By Deeba Ahmed
APT28 or Fancy Bear is linked with the Russian military intelligence unit called GRU.
This is a post from HackRead.com Read the original post: Fancy Bear Hackers Distributing Graphite Malware using PowerPoint Files

Fancy Bear, aka APT28, is a Russian state-sponsored threat actor. The group is back in action and utilizing a new code execution method that exploits mouse movement in MS PowerPoint files to distribute Graphite malware.

For your information, APT28/Fancy Bear is linked with a Russian military intelligence unit called GRU. This is the same group that was blamed for hacking MH17 flight crash investigators with a spear-phishing campaign in October 2016. In 2018, the group was accused of sending death threats to US army wives posing as ISIS.

**Campaign Details**

According to threat intelligence firm Cluster 25, Fancy Bear used mouse movements in MS PowerPoint presentations to execute a malicious PowerShell script. The group leverages the SyncAppvPublishingServer utility for this purpose.

In its technical report, Cluster25 stated that the attack starts right after the user runs the presentation mode and uses the mouse. A PowerShell script is run, and a dropper from OneDrive is downloaded and executed.

The .ppt files have two slides with instructions in French and English, while the interpretation option is available in the Zoom app. The image file is an encrypted DLL file, which is decrypted and dropped in the ‘C:\\ProgramData\\’ directory,’ it is run later through rundll32.exe, and a registry key is also created to ensure persistence.

The dropper is a harmless-looking image file that functions as a pathway for a follow-on payload. This is a Graphite malware variant. It uses the Microsoft Graph API and OneDrive to carry out C2 communications and retrieve additional payloads. Fancy Bear uses a valid OAuth2 token and a fixed client ID to access the service.

PowerShell Script

**More Fancy Bear News**

1.  Anti-theft software LoJack hijacked by Fancy Bear
2.  Republican & Conservative leaders targeted by Fancy Bear
3.  Fancy Bear Spy on VIP Hotel Guests with Leaked NSA Tool
4.  Fancy Bear’s VPNfilter malware is back with 7 new modules
5.  Hackers alter stolen emails for clandestine attacks against Putin’s critics

**Attack Method Analysis**

The attack, according to the company’s report, entails using a lure document with a template linked to the Parish-based entity OECD (Organization for Economic Co-operation and Development).

Researchers noted that these attacks are ongoing since the URLs used in the attack were active between August and September. However, they also said that hackers had started prepping for the campaign in January.

> “When opening the lure document in presentation mode and the victim hovers the mouse over a hyperlink, a malicious PowerShell script is activated to download a JPEG file (“DSC0002.jpeg”) from a Microsoft OneDrive account.”
> 
> Cluster 25

**Potential Targets**

this campaign’s potential targets include individuals and organizations in the government and defense sectors. Fancy Bear is primarily targeting entities in Eastern Europe and Europe. This indicates that Fancy Bear aims to achieve specific objectives, considering the geographic focus of the gang.

Fancy Bear Hackers Distributing Graphite Malware using PowerPoint Files

By Waqas
The games industry boomed in lockdown and market value will reach $320 billion, and it is only natural that some of this money would flow into blockchain gaming companies. 
This is a post from HackRead.com Read the original post: What is Blockchain Gaming and its Play-to-Earn Model?

With the popularity of cryptocurrency, blockchain gaming has become a new genre of gaming. Blockchain games are decentralized and use cryptocurrency to power their in-game economy. This allows for a more secure and transparent gaming experience.

Although blockchain gaming is still new, its impact on gaming is becoming the next big thing, and not just in terms of financial transactions. The use of blockchain can change the very nature of how games are played.

Here’s a look at how blockchain is being used in gaming, who are the players, and what it could mean for the future of this rapidly growing industry.

Blockchain-based games are already being developed and played. One example is Ethereum-based CryptoKitties, which allows players to breed and trade digital cats. Other games under development include decentralized versions of popular titles like FIFA, Call of Duty, and World of Warcraft.

The games industry boomed in lockdown and market value will reach $320 billion, and it is only natural that some of this money would flow into blockchain gaming companies. For instance, Everyrealm, one of the most active investors in and developers of the metaverse real estate ecosystem, just powered the launch of a new game on Sandbox. They previously raised $60M led by Andreessen.

