By Waqas
Thirteen people have been arrested for allegedly stealing millions of dollars from low-income Southern California residents, according to…
This is a post from HackRead.com Read the original post: Card Skimmers and ATMs Used to Drain EBT Accounts in SoCal

Thirteen people have been arrested for allegedly stealing millions of dollars from low-income Southern California residents, according to the Los Angeles Police Department.

The suspects are accused of using card skimmers and ATMs to drain electronic benefit transfer (EBT) accounts, which are used to pay for food through the Supplemental Nutrition Assistance Program (SNAP).

The police department received a community tip on April 25 about fraud and identity theft suspects residing at a Van Nuys motel on the 4700 block of Sepulveda Boulevard. Following a search warrant, authorities recovered skimming devices, card readers, a large number of false identification cards and documents, and $36,062 in cash.

Investigators believe that the suspects may be part of a Romanian syndicate known to “target persons experiencing economic hardship for their EBT cards.” The group allegedly stole millions of dollars every month from Californians with EBT accounts.

According to LAPD’s press release, the investigation is ongoing. However, this is not the first time such a crime has been committed in the area. Back in March 2023, 15 suspected Romanian nationals were also arrested for stealing over $38 million from low-income SoCal families.

The suspects stole funds disbursed through CalWORKs and CalFresh programs using cloned EBT cards from skimming devices at ATMs.

1.  Life is cheap on Dark Web where your entire identity is for sale
2.  Man convicted for identity theft fraud against US Military veterans
3.  Ex-army admin jailed for 12 years over US military health data theft

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Card Skimmers and ATMs Used to Drain EBT Accounts in SoCal

By Waqas
The raid took place at the Gothenburg office of Mullvad VPN on April 18th, 2023.
This is a post from HackRead.com Read the original post: Mullvad VPN’s Office Raided By Police for User Data

**Mullvad VPN does not store any user data; therefore, the Swedish police could not access any user data during the raid.**

Swedish VPN company, Mullvad, has recently reported that on April 18 2023, Swedish police came to their Gothenburg office with a search warrant to confiscate computers with the personal data of VPN service clients.

However, Mullvad employees informed the police that they do not store any data of their customers, and confiscating computers would be considered a violation of Swedish law. The police officers left the Mullvad VPN’s office after consulting with the prosecutor, and no further details have been provided.

In a press release, Mullvad VPN said,

_On April 18 at least six police officers from the National Operations Department (NOA) of the Swedish Police visited the Mullvad VPN office in Gothenburg with a search warrant. They intended to seize computers with customer data._

_In line with our policies such customer data did not exist. We argued they had no reason to expect to find what they were looking for and any seizures would therefore be illegal under Swedish law. After demonstrating that this is indeed how our service works and them consulting the prosecutor they left without taking anything and without any customer information._

The police’s search may have been part of an investigation into hackers who often use VPN services to hide their cybercrimes. Mullvad is a paid VPN service that is known for its strict customer privacy policy and does not require user registration upon connection.

In other news, earlier in April 2023, Mullvad VPN and the Tor Project joined forces to launch the Mullvad Browser, a privacy-focused web browser aimed at providing users with a secure browsing experience and minimizing tracking and fingerprinting.

Additionally, Mullvad received recognition from the product review site Wirecutter, which named the company as the best VPN service in March in terms of security and data privacy.

However, last week, Mullvad VPN services experienced interruptions in Russia, with the mobile applications mostly affected. The company’s technical support team has stated that some Mullvad services are still operational, and users can still connect to them. Mullvad has not yet released a statement regarding the Russian service interruption.

1.  Indian police & Microsoft busts tech support scam centers
2.  DDoS attacks on Sweden’ Transport Agencies Delay Trains
3.  Cybercrime Crackdown: Encrypted Messenger Exclu Seized

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Mullvad VPN’s Office Raided By Police for User Data

By Owais Sultan
AI technology, particularly ChatGPT, has rapidly gained traction in various industries due to its ability to provide efficient…
This is a post from HackRead.com Read the original post: Enhancing Productivity with ChatGPT-Powered Wondershare PDFelement

AI technology, particularly **ChatGPT**, has rapidly gained traction in various industries due to its ability to provide efficient and personalized solutions. With advancements in natural language processing and machine learning, ChatGPT has become a powerful productivity tool that businesses are leveraging to streamline operations and meet customer demand in the market. 

