Internet Archive sustains another breach.

Summary

By the CyberWire staff

At a glance.

Internet Archive sustains another breach.
Alleged Australian scammer arrested in Italy.
ESET partner breached to send wiper malware to Israeli organizations.

Internet Archive sustains another breach.

The Internet Archive has sustained a breach affecting its Zendesk email support platform, BleepingComputer reports. The hacker told BleepingComputer they obtained a Zendesk token that granted them access to more than 800,000 support tickets sent to the Internet Archive team since 2018, including requests for site removals from the Wayback Machine. BleepingComputer notes that some people uploaded personal information to request removal from the Archive, and the hacker can now access this data.

The Internet Archive sustained a major breach earlier this month, with a hacker stealing information belonging to 33 million users. BleepingComputer says the hacker wasn't politically or financially motivated, but was solely interested in gaining "cyber street cred."

Are You Confident in the Security of Your Remote and Hybrid Employees?

A remote or hybrid workforce expands your company's surface area of attack beyond corporate firewall boundaries. Employees’ personal computers introduce shadow IT, and home networks with default settings are easy targets, compounded by public Wi-Fi vulnerabilities. You need to develop a strategy to stay secure while remote employees work across untrusted networks. To learn how you can secure your company's workforce, get a free copy of the latest ThreatLocker® whitepaper on how to secure remote workforces.

Alleged Australian scammer arrested in Italy.

Italian police have arrested an Australian man wanted by the US FBI for allegedly stealing US$31 million via tech support scams, the Sydney Morning Herald reports. Italian police stated, "The charges relate to a scam, dating back some time, that affected a large number of people, especially the elderly and the particularly frail."

The man was arrested at an airport in Milan, and will be extradited to the US to face charges of computer fraud, damaging computer security, and money laundering.

Save 30% on N2K Cyber & IT practice tests

In celebration of Cybersecurity Awareness Month, N2K is offering a 30% discount on all N2K practice tests with promo code "SECURE30". Choose from our vast exam prep library that includes top vendors like AWS, CompTIA, ISC2, Microsoft, and more. Get access to simulated exams, custom quizzes, e-flashcards, and more. Whether you're gearing up for a certification exam or looking to enhance your skills, now is the perfect time to invest in your cybersecurity journey. Visit n2k.com/certify to find your cert and save 30% with promo code “SECURE30” today.

ESET partner breached to send wiper malware to Israeli organizations.

ESET has confirmed that its Israeli distributor, Comsecure, was breached by a threat actor who used the access to send phishing emails to Israeli organizations, the Register reports. The phishing messages informed users that a state-sponsored threat actor was targeting them, and encouraged them to install an ESET product designed to counter advanced threats. The download link would install wiper malware disguised as ransomware. Security researcher Kevin Beaumont says the emails appear to be targeting cybersecurity personnel at Israeli companies.

ESET said its own systems were not compromised, and the "limited malicious email campaign was blocked within ten minutes." The company says it's "working closely with its partner to further investigate."

Notes.

Today's issue includes events affecting Australia, Italy, Israel, and the United States.

Attacks, Threats, and Vulnerabilities

50,000 Files Exposed in Nidec Ransomware Attack (Infosecurity Magazine) The August ransomware attack stole 50,000+ documents from Nidec, leaked after ransom refusal

HM Surf macOS vuln potentially exploited by Adloader malware (The Register) Like keeping your camera and microphone private? Patch up

Report: China’s Spamouflage disinformation campaign testing techniques on Sen. Marco Rubio (The Record) The covert Chinese information operation known as Spamouflage has renewed its long-running disinformation campaign against Republican Senator Marco Rubio of Florida, according to researchers at Clemson University’s Media Forensics Lab.

ESET partner breached to send data wipers to Israeli orgs (BleepingComputer) Hackers breached ESET's exclusive partner in Israel to send phishing emails to Israeli businesses that pushed data wipers disguised as antivirus software for destructive attacks.