There are already a number of popular blockchain gaming companies out there, each with its own unique offerings. One such example is Decentral Games which enables users to play games in the Metaverse.

The company follows the “play to earn” model. This model allows players to earn cryptocurrency (ICE Tokens) that can be traded for real-world currency. Decentral Games also completed its ICE merge recently which means ICE token emissions will drop by 55%.

According to the company, the drop is achieved by changing the type of rewards obtained by delegated players who are renting the wearable NFTs required for joining the game. From now on, instead of direct ICE rewards, they will obtain “banked ICE” which can be used to purchase wearables and join its tournaments.

> “The existing play-to-earn model is broken. While offering limitless rewards to those that have invested nothing can be incredible for bootstrapping player liquidity, they are unsustainable. We’ve seen this with nearly every major GameFi project that kept this model. We’re taking a different approach. Our focus is on the long term and it centers on enabling our players to own in-game assets through their gameplay while managing the token emissions we create so that the player base can scale without issue. This is what’s going to set us apart over the next 12-18 months.”
> 
> Matthew Howells-Barby, CMO -Decentral Games

For those unsure of how to get into the Metaverse; joining the Metaverse is easy and only requires a few steps to get started. First, create an account on any of the many participating websites. Once you have an account, you can begin creating your own 3D avatar.

After you have created your avatar, you can start exploring the Metaverse. There are many different ways to explore the Metaverse, including visiting virtual worlds, chatting with other users, and of course, participating in online games.

Not only is this a great way for gamers to make some extra cash, but it also helps to support the development of new and innovative games. Blockchain gaming is still in its early stages, but it has already shown great potential for changing the way we think about video game monetization.

1.  The Benefits Of Blockchain In The Travel Industry
2.  How Will Blockchain Technology Revolutionize Logistics?
3.  How Blockchain Can Revolutionize Personal Data Storage?
4.  How DeFiChain gives DeFi a boost with decentralized assets
5.  Naoris Protocol Will Use Blockchain To Plug Web3 Security Gaps

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

What is Blockchain Gaming and its Play-to-Earn Model?

By Waqas
Before being removed, the Scylla ad fraud campaign used over 90 malicious apps to carry out its operation against Android and iOS users.
This is a post from HackRead.com Read the original post: Scylla Ad Fraud Attack on iOS and Android Users Halted by Apple and Google

The Satori Threat Intelligence and Research Team at Human identified a new wave of cyberattacks involving the use of malicious applications against iOS and Android users. The alarming fact is that these infected apps boast millions of downloads.

The good news is that the attack has been halted by Apple and Google after their prompt response to the researchers.

**Malicious Apps Found on Legitimate Platforms**

Reportedly, 89 malicious apps were discovered and used in a mobile fraud ad campaign. The apps collectively boasted around 13 million downloads. The researchers have dubbed this campaign Scylla.

Per their research, this campaign is the third installment of the Poseidon fraud campaign discovered in 2019, and its second installment was named Charybdis, which was detected in 2020.

You may be wondering where have you heard the term Scylla and Charybdis before. “Being between Scylla and Charybdis” is an idiom deriving from Greek mythology, which has been associated with the proverbial advice “to choose the lesser of two evils”.

In Greek mythology, Scylla and Charybdis were two monsters who lived on either side of a narrow channel of water. Scylla was a six-headed monster (_also featured in the TV series Prison Break_) who lived on a rock in the middle of the channel. Charybdis was a whirlpool who lived on the other side of the channel.

As for the malicious campaign, out of these 89 apps, 89 are Android, and 9 are iOS-based apps. The malicious apps perform ad fraud via hidden apps, spoofing, and fake clicks. What makes Scylla different from the earlier two mobile fraud campaigns is that this time the attackers have found a way to target iOS devices too.

**More Android Malware News**

1.  New malware targeting IoT devices, Android TV globally
2.  LG Smart TV Screen Bricked in Android Ransomware Attack
3.  Top 10 Android Educational Apps That Collect Most User Data?
4.  Fake Banking Rewards Apps Install Malware on Android Phones
5.  Hacked Android phones mimicked TV products for fake ad views

**Campaign Analysis**

According to the company’s blog post, just like the Charybdis campaign, the apps used in Scylla also contained obfuscated code. The attack mechanism is also somewhat the same as the apps target advertising software development kits/SDKs.

