<h2 id="the-oh-no-news.">The <em>Oh No!</em> news.</h2>
<h2 id="oh-no-news-is-good-news."><em>Oh No!</em> News is Good
News.</h2>
<hr />
<ul>
<li><strong>Threat analysis; your attack surface.</strong></li>
<li><strong>Article:</strong> <a
href="https://www.pcmag.com/news/us-marshals-service-computer-system-hit-by-ransomware-attack?utm_source=feedotter&amp;utm_medium=email&amp;utm_campaign=FO-02-28-2023&amp;utm_content=httpswwwpcmagcomnewsusmarshalsservicecomputersystemhitbyransomwareattack">US
Marshals Service Computer System Hit by Ransomware Attack.</a>
<ul>
<li><strong>Author:</strong> <a
href="https://www.pcmag.com/authors/michael-kan">Michael Kan</a>. (2023,
Feb 28).</li>
<li>The agency uncovered the intrusion on Feb. 17 2023, when it
discovered &#x201C;a ransomware and data exfiltration event affecting a
standalone USMS system.&#x201D; That means the hackers stole information from
the computer while planting malicious code capable of encrypting the
data inside.</li>
<li>&#x201C;The affected system contains law enforcement sensitive information,
including returns from legal process, administrative information, and
personally identifiable information pertaining to subjects of USMS
investigations, third parties, and certain USMS employees,&#x201D; the agency
says.</li>
</ul></li>
<li><strong>Article:</strong> <a
href="https://www.pcmag.com/news/us-shuts-down-netwire-malware-that-posed-as-legit-remote-admin-tool?utm_source=feedotter&amp;utm_medium=email&amp;utm_campaign=FO-03-14-2023&amp;utm_content=httpswwwpcmagcomnewsusshutsdownnetwiremalwarethatposedaslegitremoteadmintool">US
Shuts Down 'Netwire' Malware That Posed as Legit Remote Admin Tool.</a>
<ul>
<li><strong>Author:</strong> <a
href="https://www.pcmag.com/authors/michael-kan">Michael Kan</a>. (2023,
Mar 10).</li>
<li>Worldwiredlabs.com has been around since at least 2012(Opens in a
new window), offering a software product called &#x201C;Netwire,&#x201D; which is
supposedly designed to help IT support staff manage computers remotely.
Before the site was seized, it was offering Netwire for $10 per month or
$60 per year. However, US investigators say the site was a front to sell
the software as a hacking tool to cybercriminals.</li>
</ul></li>
<li><strong>Supporting Article:</strong> <a
href="https://www.justice.gov/usao-cdca/pr/federal-authorities-seize-internet-domain-selling-malware-used-illegally-control-and">Federal
Authorities Seize Internet Domain Selling Malware Used to Illegally
Control and Steal Data from Victims&#x2019; Computers.</a>
<ul>
<li><strong>Author:</strong> U.S. Attorney's Office, Central District of
California. (2023, Mar 9).</li>
<li>A seizure warrant approved by a United States Magistrate Judge on
March 3 and executed on Tuesday led to the seizure of
www.worldwiredlabs.com, which offered the NetWire remote access trojan
(RAT), a sophisticated program capable of targeting and infecting every
major computer operating system. &#x201C;A RAT is a type of malware that allows
for covert surveillance, allowing a &#x2018;backdoor&#x2019; for administrative
control and unfettered and unauthorized remote access to a victim&#x2019;s
computer, without the victim&#x2019;s knowledge or permission,&#x201D; according to
court documents filed in Los Angeles.</li>
</ul></li>
<li><strong>Supporting Article:</strong> <a
href="https://www.cnn.com/2023/03/24/politics/fbi-breach-forums-conor-fitzpatrick/index.html">FBI
takes down cybercrime forum that touted data connected to breach
affecting US lawmakers.</a>
<ul>
<li><strong>Author:</strong> Sean Lyngaas. (2023, Mar 24).</li>
<li>The FBI has arrested the alleged founder of a popular cybercriminal
forum that touted data stolen in a hack affecting members of Congress
