

Phish N Ship Scams Infect Sites with Fake Products

There's all sorts of online shopping scams, but one of the newest ones discovered exploits legitimate eshops by creating fake product listings on other people's websites and redirecting shoppers to an attacker-controlled page that will steal credit card data.
 
Sources: https://pastebin.com/VS9XFHRF

What Can the Flipper Zero Actually Do?

The Flipper Zero is a notorious hacking tool used to wreak havoc on traffic lights, banks, locks, and cars. Or is it? What can the Flipper actually do, and is it really as dangerous as it seems on Tik Tok?
Sources: https://pastebin.com/cnJyQkXC

The New Guy May be a North Korean Threat Actor

A couple months ago security education company KnowBe4 accidentally hired a North Korean threat actor who tried to install malware on their machine. Turns out this may not be as uncommon as you'd think. Recently a network of North Korean threat actors applying for jobs, and US citizens helping them, has been uncovered.
Sources: https://pastebin.com/1npHD8cA

The Internet Archive is Under Attack

The Internet Archive is a website vital in the preservation of digital information, and recently it was attacked on two separate occasions. Here's what went down.
Sources: https://pastebin.com/nbhNFAv5

Pig Butchering Scams

Ever receive a weird wrong number text or match with someone on a dating site who starts talking about crypto? It may be part of a long term scam meant to drain you of as much money as you're willing to part with to make a big investment. Once it seems too good to be true and you go to withdraw your earnings, suddenly you realize you've lost it all.

Kia Exploit Almost Allowd Remote Control Over Millions of Cars

Cars are just big computers now, and that means they are vulnerable to exploits that could allow a concerning amount of control over them. Security researchers discovered a vulnerability in the Kia dealer portal that could allow a hacker remote control over millions of cars made after 2013.
Sources: https://pastebin.com/tsJGg8jq