theft
-
Blog
Oracle denies breach after hacker claims theft of 6 million data records
Oracle denies it was breached after a threat actor claimed to be selling 6 million data records allegedly stolen from the company’s Oracle Cloud federated SSO login servers. “There has been no breach of Oracle Cloud. The published credentials are not for the Oracle Cloud. No Oracle Cloud customers experienced a breach or lost any data,” the company told BleepingComputer.…
Read More » -
Blog
New RAT malware used for crypto theft, reconnaissance
Microsoft has discovered a new remote access trojan (RAT) that employs “sophisticated techniques” to avoid detection, maintain persistence, and extract sensitive data. While the malware (dubbed StilachiRAT) hasn’t yet reached widespread distribution, Microsoft says it decided to publicly share indicators of compromise and mitigation guidance to help network defenders detect this threat and reduce its impact. Due to the limited…
Read More » -
Blog
Unmasking a 3X Spike in Credential Theft and Debunking the AI Hype
Cybercriminals have turned password theft into a booming enterprise, malware targeting credential stores jumped from 8% of samples in 2023 to 25% in 2024, a threefold increase. This alarming surge is one of many insights from the newly released Red Report 2025 by Picus Labs, which analyzed over 1 million malware samples to identify the tactics hackers rely on most.…
Read More » -
Blog
MyFICO identity theft protection review
MyFICO: Specs Monthly cost: $40 Yearly cost: No annual planFamily plan: NoNo. of bureau scores: 3No. of bureaus monitored: 3Frequency of credit reports: MonthlyType of credit score: FICOCredit-improvement simulator: YesCredit-lock/freeze button: NoSecurity software: NoInvestment account monitoring: NoMax. ID-theft coverage: $1 millionData Breach Alerts: NoMedical Records Monitoring: NoPayday loan monitoring: NoSex Offender Alert: NoTitle Change Alert: NoTwo Factor Authentication (2FA): Yes…
Read More » -
Blog
Data Theft Drove 94% of Cyberattacks in 2024
Data theft accounted for 94% of all cyber attacks worldwide in 2024, according to new research, as cybercriminals increasingly combine data exfiltration with encryption in ransomware campaigns. Beyond encryption, ransomware attackers now threaten to leak or sell a company’s data on the dark web if victims refuse to pay. Stolen information often includes personally identifiable data and proprietary intellectual property.…
Read More » -
Blog
Microsoft spots XCSSET macOS malware variant used for crypto theft
A new variant of the XCSSET macOS modular malware has emerged in attacks that target users’ sensitive information, including digital wallets and data from the legitimate Notes app. The malware is typically distributed through infected Xcode projects. It has been around for at least five years and each update represents a milestone in XCSSET’s development. The current improvements are the first ones…
Read More » -
Blog
Ransomware gang alleges theft of patient data from Michigan health system
Overnight, ransomware gang BianLian added Aspire Rural Health System to its data leak site, alleging to have stolen a variety of data. This includes patient records, financial information, and email correspondence. Aspire Rural Health System hasn’t confirmed a cyber attack but did note technical disruptions in early January which led to phones and systems being shut down for over 24…
Read More » -
Blog
Is identity theft insurance worth it?
To say the word “insurance” doesn’t inspire confidence nowadays is putting it lightly. With policies that often feel convoluted and exclusions buried in fine print, it’s easy to be skeptical. So, is identity theft insurance worth it? Well, the answer depends on your circumstances. For instance, identity theft insurance could be wise if you manage multiple financial accounts, use public…
Read More » -
Blog
Krispy Kreme breach, data theft claimed by Play ransomware gang
The Play ransomware gang has claimed responsibility for a cyberattack that impacted the business operations of the U.S. doughnut chain Krispy Kreme in November. Krispy Kreme disclosed the incident and subsequent disruptions to its online ordering system in an SEC filing submitted on December 11. The company detected unauthorized activity on some of its information technology systems on November 29.…
Read More » -
Blog
Clop ransomware claims responsibility for Cleo data theft attacks
The Clop ransomware gang has confirmed to BleepingComputer that they are behind the recent Cleo data-theft attacks, utilizing zero-day exploits to breach corporate networks and steal data. Cleo is the developer of the managed file transfer platforms Cleo Harmony, VLTrader, and LexiCom, which companies use to securely exchange files between their business partners and customers. In October, Cleo fixed a vulnerability…
Read More »