and thousands of other people and taken the website down, the Justice
Department said Friday.</li>
</ul></li>
<li><strong>Article:</strong> <a
href="https://www.pcmag.com/news/data-breach-at-dc-health-insurance-exchange-ensnares-us-lawmakers">Data
Breach at DC Health Insurance Exchange Ensnares US Lawmakers.</a>
<ul>
<li><strong>Author:</strong> <a
href="https://www.pcmag.com/authors/michael-kan">Michael Kan</a>. (2023,
Mar 9).</li>
<li>A data breach at a health insurance exchange in Washington, D.C. has
led a hacker to steal the personal information of US lawmakers and their
staff.</li>
</ul></li>
<li><strong>Article:</strong> <a
href="https://www.prnewswire.com/news-releases/independent-living-systems-provides-notice-of-data-event-301771989.html">Independent
Living Systems Provides Notice of Data Event.</a>
<ul>
<li><strong>Author:</strong> Independent Living Systems, LLC. (2023, Mar
14).</li>
<li>The types of impacted information varies by individual and could
have included: name, address, date of birth, driver's license, state
identification, Social Security number, financial account information,
medical record number, Medicare or Medicaid identification, CIN#, mental
or physical treatment/condition information, food delivery information,
diagnosis code or diagnosis information, admission/discharge date,
prescription information, billing/claims information, patient name, and
health insurance information.</li>
</ul></li>
<li><strong>Supporting Article:</strong> <a
href="https://apps.web.maine.gov/online/aeviewer/ME/40/aacdb720-e082-4ef6-b7e6-f03280b2c4ec.shtml">Data
Breach Notifications.</a>
<ul>
<li><strong>Author:</strong> Maine Attorney General. (2023, Mar
14).</li>
<li>Total number of persons affected (including residents):
4,226,508</li>
<li>Total number of Maine residents affected: 238</li>
<li>If the number of Maine residents exceeds 1,000, have the consumer
reporting agencies been notified:</li>
<li>Date(s) Breach Occurred: 06/03/2022</li>
<li>Date Breach Discovered: 01/17/2023</li>
<li>Description of the Breach:</li>
<li>External system breach (hacking)</li>
<li>Information Acquired - Name or other personal identifier in
combination with: Social Security Number</li>
</ul></li>
<li><strong>Article:</strong> <a
href="https://www.bleepingcomputer.com/news/security/alleged-breachforums-owner-pompompurin-arrested-on-cybercrime-charges/">Alleged
BreachForums owner Pompompurin arrested on cybercrime charges.</a>
<ul>
<li><strong>Author:</strong> <a
href="https://www.bleepingcomputer.com/author/sergiu-gatlan/"
title="Sergiu Gatlan has covered cybersecurity, technology, and other news beats for more than a decade.">Sergiu
Gatlan</a>. (2023, Mar 17).</li>
<li>U.S. law enforcement arrested on Wednesday a New York man believed
to be Pompompurin, the owner of the BreachForums hacking forum.</li>
</ul></li>
<li><strong>Supporting Article:</strong> <a
href="https://www.cnn.com/2023/03/24/politics/fbi-breach-forums-conor-fitzpatrick/index.html">FBI
takes down cybercrime forum that touted data connected to breach
affecting US lawmakers.</a>
<ul>
<li><strong>Author:</strong> Sean Lyngaas. (2023, Mar 24).</li>
<li>The FBI has arrested the alleged founder of a popular cybercriminal
forum that touted data stolen in a hack affecting members of Congress
and thousands of other people and taken the website down, the Justice
Department said Friday.</li>
</ul></li>
</ul>
<hr />
<ul>
<li><strong>User space.</strong></li>
<li><strong>Article:</strong> <a
href="https://www.forbes.com/sites/emilymason/2022/10/27/after-paypal-revokes-controversial-misinformation-policy-major-concerns-remain-over-2500-fine/?sh=7394309330c4">After
PayPal Revokes Controversial Misinformation Policy, Major Concerns
Remain Over $2,500 Fine.</a>.
