By Waqas
Here’s a rundown of the impact of new cybersecurity regulations as they are applied to the medical device industry. 
This is a post from HackRead.com Read the original post: How New Cybersecurity Regulations Are Shaping the Medical Device Industry

Discover how the latest cybersecurity regulations are influencing the medical device industry. Learn about the measures manufacturers are taking to meet compliance requirements, enhance device security, and protect patient data. Stay ahead of the curve with insights into the evolving landscape of medical device cybersecurity.

Given its direct effect on health and life, the medical industry is subject to stringent regulations. Governments worldwide exercise some form of control over medical products and services.

However, the regulations don’t appear to be as agile as they should be in light of the growing cyber threats on web-connected medical equipment and other digital devices used in healthcare.

Medical devices that connect to the internet and to other gadgets have been in use for quite some time, but it’s only in the past couple of years that regulators have paid attention to the serious threats hounding modern medical hardware. Better late than never as some would say—it’s good to see policymakers stepping up their game to ensure the secure use or operation of medical equipment.

Here’s a rundown of the impact of new cybersecurity regulations as they are applied to the medical device industry. 

The passage of the United States 2023 Omnibus Bill comes with the expansion of the US Food and Drug Administration’s authority over medical device security. This expanded authority gives the FDA the power to set cybersecurity requirements for medical devices and requires all device manufacturers to demonstrate that their products meet these requirements.

This legislation provides the FDA with additional funding and statutory powers that significantly impact the medical device industry. Before the FDA’s updated authority, cybersecurity for medical devices was more of an auxiliary or supplemental concern. It was evaluated separately and not with the same urgency accorded to other device safety concerns.

The FDA’s new powers allow it to compel device manufacturers to implement a product development framework that meets security requirements. Devices will not be made available to customers unless they are secure.

Device makers will be required to monitor and address postmarket cybersecurity vulnerabilities, develop processes to provide reasonable cybersecurity assurance, submit a software bill of materials (SBOM), and comply with other requirements set by the FDA. Security is now part of the safety evaluation of devices.

The 2023 Omnibus Bill defines the devices to be covered by the FDA’s expanded authority as something that meets any of the following conditions: having software/firmware in it, the ability to connect to the internet, and the potential to be affected by cyber threats or attacks. This means that a vast range of devices will be covered and unscrupulous manufacturers will have a hard time circumventing FDA scrutiny.

All these bode well for patient safety, but many device makers will likely regard it as onerous. The changes they need to implement in their product development and monitoring processes mean additional costs. They also mean a slower time to market. 

**CISA’s push for secure-by-design policy: compulsory security throughout the product life cycle**

The Cybersecurity and Infrastructure Security Agency (CISA) of the United States is pushing for the adoption of “secure-by-design” and “secure-by-default” policies among technology manufacturers, which include advanced medical device makers.

The agency attempts to address the fixation of most companies to get their products out to the market as quickly as possible, disregarding crucial safety concerns especially when it comes to cybersecurity. 

CISA also seeks to make organizations develop voluntary performance goals that match the specific needs and environments they are dealing with. These specific performance objectives allow organizations to have a better grasp of the threat landscape and how they can improve their products to stop or mitigate the impact of cyber attacks.

Moreover, CISA plans to encourage enterprises to be security-conscious through a government-sanctioned acknowledgement or praise for compliant organizations. The agency also plans to take advantage of the US IT procurement capacity to reward businesses that embrace the secure-by-design policy with favourable procurement deals.

CISA does not have a lot of regulatory authority, but it is capable of influencing organizations to become security-aware and capable of adapting to the changing needs in the field of medical device security. It plays two major roles: serving as the operational lead for Federal Cybersecurity and working as the national coordinator for critical infrastructure security and resilience. 

**EU Medical Device Regulation: systematized device security**

In 2020, the European Union introduced regulations to address medical device cybersecurity threats. These regulations are collectively known as the Medical Device Regulation (MDR) framework aims to ensure that all medical devices imported into the EU are of high quality and guaranteed safety. 

MDR supplants the EU Medical Device Directive (MDD), which has been in place for nearly a quarter of a century. MDR is a mandatory requirement for all medical devices that enter the EU market. It sets a product classification system, clinical evaluation process, EUDAMED mechanisms, and supply chain guidelines to ensure medical device security and safety.

The European Union is one of the biggest markets for medical devices. MDR has been in effect for more than a year now. Its implementation has shown that it is possible to exercise effective regulation to ensure patient safety and security against cyber assailants. Its new requirements for medical device imports leave no room for run-of-the-mill device makers. It forces everyone to systematically integrate cybersecurity across the product development lifecycle

**Japan’s MHLW guidelines: information sharing with healthcare providers and patients**

Japan has been at the forefront of medical device cybersecurity regulations in Asia. The country’s Ministry of Health, Labour, and Welfare (MHLW) announced in 2020 new guidelines regarding medical device security. These guidelines require medical device manufacturers to implement a cybersecurity management system and conduct regular risk assessments. They also ask manufacturers to provide information on the security of medical devices to healthcare providers and patients.

