Cybersecurity

JavaScript Malware Switches to Server-Side Redirects & DNS TXT Records as TDS

Last August we documented a malware campaign that was injecting malicious JavaScript code into compromised WordPress sites to redirect site visitors to VexTrio domains. The most interesting thing about that malware was how it used dynamic DNS TXT records of the tracker-cloud[.]com domain to obtain redirect URLs. Typical notification scam destination for the redirects We’ve […]

Cybersecurity

Insurance Broker Notifying 1.5 Million of Health Info Hack

Healthcare , Incident & Breach Response , Industry Specific California Firm Said August Attack Affected Clients’ Data Marianne Kolbasuk McGee (HealthInfoSec) • January 29, 2024     Insurance broker Keenan & Associates is notifying more than 1.5 million individuals about an August 2023 hacking incident that compromised personal and health information. (Image: Keenan & Associates) […]

Cybersecurity

PSNI suffers ‘critical’ data breaches

The Police Service of Northern Ireland (PSNI) suffered a “critical incident” on August 8, after the personally identifying information for all of its employees was published online. The “monumental” data breach occurred when data was mistakenly posted online following a Freedom of Information (FoI) request. A database, which included the surname, initials, rank/grade, role and […]