Blog #Cybersecurity Trends

Smart contract security is critical in DeFi, where exploits have caused significant financial losses. Immunefi's latest report reveals $1.4 billion lost to hacks and rugpulls in 2024, with Web2 hackers increasingly targeting smart contract vulnerabilities.

The U.S. Department of Justice has seized the PopeyeTools marketplace, which facilitated the trade of stolen financial data, including credit card and bank account information.

With the rise of e-commerce and digital payments, payment fraud has become increasingly sophisticated, costing businesses billions annually.

Microsoft has taken down 240 phishing websites and disrupted the ONNX phishing service, which it claims is operated by an Egyptian man named Abanoub Nady, also known as MRxC0DER.

The U.S. Department of Justice has taken down PopeyeTools, a major cybercriminal marketplace active since 2016, and arrested three alleged administrators.

Palo Alto Networks has released patches for two zero-day vulnerabilities exploited in "Operation Lunar Peek," a targeted cyberattack campaign. The critical vulnerability, CVE-2024-0012, is an authentication bypass flaw that allows unauthenticated attackers to gain administrative privileges via the PAN-OS management interface exposed to the internet.

The Cybersecurity and Infrastructure Security Agency (CISA) has introduced a new Venue Guide for Security Considerations to help venue operators enhance safety and implement effective security measures.

A recent Facebook malvertising campaign exploited Meta’s advertising platform to distribute malware disguised as a Bitwarden security update. Cybersecurity researchers at Bitdefender revealed that the campaign targeted business accounts, tricking users into installing malicious Chrome extensions.

In 2016, approximately 120,000 bitcoin, then worth $71 million, were stolen in a hack on the Bitfinex cryptocurrency exchange. By 2022, as the value of the stolen cryptocurrency soared to $4.5 billion, law enforcement arrested Ilya Lichtenstein and Heather Morgan for their involvement in the theft and laundering of the funds, recovering $3.6 billion at the time.

Ahold Delhaize, a leading food retailer, experienced a cybersecurity incident affecting its US brands, including Giant Food and Hannaford.

ShrinkLocker, discovered in May 2024, is a ransomware that uses older techniques like VBScript and built-in Windows features, making it simpler yet effective. Unlike modern ransomware that relies on complex encryption, ShrinkLocker modifies BitLocker configurations to encrypt drives, first checking if BitLocker is enabled and installing it if necessary.

Microsoft’s November 2024 Patch Tuesday update addresses 91 security vulnerabilities, including four zero-day flaws, with two actively exploited in the wild.