Hobbs and Whistles owner investigates hack that may have exposed customer data

Cyber-attack on TFG London comes less than a week after online fashion seller Asos was hit by hackers

The owner of Phase Eight, Hobbs and Whistles has said its websites and IT systems have been hit by a cyber-attack that may have compromised customers’ personal data.

The South-African listed TFG London said it identified the “cybersecurity incident” at the three UK-based retail chains on Sunday. Its two other UK brands, Inside Story and White Stuff, are not affected.

Continue reading...

Hackers force French supermarket fridges to heat up to 50C in ‘unprecedented’ cyber-attack

Hundreds of Intermarché shops and Coopérative U outlets in France hit, with fears Dutch chains also affected

Hackers have forced the temperature of many French supermarket fridges up to 50C overnight, in an “unprecedented” cyber-attack affecting several hundred stores across the country, with fires and food losses reported.

The Paris prosecutor’s office said on Monday ⁠the large-scale attack was “affecting connected refrigerators ⁠in several ​major food retailers across France”. Reported damage included “food losses and fires”, it added.

Continue reading...

‘You have a meeting’: the calendar phishing scam growing exponentially

Appointment or renewal reminder appears in victims’ calendar to lure them into logging in to fake Google, Microsoft or PayPal page

You’re preparing for the week ahead and take a look at your Google calendar. There’s an entry for a meeting that you must have completely forgotten. The note that pops up when you click on it says you’ll be reviewing a project and includes a link to more details. Confused, you follow it to find out more; the website you land on asks for logon details, and you provide them.

Unfortunately, this was not a failure of your memory but a calendar phishing scam. You have handed your name and password to fraudsters who will sell it on in a batch with other people’s details, use it to break into your work email, or to persuade you that they are contacting you from your bank, or another institution.

Continue reading...

OpenAI halts training of latest models as reports mount of AI agents going rogue

Decision follows disclosures that OpenAI agents searching government websites had acted in unexpected ways

OpenAI said it has paused training of its latest artificial intelligence models as reports of AI agents going rogue mount.

The decision to halt development came just hours after the company disclosed Friday that it was reviewing several incidents from the summer in which OpenAI agents searching federal government websites acted in unexpected ways beyond what was asked of them while gathering and distributing information.

Continue reading...

Swedish teenager jailed for attempted murder, rape and assault committed online, with victims in Germany and Australia

Eighteen-year-old known as Chai was active in networks notorious for their sadistic exploitation of young people

A Swedish teenager known as Chai has been sentenced to more than 10 years in jail for attempted murder, rape and aggravated assault – crimes committed via the internet, including against a teenage girl in Australia.

The district court found that Chai, 18, was active in online networks notorious for their sadistic extortion of young and vulnerable people, coercing them to create sexually explicit material or engage in acts of violence – and for the youth of those involved.

In Australia, support is available at Beyond Blue on 1300 22 4636, Lifeline on 13 11 14, and at MensLine on 1300 789 978. In the UK, the charity Mind is available on 0300 123 3393 and Childline on 0800 1111. In the US, call or text Mental Health America at 988 or chat 988lifeline.org.

Continue reading...

Six Nigerians extradited to US over $6m online romance scam

Alleged members of Black Axe criminal network that swindled US women out of $6m flown from South Africa

Six Nigerian nationals linked to an organized criminal network that allegedly swindled American women out of more than $6m through online romance scams were extradited to the United States on Friday.

South African police confirmed they were to be extradited earlier on Friday, while local news in Africa confirmed that the Directorate for Priority Crime Investigation, known as the Hawks, facilitated their handover to officials from the US Federal Bureau of Investigation and Secret Service at Cape Town international airport, in collaboration with Interpol South Africa.

Continue reading...

UK’s state investments agency hit by data breach

Security lapse leaves sensitive information and contact details of 51 government officials exposed for 40 hours

The public body in charge of the UK’s state investments has been pushed to improve its internal security after a data breach left “high-level management information” publicly accessible for nearly two days.

UK Government Investments (UKGI), the agency that manages the taxpayers’ interest in a swathe of companies including Channel 4 and the Post Office, said the security failure also left more than 50 government officials’ personal details exposed for nearly 40 hours.

Continue reading...

Patient records stolen in cyber-attack on Australian healthcare provider

Partnered Health says personal information and medical details and notes were breached in the attack on 21 clinics

Thousands of medical records and patient information stored with one of Australia’s biggest healthcare providers have been breached in a cyber-attack.

Partnered Health, owned by private equity firm Quadrant, said 21 clinics across several cities including Sydney, Melbourne and Canberra have been affected by the breach which occurred on 23 June.

Continue reading...

UK critical infrastructure hit by 200 cyber incidents in a year, agency says

Head of National Cyber Security Centre says UK in ‘ongoing contest with capable adversaries’ and AI could add to threat

The UK’s critical national infrastructure has been hit by more than 200 cyber incidents over the past year and state-linked assailants were behind three-quarters of the attacks, according to the state cybersecurity body.

Richard Horne, the chief executive of the National Cyber Security Centre, said hostile states such as Russia, China and Iran were increasingly targeting systems behind the UK’s key services. Examples of critical national infrastructure include the UK’s nuclear deterrent, power plants, hospitals and airports.

Continue reading...

