Russian group’s hack of Texas water system underscores critical OT cyber threats | CSO Online

But water systems have been increasingly in the crosshairs in 2024, resulting in the following noteworthy water security developments:

The cyberattack cycle: First comes outage, next comes phishing

Threat Actors are quick to try to take advantage of tech issues, much in the same way “repair scammers” jump in after storms cause damage at homes. https://www.securityintelligence.com/news/cyberattack-cycle-first-outage-then-phishing/

North Korean hacker got hired by US security vendor, immediately loaded malware | Ars Technica

Personally, I would not want to deal with a Cybersecurity company that apparently has such poor hiring protocols that they let this happen. https://arstechnica.com/tech-policy/2024/07/us-security-firm-unwittingly-hired-apparent-nation-state-hacker-from-north-korea/

Police say scam thief took more than $6K from man’s account | News | annistonstar.com

These scams cost very little from the scammers’ side. Even if only one or two are successful scams, they make a huge profit for the thieves while often wiping out…

Revolver Rabbit gang registers 500,000 domains for malware campaigns

A cybercriminal gang that researchers track as Revolver Rabbit has registered more than 500,000 domain names for infostealer campaigns that target Windows and macOS systems.

What Is Bitcoin Mining? How to Prevent Bitcoin Scams? | Fortinet

Some companies pretend to provide mining services using a bitcoin mining cloud. They take your money but never mine any bitcoin for you. People often fall for the scam because they want to get their hands on the bitcoin cryptocurrency, and while there are legitimate services out there, some are fraudulent.

‘This happens frequently,’ AARP Alabama warns of Venmo, Cash App scams

Scammers are using payments apps, like Venmo and Cash App, to swipe innocent people’s money. AARP Alabama says there are multiple mobile payment scams going around right now, and one scam takes place directly in your app.

Six Types of Social Engineering Attacks

Some examples of social engineering attacks include phishing, pretexting, scareware, baiting, vishing, smishing and CEO fraud. If you are unsure what qualifies as social engineering, imagine how many ways someone can manipulate you to reveal private information. Threat actors use these psychological techniques, both in person and online, to gain access to your personal or organizational information. These bad actors can install malware on your device, steal your information and even take your identity.

How to Identify and Protect Against Phishing Attacks

Data brokers collect your personal information from various sources and compile detailed profiles. That’s why cybercriminals love data brokers. They hoard your info from everywhere: public records (voter rolls, property ownership), online stuff (browsing history, social media profiles, newsletter signups), and even commercial sources (loyalty programs, purchases). This intel helps them craft compelling and realistic phishing scams or impersonate you or trusted sources to steal private info or money.

Evolution of Cybercrime Investigations

Cybercrime costs trillions, rising yearly. Criminals operate globally, teaching their methods. This article explores major cyberattacks from 1962 to 2024 and how investigators use advanced technology to combat them.