💣🐛

Malwarebytes Security Incident

Q4 2023 884 days ago Resolved

Incident Overview

Situation Description

Online stores are experiencing a rise in credit card skimming and malvertising during the holiday shopping season, with Malwarebytes tracking significant increases in these threats.

Event Types

Malware / Destructive Attack Software Vulnerability Exploitation

Industry Sector

Energy

Geographic Scope

National (Other)

Impact Analysis

Event Types (2 identified)

Malware / Destructive Attack Software Vulnerability Exploitation

Financial Impact

$0 USD

Records Affected

Data Types Compromised

Operational / System Data Credentials

Primary Impacts

Operational Disruption Data Exposure

Key Decisions Made

Malwarebytes researchers tracked a 50% increase month-over-month in the US since September in newly registered domains attributed to Kritec.; Malwarebytes has tracked a 42% increase month-over-month in malvertising incidents in the US over the past two months.; Jrme Segura warns shoppers to safeguard their digital gifts and be aware of cybercriminals exploiting the holiday season.

Technical Analysis

Attack Method

Unpatched Vulnerability

Threat Actor Attribution

Kritec

Vulnerability / Tool

CVE-2023-28771 Zyxel firewalls

Additional Information

Hide Hide Home 2023 December Cyber Bytes Online stores may not be as secure as you think Credit card skimming is on the rise for the holiday shopping season, according to Malwarebytes. HelpNetSecurity.com on November 23, 2023 Online stores are not always as secure as you might think they are, and yet you need to hand over your valuable credit card information in order to buy anything. When a merchant website is hacked, any purchase made has the potential of being intercepted by bad actors. Often, the malicious code is right underneath the surface and yet completely invisible to shoppers. The report details a specific credit card skimming operation, the Kritec campaign, which specializes in crafting very realistic payment templates with convincing language localization that has compromised hundreds of websites. Malwarebytes threat researchers tracked a 50% increase month-over-month in the US since September in newly registered domains attributed to Kritec, demonstrating a huge uptick in both compromised sites and opportunity for innocent shoppers to fall victim. Embrace the magic of the holidays (and the seasons cyber deals), but dont forget to safeguard your digital gifts, warns Jrme Segura, senior director of threat research, Malwarebytes. Whether shopping online or booking your experience with Santa, be aware that cybercriminals have laid the groundwork to take advantage of the holiday shopping season via both obvious and very subtle avenues. Another risk to shoppers this holiday season is malvertising online ads that deliver scams or install malware. This type of fraud is on the rise in both volume of malicious ads and the sophistication behind them. Over the past two months, Malwarebytes has tracked a 42% increase month-over-month in malvertising incidents in the US, pointing to an alarming trend. Recent research reveals malicious campaigns carried out in online ads via Google searches, some impersonating big-name brands and scams targeting online tech...

... (truncated for display)

Quick Facts

Company:: Malwarebytes
Date:: Q4 2023
Status:: Resolved
Decision Maker:: Jrme Segura
Position:: senior director of threat research
Published:: 23/11/2023

Source Information

Original Query

what security architecture changes do companies make after ransomware

View Original Source

Timeline

Information Published

23/11/2023

Incident Occurred

Q4 2023 (884 days ago)

Status: Resolved

Estimated resolution based on age

Actions

View Company Profile

Navigation

Quick Stats