From editing tools to data analysis, ChatGPT is transforming how companies interact with users and oversee their operations. As a result, customer satisfaction is much better, user engagement is higher, and therefore, outcomes are even better.

As businesses strive to stay ahead of the competition, the adoption of ChatGPT as a productivity tool has become essential to automate routine tasks, analyze data, and generate content, enabling businesses to focus on higher-level strategic initiatives. 

****Meet ChatGPT Powered Wondershare PDFelement****

Wondershare PDFelement is a ChatGPT-powered comprehensive PDF editing and management software that offers a wide range of features to create, edit, convert, and manage PDF documents. With its user-friendly interface and powerful tools, PDFelement provides businesses and individuals with a convenient and efficient solution for working with PDF files. 

Whether it’s editing text and images, converting PDFs to different file formats, or securing sensitive information with encryption, PDFelement offers a versatile and robust platform for managing all aspects of PDF documents. 

PDFelement’s intuitive design and exceptional functionality have made it a popular choice for professionals, companies, and individuals looking for a dependable and affordable PDF editing alternative.

****AI Features in Wondershare PDFelement****

Wondershare PDFelement is powered by OpenAI’s ChatGPT, an advanced AI technology that enhances the functionality of this PDF editing and management software. ChatGPT enables PDFelement to offer an array of powerful features that streamline document workflows and improve productivity. 

However, with ChatGPT, PDFelement goes beyond traditional PDF editing capabilities and introduces four core features: Summarize PDF, Explain PDF, Proofread PDF, and Rewrite PDF, along with Chat with PDF.

****Summarize PDF****

Summarize PDF allows users to quickly generate a summary of lengthy PDF documents, extracting the most relevant information and condensing it into a concise format. This feature is particularly helpful for users who need to review lengthy reports or research papers and want to save time by obtaining a summarized version of the document.

****Explain PDF** **

Explain PDF helps users understand complex PDF documents by providing explanations for technical terms or jargon within the document. This feature is beneficial for users who may not be familiar with specific terminology or concepts, making PDF documents more accessible and understandable.

****Proofread PDF****

Proofread PDF assists users in identifying and correcting grammatical and spelling errors in PDF documents. With this feature, PDFelement acts as a virtual proofreader, helping users ensure that their documents are error-free and professional-looking.

****Rewrite PDF****

Rewrite PDF is a powerful feature that leverages ChatGPT to automatically rewrite content within a PDF document while preserving the original document’s structure and format. This feature is valuable for users who need to paraphrase or rephrase the content, making it more suitable for their specific needs.

****Chat with PDF****

Chat with PDF allows users to interact with ChatGPT within PDFelement, providing a convenient and intuitive way to ask questions, seek clarifications, or get assistance with PDF-related tasks. This feature enhances the overall user experience by providing a seamless and interactive workflow within the PDFelement software.

Altogether, the integration of ChatGPT into Wondershare PDFelement brings innovative and advanced capabilities that empower users to efficiently manage and edit PDF documents with enhanced productivity and convenience.

****AI Content Detector****

The AI Content Detector feature in Wondershare PDFelement is an important tool for anyone who deals with confidential or sensitive information in PDF documents. With this feature, users can quickly and accurately identify potential privacy concerns, such as credit card numbers, social security numbers, and other confidential data. This helps to ensure that the document is safe to share with others or to store securely, without the risk of accidentally exposing sensitive information. The AI Content Detector feature can also be customized to meet specific privacy needs, allowing users to tailor the level of privacy detection to their unique requirements, and giving them peace of mind when working with confidential information.

In summary, the AI Content Detector feature is a powerful tool in Wondershare PDFelement that uses advanced machine learning algorithms to help users identify and highlight sensitive information in PDF documents. Whether you are working with personal financial data, confidential business information, or any other type of sensitive content, the AI Content Detector can help ensure that your documents are safe and secure and that your privacy is protected at all times.