The MHLW guidelines are notable for their emphasis on information sharing. All relevant parties are informed about the security of medical device products. This is important in establishing trust and encouraging everyone to play a role in making sure that the medical devices available in the market are secure and unlikely to be compromised by threat actors.

**How industries are responding**

It’s safe to say that there have been no objections from the medical tech sector, at least nothing explicit. Some in the tech industry have openly welcomed the new regulations. Google, for one, expressed support for the efforts to raise cybersecurity standards in mobile and IoT gadgets.

New medical device regulations do not only mean improved medical device effectiveness and patient safety. They also promote the development of new solutions to help device makers keep up with the new security requirements efficiently. They create opportunities for innovative companies, especially when it comes to addressing new cybersecurity needs.

Israeli medical software provider MedDev Soft, for example, offers solutions that simplify and accelerate software development and regulatory compliance for medical products. Californian startup Medcrypt offers cryptography, monitoring, and vulnerability management solutions for medical device makers. 

Another Israeli company, Sternum, takes a different approach and offers integrated on-device endpoint security that helps with cyber regulations. The main advantage of this particular solution is that it can be used to easily retrofit existing devices. Sternum is responsible for the security of the pacemakers of Medtronic, for example.

Recent cyber attacks on healthcare organizations have highlighted the importance of cybersecurity regulations for medical devices. Device manufacturers, the tech industry in general, and cybersecurity firms acknowledge the need to bolster defenses in line with the US Cybersecurity and Infrastructure Security Agency’s recent pronouncements on the state of healthcare cybersecurity.

**In conclusion**

Recent cyber attacks on healthcare organizations have highlighted the importance of cybersecurity regulations for medical devices. There may have been no significant incidents of cyber attacks that sought to harm individuals by hacking into their connected medical devices. However, it is better to anticipate the attacks than to be caught flatfooted.

New regulations are shaping the medical device industry, especially when it comes to the safety and security aspects. These regulations greatly benefit patients, but they are also a welcome development for the cybersecurity industry. Security firms have been developing new solutions to help organizations comply more easily while ensuring honest-to-goodness medical device security.

1.  Importance Of Medical Alert Devices
2.  Intel chip flaw left medical devices vulnerable
3.  AI firm exposes sensitive medical records online
4.  Drastic Implication of Unpatchd Medical Devices
5.  Ransomware attack on US healthcare debt collector

How New Cybersecurity Regulations Are Shaping the Medical Device Industry

By Deeba Ahmed
The PureCrypter malware is targeting government entities in North America and the Asia-Pacific region.
This is a post from HackRead.com Read the original post: PureCrypter Malware Targets Governments Through Discord

PureCrypter delivers multiple types of malware and info-stealers, including Redline Stealer, Eternity, AgentTesla, Philadelphia Ransomware, and Blackmoon.

The cybersecurity researchers at Menlo Labs discovered an unknown threat actor exploiting an evasive malware campaign operated through Discord. In their campaign, the prime victims are government entities in North America and Asia-Pacific.

According to researchers, the attackers in this campaign are delivering the PureCrypter downloader, and their primary targets are government entities. The threat actor uses a compromised non-profit organization’s domain as their C2 center to deliver a second payload.

Researchers noticed that in this campaign, PureCrypter delivers multiple types of malware and info-stealers, including Redline Stealer, AgentTesla, Philadelphia Ransomware, and Blackmoon.

**How Was the Campaign Discovered?**

Researchers wrote that they became suspicious after detecting that Menlo’s Cloud Security Platform had blocked archive files, which were password-protected, across numerous government customers across the North American and Asia-Pacific regions.

The attacks start with a phishing email that contains a malicious link to Discord. This URL launches a password-protected ZIP file containing the .NET malware downloader PureCrypter, which downloads a secondary payload from the attackers’ C2 infrastructure. 

The sample Menlo Labs analyzed downloaded AgentTesla, a widely used RAT and info stealer that can steal browser-based passwords, take screenshots, and log keystrokes after establishing a connection with an FTP server located in Pakistan.

On the other hand, victim data is stored on this server, which was observed in another campaign using OneNote to deliver malware.

> “The FTP server appears to have been taken over and the leaked credentials for the domain were found online, thus suggesting that the threat actors used these credentials to gain access to the server.”
> 
> Menlo Labs

**What is PureCrypter?**

PureCrypter is a malware downloader capable of distributing a wide range of ransomware, malware, and information stealers. It was first detected in June 2022. Its creator, PureCoder, offers it for $59 per month or a one-time payment of $245 for life.

