The all in one place for non-profit security aid.
The newly discovered Chinese nation-state actor known as Volt Typhoon has been observed to be active in the wild since at least mid-2020, with the hacking crew linked to never-before-seen tradecraft to retain remote access to targets of interest.
The findings come from CrowdStrike, which is tracking the adversary under the name Vanguard Panda.
"The adversary consistently employed ManageEngine Read More
The Hacker News | #1 Trusted Cybersecurity News Site
Secrets Sensei: Conquering Secrets Management Challenges
In the realm of cybersecurity, the stakes are sky-high, and at its core lies secrets management — the foundational pillar upon which your security infrastructure rests. We’re all familiar with the routine: safeguarding those API keys, connection strings, and certificates is non-negotiable. However, let’s dispense with the pleasantries; this isn’t a simple ‘set it and forget it’ scenario. It’s Read More
The Hacker News | #1 Trusted Cybersecurity News Site
Man Charged for Creating ‘evil twin’ Free Wi-Fi Networks on a Flight
A 42-year-old West Australian man is set to appear in Perth Magistrates Court today, facing nine charges for alleged cybercrime offences.
The Australian Federal Police (AFP) has accused the man of establishing fake free WiFi access points, mimicking legitimate networks to capture personal data from unsuspecting victims.
The investigation began in April 2024 when an airline reported concerns about a suspicious WiFi network identified by its employees during a domestic flight.
AFP investigators searched the man’s baggage upon his return to Perth Airport on April 19, 2024, seizing a portable wireless access device, a laptop, and a mobile phone.
A subsequent search of his Palmyra home led to further evidence collection.
“Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!”- Free Demo
The AFP’s Western Command Cybercrime Operations Team analyzed the seized data and devices, allegedly revealing dozens of personal credentials belonging to other people and fraudulent WiFi pages.
The AFP alleges that the man used a portable wireless access device to create ‘evil twin’ free WiFi networks at multiple locations, luring users into believing they were legitimate services.
The AFP claims that when people attempted to connect to these fake networks, they were redirected to a fraudulent webpage requiring them to sign in using their email or social media logins.
These details were then allegedly saved to the man’s devices, potentially giving him access to victims’ online communications, stored images, videos, and bank details.
Detective Inspector Andrea Coleman of the AFP’s Western Command Cybercrime unit emphasized the importance of being cautious when connecting to public WiFi networks.
“To connect to a free WiFi network, you shouldn’t have to enter any personal details– such as logging in through an email or social media account,” she advised.
The man faces serious charges, including unauthorized impairment of electronic communication, possession or control of data with the intent to commit a serious offense, unauthorized access or modification of restricted data, and dealing in personal financial information.
The maximum penalties for these offenses range from two to ten years of imprisonment.
Detective Inspector Coleman urged the public to take precautions when using public WiFi, such as installing a reputable virtual private network (VPN), disabling file sharing, and avoiding sensitive activities like banking.
She also recommended turning off WiFi on devices when not in use and using strong, unique passphrases for online accounts.
Anyone who is connected to free WiFi networks in airport precincts and on domestic flights is advised to change their passwords and report any suspicious activity to Report Cyber.
The AFP’s investigation is ongoing to determine the full extent of the alleged offenses.
Are you from SOC/DFIR Teams? – Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files
The post Man Charged for Creating ‘evil twin’ Free Wi-Fi Networks on a Flight appeared first on Cyber Security News.
Peach Sandstorm cyberespionage. Criminal attacks against a Colombian telco and two major US casino firms. A thief in the browser. And the Greater Manchester Police are on a virtual manhunt.
“Peach Sandstorm” is an Iranian cyberespionage campaign. A Cyberattack against a telecom provider affects government and corporate online operations in Colombia. Python NodeStealer takes browser credentials. Caesars Entertainment files its 8-K. Some MGM Entertainment systems remain down. Betsy Carmelite from Booz Allen talking about how to leverage cyber psychology. Ron Reiter of Sentra outlines the threats for connected cars. And a third-party incident exposes personal data of the Manchester police. Read More
The CyberWire