WEEKLY CYBERSECURITY NEWSLETTER NO: 134

#WeeklyCybersecurityTip: Never save your card details in an online account

Oct 26, 2020 12:00 PM

1- Electrum Bitcoin Wallet – A Crypto Phishing Attack

According to Cointelegraph, two Electrum software wallet users have recently reported the loss of large sums of Bitcoin (BTC). One victim described the disappearance of 1,400 BTC, totaling $14,595,000 at press time, while another claimed 36.5 BTC, worth $380,512, as stolen. The events appear connected to a long-standing phishing scam affecting Electrum users since 2018.

2- A Windows 10 Security Risk?

According to Forbes, Microsoft Defender Antivirus can be used to download malicious files. The story seems to hang on the fact that an update to the Microsoft Antimalware Service Command Line Utility (MpCmdRun.exe) has meant it can now download remote files. Remote files that could, potentially, be malicious in nature.

3- Malware Gang Uses .NET Library

According to ZDNet, a newly discovered malware gang is using a clever trick to create malicious Excel files that have low detection rates and a higher chance of evading security systems. Discovered by security researchers from NVISO Labs, this malware gang — which they named Epic Manchego — has been active since June, targeting companies all over the world with phishing emails that carry a malicious Excel document.

4- 738GB of Customer Data Was Stolen

According to ZDNet, service NSW has revealed that the personal information of 186,000 customers was stolen because of a cyber attack earlier this year on 47 staff email accounts. Following a four-month investigation that began in April, Service NSW said it identified that 738GB of data, which compromised of 3.8 million documents, was stolen from the email accounts. The one-stop-shop agency assured, however, there was no evidence that individual MyServiceNSW account data or Service NSW databases were compromised during the cyber attack.