The developer recently expanded its features to include PureLogs logger and info stealer, which can steal data from crypto wallets, web browsers, and email clients, for just $99 a year or lifetime access for $99.

1.  Telegram and Discord Bots drop Malware
2.  Google Ads Malware Wipes Crypto Wallet
3.  Teen “Hackers” on Discord Selling Malware
4.  Hackers drop NjRAT in “Earth Bogle” attack
5.  Malware targets Discord users to steal data

PureCrypter Malware Targets Governments Through Discord

By Waqas
Rupert Murdoch's News Corp revealed a data breach in 2022, but it turns out that hackers had been in the media giant's network two years prior.
This is a post from HackRead.com Read the original post: News Corp: Hackers sat undetected on its network for 2 years

News Corp previously blamed hackers linked to China for the cyber attack, with the intention of gathering intelligence to benefit China’s interests.

In February 2022, News Corp, the giant media and publishing company, disclosed a data breach revealing that its journalists had been targeted in a software supply chain attack.

Now, the company has shared additional information stating that the breach actually occurred in February 2020, meaning hackers sat on its network for two years without being noticed. The cybersecurity firm to assist News Corp at that time was Google-owned Mandiant.

In a breach notification, the company said that the threat actors behind the breach accessed its email and document storage system, used by multiple News Corp businesses. Personal and health information of affected employees was accessed, but the company stated that it does not appear that the activity was focused on exploiting personal information.

> Based on the investigation, News Corp understands that, between February 2020 and January 2022, an unauthorized party gained access to certain business documents and emails from a limited number of its personnel’s accounts in the affected system, some of which contained personal information.
> 
> News Corp

The breach impacted a number of News Corp news outlets, including The Wall Street Journal, the New York Post and its U.K. news operations. Among the personal information accessed were names, dates of birth, social security numbers, driver’s license numbers, passport numbers, financial account information and medical and health insurance information.

News Corp has previously stated that the attackers were linked to China and were likely involved in espionage activities to collect intelligence to benefit China’s interests.

In October 2022, the New York Post revealed that it had been hacked after its website and Twitter account were used to publish offensive content targeting multiple U.S. politicians. The newspaper later revealed that the incident was caused by one of its own employees who was fired after their involvement was discovered.

News Corp’s properties include a number of high-profile news outlets such as Dow Jones, FOX News, The Sun, and MarketWatch, among others. It is worth noting that in March 2019, the Dow Jones made headlines for leaking a “screening list” comprising sensitive information about terrorists, criminals, and shady businesses.

In April 2022, FOX News exposed thirteen million records online. The fifty-eight gigabytes worth of information included internal records, PII (personally identifiable information) of the company’s employees, and much more. These records remained open to public access before the company was alerted about the incident.

In a comment to Hackread.com, Julia O’Toole, CEO of MyCena Security Solutions, said that “It is astounding that News Corp has only discovered this highly important piece of information one year after the breach was first announced, and it puts employees at a much greater risk of financial fraud and identity theft._”_

Julia stressed that “Given that the attackers had two years of access before they were identified, this means they most likely got away with more information than was first realised, and with no one knowing it was stolen, they wouldn’t have been on high alert for potential attacks.”

“The suspected groups behind cyber espionage campaigns will generally always use phishing to gain an initial foothold on an organisation. Knowing it provides the greatest chance of success, they will target employees with realistic phishing emails in a bid to steal their user credentials so they can access the corporate network, carry out reconnaissance, and steal data,” warned Julia.

1.  Iran’s Fars News Agency website hacked
2.  Media Giant Guardian Hit By Ransomware Attack
3.  Anonymous Hacks Russian Media Censoring Agency
4.  Windows, Linux and macOS Hit by Chinese APT Group
5.  APT41 hackers spying on texts with MessageTap Malware

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

News Corp: Hackers sat undetected on its network for 2 years

By Waqas
The suspects are allegedly involved in hacking, issuing threats, stealing data, laundering money, and extorting
This is a post from HackRead.com Read the original post: Ethical hacker among 3 arrested for blackmail and ransomware attacks

The ethical hacker reportedly works for the Dutch security organization, the Dutch Institute for Vulnerability Disclosure (DIVD).

Amsterdam’s cybercrime police arrested three individuals suspected of **launching ransomware attacks** against businesses in the Netherlands and worldwide. The suspects are allegedly involved in hacking, issuing threats, stealing data, laundering money, and extorting. These criminals extorted small and large businesses worldwide after hacking into their networks, generating €2.5 million.

**Suspects Details**

The detainees are all young males aged between 18 and 21. They were arrested on January 23rd, 2023 and are accused of stealing the private information of tens of millions of users from their targeted networks and blackmailing the victims for ransom.