Marketplace

Sophos to acquire Secureworks for $859 million (The Record) Prominent cybersecurity company Sophos is acquiring another well-known firm in the industry, Secureworks, for about $859 million, the two companies announced Monday.

Paladin Capital Group Welcomes Nazo Moosa as Managing Director in Europe (PR Newswire) /PRNewswire/ -- Today, Paladin Capital Group announced that one of Europe's leading tech investors Nazo Moosa has joined as Managing Director for the firm's...

Litigation, Investigation, and Law Enforcement

Russia's case against REvil hackers proceeds as government recommends 6.5-year sentences (The Record) The legal proceedings against the alleged hackers have been dragging on for the last two years, and of 14 detainees only eight have made it to a Moscow court to face charges.

Industry Events

For a complete running list of events, please visit the Event Tracker.

Events

2024 CompTIA EMEA Member and Partner Conference (London, England, UK, Oct 21 - 22, 2024) Sync into the 2024 CompTIA EMEA Member and Partner Conference - connect with industry experts and your peers, whilst you gain insight into growth strategies and best practices for driving productivity and sales.

Pacific Hackers Conference (Mountain View, California, USA, Nov 2, 2024) Pacific Hacker Conference is an information security and hacking conference that gathers the brightest minds in cybersecurity and hacking from Silicon Valley and beyond. Focusing on cutting-edge techniques, research, and developments, we aim to create an environment where knowledge is shared and connections are made. Our audience ranges from security professionals, researchers, and ethical hackers to industry decision-makers. We keep the conference small, allowing us to provide what other Cons leave out.

SecureWorld Seattle (Bellevue, Washington, USA, Nov 6 - 7, 2024) Join your regional cybersecurity community for high-quality, affordable training and collaboration. Earn 12-18 CPE credits through 30+ educational sessions learning from local and nationally recognized industry leaders. Attend featured keynotes, panel discussions, breakout sessions, and solution vendor displays—all while networking with peers in InfoSec.

SecureWorld Midwest Virtual Conference (Virtual, Nov 13, 2024) Join with cybersecurity professionals for training and information sharing through an interactive online experience. Earn 6 CPE credits learning from nationally recognized industry leaders. The agenda offers 12+ educational presentations, including panel discussions, breakout sessions, and keynotes. Connect with your peers in the Networking Lounge, enter to win prizes, and see demos and resources from top solution vendors in the Exhibitor Hall.

CYBERSAT24 (Reston, Virginia, USA, Nov 18 - 20, 2024) CyberSat Summit has been at the forefront of the satellite industry’s burgeoning cybersecurity landscape since the event’s launch in 2017. Initially run as a single annual event, it morphed into two separate events in recent years – CyberLEO and CyberSatGov. This was done in response to changing market conditions, most notably the huge growth of LEO satellites and the corresponding rise of commercial interest in space. While CyberSatGov and CyberLEO were successful independently, the continued demand for LEO architectures and the ever-increasing collaboration between government and industry meant that these conversations needed to happen under one roof. As a result, 2024 will feature a single CyberSat event in November, where for the first time in its 7-year history, we will nearly double the event’s content offerings to include two concurrent tracks – one track titled “Space Infrastructure” and the second track titled “Space Data & Technology.” The “Space Infrastructure” track will continue CyberSat’s legacy focus on the overall satellite cybersecurity ecosystem and the protection of tangible assets like ground systems and satellite components, while the new “Space Data & Technology” track will focus on emerging technologies and the protection of space’s intangible assets like data. Keynotes, and a handful of general sessions, will contain talks that apply to all attendees.

Sponsor & Support

Grow your brand, generate leads, and fill your funnel.

With the industry’s largest B2B podcast network, popular newsletters, and influential readers and listeners all over the world, companies trust the CyberWire to get the message out. Learn more.

Daily Briefing for 10.21.24

At a glance.

Internet Archive sustains another breach.

Alleged Australian scammer arrested in Italy.

ESET partner breached to send wiper malware to Israeli organizations.

Notes.

Attacks, Threats, and Vulnerabilities

Marketplace

Litigation, Investigation, and Law Enforcement

Events