****Wondershare PDFelement’s Functions****

Wondershare PDFelement can significantly improve productivity for work/study by providing various features that streamline PDF-related tasks. Here are some examples:

****Edit and modify PDFs:** **

PDFelement allows you to edit and modify PDFs with ease. You can add, delete, or modify the text, images, and other elements in a PDF file. This can be helpful for updating documents, filling out forms, or making corrections to study materials without having to recreate the entire document from scratch.

****Convert and create PDFs:** **

PDFelement enables you to convert documents from other formats, such as Word, Excel, and PowerPoint, into PDFs with just a few clicks. You can also create new PDF documents from scratch, which can be useful for creating study guides, reports, or other documents for work or study purposes.

****Annotate and collaborate:****

PDFelement allows you to annotate PDFs with comments, highlights, stamps, and other tools. This can be helpful for adding study notes, reviewing documents, or collaborating with colleagues or classmates. You can also use the comment and markup tools to leave feedback on documents, making it easier to work together on group projects or receive feedback on your work.

****OCR (Optical Character Recognition):** **

PDFelement has built-in OCR technology that can convert scanned documents into searchable and editable text. This can be beneficial for digitizing printed materials, such as textbooks or research papers, and making them easily searchable and editable, saving you time and effort in manual data entry.

****Form creation and form data extraction:** **

PDFelement allows you to create interactive forms with checkboxes, radio buttons, text fields, and other form elements. This can be helpful for creating surveys, questionnaires, or feedback forms for work or study purposes. You can also extract form data from PDFs, saving you time and effort in manually collecting and inputting data.

****Document security:** **

PDFelement provides security features such as password protection, redaction, and digital signatures, which can help protect sensitive documents and ensure their integrity. This can be essential for handling confidential work documents or submitting signed assignments for study purposes.

****Batch processing:** **

PDFelement allows you to process multiple PDFs at once, such as batch converting, batch extracting data from forms, or batch applying watermarks. This can save you time and effort when dealing with large numbers of PDF files, making it more efficient for work or study tasks.

Overall, PDFelement’s features improve productivity for work/study by providing robust tools for editing, converting, annotating, collaborating, securing, and automating PDF-related tasks. It simplifies and streamlines PDF workflows, allowing you to work more efficiently and effectively with PDF documents, ultimately boosting productivity in your work or study environment.

****Download Wondershare PDFelement****

If you are ready to unlock the power of cutting-edge artificial intelligence in your PDF editing experience, look no further than Wondershare PDFelement.

With ChatGPT-powered AI features, you can experience a whole new level of productivity and efficiency starting from effortlessly editing, annotating, and collaborating on your PDFs with just a few simple commands. Need to highlight important information, add comments, or extract data from your PDFs? AI features have you covered.

Nevertheless, you can unlock the power of ChatGPT PDF in PDFelement and experience smooth and consistent PDF editing. Experience the power of ChatGPT’s AI features and elevate your PDF editing game to new heights.

Enhancing Productivity with ChatGPT-Powered Wondershare PDFelement

By cyberpress
Dubai / May 1st 2023 / Cyberpress — Cybersecurity gets a new dedicated newswire. Cyberpress, a press release…
This is a post from HackRead.com Read the original post: Cyberpress Launches Cybersecurity Press Release Distribution Platform

**Dubai** / **May 1st 2023** / **Cyberpress —** Cybersecurity gets a new dedicated newswire. Cyberpress, a press release distribution platform for the cybersecurity industry, has opened its doors today. This newswire service provides an effective communications approach for cybersecurity companies, public relations agencies and marketing advisors, investment firms operating in the space and more.

“Unlike traditional newswire services that focus on quantity, we believe in the quality approach, in which our priority is to deliver our clients’ announcements to cybersecurity-focused media outlets as opposed to shooting everywhere.” says Adam Nolen, VP Business Development at Cyberpress, “our offering saves outreach time and effort, making communications for cybersecurity companies easier, simple and under one roof”

According to Nolen, “Our goal is to provide a reliable and efficient platform that helps businesses improve their marketing and communications strategy. We believe that by providing a more targeted distribution approach, we can help companies reach their target audience and get their message across more effectively.”