One of the iOS apps called “Wood Sculptor,” linked to the Scylla ad fraud campaign (Source: Satori Threat Intelligence and Research Team)

It is worth noting that some apps contained code that posed as completely different when observed by advertisers and ad tech firms.

> “These tactics, combined with the obfuscation techniques first observed in the Charybdis operation, demonstrate the increased sophistication of the threat actors behind Scylla.”
> 
> Satori Threat Intelligence and Research Team

**Application Detailed Overview**

Human researchers detected 29 Android apps posed as more than six thousand CTV-based apps to encourage higher ad proceeds than mobile games. Conversely, some apps contained code that informed advertisers of the ads they displayed to the user.

This means the code rendered ads after the apps were closed, such as when the home screen was on. Some apps captured the information about what ads the user clicked on and transferred the info to advertisers as a fake click. Most of the malicious apps were games.

Google and Apple were promptly informed about malicious apps’ presence and quickly removed from their respective platforms. Advertising SDK developers were also informed about the attack.

Human also published a list of malicious apps and urged users to remove them if installed on their devices. To remove these apps, just tap and hold the App and tap on the Remove option. Then tap on Delete App.

**More iOS Malware News**

1.  SolarWinds hackers exploited iOS 0-day to hack iPhones
2.  Malicious SDK spying, defrauding users through iOS apps
3.  Facebook removes accounts for iOS, and Android malware
4.  Fake Covid-19 apps hit Android and iOS users with spyware
5.  Install Malware on iPhone When it is Powered Off – Research

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Scylla Ad Fraud Attack on iOS and Android Users Halted by Apple and Google

By Waqas
There is no excerpt because this is a protected post.
This is a post from HackRead.com Read the original post: Protected: What is Blockchain Gaming and play to earn model?

HACKREAD is a News Platform that centers on InfoSec, Cyber Crime, Privacy, Surveillance and Hacking News with full-scale reviews on Social Media Platforms & Technology trends. Founded in 2011, HackRead is based in the United Kingdom.

Copyright © 2022 HackRead

*   Home
*   Advertise
*   Privacy Policy
*   Contact Us

Hackread.com is among the registered trademarks of Gray Dot Media Group Ltd. Company registration number 12903776 in regulation with the United Kingdom Companies House. The registered address is 85 Great Portland Street, London, England, W1W 7LT The display of third-party trademarks and trade names on the site do not necessarily indicate any affiliation or endorsement of Hackread.com. If you click an affiliate link and buy a product or service, we may be paid a fee by that merchant.

Protected: What is Blockchain Gaming and play to earn model?

By Deeba Ahmed
Famous publisher 2K Games’ helpdesk platform was hacked where the attackers attempted to distribute malware to gamers’ devices.…
This is a post from HackRead.com Read the original post: 2K Games Help Desk Platform Hacked to Spread Info-stealing Malware

Famous publisher 2K Games’ helpdesk platform was hacked where the attackers attempted to distribute malware to gamers’ devices. Resultantly, 2K Games started investigating the incident and took its support platform offline last week.

It is worth noting that 2K is known for publishing some high-profile games including BioShock, WWE 2K, NBA 2K17, NBA 2K18, Evolve, Spec Ops: The Line, Max Payne Series, WWE 2K22, PGA Tour 2K, and many more.

**Incident Details**

On September 20th, 2K Games tweeted that an unauthorized third-party accessed the credentials of one of its vendors illegally. The vendor was associated with the helpdesk platform the publisher uses to offer support to its customers. The third party sent malicious links to gamers.

> “The unauthorized party sent a communication to certain players containing a malicious link. Please do not open emails or click on any links you receive from the 2K Games support account.”
> 
> 2K Games

In this campaign, the attackers first launch a fake support ticket and reply to it soon after. In their reply message, they share a file named 2K Launcher.zip. This file is a lure to invite gamers to run the file on their endpoints.

This file, in reality, hides the RedLine Stealer. It is a notorious info-stealing malware that can steal passwords stored in the browser and banking data. Moreover, it can also steal cryptocurrency wallet credentials, web browser history, VPN credentials, and cookies.

In February 2022, the RedLine Stealer was found infecting unsuspecting victims in fake Windows 11 update campaign. In July 2022, as reported by Hackread.com, the same malware was identified bundling with YTStealer and Vidar malware in an attack that was aimed at hijacking YouTube channels.

