This week saw a series of significant cybersecurity incidents, including a $5.7 million crypto theft and the arrest of a ransomware creator.
This week has been marked by significant cybersecurity incidents impacting both individuals and organizations across the globe.
- A cryptocurrency theft amounting to $5.7 million was caused by a vulnerability in an outdated random number generator.
- A new malware targeting macOS has emerged, designed to drain funds from cryptocurrency wallets.
- Authorities apprehended the mastermind behind the Ransom Cartel ransomware at the Belarus border.
- Data of over 100,000 police employees in the UK was leaked following a cyberattack.
Crypto Theft Linked to Weak Random Number Generator
A significant security flaw in an outdated random number generator has been implicated in a series of cryptocurrency thefts totaling $5.7 million. Analysts from Coinspect identified the issue within the CryptoJS.lib.WordArray.random() function, which produced weak entropy for generating seed phrases, thereby allowing attackers to easily crack encryption.
The attacks occurred in two phases: the first on May 27, when 431 accounts were breached, leading to losses of about $3.14 million, and the second from May 30 to July 13, resulting in an additional $2.55 million taken from 522 wallets. The compromised wallets included several popular applications, and those affected were advised that simply updating their software would not recover their stolen funds.
New macOS Malware Targets Cryptocurrency
A recently discovered info-stealer malware for macOS utilizes ClickFix attacks to extract cryptocurrency and personal information. Researchers from Huntress detailed how the malware spreads through phishing emails that prompt victims to execute commands that install the malicious software.
This malware not only collects system information but also disguises itself within the system to avoid detection. Notably, it can intercept and modify cryptocurrency transactions, allowing attackers to siphon off a percentage of funds without alerting users immediately.
Ransom Cartel Creator Arrested
Maxim Silnikov, a 40-year-old Belarusian, has been arrested for his role in creating the Ransom Cartel ransomware. The US Department of Justice reported that Silnikov, who had been active in cybercrime since 2005, was apprehended while attempting to cross into Belarus after being arrested in Spain earlier this year. His operations reportedly caused over $6.7 million in losses across various industries.
Silnikov faces multiple charges, including conspiracy against the US and identity theft, and could serve a 16-year prison sentence.
Data Breach Affects UK Police Employees
A serious data breach involving the National Police Legal Database (PNLD) in the UK has resulted in the exposure of personal information belonging to over 100,000 police officers and staff. The ExfilSquad ransomware group has claimed responsibility for this incident, which included the theft of approximately 1.9 GB of data.
The compromised data included names and contact details of police personnel and citizens, prompting the attackers to demand ransom to prevent further data release. Investigations are ongoing, with assurances from PNLD that sensitive information regarding crime victims was not stored within the database.
Conclusion
This week’s events highlight the evolving threats in cybersecurity, particularly within the cryptocurrency sector. Organizations and individuals must remain vigilant and proactive in protecting their digital assets and personal information.