The 21-year-old hailed from Zandvoort and was in contact with an 18-year-old suspect from Rotterdam; the third, also 18, was arrested in Naaldwijk. One of the suspects is an **ethical hacker** who works for the Dutch security organization, the Dutch Institute for Vulnerability Disclosure (**DIVD**).

The accused are detained in restrictive custody and can only contact their lawyer. The accused arrested in Zandvoort had 45,000 euros in cash and 550,000 euros worth of Bitcoin. Reportedly, the accused used Bitcoin to launder €2.5 million.

**Stolen Data**

**According to** Dutch media, thousands of businesses were targeted, including online stores, social media networks, training and educational institutions, software firms, hotels, and critical infrastructure and services-related entities.

Moreover, the accused damaged property worth millions of euros. The stolen data includes names, addresses, dates of birth, phone numbers, credit card numbers, passwords, bank account details, license plate numbers, passport data, and citizen identification numbers. The victims paid large sums to the hackers, sometimes as much as €700,000. 

**Investigations**

The investigation was launched in March 2021 by the Amsterdam Police Cybercrime Division after receiving a report from a prominent Dutch firm. The firm reported that its computer systems had been hacked and a trove of data had been stolen.

Dutch police **noted** that private and sensitive data had been stolen, and national and international businesses had become victims of hacking and data theft.

One of the victim organizations is Ticketcounter, which sells amusement park and zoo tickets online. Troy Hunt of **HaveIbeenPwned** also tweeted about the Ticketcounter data breach on March 1st, 2021.

> I've spent a bunch of time talking to Ticketcounter over the last week, and this is a really tough situation for them. The exposed database was human error; one bad mistake made in August last year that's now come back to bite them nearly 7 months on. https://t.co/u4xrMZDpGZ
> 
> — Troy Hunt (@troyhunt) March 1, 2021

Other victims include a reputed educational institution and a meal-delivery service. Further probing revealed that the hackers had invaded the computer systems of their targets and sent a threatening email, asking the victims to pay a **ransom in Bitcoin**; otherwise, they would destroy the company’s digital infrastructure or leak the data online. Many victims paid the ransom.

“According to what we know so far, the demand ranges from more than €100,000 to €700,000 and, in addition, the stolen information has often already been sold online,” investigators revealed.

**Dutch Police Tackle Cybercrime**

Although cybercrime in the Netherlands, like any other country, has increased in recent years, Dutch authorities are known for playing a major role in tackling it locally and globally. In fact, Dutch police were behind the shutdown and seizure of the infamous and one of the **largest dark web marketplaces Hansa**.

**Back in April 2020**, Dutch authorities took down 15 DDoS-for-hire services. It took them merely one week to complete the operation. Most recently, **in October 2022**, Dutch police were even able to successfully trick the Deadbolt ransomware gang into sharing decryption keys.

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Ethical hacker among 3 arrested for blackmail and ransomware attacks

By Deeba Ahmed
A group of hackers going by the online handle of "CH01" has taken responsibility for defacing at least 32 Russian websites to mark a protest over the one-year anniversary of the Russian invasion of Ukraine.
This is a post from HackRead.com Read the original post: Hackers Deface Russian Websites on Ukraine Invasion Anniversary

The group also announced launching a cyber war against the Russian government.

Hackers hacked and defaced at least 32 Russian websites and uploaded a video showing the Kremlin on Fire. The incident happened on the anniversary of the Ukraine invasion. The exact number of defaced websites is still unknown; it is also unclear how the hackers defaced them.

A group of hackers going by the online handle of “CH01” took responsibility for the attack, stating that it was to show solidarity with the “entire civilized world, in order to restore justice and the triumph of the forces of light and goodness.”

**More Context**

*   Anonymous sent 7m texts to Russians; hacked security cams
*   Anonymous hacked 90% of Russian misconfigured databases
*   Anonymous hacked Russian TV, streaming services for Ukraine
*   Anonymous hacks Russian printers to send anti-war messages
*   Anonymous hacked Russian Yandex taxi app causing traffic jam

In its messages on the Telegram app, the hackers called Russia a dictatorial regime that invaded a “strong and independent Ukraine.” In a message translated from the Russian language via the Telegram translation bot, the hackers said:

> Hacker group CH01, in solidarity with the entire civilized world, in order to restore justice and the triumph of the forces of light and good, on the anniversary of the terrorist invasion of dictatorial Russia in a strong and independent Ukraine, we declare cyber war to the dictatorship and totalitarianism and idiocy of Putin’s criminal regime.
> 
> CH01

The hackers also played a song by a renowned Russian rock band from the 1980s called Kino, whose lyrics were freedom-based. A QR code is also part of the video that redirects to a Telegram channel, where the hackers claimed responsibility for the attack. CH01 has created a Twitter account and posted a video on the social media app, too.

