Cybercrime

Compromise of Merseyrail employee data seems to have begun after a key email account was hacked

Office 365 compromise likely led to Merseyrail ransomware attack (computerweekly.com)

We give a broad overview and insight into the discussions held at our quarterly Cyber Coordination Group meetings, with the aim of sharing the valuable insights found in these groups to the wider financial sector.

https://www.fca.org.uk/publications/research/insights-cyber-coordination-groups-2020

Sophos’ latest study finds that ransomware attacks are proving increasingly disruptive to their victims’ finances

https://www.computerweekly.com/news/252499796/Total-cost-of-ransomware-attack-heading-towards-2m

The Telegram instant messaging service is being used by malicious actors to manage a remote access trojan called ToxicEye

ToxicEye malware exploits Telegram messaging service (computerweekly.com)

The UK’s National Cyber Security Centre (NCSC) has released a free cyber security training package for teachers and other school staff, setting out steps to take to help mitigate cyber attacks and drawing on real-life case studies to demonstrate the impact of such incidents.

NCSC offers teachers free cyber security training (computerweekly.com)

The research shows that 68% of cyber crimes happened after the victim responded to fraudulent emails, texts and phone calls, resulting in them transferring money to the fraudster.

Cyber crime up 6%: Watch out for emails, texts, phone calls (electronicsweekly.com)

Technology companies continue to be frequently spoofed by cyber criminals in their phishing attempts

Microsoft is most impersonated brand in phishing attempts (computerweekly.com)

Multiple systems are offline at the University of Hertfordshire following a cyber attack

University of Hertfordshire is latest academic cyber attack victim (computerweekly.com)

US president imposes new sanctions on Russia following malicious cyber attacks against the US and allies

Biden sanctions Russia over SolarWinds cyber attacks (computerweekly.com)

Microsoft patches more critical vulnerabilities in Exchange Server a month after the ProxyLogon incident, after being warned by the US National Security Agency

NSA unearths more MS Exchange vulnerabilities (computerweekly.com)