According to the cybersecurity statistics presented by Statista, the worldwide cybersecurity market is projected to reach a value of 281.74 billion U.S. dollars by the year 2025. In 2021 alone, the global cybersecurity market was valued at approximately 220 billion U.S. dollars, indicating a significant growth potential for the industry in the coming years.

**About Cyberpress**

Cyberpress is a cybersecurity press release distribution platform. The platform provides a more targeted approach to help B2B/B2C cybersecurity companies, PR agencies and marketing advisors, investment firms and more, to reach their target audience and get their message across more effectively.

**Contact**:

**Full Name**: Adam Nolen

**Email**: info@cyberpress.io

**Website**: www.cyberpress.io

**Newsroom**: news.cyberpress.io

**SOURCE**:

Cyberpress Launches Cybersecurity Press Release Distribution Platform

By Waqas
Gary James Harmon, a 31-year-old man from Cleveland, Ohio, has been sentenced to four years and three months…
This is a post from HackRead.com Read the original post: Man used brother’s credentials to steal $4.8M seized Bitcoin

Gary James Harmon, a 31-year-old man from Cleveland, Ohio, has been sentenced to four years and three months in prison for stealing more than 712 Bitcoin that were subject to forfeiture in a then-pending criminal case.

According to court documents, Harmon stole the cryptocurrency from his brother Larry Dean Harmon’s operation of Helix, a dark web-based cryptocurrency money laundering service known as a “mixer” or “tumbler.”

Gary James Harmon, with a bathtub of money – Image: US District Court for the District of Columbia/

Larry Dean Harmon was arrested in February 2020, and law enforcement seized various assets, including a cryptocurrency storage device containing illegal proceeds generated through the operation of Helix, which was subject to forfeiture in the criminal case. However, law enforcement could not recover Bitcoin stored on the device due to the device’s security features.

Knowing that the government was seeking to recover the Bitcoin stored on the seized device for forfeiture in Larry Harmon’s criminal case, Gary Harmon used his brother’s credentials to recreate the Bitcoin wallets stored on the device and covertly transferred more than 712 Bitcoin, valued at approximately $4.8 million at the time, to his own wallets, stealing those funds and obstructing the pending criminal forfeiture proceeding.

Gary Harmon further laundered the proceeds through two online Bitcoin mixer services before using the laundered bitcoins to finance large purchases and other expenditures.

In August 2021, Larry Harmon pleaded guilty to a money laundering conspiracy concerning his case. Gary Harmon agreed to the forfeiture of cryptocurrencies and other properties derived from the fraudulently taken proceeds, including more than 647.41 Bitcoin (BTC), 2.14 Ethereum (ETH), and 17,404,400.64 Dogecoin (DOGE). Due to the increase in market prices, the total value of these forfeitable properties exceeds $20 million.

1.  Europol Busts Crypto Fraud Call Centers
2.  Scammers Netted $7.7B of Cryptocurrency in 2021
3.  US: 3 crypto campaigns run by terror groups disrupted
4.  235 dark web money counterfeit gang members busted

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Man used brother’s credentials to steal $4.8M seized Bitcoin

By Owais Sultan
Living without the Internet is hardly imaginable today. However, the anonymity of the internet has led to the…
This is a post from HackRead.com Read the original post: Preventing Malware & Cyber Attacks: Simple Tips for Your Computer

Living without the Internet is hardly imaginable today. However, the anonymity of the internet has led to the flourishing of cyber attacks and malware. Malicious software can cause damage to our devices, steal personal data, and lead to monetary loss. Therefore, protecting your computer from these threats is crucial. This article will outline some methods and resources for protecting your devices from malicious software, and explain why it’s essential to use malware removal at all times.

****Tip #1: Keep Your Operating System and Software Up to Date****

One of the most crucial things you can do to keep your computer secure is to keep your operating system and software up to date. Security patches are frequently released by software developers to address flaws that hackers could exploit. Failing to update your system and software leaves your computer vulnerable to potential threats.

To ensure that your operating system and software are up to date, it’s important to turn on automatic updates. This will ensure that your system gets updates as soon as they become available. Additionally, you can manually check for updates by accessing the settings for your software or operating system. By doing this, you can be certain that your computer is protected against potential threats.

