Researchers Find 'Digital Crime Haven' While Investigating Magecart Activity

A security vendor's investigation of infrastructure associated with a new, crypto-focused Magecart skimmer leads to discovery of cryptoscam sites, malware distribution marketplace, Bitcoin mixers, and more. [TechWeb]( Follow Dark Reading: [RSS]( January 13, 2023 LATEST SECURITY NEWS & COMMENTARY [Researchers Find 'Digital Crime Haven' While Investigating Magecart Activity]( A security vendor's investigation of infrastructure associated with a new, crypto-focused Magecart skimmer leads to discovery of cryptoscam sites, malware distribution marketplace, Bitcoin mixers, and more. [$20K Buys Insider Access to Telegram Servers, Dark Web Ad Claims]( In the ad, cybercriminals are offering to sell employee-level access to Telegram, researchers warn. [Critical Cisco SMB Router Flaw Allows Authentication Bypass, PoC Available]( Unpatched Cisco bugs, tracked as CVE-2023-20025 and CVE-2023-20026, allow lateral movement, data theft, and malware infestations. [Big Prizes, Cash on Offer for Joining 'DDosia' Anti-Ukraine Cyberattack Project]( Russia's NoName057(16) group offers incentives and prizes via Telegram channel for "heroes" to mount attacks against targets within Ukraine and pro-Ukrainian countries. [Kubernetes-Related Security Projects to Watch in 2023]( Organizations must be vigilant about balancing performance gains with security, governance, and compliance as they expand their use of Kubernetes. [Securing the World's Energy Systems: Where Physical Security and Cybersecurity Must Meet]( Energy has become the new battleground for both physical and cyber security warfare, driven by nation-state actors, increasing financial rewards for ransomware gangs and decentralized devices. Chris Price reports. [MORE NEWS /]( [MORE COMMENTARY]( HOT TOPICS [Better Phishing, Easy Malicious Implants: How AI Could Change Cyberattacks]( Current defenses are able to protect against today's AI-enhanced cybersecurity threats, but that won't be the case for long as these attacks become more effective and sophisticated. [The Resolution Every CSO/CISO Should Make This Year]( Shift your mindset from risk to resilience. [Cyber Jobs of the Future: Sleuth, Bodyguard, 'Immunity' Developer]( With artificial intelligence poised to displace many SOC professionals, it's important to think ahead to potential niches for cybersmart humans — even to outer space. [MORE]( BLACK HAT FLASHBACKS [Black Hat Flashback: The Deadly Consequences of Weak Medical Device Security]( Hacking to kill: Dark Reading's Fahmida Y. Rashid reflects on the monumental Black Hat 2011 moment when Jay Radcliffe showed how to hack his insulin pump. [Black Hat Flashback: The Day That Dan Kaminsky Saved the Internet]( Dark Reading's Kelly Jackson Higgins explains the enormous legacy left behind by Dan Kaminsky and his seminal "Great DNS Vulnerability" talk at Black Hat 2008. LATEST FROM THE EDGE [In Memoriam: Remembering Those Who Passed]( Security stands on the shoulders of giants. We take a moment to remember their contributions toward keeping people, data, and systems safe. LATEST FROM DR TECHNOLOGY [Software Supply Chain Security Needs a Bigger Picture]( SBOMs aren't enough. OpenSSF's Alpha-Omega brings in new blood to help secure the open source projects most impactful to the software supply chain. WEBINARS - [Detecting, Analyzing, and Mitigating Targeted Attacks]( For many security professionals, the nightmare scenario keeping them awake at night is a sophisticated, targeted attack aimed directly at their own organization and its specific defenses. In this webinar, experts describe the type of tools and processes necessary to ... - [Zero Trust Security 101: What You Need to Know Before Getting Started]( With varying definitions, variations, and approaches floating around the cybersecurity ecosystem, it can be difficult to get a clear view of what exactly zero trust is, what it means, and what it takes to get it done. In this webinar, ... [View More Dark Reading Webinars >>]( WHITE PAPERS - [How Machine Learning, AI & Deep Learning Improve Cybersecurity]( - [State of Email Security]( - [Ransomware Resilience and Response: The Next-Generation]( - [Ransomware Is On The Rise]( - [State of Ransomware Readiness: Facing the Reality Gap]( - [How Hybrid Work Fuels Ransomware Attacks]( [View More White Papers >>]( FEATURED REPORTS - [10 Hot Talks From Black Hat USA 2022]( Black Hat USA brings together cutting-edge research, new security tools, and sophisticated defensive techniques over the course of two days. There were some recurring themes across the sessions, and many of these topics are going to be important issues to ... - [The Promise and Reality of Cloud Security]( Cloud security has been part of the cybersecurity conversation for years but has been on the sidelines for most enterprises. The shift to remote work during the COVID-19 pandemic and digital transformation projects have moved cloud infrastructure front-and-center as enterprises ... - [How Machine Learning, AI & Deep Learning Improve Cybersecurity]( [View More Dark Reading Reports >>]( PRODUCTS & RELEASES [Darktrace Publishes 2022 Cyberattack Trend Data For Energy, Healthcare & Retail Sectors Globally]( [Cloudflare Expands Relationship With Microsoft]( [MORE PRODUCTS & RELEASES]( CURRENT ISSUE [The Promise and Reality of Cloud Security]( [DOWNLOAD THIS ISSUE]( [VIEW BACK ISSUES]( Dark Reading Daily -- Published By [Dark Reading]( Informa Tech Holdings LLC | Registered in the United States with number 7418737 | 605 Third Ave., 22nd Floor, New York, New York 10158, USA To opt-out of any future Dark Reading Daily Newsletter emails, please respond [here.]( Thoughts about this newsletter? [Give us feedback.](mailto:ContactDarkReading@informa.com) Keep This Newsletter Out Of Your SPAM Folder Don't let future editions go missing. Take a moment to add the newsletter's address to your anti-spam white list: If you're not sure how to do that, ask your administrator or ISP. Or check your anti-spam utility's documentation. We take your privacy very seriously. Please review our [Privacy Statement.]( [© 2023]( | [Informa Tech]( | [Privacy Statement]( | [Terms & Conditions]( | [Contact Us](mailto:ContactDarkReading@informa.com)