Hackers, Hoaxes, and Hidden Threats
This week's newsletter covers the latest in cybersecurity, including Black Basta's new attack tactics, the controversy surrounding Deloitte's alleged breach, and the FBI's urgent warning to stop using SMS in favor of encrypted messaging apps.
- Black Basta's New Tricks: Fake IT support, spam attacks, and sneaky QR codes.
- Deloitte Breach Claims: Hackers say they did it, Deloitte says they didn’t.
- FBI Warning: Stop using SMS – switch to encrypted apps like Signal or WhatsApp.
Deloitte UK: Ransomware Claim Sparks Confusion
On December 5th, the "Brain Cipher" ransomware gang announced they had breached Deloitte UK, setting an 11-day countdown to release stolen data.
But just days later, Deloitte denied the claim. A spokesperson told Security Week the alleged breach appears to involve a client’s system outside Deloitte's network, not Deloitte’s own systems.
The countdown continues, but the truth remains unclear.
Read MoreBlack Basta Ransomware's New Tactics
Who is Black Basta?
Black Basta is a notorious ransomware gang known for attacking major organizations worldwide. They encrypt victim data and threaten to leak it if ransoms aren’t paid. Their attacks have impacted healthcare, finance, and other critical sectors.
New Attack Methods:
- Email Bombing to flood inboxes
- Fake IT Support on Microsoft Teams
- Malicious QR Codes for credential theft
- Remote Access Tools like AnyDesk to gain control
How to Stay Safe
- Verify IT Requests – Double-check unexpected messages.
- Avoid Unknown QR Codes – They can lead to phishing sites.
- Limit Remote Access Apps – Only use trusted tools when needed.
FBI Warning: Stop Sending Texts Between iPhone & Android
The FBI and CISA are urging users to switch from SMS to encrypted apps like Signal or WhatsApp. This comes after hackers, like the "Salt Typhoon" group, exploited vulnerabilities in unencrypted texts, especially those sent between iPhone and Android devices.
How to Stay Safe
- Use Encrypted Apps – Switch to Signal or WhatsApp for secure messaging.
- Enable Multi-Factor Authentication – Add extra protection to your accounts.
- Keep Devices Updated – Install security updates as soon as they’re available.
Cybercriminals are always finding new ways to target individuals and businesses. From ransomware groups like Black Basta to phishing scams and insecure messaging, staying alert is your best defense.
Take action today: Use encrypted messaging apps, double-check unexpected requests, and report suspicious activity. Small steps can make a big difference.
Stay safe, stay smart, and we’ll be back next week with more essential updates to keep you protected.