Tag Archive for: threatening

Hackers are threatening to leak World-Check, a huge sanctions and financial crimes watchlist


A financially motivated criminal hacking group says it has stolen a confidential database containing millions of records that companies use for screening potential customers for links to sanctions and financial crime.

The hackers, which call themselves GhostR, said they stole 5.3 million records from the World-Check screening database in March and are threatening to publish the data online.

World-Check is a screening database used for “know your customer” checks (or KYC), allowing companies to determine if prospective customers are high risk or potential criminals, such as people with links to money laundering or who are under government sanctions. The hackers told TechCrunch that they stole the data from a Singapore-based firm with access to the World-Check database, but did not name the firm.

A portion of the stolen data, which the hackers shared with TechCrunch, includes individuals who were sanctioned as recently as this year.

Simon Henrick, a spokesperson for the London Stock Exchange Group, which maintains the database, told TechCrunch: “This was not a security breach of LSEG/our systems. The incident involves a third party’s data set, which includes a copy of the World-Check data file. This was illegally obtained from the third party’s system. We are liaising with the affected third party, to ensure our data is protected and ensuring that any appropriate authorities are notified.”

LSEG did not name the third-party company, but did not dispute the amount of data stolen.

The portion of stolen data seen by TechCrunch contains records on thousands of people, including current and former government officials, diplomats, and private companies whose leaders are considered “politically exposed people,” who are at a higher risk of involvement in corruption or bribery. The list also contains individuals accused of involvement in organized crime, suspected terrorists, intelligence operatives and a European spyware vendor.

The data varies by record. The database contains names, passport numbers, Social Security numbers, online crypto account identifiers and bank account numbers, and more.

World-Check is currently owned by the London Stock Exchange Group following…

Source…

Hackers are threatening to publish a huge stolen sanctions and financial crimes watchlist


A financially motivated criminal hacking group says it has stolen a confidential database containing millions of records that companies use for screening potential customers for links to sanctions and financial crime.

The hackers, which call themselves GhostR, said they stole 5.3 million records from the World-Check screening database in March and are threatening to publish the data online.

World-Check is a screening database used for “know your customer” checks (or KYC), allowing companies to determine if prospective customers are high risk or potential criminals, such as people with links to money laundering or who are under government sanctions. The hackers told TechCrunch that they stole the data from a Singapore-based firm with access to the World-Check database, but did not name the firm.

A portion of the stolen data, which the hackers shared with TechCrunch, includes individuals who were sanctioned as recently as this year.

Simon Henrick, a spokesperson for the London Stock Exchange Group, which maintains the database, told TechCrunch: “This was not a security breach of LSEG/our systems. The incident involves a third party’s data set, which includes a copy of the World-Check data file. This was illegally obtained from the third party’s system. We are liaising with the affected third party, to ensure our data is protected and ensuring that any appropriate authorities are notified.”

LSEG did not name the third-party company, but did not dispute the amount of data stolen.

The portion of stolen data seen by TechCrunch contains records on thousands of people, including current and former government officials, diplomats, and private companies whose leaders are considered “politically exposed people,” who are at a higher risk of involvement in corruption or bribery. The list also contains individuals accused of involvement in organized crime, suspected terrorists, intelligence operatives and a European spyware vendor.

The data varies by record. The database contains names, passport numbers, Social Security numbers, online crypto account identifiers and bank account numbers, and more.

World-Check is currently owned by the London Stock Exchange Group following…

Source…

Hackers who targeted the private hospital that treated Kate Middleton are threatening to release the Royal Family’s private medical information


  • GCHQ and police investigating hacking gang Rhysida named after centipede

Hackers who targeted the private hospital which treated Kate, Princess of Wales, are threatening to release private medical information belonging to members of the Royal Family.

The gang broke into the computer systems of the King Edward VII’s Hospital and warned they aim to release ‘data from the Royal Family’ on Tuesday unless they are paid £300,000 in the cyber currency Bitcoin.

The ransom demand was made on the dark web, where the hackers posted images of what they claim are stolen files including X-rays, letters from consultants, registration forms, handwritten clinical notes, and pathology forms.

Prince William departs the King Edward VII hospital with his wife Catherine, Duchess of Cambridge

Prince William departs the King Edward VII hospital with his wife Catherine, Duchess of Cambridge

The Princess of Wales was admitted to the King Edward VII's Hospital in 2012 with prolonged bouts of acute morning sickness during her first pregnancy. Pictured, Kate attends the Royal Variety Performance 2023 at the Royal Albert Hall

The Princess of Wales was admitted to the King Edward VII’s Hospital in 2012 with prolonged bouts of acute morning sickness during her first pregnancy. Pictured, Kate attends the Royal Variety Performance 2023 at the Royal Albert Hall

The gang said: ‘Unique files are presented to your attention! Data from the Royal Family! A large amount of patient and employee data. Sale in one lot!!’

GCHQ and police are investigating the attack by hacking gang Rhysida – named after a venomous tropical centipede.

The 56-bed private hospital in Marylebone has been used by the Royal Family for more than a century. The late Queen Elizabeth II was a patient and so was Prince Philip who spent almost a month being treated there before he died aged 99 in 2021.

The Princess of Wales was admitted there in 2012 with prolonged bouts of acute morning sickness during her first pregnancy. 

During her stay, two Australian radio DJs placed a hoax call and obtained private medical information about Kate – then the Duchess of Cambridge – which they then broadcast, forcing hospital bosses into an embarrassing apology. 

The nurse who unwittingly took the call later committed suicide over the prank.

Last night,…

Source…

How To Get Rid Of Android Malware Threatening Your Banking Apps


Google’s Android operating system is the most used mobile OS in the world, with more than 2.5 billion users worldwide. Besides being affordable, Android is much more customizable than Apple’s iOS, thanks to its open-source nature. 

However, this exposes Android devices to several security risks. For one, Google’s Play Store; the primary source of Android mobile device apps — has zero quality control

For example, malicious apps that steal data and install spyware have begun appearing on the Play Store. In Malaysia, there have been instances of Android apps capable of reading text messages which let scammers steal users’ TAC numbers and bypass their banking app’s 2FA security.

Even more frightening is the fact that hackers can remotely control these new “smart” trojan apps, thus allowing them to actually choose which victims to target. These apps, like the best Android crypto wallets, will pass initial virus scans because hackers have yet to install malicious software. 

However, if the infected device displays any desired traits such as country of origin or presence of banking apps, hackers will install their programs via updates. From here, the app will begin stealing sensitive information, i.e., credentials, passwords, and other personal information.

The lack of security and quality control checks on the Play Store is to blame for this state of affairs. While iOS users are not immune to this, most victims tend to be Android users.

Android Malware

4 Ways to Remove Malware on Your Android Device

So, is there any way for Android users to stay safe and protect themselves? Fortunately, the answer is yes, so join us as we show you how you can get rid of Android malware on your device.

1. Turn on Google Play Protect

Turning on Google Play Protect is the easiest way to start cleaning your phone up. Besides scanning apps, before you download them, this feature also checks your device for any potentially harmful apps.

It also tracks apps on your device and warns you if they are hiding or misrepresenting any information. In short, you can think of this function as a type of gatekeeper for your device.

I recommend that you periodically activate this feature to ensure your phone stays…

Source…