> The oracle says that all evil will loose and all good will live forever. we are CH01 hacker group, on behalf of all free world, will fight against putintrrorist and all dictators.  
> Let the prophecy come true#CH01 #putinterorist #oracle #prophecy #cyberwar #freedom pic.twitter.com/1sKfkMqmXB
> 
> — CH01 (@\_CH\_01\_) February 24, 2023

As Ukraine’s invasion by Russia marked its anniversary, Ukrainian President Volodymyr Zelensky released a statement claiming that this will be the year of their “invincibility” and “victory.”

This is not the only cyber attack that Russian cyber infrastructure has suffered on the anniversary of the Ukraine invasion. On February 23, 2023, Anonymous hacktivists hacked into several radio stations across Russia and defaced the ongoing transmission with announcements about fake missile alerts.

**More Hacktivist News**

1.  Is Hacktivism Good or Bad?
2.  Muslim Hacktivists Hack ISIS website
3.  Hacktivists leak 1.7TB of Cellebrite data
4.  Does Hacktivism Really Equal Terrorism?

Hackers Deface Russian Websites on Ukraine Invasion Anniversary

By Owais Sultan
How to use your favourite Email Domain Name with Outlook, Gmail & Co. with Custom Email Hosting   
This is a post from HackRead.com Read the original post: How to use Email Domain Name with Outlook, Gmail & Co. with Custom Email Hosting

Are you still using a generic Outlook, Hotmail, or Gmail email address for your business communications? Then you should think again, as there are many disadvantages compared to a custom domain email, especially one that you really like and that represents you best.

If email marketing plays an important role in your business operations and you target millennials of which over 70% prefer businesses to contact them via email according to HubSpot, then read on.

**What is the difference between a custom email domain and a free email account?**

So, presumably, you have set up a free Gmail or MSN mail ID with your business name like prettyflowers@gmail.com. Not a problem at first sight as the email address contains your business name and everyone is familiar with Gmail.

And often sites such as Gmail or Yahoo offer unlimited storage, which sounds like an incredible deal. But do you really think these tech giants would make the revenue they do by handing out “free” email accounts left and right?

Well, here’s the catch: often these email accounts are unsafe, feature ads and retrieve all the data shared, including your customer data, which can of course be sensitive.

With data protection being a big deal these days, you don’t want to jeopardise your loyal customer base just because you want to save a penny or two. Web property management expert at digital marketing agency ClickDo and web hosting provider SeekaHost, Fernando Raymond, has worked with many small and medium-sized businesses and knows firsthand what a difference a professional business presence can make. He explains:

“One of the first things I’d advise my new clients is to have a basic but professional business website set up with a custom business email domain (the same domain name as the website) that is the gateway to reaching more potential customers.”

According to research by brightlocal.com and other reports, most people only trust businesses that have a business website and display trustworthy and up-to-date contact details on it, including a professional email address.

You can get a custom email domain in one minute via SeekaPanel that can be integrated with the email clients you are familiar with. Find out more below.

**So, why opt for a custom email domain with affordable email hosting?****1.      A Professional and Unique Email ID**

Do you really want to look like another spammer when you reach out to potential new clients?

No one will respond to your emails and block them or mark them as spam if they are unsure about the email sender.

With a custom email hosting solution that gives you a personal domain such as maria@prettyflowers.com customers that already know you by name, will recognize your email address and open the mail. And new clients will recognize that they have received a professional business email, which instils more trust.

**2.      A Branded Email for more Credibility**

Gaining the trust of a customer is incredibly challenging, and nothing is more impressive than a branded email address.

Think of care@prettyflowers.com and sales@prettyflowers.com. If people have visited your business website with the same domain name, they will immediately recognize this email is connected due to the custom email domain.

If they haven’t yet, they can quickly search for your domain name on the web and find it to ensure that you’re the real deal.

**3.      A Consistent Set of Business Emails for the Team**

If you have a team around you, they may all require emails. If they all use the same email domain, it is clear who they work for and even among staff members, it makes communication easier. Just think if you’d receive emails from bellahope@prettyflowers.com compared to bettyboop98@gmail.com, which email would you rather open?

**4.      Full Control over all Custom Domain Emails**

When you set up your own custom email you enjoy admin rights over all the email addresses you own on that domain. That means you have full access and control over all information exchanged through this email domain.

If employees leave or change names it would be difficult to manage emails as part of generic webmail. With a custom email hosting solution, you automatically own and manage everything easily.

**5.      Higher Safety & Transparency**

As the admin of all emails registered with your custom email domain, you can manage the security server settings to ensure that no data exchanged can be compromised.

If you’re unsure about a member of staff and their activity, you can check their email recipients and monitor their mailing activity.

With affordable Email Hosting you can easily register a custom email domain via the control panel, irrespective of whether you already have a business domain or not. You can simply register an account and host your custom email in under one minute.

