Tag: Data Theft Attacks

Salesforce refuses to pay ransom over widespread data theft attacks
News

Salesforce refuses to pay ransom over widespread data theft attacks

The threat actors responsible for a significant wave of data theft attacks that affected Salesforce's customers this year will neither be negotiated with or paid a ransom by the company, Salesforce has stated. Salesforce sent customers an email on Tuesday informing them that they would not be paying a ransom and cautioning that "credible threat intelligence" suggests the threat actors intended to release the stolen data, as Bloomberg originally reported. I can attest that Salesforce has told BleepingComputer that it would not interact with, deal with, or pay any extortion demands. This declaration comes after threat actors known as Scattered Lapsus$ Hunters launched a data leak website in an effort to extort 39 businesses whose data was taken from Salesforce. Named after the infa...
Oracle Rushes Patch for CVE-2025-61882 After Cl0p Exploited It in Data Theft Attacks
News

Oracle Rushes Patch for CVE-2025-61882 After Cl0p Exploited It in Data Theft Attacks

An urgent patch has been issued by Oracle to fix a serious security vulnerability in its E-Business Suite, which it claims was used in the most recent round of Cl0p data theft attacks. The vulnerability, known as CVE-2025-61882, has an undefined issue that could make it possible for an unauthenticated attacker with HTTP network access to infiltrate and take over the Oracle Concurrent Processing component. Oracle stated in a warning that this vulnerability can be remotely exploited without authentication, meaning that a username and password are not required to exploit it across a network. Remote code execution could occur if this vulnerability is effectively exploited. Oracle has provided remedies for CVE-2025-61882, according to a separate advisory from Rob Duhart, the company's...
New RomCom malware variant ‘SnipBot’ spotted in data theft attacks
News

New RomCom malware variant ‘SnipBot’ spotted in data theft attacks

Attackers have been using SnipBot, a new RomCom malware strain, to steal data from vulnerable systems by pivoting on the network. The new malware variant was found by Palo Alto Network's Unit 42 researchers after they examined a DLL module that was utilized in SnipBot attacks. In an attempt to steal data and change course on the network, it appears that the most recent SnipBot operations are aimed at a wide range of victims in different industries, such as IT services, law, and agriculture. RomCom is a backdoor that has been used for targeted phishing attacks and to distribute Cuba ransomware in a number of malvertising campaigns read more about New RomCom malware variant 'SnipBot' spotted in data theft attacks. Get up to date on the latest cybersecurity news and enhance your ...
New CMoon USB worm targets Russians in data theft attacks
News

New CMoon USB worm targets Russians in data theft attacks

Since early July 2024, a new self-spreading worm known as "CMoon" has been circulated throughout Russia via a hacked gas supply company website. This worm is capable of obtaining account credentials and other data. The campaign was uncovered by Kaspersky researchers, who claim that CMoon is capable of a wide range of operations, such as initiating distributed denial of service (DDoS) assaults, taking screenshots, and loading more payloads. The threat actors' targeting strategy is focused on high-value targets rather than hapless internet users, which suggests a sophisticated operation based on the distribution route they used read more about New CMoon USB worm targets Russians in data theft attacks. Get up to date on the latest cybersecurity news and enhance your knowledge of cy...
Muddled Libra Shifts Focus to SaaS and Cloud for Extortion and Data Theft Attacks
News

Muddled Libra Shifts Focus to SaaS and Cloud for Extortion and Data Theft Attacks

In an attempt to steal sensitive data, the threat actor known as Muddled Libra has been seen aggressively attacking cloud service provider (CSP) environments and software-as-a-service (SaaS) applications. Businesses frequently use CSP services and keep a range of data in SaaS applications, according to a report released last week by Palo Alto Networks Unit 42. In an effort to make money off of their labor, the threat actors have started seeking to exploit some of this data to help advance their attacks and to use for extortion. Known by several aliases, including UNC3944, Starfraud, Scatter Swine, and Scattered Spider, Muddled Libra is a well-known cybercrime organization that has used advanced social engineering strategies to obtain early access to target networks read more Mudd...