Scams typical of summer have begun to appear, one of them being known as the false hotel reservation, which seeks to steal the victim’s email credentials to access sensitive data and promote new attacks.

In recent years, it has become fashionable to receive a message via email supposedly sent by the well-known Booking platform, in which the user is alerted about his reservation, in order to get him to open a malicious file.

This email is supposedly sent to confirm a reservation made and report the amount to be paid, and attaches a document. If it opens, it requires the Outlook account password to be able to read it, while in the background and blurred, it shows what appears to be the Booking logo.

It is likely that in the case of receiving this email, the potential victim does not know anything about said reservation, as ESET mentions, but the urgency of the date on which it is sent and the amount of money are enough to alarm.

In their analysis of the file, the researchers from this cybersecurity firm have verified that it is not actually a PDF file but an HTML extension, which will open in the browser when clicked on.

ESET researchers identified this ‘phishing’ campaign in both personal and corporate accounts, and its purpose is to gain access to the email account, where users store important data and, in the case of companies, to compromise sensitive information or facilitate further attacks.

Source: dpa

(Reference image source: Unsplash+)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram

La entrada Hotel booking scams are coming back to emails apareció primero en Bitfinance.

Cybercriminals know the importance of the data uploaded daily on the Internet, and their attacks are becoming more sophisticated. Given the increase in crimes such as phishing, scams, ransomware, the fact of having an advisor in computer forensics becomes more relevant.

The role of a forensic expert is to collect all the pertinent electronic information in a particular case. You must obtain and analyze said data, in addition to processing and presenting it in court, if applicable.

Its function is based on the meticulous investigation of digital evidence, in search of clues to establish responsibilities in a cyber crime.

Computer forensics collects data such as emails, messages sent by the WhatsApp social network, text messages, digital files, documents with electronic signatures.

In this discipline, as in any other, scientific techniques are studied for collecting electronic evidence, keeping files in custody, preserving content, among others.

Faced with some gaps in information and regulation in cybersecurity, computer experts consider it necessary for both companies and individuals to redouble efforts to protect their data, through backup copies, careful selection of the information they share and store, carry out audits, establish firewalls, strengthen their passwords, among the most common recommendations.

M.Pino

Click the link to subscribe for free to our news and media group on Telegram: https://t.me/G_ELSUMARIO_News

Source: informáticaforense

La entrada Computer forensics gains relevance in a digitized world apareció primero en Bitfinance.

OpenSea, the market for non-fungible tokens, popularly known as NFT, announced that it suffered the largest data leak to date, carried out by its email provider Customer.io, which would have published the emails of platform users.

The company published a statement in which it attributes said error to a Customer.io worker, who would have “misused his employee access to download and share email addresses provided by OpenSea users” and subscribers of his newsletter.

OpenSea indicated that all people who have shared their email with the platform “may be affected” and has suggested that they may be victims of future phishing attacks.

To avoid this type of scam via email, it made a series of recommendations available to users in the event that they receive any allegedly legal notification.

OpenSea indicated that it contacted the police to report this incident and that it is working to resolve this issue through an investigation that remains ongoing.

K. Tovar

Click the link to subscribe for free to our news and media group on Telegram: https://t.me/G_ELSUMARIO_News

Source: Hipertextual

La entrada OpenSea reveals massive email leak apareció primero en Bitfinance.

FBI servers were intervened by a hacker, who sent more than 100,000 emails warning of an apparent cyber attack as reported by Spamhaus Project, an international company that aims to provide support to detect Internet threats to various companies.

Determining the reliability of the message was extremely difficult because they were sent, according to the Spamhaus report they were issued from the “LEEP website (Law Enforcemente Enterprislos e Portal), a secure platform for law enforcement agencies and intelligence groups.”

The content of the email is false, but its origin comes from one of the servers of the Federal Bureau of Investigation (FBI) in the United States, using the IPs and login information that are normally used to issue official information.

Large-scale attacks

The hackers used legitimate email addresses that were taken from the database of a non-profit organization called the American Registry for Internet Numbers (ARIN).

Spamhaus considers this message to be small evidence of a large-scale attack targeting “Vinny Troia, the founder of the dark web intelligence company Shadowbyte” and said it is not the first time that it has received such threats.

For its part, the FBI issued a statement confirming the fact, but assures that it does not have more information on the subject and urges users to report any activity they consider suspicious.

Part of the communication states: “The FBI and CISA are aware of the incident involving fake emails from an @ ic.fbi.gov account. This situation is still valid and we are not in a position to provide additional information at this time. We encourage the public to be wary of unknown issuers and to urgently report any activity to www.ic3.gov or www.cisa.gov”.

M. Rodríguez

Source: larepublica.pe

La entrada Hacker intervenes FBI servers apareció primero en Bitfinance.

Twitter has apologized after multiple users of the platform received messages by email assuring that it was necessary to confirm their accounts, and has assured that they were sent by mistake.

This has been stated by the Twitter support account, which has explained that affected users do not have to confirm their accounts and can simply discard the email in question.

The sending of these messages took place to users of the platform who had not carried out any action that required the confirmation of their accounts, and according to the support account it occurred “by mistake”.

The email message sent by Twitter was similar to the one sent by Twitter when users first activated a newly created account. The company has apologized by saying: “We are sorry that it happened.“

Source: dpa

La entrada Twitter apologizes for sending emails to confirm accounts apareció primero en Bitfinance.