****Tip #2: Use Antivirus and Anti-Malware Software****

Antivirus and malware removal software are essential tools for protecting your computer against malicious software such as viruses, spyware, and ransomware. These programs scan your computer on a regular basis for malware and remove it if found. By using antivirus and anti-malware software, you can safeguard your computer from malicious attacks and maintain its security.

When it comes to antivirus and anti-malware software, it’s crucial to choose a reputable and trustworthy option that offers comprehensive protection against various types of malware. With numerous software options available on the market, selecting the right one can be overwhelming. However, by doing some research and selecting the one that meets your needs, you can ensure that your computer remains protected from potential threats.

**Tip #3: Use a Firewall**

A firewall is a crucial security system that monitors and controls network traffic, both incoming and outgoing. It serves as a barrier between your computer and the internet, blocking unauthorized access. By utilizing a firewall, you can protect your computer from potential cyber attacks and enhance its security.

Most operating systems come with a built-in firewall that you can enable by going to your system’s settings. However, you can further increase your computer’s security by installing a third-party firewall. These firewalls offer additional features and customization options that can help you tailor the protection to your needs. By using a firewall, you can safeguard your computer against potential threats and enhance its overall security.

**Tip #4: Use Strong and Unique Passwords**

Using strong and unique passwords is crucial in safeguarding your device against potential cyber attacks. Cybercriminals frequently use automated programs to guess passwords and weak passwords are easily guessed, allowing them to gain access to your computer more easily. By using strong and unique passwords, you can significantly enhance your computer’s security.

To create a strong password, use a combination of letters, numbers, and symbols. Avoid using common phrases or words that are easily guessed. Additionally, do not use the same password for multiple accounts, as this can leave you vulnerable if one account is compromised. Consider using a password manager to generate and store strong and unique passwords for all your accounts. By taking these steps, you can ensure that your computer remains protected against potential threats.

**Tip #5: Be Wary of Phishing Scams**

Phishing scams are a type of social engineering attack that cybercriminals use to trick people into disclosing sensitive information like passwords and credit card numbers. These scams can be sent via email, text messages, or even social media. Falling prey to a phishing scam can lead to significant financial loss and compromise your personal information.

To avoid falling victim to phishing scams, it’s important to be cautious of any suspicious emails or messages. Do not click on any unknown links or download any attachments from suspicious sources. Always check the sender’s email address to ensure that it is from a legitimate source.

If you receive an email that appears to be from your bank or another financial institution, do not provide any sensitive information. Instead, contact the institution directly to confirm the authenticity of the email. By taking these steps, you can protect yourself from phishing scams and keep your personal information secure.

**Tip #6: Use Two-Factor Authentication**

Two-factor authentication (2FA) is a crucial security measure that adds an extra layer of protection to your online accounts. This security measure requires users to provide two forms of identification before accessing their accounts, making it more difficult for cybercriminals to access your information. Two-factor authentication can prevent unauthorized access to your accounts and protect your sensitive information from being compromised.

Many online services, such as email and social media platforms, offer two-factor authentication as an additional security measure. To enable two-factor authentication, go to your account settings and follow the instructions provided by the service. You can usually choose between receiving a code via text message or using an authentication app. Enabling two-factor authentication can greatly improve the security of your accounts and help keep your personal information safe.

**Tip #7: Back Up Your Data Regularly**

The best practice to protect your data from cyber attacks is to regularly back it up. If your computer is infected with malware or hacked, you might lose all your data. By backing up your data regularly, you can easily restore your data in the event of a cyber attack.

In conclusion, adhering to the tips and tools mentioned above can not only safeguard your personal or business data but also prevent potential embarrassment and costly fines.  
Use anti-virus and anti-malware software.

Preventing Malware & Cyber Attacks: Simple Tips for Your Computer

By Deeba Ahmed
The malware was identified by cybersecurity researchers at McAfee.
This is a post from HackRead.com Read the original post: Goldoson Android Malware Found in 60 Apps with 100M Downloads

****Goldson malware can collect data from apps installed on the device, as well as from Bluetooth- and Wi-Fi-connected devices.****

McAfee’s Mobile Research Team researchers discovered at least 60 malicious apps on Google Play Store infected with Android malware Goldoson. Collectively, these apps account for around 100 million installs on the Play Store and 8 million installs on the South Korean ONE Store. South Korean users are most vulnerable to downloading these apps.