<ul>
<li><strong>Author:</strong> Emily Mason (2022, Oct 22).</li>
<li>After facing backlash earlier this month, PayPal PYPL -1.5%
rescinded a line in its policy stating that spreading misinformation on
the platform would be subject to a $2,500 fine. Today, the remaining
language leaves users and elected officials demanding more clarity over
how the platform defines fine-worthy speech.</li>
</ul></li>
<li>Bumble Bee's first experience of the HPR website.</li>
</ul>
<hr />
<ul>
<li><strong>Additional Information.</strong>
<ul>
<li><a href="https://en.wikipedia.org/wiki/Data_breach"
title="Data Breach: from Wikipedia, the free encyclopedia.">What is a
Data Breach?</a> A data breach is a security violation, in which
sensitive, protected or confidential data is copied, transmitted,
viewed, stolen, altered or used by an individual unauthorized to do
so.</li>
<li><a href="https://en.wikipedia.org/wiki/Malware"
title="Malware: from Wikipedia, the free encyclopedia.">What is
Malware?</a> Malware (a <a
href="https://en.wikipedia.org/wiki/Portmanteau"
title="Multiple words are combined into a new word.">portmanteau</a> for
malicious software) is any software intentionally designed to cause
disruption to a computer, server, client, or computer network, leak
private information, gain unauthorized access to information or systems,
deprive access to information, or which unknowingly interferes with the
user's computer security and privacy.</li>
<li><a href="https://en.wikipedia.org/wiki/Payload_(computing)">What is
a Payload?</a> In the context of a computer virus or worm, the payload
is the portion of the malware which performs malicious action; deleting
data, sending spam or encrypting data. In addition to the payload, such
malware also typically has overhead code aimed at simply spreading
itself, or avoiding detection.</li>
<li><a href="https://en.wikipedia.org/wiki/Phishing"
title="Phishing: from Wikipedia, the free encyclopedia.">What is
Phishing?</a> Phishing is a form of <a
href="https://en.wikipedia.org/wiki/Social_engineering_(security)">social
engineering</a> where attackers deceive people into revealing sensitive
information or installing malware such as <a
href="https://en.wikipedia.org/wiki/Ransomware">ransomware</a>. Phishing
attacks have become increasingly sophisticated and often transparently
mirror the site being targeted, allowing the attacker to observe
everything while the victim is navigating the site, and transverse any
additional security boundaries with the victim.</li>
<li><a href="https://en.wikipedia.org/wiki/Information_security">What is
Information Security (InfoSec)?</a> Information security, sometimes
shortened to InfoSec, is the practice of protecting information by
mitigating <a
href="https://en.wikipedia.org/wiki/Information">information</a> risks.
It is part of <a
href="https://en.wikipedia.org/wiki/Risk_management_information_systems">information
risk management</a>.</li>
<li><a
href="https://en.wikipedia.org/wiki/Vulnerability_(computing)">What is a
Vulnerability (computing)?</a> Vulnerabilities are flaws in a computer
system that weaken the overall security of the device/system.
Vulnerabilities can be weaknesses in either the hardware itself, or the
software that runs on the hardware.</li>
<li><a href="https://en.wikipedia.org/wiki/Attack_surface">What is an
"Attack Surface"?</a> The attack surface of a software environment is
the sum of the different points (for "attack vectors") where an
unauthorized user (the "attacker") can try to enter data to or extract
data from an environment. Keeping the attack surface as small as
possible is a basic security measure.</li>
<li><a href="https://en.wikipedia.org/wiki/Attack_vector">What is an
"Attack Vector"?</a> In computer security, an attack vector is a
specific path, method, or scenario that can be exploited to break into
an IT system, thus compromising its security. The term was derived from
the corresponding notion of vector in biology. An attack vector may be
exploited manually, automatically, or through a combination of manual
and automatic activity.</li>
</ul></li>
</ul>