**Company Statement**

The publisher issued a statement, explaining that it will give a notification after interaction with official 2K helpdesk emails is resumed. The company will also follow up with updated information regarding how users can protect themselves against malicious activity. It is yet unclear who perpetrated the attack.

**How to Stay Protected**

Anyone who clicks on the link must immediately reset their password to stay protected, 2K Games recommends players. Since they have realized the type of malware used by the attackers, the company also suggested that players enable in-app MFA wherever possible instead of SMS-based authentication and keep checking their email accounts for forwarding rules.

> “We deeply apologize for any inconvenience and disruption that this matter may cause. We appreciate the ongoing support and understanding from our player communities.”
> 
> 2K Games

**Gamers and Malware Protection**

Big companies spend less on security. However, gaming-related hacks and malware attacks are a big problem for gamers. (_Look what “they” did to RockStar Games and its upcoming GTA 6 game_). These attacks can ruin your gaming experience and even your computer. There are a few things you can do to protect yourself from malware.

First, be careful what you download. Only download games from trusted sources. If you’re not sure if a site is safe, do some research before downloading anything.

Second, keep your computer up to date. Make sure you have the latest security updates and anti-virus software installed. This will help keep your computer safe from any new malware that comes out.

Third, be careful what you click on. Don’t click on any links in emails or on websites unless you’re sure they’re safe. Many times, malware is spread by people clicking on malicious links.

By following these simple tips, you can help protect yourself from malware and have a better gaming experience overall.

**More on Hackread.com**

1.  Fake Microsoft Helpdesk Calls Aim To Install Malware on PC
2.  Scammers Leveraging Microsoft Team GIFs in Phishing Attacks
3.  250 million Microsoft customer support records leaked in plain text
4.  Facebook Phishing: Crooks Using Messenger Chatbots to Steal Data
5.  Mainstream Live Chat widgets leaking personal details of employees

2K Games Help Desk Platform Hacked to Spread Info-stealing Malware

By Waqas
The hacker has also decided not to sell the stolen Optus customers' data to anyone.
This is a post from HackRead.com Read the original post: Optus Hacker Apologizes to Australians Over Data Breach

A hacker who alleged to have targeted Australia’s second-largest telecom firm Optus and obtained data of millions of Australians has dropped more records online. Previously, the hacker asked for a ransom payment of approx.—$ 1 million in exchange for customer records. However, on Tuesday, the attacker retracted this demand.

**Optus Hacker Published Apology After Releasing New Dataset**

On Monday, the alleged attacker published an initial dataset of Optus customers, which contained 200 records. The hacker uploaded the text file of these records on a data breach website and claimed to keep leaking 10,000 new records every day for the next four days if Optus didn’t agree to pay the ransom in Monero cryptocurrency.

However, the hacker surprisingly deleted the extortion threat after releasing the latest batch of 10,000 records. The hacker also apologized to the company by editing the original data breach post revealing that the stolen data is deleted and he was sorry for the breach.

“Too many eyes. We will not sale data to anyone. We can’t if we even want to: personally deleted data from drive (Only copy),” the edited post read.

The alleged Optus hacker said they were sorry to the Australians impacted by the breach.

“Australia will see no gain in fraud, this can be monitored. Maybe for 10,200 Australians but the rest of the population no. Very sorry to you.”

However, this change of heart may not offer much solace to Optus customers.

Optus hacker on a hacker forum

**Leaked Information**

The stolen data includes Optus customers’ names, email addresses, dates of birth, passport numbers, driver’s license numbers, phone numbers, addresses, and Medicare numbers. It also includes over a dozen federal and state government email IDs.

Furthermore, the compromised data also had four emails from the defense department and one from the Prime Minister’s department and Cabinet.

**Previous Coverage**

As reported by Hackread.com, Optus confirmed the data breach on Thursday, claiming that its customers’ personal data might have been compromised in the breach.

Reportedly, the attackers accessed the customer identity database of the company and exposed it to other systems via exploiting the Application Programming Interface. Optus believes its network was exposed to a test network with internet access.

**Latest Update**

The hacker blamed Optus’ weak security for the data breach and criticized the company for the absence of any mechanism to report an exploit. Conversely, Optus claims the breach resulted from a sophisticated attack.

