Bite Sized Cyber Crime

$25 Million in Ethereum Stolen from Trading Bots

Ethereum is a popular cryptocurrency, and some have started using bots to frontrun. Two brothers learned how they could exploit a vulnerability in these bots and make themselves $25 million richer.
Sources: https://pastebin.com/xuQZ1ard

Dell Breach Exposed Data of 49 Million Customers

Dell is a massive provider of technology for organizations and home users alike, and although on first glance their data breach seems not to contain sensitive data it has likely opened the floodgates for scams and phishing opportunities.
Sources: https://pastebin.com/6jSYQM4P

Fake USPS Sites Get Almost the Same Traffic as the Real One

With online shopping being so popular, getting delivery updates is not so uncommon, but this has led to the rise of a prolific scam that is much bigger than you may think.
Sources: https://pastebin.com/mW6kWtWx

Cloudbleed and the Vitality of Cloud Security

The cloud is ever expanding and allowing people to easily scale up at rates previously impossible. However one thing that must be considered is that security becomes complicated. You have to really trust your cloud provider to hold up their end, and even trusted providers can have oversights.
Sources: https://pastebin.com/2LJPjrVx

Threat Actors Bribing Mobile Carriers into SIM Swapping

MFA is becoming more and more common, but with every security innovation, threat actors figure out ways around them. Recently it came out that an unknown actor was bribing employees at T-Mobile and Verizon to perform SIM swapping attacks, which can compromise SMS based MFA codes.
 
Sources: https://pastebin.com/h47Mijdt

Storm Worm: The Malware that Took Down Warnings of Itself

In 2007 clickbait emails could make you part of a botnet that silenced cybersecurity professionals and performed attacks for anyone on the dark web willing to pay. Not a worm, but a Trojan, this is how the Storm Worm was ahead of its time.
Sources: https://pastebin.com/nPbinx0i

Password Stuffing: Why you Should Use Unique Passwords for Every Site

There's a reason you should use a unique password for every website you use, but most people simply don't. How are you supposed to make and remember dozens of passwords for each site that are completely unique and can't be written down?
What if I told you it doesn't have to be that difficult?

XZ Utils Contains a Backdoor on Unstable Linux Distros

XZ Utils is an inconspicuous program in many Linux distributions that allows you to compress files. However, it seems one maintainer of the open source project had much more malicious plans.
 
Sources: https://pastebin.com/awZzM7qk