**Goldoson Infiltrates Legit Apps on Play Store**

Researchers found that Goldoson Android malware has infiltrated the official Google Play Store via 60 legitimate apps. The malware component is based on a third-party library that all sixty apps use. Researchers assume that the developers mistakenly added it to the apps.

**Which Apps Are Infected with Goldoson?**

Some of the infected apps include the following:

Pikicast
GOM Player
LIVE Score
Infinite Slice
Real-Time Score
L.POINT with L.PAY
Swipe Brick Breaker
Bounce Brick Breaker
LOTTE WORLD Magicpass
Compass 9: Smart Compass
Korea Subway Info: Metroid
SomNote - Beautiful note app
GOM Audio - Music, Sync lyrics
Money Manager Expense & Budget

**How Does The Device Gets Infected?**

The Goldoson Android malware is designed to perform malicious actions on devices that download one of the 60 infected apps. Once the app is downloaded and launched, the malware library registers the app and receives its configuration from a remote server with an obfuscated domain.

This configuration sets the functions that the malware will run on the device, including ad-clicking and data-gathering features. The data collection function is activated every two days, and the collected data, along with the MAC address of connected Bluetooth and Wi-Fi devices, is transferred to a C2 server.

The ad-clicking feature is launched by loading and injecting HTML code into a hidden, customized WebView. This feature generates revenue through multiple URL visits. Overall, the Goldoson malware has been found in 60 different apps and has impacted a large number of downloads.

**What is Goldoson Malware Capable of?**

Goldson malware can collect data from apps installed on the device, as well as from Bluetooth- and Wi-Fi-connected devices. In addition, it can track users’ location and carry out ad fraud by clicking on ads in the background without alerting the user. Data collection relies on permissions given to an infected app when being installed. 

In a blog post, McAfee researchers stated that although Android 11 and above versions are generally considered safe against data theft due to their superior security protections, in 10% of the infected apps, Goldoson could collect sensitive data from devices running these versions.

McAfee responsibly alerted Google and the app developers, who promptly removed the malicious library from the apps. Apps in which they couldn’t remove the library were taken off the Play Store.

It is worth noting that malicious versions of these apps will still be available on third-party Android app stores even though on Play Store these apps will become safe with an update. Therefore, uninstall the app, and reinstall it from Play Store to be safe.

1.  Russian Android Spyware Tracks GPS Location
2.  Play Store Apps Drop Android Malware to Millions
3.  BRATA malware steals funds, factory resets phones

Goldoson Android Malware Found in 60 Apps with 100M Downloads

By Deeba Ahmed
BlackCat ransomware initially claimed responsibility for the ransomware attack on its dark web blog but later removed its post, indicating negotiations between the two parties.
This is a post from HackRead.com Read the original post: BlackCat (ALPHV) Gang Claims Ransomware Attack on NCR Data Center

****The ransomware attack was discovered on April 12th, 2023 when the company began investigating an issue in its Aloha restaurant point of sale (PoS) product.****

Leading US software and payment platform provider NCR has confirmed that it has fallen victim to a ransomware attack. NCR specializes in providing technology and payment systems for the restaurant and hospitality sectors.

The ransomware attack was discovered on April 12th, 2023 when the company began investigating an issue in its Aloha restaurant point of sale (PoS) product. It was confirmed as a ransomware attack on April 13. NCR promptly notified law enforcement and launched an investigation in collaboration with third-party cybersecurity experts.

NCR has revealed that the attack impacted some of the ancillary applications and Counterpoint used by a small subset of its hospitality clients, causing operational disruption at one of its data centres.

However, NCR stated that affected restaurants can still serve customers as the entire system was unaffected. Customers are currently able to access limited functions on some cloud-based systems, as the attack affected features that disrupted the restaurant’s administrative functionalities.