It is unclear whether the alleged Optus hacker was the only one to access the data or was exposed to another party. The FBI and the Australian federal police have collaborated to discover the attacker and whoever accessed the data. Until the perpetrator is caught, scammers might have a field day as they are already gearing up to profit from the leaked data.

According to the Commonwealth Bank of Australia, they blocked an account attempting to extort $2,000 from one of the victims of the Optus data breach.

1.  Hacker returns $17 million worth of stolen Ethereum
2.  Hacker returns $25 million after their IP address is exposed
3.  Telecom giant behind routing SMS discloses 5-year-long data breach
4.  Multichain hack: Hacker returns $1 million, keeps $150k as a bug bounty
5.  Croatian Police arrests minor over A1 Telecom data breach & ransom demand

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Optus Hacker Apologizes to Australians Over Data Breach

By Waqas
According to the breach notification, 369 Elbit Systems employees got their information stolen by the attackers.
This is a post from HackRead.com Read the original post: US branch of Israeli defense contractor Elbit hit by data breach

Elbit Systems of America, which is the US branch of an Israeli defense contractor, Elbit, has confirmed that its network was targeted by cybercriminals in early June 2022. Resultantly, the personal data of its employees was stolen.

The Texas-based firm hasn’t shared many details on the data breach, but it did reveal that the attack disrupted its ‘cyber operations.’

**Incident Details**

According to the breach notification issued by the Maine attorney general’s office, the American arm of Elbit’s network has suffered a data breach. Around 369 Elbit Systems employees got their information stolen by the attackers.

As per the company, exposed data includes employee names, dates of birth, addresses, ethnicity, direct deposit information, and Social Security Numbers. The company’s spokesperson in America and any representative from its parent organization in Israel haven’t commented on the incident yet.

**Who is the Attacker?**

As per Elbit Systems of America, the investigation is still going on. At the moment, it is difficult to attribute this attack to a specific hacker, cybercrime gang, or nation-state. The company is also unsure about the objective behind this attack.  

1.  Iran-linked hackers hit Israeli, US, and EU defense tech firm
2.  Dark web hacker leaks sensitive Indian defense contractor data
3.  Meet SockDetour fileless backdoor targeting U.S. Defense contractors
4.  Hackers Posing as Women to Con Israeli Officials into Installing Malware
5.  Unknown TA2541 group attacking aviation and defense sectors since 2017

**About Elbit**

For your information, Elbit Systems is an electronics and defense tech firm. It mainly builds unmanned aerial drones, intelligence gathering, espionage, and surveillance-related systems for governments and militaries, electronic warfare systems, and similar equipment and sells it worldwide.

The company also creates surveillance software. It acquired Nice Systems’ cyber and intelligence unit in 2015 for a whopping $160 million and renamed it Cyberbit. 

As noted by TechCrunch, internet watchdog Citizen Lab’s research found that Cyberbit’s commercial spyware was used for espionage activities against Ethiopian dissidents in the USA and the UK.

This spyware could steal users’ private data from the targeted device, including passwords, screenshots, and emails. However, it is also suspected that the Ethiopian government itself ordered the spying activity.

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

US branch of Israeli defense contractor Elbit hit by data breach

By Waqas
According to the Ukraine Security Service (SSU), the hackers were selling the hacked accounts to "Russian propagandists" through the dark web.
This is a post from HackRead.com Read the original post: Ukraine Busts Pro-Russia Hackers Who Stole 30M Accounts of EU Citizens

Ukraine Security Service (SSU) has confirmed the dismantling of a cyber criminal gang that stole the personal accounts of nearly 30 million individuals in Ukraine and across Europe.

According to SSU, its cyber unit has taken down a gang of cybercriminals responsible for stealing 30 million accounts and offering the data on the dark web for sale. The department stated that the hacking group earned around UAH 14 million ($375,000) from selling these accounts.

During the search operations at the suspects’ residences, police seized several hard-magnetic disks that stored the personal data of the victims. They also seized different computer devices, such as flash drives, SIM cards, and mobile phones.

Seized material

**Hack Details**

As per initial research into the attack, the hackers breached the user accounts and sold their confidential information, including credentials and sensitive personal data, on a dark web platform via an anonymous account. They used electronic payment systems, including WebMoney, YuMoney, and Qiwi, to receive the payment for the accounts.

