#DataSecurity

eslammsd-mobile-games-zone.static.hf.space

Metabase SQLi zero-day exploited in customer data-theft attacks

Mobile Games Zone

dlvr.it

Canadian Hacker Pleads Guilty for Stealing Data and Extortion

A Canadian man recently pleaded guilty in a U.S. federal court in planning one of the largest data theft campaigns in recent times, to his involvement in retrieving organization accounts at cloud storage provider company Snowflake. He stole data from 165 companies in an attempt to extort millions of dollars from the targets.  Connor Riley Moucka is 26-yr old, and also worked under aliases Waifu and Alexander Moucka, was arrested on October 30, 2024, for stealing information from millions of people from organizations that used Snowlake’s storage features. Moucka admitted to four charges: computer fraud, wire fraud, aggravated identity theft, and a related conspiracy count, out of an original 11-count indictment. How did the attacks happen? Between February and October 2024, Moucka and his partner John Erin Binns, also arrested for these attacks, accessed Snowflake accounts. Rather than exploiting a flaw in Snowflake's platform itself, the pair relied on credentials harvested through infostealer malware to log into customer accounts. They stole accounts that were not secured by multi-factor authentication (MFA) via login credentials through an infostealer malware. Without MFA protection, the hackers only needed the right usernames and passwords to sign into customer accounts. After gaining access, the hackers only needed custom-built software to sail through cloud storage incidents for important information. The illegal access was used for identifying important information such as user roles, IP addresses, and organization name in cloud storage incidents that used Snowflake services. The accused tried to blackmail various firms after stealing TBs of data from their Snowflake user accounts and got around $2.5 million in bitcoin from three targets. Scale of the campaign According to the prosecutors, the campaign exploited data linked to over 100 million individuals and resulted in $9.5 million losses for organizations. The list of impacted companies include: Ticketmaster, Santander, AT&T, Advance Auto Parts, Los Angeles Unified School District, Pure Storage, QuoteWizard/LendingTree, and Neiman Marcus. Moucka allegedly stole around $495,000 from ransom payments. AT&T paid around $370,000 to avoid future leaks of text records and customer calls.  “In at least one instance, Moucka re-extorted a victim with threats of further disclosure of the victim’s stolen data,” the US Department of Justice said in a press release.  “Moucka used the stolen data of a government officer and members of a then-former government officer’s immediate family in this re-extortion attempt.” 

eslammsd-gaming-news-2.static.hf.space

Computer maker Framework notifies ‘all customers’ of a data breach

Gaming News 2

eslammsd-gaming-news-pro.static.hf.space

Migrating a WordPress Blog with Claude Code

Gaming News Pro

opsmtrs.com

Cyberhaven

Cyberhaven detects and stops the most critical insider risks to your most important data.

eslammsd-mobile-games-zone.static.hf.space

Swiss government SharePoint breach compromised 200 accounts

Mobile Games Zone

opsmtrs.com

Wire

Wire is the most secure collaboration platform. Secure messaging, file sharing, voice calls and video conferences. All protected with end-to-end encryption.

opsmtrs.com

Teramind

Founded in 2014, Teramind is a leading, global provider of employee monitoring, user behavior analytics, insider threat detection, forensics and data loss prevention software solutions.

eslammsd-corevault-digital.static.hf.space

The Trade Desk CEO Jeff Green Says Sluggish 3% Revenue Growth ‘Not a Reflection’ of the Company

CoreVault Digital

ppc.land

IAB Tech Lab sets September 4 deadline for comment on clean room data rules

Values marked for hashing must be hashed or encrypted before upload, and every Parquet file carries seven metadata keys. Feedback closes in early September.