NCR is working diligently to restore full service for its customers and is providing dedicated assistance and workarounds to support its operations in the meantime. The company is also focused on establishing alternative functionality for customers, enhancing cybersecurity mechanisms, and fully restoring impacted data and apps.

Notably, NCR’s digital banking, ATM, payments, and other retail products were not processed at the affected data centre.

The ransomware group responsible for the attack, known as BlackCat (aka Alphv), has claimed responsibility and stated that NCR representatives have contacted them to learn what data was stolen from their systems.

However, the hackers later removed this post, suggesting that negotiations between the two parties have begun and NCR may potentially pay the ransom. NCR has not disclosed the ransom amount at this time.

> NCR Corporation breached by Black Cat. https://t.co/6beimfrsze pic.twitter.com/Bnh6s3RKfu
> 
> — Dominic Alvieri (@AlvieriD) April 15, 2023

According to NCR’s incident report, the company is working to make its Insight and NCR Back Office cloud environments available soon. Once this is done, Insight, NBO, and Pulse will upload/process restaurant data and impacted clients will receive an email containing replication configuration details after a few days.

Recovery plans for other affected applications, including Aloha Configuration Center, are also underway. It is worth noting that last month, the BlackCat ransomware gang also claimed responsibility for compromising Amazon’s Ring camera and gaining access to customers’ sensitive data.

1.  OVH data centre catches disastrous fire
2.  National Data Center Hit by watering hole attack
3.  Tech Giants’ Login Data Leaked in 2 Data Center Hacks
4.  Hyperconverged Infrastructure is Changing Data Centers

BlackCat (ALPHV) Gang Claims Ransomware Attack on NCR Data Center

By Deeba Ahmed
The new ransomware was spotted by MalwareHunterTeam, which is capable of encrypting macOS devices.
This is a post from HackRead.com Read the original post: LockBit Ransomware Expands Attack Spectrum to Mac Devices

****Analysis by Apple’s Patrick Wardle confirms that Lockbit ransomware “poses no threat to macOS users.”****

LockBit ransomware gang is reportedly developing a new version of malware that can encrypt files on Apple macOS, as revealed by MalwareHunterTeam. This would be the first instance of malware targeting Mac devices, as LockBit has previously focused on Linux and Windows devices.

The ransomware group is known for its RaaS (ransomware-as-a-service) operation, lending ransomware to cybercriminals for a fee. The new malware is named locker\_Apple\_M1\_64, and there are separate versions for PowerPC Macs as well.

****Malware Details:****

The new malware, locker\_Apple\_M1\_64, was first detected targeting Mac devices in November 2022, according to Vx-Underground, a platform that examines malware samples. It has not been detected by any anti-malware engines on VirusTotal, but information about this malware has been limited since last fall.

Researchers have noted that the LockBit ransomware gang is expanding its attack spectrum by targeting Macs, which marks a significant development in their tactics.

> Not a single person I can find tweeted LockBit has a Mac targeting version before I did above yesterday, nor can find any blog posts mentioning it, etc. So even if the gang had the first build in 2022 November, for public, this is not late at all, but even yet, seems the first… pic.twitter.com/4iR71cuLpo
> 
> — MalwareHunterTeam (@malwrhunterteam) April 16, 2023

****Expert Analysis:****

According to Patrick Wardle, a security researcher and founder of Objective-See, while the malware is capable of running on Macs, it does not pose a serious risk due to several factors. The malware sample analyzed by Wardle was not signed by a trusted certificate, which means macOS won’t run it.

Additionally, Apple’s file system protection solutions such as Transparency, Consent, and Control/TCC would limit the impact of the malware even if it manages to infiltrate a macOS device. Moreover, the malware had bugs, and Wardle concluded that it was not ready for prime time.

In a blog post, Wardle stated that the ransomware is buggy and contains flaws, including buffer overflows that cause it to prematurely exit.

> While this may be the first time a large ransomware group created ransomware capable of running on macOS, it is worth noting that this sample is far from ready for prime time \[…\] From its lack of a valid code-signing signature to its ignorance of TCC and other macOS file-system protections as it stands it poses no threat to macOS users.
> 
> Patrick Wardle

****Conclusion:****

In conclusion, the LockBit ransomware gang’s development of a macOS version of malware targeting Mac devices is a significant development in their attack tactics. However, based on Apple’s analysis, the current version of the malware does not pose a serious risk to macOS devices due to security measures in place.