These services are banned in Ukraine. Furthermore, the gang of hackers included many suspects from west Ukraine’s largest city. It is unclear how many hackers were arrested and which services were attacked.

1.  Ukraine Leaks Personal Details of 620 Alleged FSB Agents
2.  IT Army of Ukraine and Anonymous hacks the Russian Yandex taxi app
3.  Ukraine Thwart Russian Industroyer 2 Malware Attack on Energy Provider
4.  Personal Data of Tens of Millions of Russians and Ukrainians Exposed Online
5.  DDoS App Meant to Hit Russia Infected Android Phones of Ukrainian Activists

**Attack Launched by “Pro-Kremlin Propagandists”**

As per the SSU’s press release, the hackers are believed to be linked with pro-Russia propagandists. They primarily targeted Ukrainian citizens and people in Europe to harvest the private information of unsuspecting users. They later sold their data on the illegal platform through numerous payment portals.

The propagandists purchased these accounts to spread chaos and panic in the region through disinformation campaigns and to encourage wide-scale destabilization in Ukraine through fake news.

> “Suspects impersonated ordinary people to spread disinformation about the socio-political situation in Ukraine and the EU.”
> 
> Ukrainian Security Service

**More Dark Web News**

1.  What Are Dark Web Search Engines and How to Find Them?
2.  8 Online Best Dark Web Search Engines for Tor Browser (2022)
3.  DeepDotWeb admin pleads guilty to money laundering, kickbacks
4.  142 Million MGM Resorts Records Leaked on Telegram for Free Download
5.  CIA Wants Russians to Share Secrets with the Agency via its Darknet Site

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Ukraine Busts Pro-Russia Hackers Who Stole 30M Accounts of EU Citizens

By Deeba Ahmed
Do Kwon insists he is "not on the run."
This is a post from HackRead.com Read the original post: Interpol Issues Int. Arrest Warrant for Terra Stablecoin Founder Do Kwon

The International Criminal Police Organization (Interpol) has issued an international arrest warrant, also called a red notice, for Terraform Labs founder Kwon Do-Hyung, more commonly known as Do Kwon.

Interpol has requested law enforcement agencies worldwide to search and arrest Do Kwon.

“Prosecutors in Seoul said Monday in a text message the international police organization has issued a Red Notice for Do Kwon.”

Do Kwon

Do Kwon, a South Korean national, is accused of the collapse of two cryptos on the Terra ecosystem, Terra cryptocurrency (Luna) and stablecoin TerraUSD (UST), which resulted in losses of $40 billion for investors, and an investigation was launched.

For your information, Terraform Labs’ cryptocurrency LUNA and UST imploded unexpectedly in May 2022 because investors lost faith in their effectiveness. Do Kwon revived the crypto project and avoided the algorithmic stablecoin component for now. UST’s de-pegging prompted the crashing of the LUNA token because both were intertwined.

Luna token’s crashing caused the wipeout of a previously high-profile crypto hedge fund, Three Arrows Capital. These collapses impacted a large number of crypto lenders, including BlockFi.

According to Bloomberg, Reportedly, several cases have been registered against Do Kwon.

However, crypto industry experts have voiced concerns over issuing a red notice because it will set a wrong precedent. Experts claim that the notice is uncalled for since Do Kwon didn’t defraud his customers and investors knowingly. Red notices are issued for most wanted fugitives for prosecution or serving a sentence.

As per Interpol’s website, the notice will serve as a request to international law enforcement authorities to provisionally arrest the person who is to be deported or facing legal action. However, at the time of writing, no arrest warrant or red notice was displayed on Interpol’s site. You can search for a red warrant on this link.

Crypto investment fund Dragonfly’s managing partner Haseeb Qureshi stated that Terra’s criminalization is a dangerous precedent.

“Having met Do Kwon … leaving how he is a person aside … I think the criminalization of Terra is a dangerous precedent,” but he also added that he didn’t know many details.

According to the prosecutors, the accused will face charges in South Korea. South Korean prosecutors intensified their investigation against Do Kwon and accused him of non-cooperative behavior this month. They also alleged that the entrepreneur was on the run as they had ‘circumstantial evidence of escape.’