‘Immediate national priority’: ministers accused of complacency over UK food supply

Cold storage and logistics body warns food supplies at risk from fuel shortages, cyber attacks and extreme weather

Ministers have been accused of being complacent about the risks to vital supplies of food into the UK amid concerns over fuel shortages, cyber attacks and extreme weather.

The trade body for cold storage and logistics has urged the government to make potential disruption to the UK’s food system an “immediate national priority”.

Continue reading...

Hong Kong police can demand phone and computer passwords under amended national security law

Refusing to comply could lead to year in jail and hefty fine, while providing false information carries up to three years in prison

Hong Kong police can now demand that people suspected of breaching the city’s national security law provide mobile phone or computer passwords in a further crackdown on dissent.

The amendments to the law also empower customs officers to seize items that are deemed to have “seditious intention”, regardless of whether any person has been arrested for an offence endangering national security because of the items.

Continue reading...

Meta disables more than 150,000 accounts in crackdown on south-east Asian scam networks

Company also launches tools to spot scammers as Thai police arrest 21 people

Meta disabled more than 150,000 accounts and Thai police arrested 21 people in a sweeping international crackdown on south-east Asian criminal scam centers that targeted people around the world, the social media company said on Wednesday.

The operation was led by Thailand’s Royal Thai police anti-cyber scam center, alongside the FBI and the US justice department’s scam center strike force, with Meta investigators acting on intelligence shared in real time by law enforcement.

Continue reading...

X suspends 800m accounts in one year amid ‘massive’ scale of manipulation attempts

Social media company tells MPs of continual fight against state-backed efforts, with Russia being most prolific

Elon Musk’s X said it had suspended 800m accounts over a 12-month period as it fights the “massive” scale of attempts to manipulate the platform.

The social media company told MPs it was continually fighting state-backed attempts to hijack the agenda on its network, with Russia the most prolific state actor, followed by Iran and China.

Continue reading...

Destitute survivors of south-east Asia’s cyberscam farms an ‘international crisis’

Not enough support for freed victims, say aid agencies, with growing numbers sleeping on the streets, unable to travel home without passports or money

Charities and aid workers have called for urgent international government support for victims of south-east Asia’s deadly scam compounds, following a damning report by Amnesty International.

The numbers of survivors of cyberscam “farms” left destitute and abandoned on the city streets of Cambodia and Myanmar is an “international crisis”, according to the research published in January.

Continue reading...

Londoners told to be vigilant with messages after cyber-attack on council

Royal Borough of Kensington and Chelsea says it is checking whether data taken contained residents’ details

A London council has urged thousands of residents to be “extra vigilant” when receiving calls, emails or text messages after confirming that data had been taken in a cyber-attack.

The Royal Borough of Kensington and Chelsea (RBKC), which has 147,500 residents, said some data had been copied from its systems in an attack this week.

Continue reading...

Banks need stricter controls to prevent romance fraud, says City regulator

FCA cites study showing victims’ ‘red flags’ are often missed and calls for improved monitoring systems

The City regulator has called on banks and payment firms to bring in stricter controls protecting customers from romance fraud after a study showed a number of missed “red flags” that led to people losing huge sums of money.

The review by the Financial Conduct Authority (FCA) highlighted one case where someone lost £428,000, another where a customer made 403 payments totalling £72,000 to a fraudster and a case where someone wanted money to transfer cryptocurrency to their “partner” in Iraq.

Continue reading...

Hamburg man charged with murder over US teen’s livestreamed death

German authorities issue 204 charges against 21-year-old suspect, alleged to be part of wider network of abusers

A man accused of luring children worldwide into a sadistic online abuse network has been charged by German prosecutors with hundreds of crimes, including murder, for the livestreamed death of a 13-year-old American.

Using the pseudonym “White Tiger”, the 21-year-old man from Hamburg is alleged to have victimised more than 30 children with online sexual abuse, manipulation and exploitation as a part of a virtual network of abusers known as “764”.

Continue reading...

Digital ID: Danes and Estonians find it ‘pretty uncontroversial’

Citizens have enrolled with little opposition, albeit with some concerns over security and privacy, as UK plans system

For Danish teenagers, getting enrolled for MitID (my ID) has become somewhat of a rite of passage.

From the age of 13, Danes can enrol for the national digital ID system, which can be used for everything from logging into online banking to signing documents electronically and booking a doctor’s appointment.

Continue reading...

Hackers leak Qantas data containing 5 million customer records after ransom deadline passes

Hacker collective Scattered Lapsus$ Hunters demanded payment in return for preventing the stolen data of nearly 40 companies from being shared

Hackers say they have leaked the personal records of 5 million Qantas customers on the dark web, after a ransom deadline set by the cybercriminals passed.

The airline is one of more than 40 firms globally caught up in the hack, reported to contain up to 1 billion customer records.

Continue reading...

Nearly a third of bosses report increase in cyber-attacks on their supply chains

CIPS survey shows cyber threats have risen up the list of concerns for procurement managers

Almost a third of bosses have reported an increase in cyber-attacks on their supply chains over the past six months, as the fallout from devastating hacks on corporate stalwarts including Jaguar Land Rover highlighted a growing threat to businesses.

Cyber threats have risen up the list of concerns for procurement managers at hundreds of companies worldwide across industries including manufacturing, energy and technology, according to a survey conducted in September by industry body the Chartered Institute of Procurement and Supply (Cips).

Continue reading...