State of Cybercrime6 Mar 2023

Don't Breach Where You Eat

Still reeling from last year’s data breach, password manager LastPass recently shared that the same attacker who targeted the organization in August has struck again, this time using stolen data to hack an employee’s home computer.

Join Matt Radolec and David Gibson as they walk you through the multi-stage attack, revisiting the discussion of the initial intrusion and outlining how that stolen data was weaponized months later to breach the company’s vault.

Matt and David will also spotlight recent vulnerabilities that you should keep an eye on and discuss the meteoric rise of wiperware.

We cover:

The anatomy of the LastPass attack and the threats of secret and password scanning after a breach
New malware and ransomware frameworks
The increase in wiperware that’s destroying data rather than holding it for ransom
And of course some wins on the cybersecurity front (let’s not forget the good news!)

Links mentioned in the show:

HardBit 2.0 Ransomware

LockBit ransomware, what you need to know

VMware ESXi in the Line of Ransomware Fire

Visit our website and sign up for emails to be notified of new live episodes.

Watch the podcast on our Youtube channel.

Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

Episoder(211)

The Ransomware That Ran Itself

More from Varonis ⬇️ Visit our website: https://www.varonis.com LinkedIn: linkedin.com/company/varonis X/Twitter: x.com/varonis Instagram: instagram.com/varonislife Want to join us live? Save a seat h...

18 Jul 38min

Megalodon Poisons Github

12 Jun 29min

The Canvas Breach

19 Mai 29min

The Axios Supply Chain Attack

The Axios supply chain attack proves attackers don’t need vulnerabilities if they can hit the assembly line. By compromising a single npm maintainer account, they were able to slip a trojan into Axios...

10 Apr 43min

Salesforce Aura Data Theft

ShinyHunters has once again placed Salesforce customers in their crosshairs – this time abusing guest user misconfigurations in public-facing Experience Cloud sites. The group claims to have compromis...

20 Mar 29min

OpenClaw & Moltbook (w/ Moriah Hara!)

OpenClaw – an opensource AI agent dubbed “Claude with hands” – has exploded across GitHub, rocketing from obscurity to 170,000 stars in just two weeks. It’s now the fastest spreading form of shadow IT...

14 Feb 43min

The React2Shell Crisis

React2Shell, the zero-click RCE exploit, is rapidly becoming one of the most significant cybersecurity incidents this year. From emergency patches causing a massive Cloudflare outage to active exploi...

15 Des 202522min

AI-Powered Espionage

A Chinese state-sponsored group weaponized Anthropic’s Claude tool to launch the first large-scale AI-driven espionage campaign, targeting more than 30 organizations across tech, finance, manufacturin...

24 Nov 202523min