Around fifteen days back, the prosecutors confirmed that Do Kwon had fled Singapore, and that’s why an arrest warrant was issued. However, Do Kwon posted on social media that he wasn’t on the run and was interested in communicating with government agencies. He also proclaimed that his team was fully cooperating and had nothing to hide.

> I am not “on the run” or anything similar – for any government agency that has shown interest to communicate, we are in full cooperation and we don’t have anything to hide
> 
> — Do Kwon 🌕 (@stablekwon) September 17, 2022

Korean officials have accused Do Kwon and five other individuals of allegedly violating capital-market laws.

Korean prosecutors are currently trying to locate Do Kwon’s whereabouts and arrest him as soon as possible. Interpol’s arrest warrant will help them seek information from international agencies in this regard.

1.  12 Arrested as Interpol Takes Down Transnational Sextortion Ring
2.  Interpol arrests Moroccon hacker over global phishing, malware scam
3.  Austria seeks Interpol’s help to bust Bitcoin scammers who stole $115M
4.  $3.6 billion worth of Bitcoin seized from crooks tied to 2016’s Bitfinex hack

Interpol Issues Int. Arrest Warrant for Terra Stablecoin Founder Do Kwon

By Owais Sultan
With most people being online for most of the day, whether for personal reasons or work-related tasks, cybersecurity…
This is a post from HackRead.com Read the original post: Simple Yet Vital Ways to Safeguard Yourself Against Online Threats

With most people being online for most of the day, whether for personal reasons or work-related tasks, cybersecurity is more important than ever. As the internet evolves and new technologies are created, new ways of scamming people or stealing important data come up too.

Despite rather widespread awareness about the importance of cybersecurity and the prevalence of malicious online attacks, most people do little to nothing to secure themselves against these potential security threats.

Here are a few simple ways of securing yourself against malware and bad actors on the web.

Source: Pexels

**Making unique passwords**

Repeating passwords is something a lot of people do, even if they know it’s inadvisable. Although remembering all your login credentials for all the different sites you’re on can be a herculean task, it also makes you very vulnerable to cyber-attacks. Using extremely generic passwords is also not a good idea as it makes hacking into your account very simple.

Unfortunately, masses of tech users adopt the same approach and this has been proven with research conducted by the likes of ExpressVPN into the most common passwords used globally.

With variations on terms like ‘passwort’ and popular football teams such as ‘Juventus’ highlighted as some of the most commonly used passwords in countries like Germany and Italy, it’s perhaps no surprise that confidential and sensitive information is so easily acquired by bad actors on the internet.

Use password managers that can help you keep track of all of your passwords or random term generators whenever prompted to change your passwords!

**Avoiding messages from unknown sources and unverified sites**

Phishing scams are really common and they’re getting better at what they do. These scams usually involve a fake website, which looks like a legitimate e-store or business, being used to make people enter their sensitive personal and financial information into fields present on the site.

One of the easiest ways of checking whether a site is real or not is by using URL checkers. One can never be too careful because these scams are ever evolving.

Source: Pexels

**Using multiple e-mail addresses**

Having a different email address to use to sign up for services and products is also a helpful way of ensuring your safety. Having multiple e-mail addresses makes sure that not all of your data is in one place. It can also help keep promotional messages and other spam messages with suspicious attachments separate from essential personal communication.

**Authentication and privacy settings**

A lot of sites sell your data to advertisers. Oftentimes, a company’s policy about privacy or selling of data is hidden in the fine print of user agreements, which an overwhelming majority of people do not go through at all. Sometimes, you can check your privacy settings on a site or an app and explicitly instruct them not to sell your data.

If your photos are publicly available on the internet, you should keep in mind the possibility of someone stealing them and pretending to be you or someone else. Anyone who keeps your photos without your explicit consent should be reported immediately. Turning on two-factor authentication for messaging apps is also important.

There are very simple and rather obvious ways in which you can safeguard yourself against cyber-attacks. Oftentimes, people don’t take this advice to heart, but doing so can make you a great deal safer while online!

1.  How to detect phishing images in emails
2.  The Types of Phishing Attacks and How to Dodge All of Them
3.  Scammers Leveraging Microsoft Team GIFs in Phishing Attacks
4.  9 Years Jail for iCloud Phishing Scam Hacker Who Stole Nude Photos
5.  Hoxhunt Primed to Spread Gamified Phishing Awareness in the Enterprise

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.