**Why choose a professional Email Hosting Service?****1.      Great Value**

It is possible to get email hosting for as little as $1 per month. Even the upper-tier Business and Enterprise email hosting plans are affordable at $10 to $20 for 50 to 100 GB of storage space and several mailboxes.

**2.      Speedy Servers**

Multiple servers ensure that you can access your email from anywhere in the world with minimum latency. So, when you’re about to head to an important business meeting you will not have to worry about waiting for ages to download a 2 MB PDF file.

**3.      Reliable Backup**

All emails hosted on a primary server are backed up on an additional server so you can rest assured that it’s business as usual without any technical glitches and disruption.

You can usually contact the customer service team via live chat, email, and phone. The tech team will resolve every issue you have in an hour or less.

**4.      No Annoying Advertisements**

Forget about those banner ads irritating you by scrolling through your emails. For only $1, you have access to an organised and clean email environment offering all the features you’d want from a business email account, including 5 GB storage. For just $2 extra, you can triple the space if you often send and receive big files, which you also tend to store in your email account.

**5.      No Frustrating Spam**

Forget about these pesky random emails landing in your inbox daily. A professional Email Hosting Service uses advanced anti-spam filters to stop future emails with the same subject lines or senders from ending up in your inbox again.

**6.      Outlook and Gmail Integration**

If you still don’t want to part ways with Gmail or Outlook that’s not a problem at all.

With SMTP mails such as POP3 and IMAP, these email hosting services can be integrated with Outlook, Gmail, Thunderbird, and similar email clients offering easier management of emails, especially if you’re already used to it.

This allows you to compose and format more complex emails compared with the basic editor of a webmail service.

**Make your Email more professional with a custom Email Domain and dedicated Email Hosting Services **

When you choose a custom email domain and dedicated email hosting via a customised control panel that makes hosting of any kind easy, whether it’s a website or business email hosting, you will reap the benefits.

Hosting providers may also offer a custom domain email for free when you register a domain for a website. That’s unparalleled and highly affordable email hosting for you. So, test it to see if it is the perfect email hosting solution for your business.

1.  Content Delivery Network (CDN) FAQs
2.  Managed vs. Unmanaged Cloud Hosting
3.  Kotlin app development – How to choose
4.  Best Dedicated Server for Online Business
5.  9 Steps Necessary for Infrastructure Security

How to use Email Domain Name with Outlook, Gmail & Co. with Custom Email Hosting

By Owais Sultan
The AI software market has rapidly grown over the past few years. And, based on expert forecasts, it’s…
This is a post from HackRead.com Read the original post: 3 Ways Artificial Intelligence Is Transforming the Stock Market Landscape (and Making It More Secure)

The AI software market has rapidly grown over the past few years. And, based on expert forecasts, it’s not slowing down. According to Statista, the size of the AI software market is predicted to reach a whopping $126 billion by 2025, which is more than 12x what it was in 2018.

And while (at least right now) the majority of the world’s population sees AI as a fun way to generate images they can show off on social media, for investors, artificial intelligence comes with much more impactful benefits.

If you’ve ever wondered whether AI could genuinely transform the stock market landscape or make it more secure, the following are the changes that are already happening.

**Building More Profitable Stock Portfolios**

One of the most prominent advantages of using AI for trading is speed. An artificial intelligence piece of software can scrape the internet in search of information in a matter of minutes. But even more impressively, it can process all that information in the blink of an eye — something that would take humans hours to do equally thoroughly.

For this reason, AI has the potential to aid traders in making quicker investing decisions. And, considering how time-sensitive successful trading can be, this is a huge benefit.

But is AI, in itself, enough to aid traders in building more profitable stock portfolios? Well, as of right now, it’s not. 

These days, making sound investing choices still requires extensive insights, experience, and a bit of human touch. That’s why the best way of utilizing AI is to combine it with other trustworthy stock market investing tools. Nonetheless, the future is guaranteed to see an advancement in artificial intelligence software. In a few years, AI solutions _might_ be enough to inform solid, risk-proof investment decisions.

**Fraud Detection**

Another highly-impactful effect of employing AI solutions in finance is that this tech could allow organizations to protect themselves from an ever-growing rate of cyber threats. In fact, AI can be so competent at detecting and flagging irregular and malicious trading activity that Nasdaq started applying it to the U.S. stock market in 2019.

Of course, considering that the development of effective security-oriented AI solutions _is_ still expensive, it’s safe to expect the trend to be slow on the uptake. But it is safe to say that, in the future, more and more financial organizations will be starting to implement AI solutions in their fraud detection and security systems to minimize risk and maximize their security.

**Improved Customer Service**

One unexpected way AI is transforming the stock market landscape is by making communication between financial service providers and their customers vastly less complicated and more straightforward.

