DarkSide Ransomware Gang Struck Down — but by Whom? - Security Boulevard

Seduced by the DarkSide: The DarkSide group, hacker of the Colonial Pipeline, has hurriedly shut up shop. The shadowy group claims its servers and cryptocurrency balances have disappeared. People say it was the U.S. government that killed it. Which makes sense in the context of the White House’s recent pronouncements.

This sounds like a job for friar William of Ockham and his famous razor.

In today’s #SBBlogwatch, we look east. At @SecurityBlvd: https://t.co/X4aViMBW63

— @Richi 😷 Jennings (@RiCHi) May 17, 2021

AXA axes ransomware insurance. Who’s next? - TechBeacon

End of the beginning? Huge multinational insurance firm AXA Group has announced it will no longer write cyber-insurance policies that pay out extortionate #ransoms to hackers. So far, this applies only to France, but observers wonder if the strategy will spread.

As the #French say, /pour encourager les autres/. And, yes, it might well encourage other insurers to get serious about this knotty problem.

In this week’s #SecurityBlogwatch, we’re careful with that AXA, Eugene. At @TechBeaconCom: https://t.co/5xFlrCRVrl

— @Richi 😷 Jennings (@RiCHi) May 13, 2021

Rail Firm Staff Fail ‘Bonus’ Phishing Test, Chaos Ensues - Security Boulevard

COVID Pretext FAIL: “Click here to claim your bonus pay,” said email from a British train company, signed by the firm’s chief. Hundreds of @WestMidRailway employees did exactly that. Because of course they did.

What a kick in the teeth for staff who’ve been putting their health on the line since early 2020. OTOH, phishing exercises are an established part of staff #infosec … errm … training. In today’s #SBBlogwatch, we’re deeply conflicted. At @SecurityBlvd: https://t.co/0kxSnG6mU0

— @Richi 😷 Jennings (@RiCHi) May 12, 2021

Colonial Pipeline FAIL: Ransomware Gang Threatens Gas Supplies - Security Boulevard

Something-Something #DarkSide: Carrying almost half of the east coast’s road and jet fuel, the Colonial Pipeline is critical infrastructure—of that there’s no doubt. But ransomware scrotes have stolen and encrypted 100 GB of data, crippling the pipeline’s operation.

Prepare for inflated gas prices, long lines at the pumps and canceled flights.

In today’s #SBBlogwatch, we angrily buy a used Nissan Leaf. At @SecurityBlvd: https://t.co/ZddHFEf1dL

— @Richi 😷 Jennings (@RiCHi) May 10, 2021

Very Many Qualcomm Phone Chips Hiding Very Nasty Vulnerability - Security Boulevard

Time to Get a New Phone? A high-severity bug affects almost 40% of Android phones. The security hole is in Qualcomm modems—specifically in their software interface to the Android platform.

Good luck getting a patch for an old phone. In today’s #SBBlogwatch, we check the insurance for an “accidental” fall onto concrete.

At @SecurityBlvd: https://t.co/kTGWsQ0J1a

— @Richi 😷 Jennings (@RiCHi) May 7, 2021