Email security

Individuals in Singapore selling through classified sites are being targeted by the expanded Classiscam credit card stealing campaign, which has already caused more than $29 million in damages from attacks against banks, delivery firms, cryptocurrency exchanges, and other service providers in the U.S., Europe, and Russia since 2019, according to BleepingComputer.

Bitter APT has been leveraging a trojanized iteration of the Signal messaging app to deploy the Android spyware Dracarys in cyberespionage campaigns against individuals in India, New Zealand, Pakistan, and the U.K., BleepingComputer reports.

BleepingComputer reports that the Cybersecurity and Infrastructure Security Agency has updated its Known Exploited Vulnerabilities Catalog to include the high-severity Windows Support Diagnostic Tool zero-day and UnRAR utility vulnerabilities following active exploitation in the wild.

More than a dozen industrial enterprise organizations, government agencies, military entities, and other public organizations in Russia, Ukraine, Afghanistan, Belarus, and other countries in Eastern Europe have been compromised by the Chinese hacking group TA428 through a widespread phishing campaign that leveraged six backdoors, The Register reports.

BleepingComputer reports that email marketing company Klaviyo has been impacted by a data breach last Wednesday that has compromised its internal systems, as well as cryptocurrency customers' marketing lists following a phishing attack that allowed attackers to gain employee credentials.

Cross-chain cryptocurrency platform deBridge Finance was suspected to be targeted by North Korean hacking group Lazarus in a phishing campaign aimed at cryptocurrency theft, according to BleepingComputer.

Salinas Valley Memorial Health will pay the patients impacted by a 2020 email hack $340,000 to resolve a lawsuit alleging the California health system’s poor cybersecurity caused the breach.

Microsoft, FedEx, and other brands have been impersonated in separate phishing campaigns between mid-May and late July that involved the exploitation of an open redirect vulnerability in Snapchat and American Express domains in an effort to exfiltrate credentials and personally identifiable information, reports Threatpost.