In the past, clients who had any account queries or required technical data had to get in touch with a customer service representative, who would then have to collect and send that data. But now, these requests can be dealt with almost momentarily, mainly thanks to the speed with which AI can conduct similar tasks.

With artificial intelligence software, a simple request can be met in minutes without relying on excessive employee involvement. And best of all, the results are immediately felt, as operational costs are vastly reduced. The speed with which matters are taken care of also results in a significant improvement in customer satisfaction rates. 

Considering that both of these factors play parts in securing the future of any financial institution, it’s safe to say that the role of AI in improving customer service is tremendous.

**Final Thoughts**

Artificial intelligence solutions that have the potential of transforming (and securing) the stock market landscape are not yet at their peak level. Realistically speaking, we still have a decade or so to go before we can say that we’ve successfully changed the world of finance.

However, we can say with absolute certainty that the change _is_ coming. And we can rest assured that it’s going to be positive.

What remains to be seen is how small and mid-size organizations will cope with developing and implementing AI in their workflows — whether they’ll go the custom route or pull the trigger and share solutions for the sake of mutual prosperity. 

1.  How to use AI in cybersecurity?
2.  Incorporating machine learning in data mapping
3.  Using Machine Learning for content moderation?
4.  Cybersecurity trends affecting cybersecurity stocks
5.  Google Vertex AI Vision: Revolutionizing E-Commerce?

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.

3 Ways Artificial Intelligence Is Transforming the Stock Market Landscape (and Making It More Secure)

By Deeba Ahmed
All malicious apps for macOS identified by researchers were uploaded to The Pirate Bay by a user called "wtfisthat34698409672."
This is a post from HackRead.com Read the original post: Cryptojackers Deploy Trojanized Mac Apps on The Pirate Bay

It simply goes to show that users should never download software from a third-party website or marketplace.

The cybersecurity researchers at Jamf discovered that cybercriminals are trojanizing legitimate Mac software apps with malware and uploading them to **The Pirate Bay** and other pirated software sites, where users download them and unknowingly infect their devices. The attackers use XMRig cryptojacking malware to execute the XMRig utility.

For your information, **XMRig** is a command-line cryptominer. It isn’t new on Mac, as Trend Micro **analyzed** a sample in February 2020. This tool is used for legitimate purposes, but its open-source, adaptable design has made it a popular choice among threat actors.

The newly discovered XMRig implementation was disguised as **Final Cut Pro**, Apple’s video editing software. Attackers used the Invisible Internet Project (I2P) in both iterations of XMRig for outbound communication, raising confusion about whether the infections were connected or part of something larger.

The malicious version of Final Cut Pro is unauthorized by Apple. It executes XMRig in the background. When it wasn’t initially dubbed as malicious by any security mechanism on VirusTotal, from Jan 2023 onwards multiple vendors detected the malware. Still, most of the malicious apps remain undetected.

Researchers from Jamf searched for the **malware source on The Pirate Bay** and found one with a matching hash to the trojanized version and a series of Apple Mac apps, including Logic Pro and Photoshop.

It is worth noting that all apps were uploaded to The Pirate Bay by the user called “wtfisthat34698409672.” Moreover, they found numerous versions of Final Cut Pro.

All malicious apps for macOS have been uploaded by “wtfisthat34698409672.” (Screenshot credit: Jamf)

In a **blog post**, researchers said that,

> “We suspected that the Mach-O sample arrived packaged in a DMG (an Apple image format used to compress installers) for Adobe Photoshop CC 2019 v20.0.6. However, the parent file was not successfully sourced.”
> 
> Jamf

Further probing revealed three generations of malware—the first generation started in August 2019 and was a standard malware implementation. The second generation started in April 2021 and wasn’t detected by **VirusTotal** until February 13, 2023. This version was different as there were additional hidden files, but no persistence mechanism was noted.

Instead, the malware opened with the app and stopped functioning when the app was closed. The third generation had greater stealth features, as there weren’t any hidden executables, but only one large binary with base64-encoded components and **LZMA compression**.

New versions of these malicious Mac apps started appearing on The Pirate Bay within just 24 hours of Apple’s app update releases and were disguised as legitimate processes.

Researchers state that this isn’t a typical **malware campaign** and is more like a methodology for delivering malware. Still, users should beware of trojanized apps and avoid downloading software from unknown sources.

1.  **YTStealer Malware Hijacking YouTube Channels**
2.  **Famous movies spread malware through torrents**
3.  **Torrent uploader CracksNow spreading ransomware**
4.  **BHUNT malware uses cracked software to steal crypto**
5.  **KryptoCibule malware uses torrent sites to steal crypto**

Cryptojackers Deploy Trojanized Mac Apps on The Pirate Bay

By Habiba Rashid
DNA Diagnostics Center (DDC), a US-based DNA testing service suffered a data breach in November 2021, in which…
This is a post from HackRead.com Read the original post: DNA testing service to pay $400k for data breach it ignored

DNA Diagnostics Center (DDC), a US-based DNA testing service suffered a data breach in November 2021, in which hackers managed to access highly sensitive and personal data of users, including payment card details.

DNA Diagnostics Center (DDC) has agreed to pay $400,000 to settle the lawsuits filed against it by the attorneys general of Pennsylvania and Ohio after a 2021 data breach affecting 2.1 million.

The breach, which was reported by Hackread.com, initially occurred in May 2021, but the company did not take any further action at the time. It was only when DDC’s managed service provider reached out again to inform the company about evidence of Cobalt Strike malware on its network that it acted to secure its systems.

However, by that time, a hacker had acquired data from more than 2,102,436 customers. This data included the social security numbers of 45,000 customers from Ohio and Pennsylvania.

The stolen data belonged to a legacy database that DDC inherited from another DNA testing company, Orchid Cellmark, after acquiring it in 2012.

DDC claimed that it had no knowledge of the database’s existence in its systems, and despite the company’s inventory assessment and penetration tests, the legacy databases did not show up.

This oversight led to threat actors accessing 28 databases containing personally identifiable information (PII) of people who had undergone genetic testing between 2004 and 2012. After the emergence of news about the data breach, Ohio and Pennsylvania sued the company.

1.  The Forgotten Victims of Data Breach
2.  Police deleted 150k arrest records, DNA data
3.  DNA contractor breach exposed Police’s rape kit data
4.  MyHeritage DNA testing site hacked; 92m accounts stolen

“Negligence is not an excuse for letting consumer data get stolen,” said Ohio Attorney General Dave Yost, of the incident. “We’re proud to partner with Pennsylvania to ensure that citizens’ personal data stays private —which consumers rightly expect.”

“The more personal information these criminals gain access to, the more vulnerable the person whose information was stolen becomes,” said acting Attorney General of Pennsylvania Michelle A. Henry. “That’s why my Office took action with the assistance of Attorney General Yost in Ohio.”

As part of the settlement, DDC agreed to improve its security practices, hire a Chief Information Security Officer (CISO) to oversee its security department, conduct regular security risk assessments, maintain an updated asset inventory and develop a plan to respond to a security threat on the network. 

**More on Hackread.com**

1.  Meta Fined €265m in Facebook Data Scraping Case
2.  Sephora Fined $1.2m for Breaching CCPA Selling Data
3.  Ticketmaster hacked a rival – now it’s paying $10m fine

I’m a student and cybersecurity writer. On a random Sunday, I am likely to be figuring out life and reading Kafka.

DNA testing service to pay $400k for data breach it ignored

By Habiba Rashid
Dairy Pankov, a.k.a. dpxaker, was accused of developing brute force and malicious software, NLBrute.
This is a post from HackRead.com Read the original post: Russian Malware Developer Behind NLBrute Extradited to US

Numerous cybercrime groups, including REvil, Dharma, and Netwalker, have used NLBrute.

A 28-year-old Russian national, Dariy Pankov a/k/a “dpxaker.”, was arrested in the Republic of Georgia on October 4, 2022, and, upon request, extradited to the United States, where he appeared before Magistrate Christopher P. Tuite on 21st February 2023. 

Pankov is charged with conspiracy, access device fraud, and computer fraud. The Department of Justice’s **press release** explains that Pankov was behind the creation of a brute force attack tool known as “**NLBrute**”.

A brute force attack uses trial-and-error to guess the login credentials of password-protected systems. 

Pankov marketed, sold, and had others sell NLBrute, which was used by numerous cybercrime groups, including **REvil**, **Dharma**, and **Netwalker**. He also sold stolen credentials on dark web websites that specialize in the sale and purchase of access to compromised computers.

Dairy Pankov, a.k.a. dpxaker (Image source: Pinellas County Sheriff’s Office)

Cybercriminals purchased the login information and used it in various malicious campaigns, including tax fraud and ransomware attacks. Pankov obtained more than $350,000 in illicit sales.

Igor Litvak, Pakov’s attorney, told CNN that his client will plead not guilty and maintain his innocence. Pankov faces a maximum sentence of 47 years in federal prison if convicted on all counts. He is currently being held in the Pinellas County Jail outside of Tampa, where he was booked on Monday.

1.  **US Sentence Ukrainian to 4 Years for Brute-forcing**
2.  **Colombia arrests suspect wanted by US over Gozi virus**
3.  **Extradited Alleged ShinyHunters Hacker Pleads Not Guilty**
4.  **Russian hacker jailed in US over $19M fraud, 100M data theft**
5.  **Ukrainian Member of REvil Ransomware Gang Extradited to US**

I’m a student and cybersecurity writer. On a random Sunday, I am likely to be figuring out life and reading Kafka.

Source

HackRead