Nevertheless, it underscores the need for continued vigilance against evolving malware threats and the importance of robust cybersecurity measures to protect against ransomware attacks on all platforms.

1.  BitTorrent sites drop crypto-ransomware on macOS
2.  EvilQuest ransomware hits macOS via pirated software
3.  macOS malware XcodeSpy sneaking into spy on victims

LockBit Ransomware Expands Attack Spectrum to Mac Devices

By Waqas
QuaDream, based in Ramat Gan, Israel, with around 40 employees, is known for its spyware used for hacking iPhones. 
This is a post from HackRead.com Read the original post: QuaDream, Israeli iPhone hacking spyware firm, to shut down

****QuaDream, an Israeli cyber mercenary, was recently exposed by Citizen Lab and Microsoft for developing spyware that hacks iPhones.****

QuaDream, a rival spyware developer of NSO Group, is reportedly preparing to shut down its operations. Employees of QuaDream have been summoned for a hearing, and it has been revealed that the company plans to lay off most of its employees, retaining only a small fraction to oversee the closure.

This decision comes amidst a survival crisis faced by the Israeli cyberattack industry, with several companies, including the cyberattack unit of Cognyte and Nemesis, reportedly shutting down. NSO Group also laid off 150 employees in the previous summer.

It is worth noting that Hackread.com also published a report on QuaDream titled “QuaDream: Israeli Cyber Mercenary Behind iPhone Hacks,” based on the findings of Citizen Lab and Microsoft. These findings may have played a significant role in QuaDream’s apparent demise.

Here’s what Eva Galperin, the Director of Cybersecurity at EFF (Electronic Frontier Foundation), had to say about the recent development:

> — Eva (@evacide) April 16, 2023

QuaDream, based in Ramat Gan, Israel, with around 40 employees, is known for its spyware used for hacking iPhones. Sources indicate that the company has notified its employees about the upcoming closure.

QuaDream’s operations have always been shrouded in mystery and came to the forefront recently after it sent a response letter to the Bat Yam Labor Court in defence of a lawsuit brought by a former employee.

Reportedly, in the letter, QuaDream cited a crisis in the cyberattack sector as the reason for laying off employees, with the industry’s downturn starting in 2018 when several companies publicly disclosed their activities, resulting in the blacklisting of Candiru and NSO by the US Chamber of Commerce in November 2011.

The crisis further deepened in early 2022 when the Israeli regulator announced a reduction in the number of countries where companies could sell their products, from 102 to 37, causing a severe economic crisis across the entire industry. By November 2022, businesses reported a significant negative trend, which also impacted QuaDream’s cash flow.

QuaDream was founded by Nimrod Reznik and Ilan Dabelstein, who still serve as senior managers. Its flagship product is an integrated software/hardware system that takes over local networks to hack phones connected to it.

Another popular product is software used for gaining remote access to phones. In 2022, Reuters reported that QuaDream had developed a no-interaction-based zero-click hacking tool similar to NSO Group’s products, which was in high demand among cybercriminals and espionage actors.

However, QuaDream faced a major setback when a report from Microsoft and Citizen Lab revealed that its hacking tools were used against advocacy organizations, journalists, and opposition figures in ten countries, including North America and Europe.

The report also suggested that the spyware used in these attacks was provided by QuaDream. Microsoft’s associate general counsel, Amy Hogan-Burney, emphasized the importance of publicly disclosing the activities of companies like QuaDream to hold them accountable.

Since the publication of this research, QuaDream has not been fully active, and its board of directors is now reportedly looking to sell its intellectual property.

1.  Zippyshare Quits Operation: 10 Best Alternatives
2.  Dark web market for stolen cards UniCC calls it quits
3.  Franco-Israeli Gang Linked to $40m CEO Scam Busted
4.  Israel Hit by Wave of Cyberattacks on Critical Networks
5.  Israeli Spyware Vendor Uses Chrome 0day to Hit Journalists
6.  European Spyware Vendor Sells Android & iOS Device Exploits

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism