Ticketmaster hit by data hack that may affect 560m customers

Cybercrime group ShinyHunters reportedly demanding £400,000 ransom to prevent data being sold

Ticketmaster has been targeted in a cyber-attack, with hackers allegedly offering to sell customer data on the dark web, its parent company, Live Nation, has confirmed.

The ShinyHunters hacking group is reportedly demanding about £400,000 in a ransom payment to prevent the data being sold.

Continue reading...

Europol and US seize website domains, luxury goods in $6bn cybercrime bust

‘World’s largest botnet’ – spread through infected emails – taken down through coordinated police action among several countries

US authorities announced on Thursday that they had dismantled the “world’s largest botnet ever”, allegedly responsible for nearly $6bn in Covid insurance fraud.

The Department of Justice arrested a Chinese national, YunHe Wang, 35, and seized luxury watches, more than 20 properties and a Ferrari. The networks allegedly operated by Wang and others, dubbed “911 S5”, spread ransomware via infected emails from 2014 to 2022. Wang allegedly accrued a fortune of $99m by licensing his malware to other criminals. The network allegedly pulled in $5.9bn in fraudulent unemployment claims from Covid relief programs.

Continue reading...

Christie’s says $850m auctions to go ahead as planned despite cyberattack

Sales to proceed despite failing to regain control of its website as staff and cybersecurity scramble to fix issue

The success of New York’s spring art auctions was in jeopardy Sunday, a day after auction house Christie’s confirmed that its website had been hacked, potentially shutting out some bidders on $850m worth of art work going up for bid this week.

Yet despite failing to regain control of its website, Christie’s said that its auctions – the most important of the year in the art world – would go ahead in person and by phone.

Continue reading...

Australia news live: Queensland poised to limit K’gari visits amid wave of dingo attacks; Electric Fields crash out of Eurovision semi

The number of tourists on K’gari could soon be capped on the busiest days of the year. Follow today’s news live

CFMEU welcomes funding of 15,000 fee-free construction Tafe places in budget

The CFMEU has welcomed a funding boost for apprenticeships and traineeships in the upcoming budget.

This investment will mean more apprentices and trainees will get the training they need to build critical housing and infrastructure that Australia desperately needs …

There’s an often-overlooked distinction between apprenticeships and traineeships but thankfully the government recognises the importance of both – that’s critical to addressing construction skills gaps.

If they don’t mobilise this government into real action I just don’t know what will. Half of all threatened species becoming extinct is an intolerable outcome.

Report after report has shown the terrible decline of biodiversity in NSW, and the Ken Henry review of biodiversity laws gave the government very clear recommendations on how to slow and reverse this trend, but the government still hasn’t responded after seven months.

Continue reading...

Australia bans alleged Russian leader of global ransomware group LockBit

Dmitry Khoroshev named as having a ‘senior role’ in group allegedly behind 18% of reported Australian ransomware attacks in 2022-23

An alleged leader of the international ransomware group LockBit has been hit with financial sanctions and banned from travelling to Australia.

The Australian government named Dmitry Yuryevich Khoroshev, a Russian citizen, as having a “senior leadership role” in a criminal group that supplied a global network of hackers with the tools and infrastructure to carry out online attacks.

Sign up for Guardian Australia’s free morning and afternoon email newsletters for your daily news roundup

Continue reading...

Police arrest Sydney man for blackmail over major data breach affecting up to 1 million NSW and ACT residents

IT provider Outabox, used by dozens of hospitality venues, blamed an ‘unauthorised third party’ for the breach

Police have arrested a Sydney man they expect to charge with blackmail as they investigate a major data breach that saw personal details for up to 1 million New South Wales and ACT residents shared online.

NSW police officers have been working with state, federal and international agencies as they investigate the major breach that is believed to be either blackmail or corporate sabotage after data was published this week.

Sign up for Guardian Australia’s free morning and afternoon email newsletters for your daily news roundup

Continue reading...

No more 12345: devices with weak passwords to be banned in UK

Makers of phones, TVs and smart doorbells legally required to protect devices against access by cybercriminals

Tech that comes with weak passwords such as “admin” or “12345” will be banned in the UK under new laws dictating that all smart devices must meet minimum security standards.

Measures to protect consumers from hacking and cyber-attacks come into effect on Monday, the Department for Science, Innovation and Technology said.

Continue reading...

Foreign states targeting sensitive research at UK universities, MI5 warns

Ministers considering more funding to protect important research sites, with China seen as a particular concern

MI5 has warned universities that hostile foreign states are targeting sensitive research, as ministers consider measures to bolster protections.

Vice-chancellors from 24 leading institutions, including Oxford, Cambridge and Imperial College London, were briefed on the threat by the domestic security service’s director general, Ken McCallum, and National Cybersecurity Centre (NCSC) chief, Felicity Oswald.

Continue reading...

Cyber-attacks linked to Chinese spy agencies are increasing, say analysts

Warning comes after UK and US announce sanctions against Chinese companies following mass hacking of UK data

Cyber-attacks linked to Chinese intelligence agencies are increasing in capability and frequency as they seek to test foreign government responses, analysts have warned in the wake of revelations about a mass hacking of UK data.

On Tuesday, the UK and US governments accused hacking group Advanced Persistent Threat 31 (APT 31), backed by China’s government spy agency, of conducting a years-long cyber-attack campaign, targeting politicians, national security officials, journalists and businesses. The UK said the hackers had potentially gained access to information on tens of millions of UK voters held by the Electoral Commission, as well as for cyber-espionage targeting lawmakers who have been outspoken about threats from China.

Continue reading...

Tuesday briefing: Why the US and UK are going public with warnings about Chinese hacking

In today’s newsletter: Information about 40 million UK voters was stolen by Chinese spies in a hack that also targeted elected officials. A cybersecurity experts walks us through whether these are isolated incidents, or the tip of a digital iceberg

Sign up here for our daily newsletter, First Edition

Good morning. You’re probably not an MP or peer on the Inter-parliamentary Alliance on China (Ipac), so that part of yesterday’s cyber-attack revelations needn’t concern you excessively. If you are among the 40 million UK voters included on a register held by the Electoral Commission, though, I have bad news: the Chinese government has your personal details.

Yesterday afternoon, deputy prime minister Oliver Dowden laid out sanctions in response to the attacks – in the case of the Electoral Commission hack, more than three years after it happened. In co-ordinated announcements, the US announced sanctions over a years-long campaign involving 10,000 malicious emails sent to politicians, journalists and businesses, and New Zealand said it had raised concerns with Beijing over an attack on its parliament in 2021.

Israel-Gaza war | The UN security council has voted to demand an immediate ceasefire in Gaza for the first time after the US dropped a threat to veto, bringing Israel to near total isolation on the world stage. Benjamin Netanyahu cancelled a planned White House visit by two ministers, while the Palestinian envoy to the UN, Riyad Mansour, called the result a belated “vote for humanity to prevail”.

US news | A New York court has handed Donald Trump a lifeline, reducing his $454m bond to $175m over the judgment against him in a huge fraud case. Separately, the judge overseeing the hush-money case against Trump involving the adult film star Stormy Daniels refused to delay the trial, setting a date for jury selection of 15 April.

Garrick club | At least four senior judges, Sir Keith Lindblom, Sir Nicholas Cusworth, Sir Nicholas Lavender and Sir Ian Dove, have resigned from the men-only Garrick Club, the Judicial Office has said, as men in the legal profession come under increasing pressure over their close association with an organisation that has repeatedly blocked attempts to allow women to join.

US news | Federal agents have raided properties in Los Angeles, Miami and New York that local news outlets have reported are tied to rapper and mogul Sean “Diddy” Combs. US media reported that the searches were part of a sex trafficking investigation, though the exact reason for the raids remained unclear.

Conservatives | Rishi Sunak is to face another tricky byelection after former Conservative backbencher Scott Benton resigned before the conclusion of a recall petition among his constituents. The Blackpool South MP was facing likely ejection from the Commons after being suspended for 35 days over his role in a lobbying scandal.

Continue reading...

US and UK unveil sanctions against Chinese state-backed hackers over alleged ‘malicious’ attacks

The US alleges the individuals were working as a front for Beijing in an indictment and sanctions announcement

Hackers backed by China’s government spy agency have been accused by the US and UK of conducting a years-long cyber-attack campaign, targeting politicians, journalists and businesses.

The operation saw political dissidents and critics of China targeted by sophisticated phishing campaigns, according to the US, which resulted in some emails systems and networks being compromised.

Continue reading...

China cyber-attacks: this growing threat to UK security will not go away

With the Electoral Commission the latest target on a list that includes the economy and supply chains, experts warn of data-gathering ‘on an industrial scale’

In March last year an integrated review of the UK’s defence and foreign policy said it would protect the country’s “democratic freedoms” from Chinese state attacks.

A few months later the Electoral Commission confirmed why democratic institutions and processes were on the threat list as it revealed that a cyber-attack – by a then unidentified assailant – had accessed the data of 40 million voters.

Continue reading...

Vulnerable man pleads with UK government to block extradition to US

Diogo Santos Coelho from Portugal faces a 52-year sentence for alleged cybercrime relating to RaidForums site

A vulnerable autistic man is pleading with the UK government to block his extradition to the US on cybercrime charges where he faces a 52-year sentence for alleged offending that began when he was a child.

Diogo Santos Coelho, who has been assessed as at very high risk of suicide, said he had been groomed and exploited online by adults from the age of 14 into committing the alleged crimes, which relate to the website RaidForums.

In the UK and Ireland, Samaritans can be contacted on freephone 116 123, or email jo@samaritans.org or jo@samaritans.ie. In the US, the National Suicide Prevention Lifeline is at 988 or chat for support. You can also text HOME to 741741 to connect with a crisis text line counselor. In Australia, the crisis support service Lifeline is 13 11 14. Other international helplines can be found at befrienders.org

Continue reading...

Huge cybersecurity leak lifts lid on world of China’s hackers for hire

Leaked files shows range of services offered and bought, with data harvested from targets worldwide

A big leak of data from a Chinese cybersecurity firm has revealed state security agents paying tens of thousands of pounds to harvest data on targets, including foreign governments, while hackers hoover up huge amounts of information on any person or institution who might be of interest to their prospective clients.

The cache of more than 500 leaked files from the Chinese firm I-Soon was posted on the developer website Github and is thought by cybersecurity experts to be genuine. Some of the targets discussed include Nato and the UK Foreign Office.

Continue reading...

Amount of fraud in UK more than doubled to £2.3bn in 2023, report finds

Accounting firm BDO also warns of future impact of fraudsters using artificial intelligence to rip off customers

The amount of fraud committed in the UK more than doubled to £2.3bn in 2023, marking the second-biggest year for scams in the last two decades, according to a report that also warns of the future impact of fraudsters using artificial intelligence to rip off consumers.

The accounting firm BDO’s latest FraudTrack report found that the number of reported cases rose by 18% to a three-year high, and the number of high-value cases over £50m increased by 60% year-on-year in 2023. Half of the high-value frauds were over £200m.

Continue reading...

Company worker in Hong Kong pays out £20m in deepfake video call scam

Police investigate after employee says she was tricked into sending money to fraudsters posing as senior officers at her firm

Hong Kong police have launched an investigation after an employee at an unnamed company claimed she was duped into paying HK$200m (£20m) of her firm’s money to fraudsters in a deepfake video conference call.

The Hong Kong police force said it had received a report from a worker that she had been tricked into transferring the money by someone “posing as senior officers of the company”.

Continue reading...

Australia sanctions Russian citizen Aleksandr Ermakov over 2022 Medibank cyber-attack

Government uses cyber sanctions powers under Magnitsky laws for first time to target Aleksandr Gennadievich Ermakov, alleged to be responsible for hack

Australia has used its new cyber sanctions powers for the first time against a Russian citizen, Aleksandr Ermakov, in connection with the Medibank Private data breach.

Magnitsky-style sanctions laws that were introduced in Australia in late 2021 include a world-leading measure to allow the imposition of Australian travel bans and asset freezes on those allegedly involved in “significant” cyber-attacks.

Sign up for Guardian Australia’s free morning and afternoon email newsletters for your daily news roundup

Continue reading...

British Library begins restoring digital services after cyber-attack

UK’s national library apologises to researchers, saying full recovery could take until end of the year

The British Library is restoring online its main catalogue, containing 36m records of printed and rare books, maps, journals and music scores, 11 weeks after a catastrophic cyber-attack.

However, access is limited to a “read-only” format, and full restoration of services provided by the UK’s national library could take until the end of the year.

Continue reading...

The Iconic pledges to refund customers charged for bogus orders after hack

Retailer’s move comes after some shoppers said more than $1,000 had been taken from their accounts

Online retailer the Iconic has promised to refund customers who were charged large sums for fraudulent orders after having their accounts compromised.

The refund pledge follows a backlash from consumers, who have been posting their frustration on the retailer’s Facebook page.

Sign up for Guardian Australia’s free morning and afternoon email newsletters for your daily news roundup

Continue reading...

Chinese teenager found alive in Utah woods after ‘cyber-kidnapping scam’

Exchange student Kai Zhuang, 17, discovered in tent by police days after being reported missing

A Chinese exchange student who fell victim to a “cyber-kidnapping” scam, in which his parents were extorted for $80,000, was found alive but “cold and scared” in a tent in the Utah wilderness, police said.

Kai Zhuang, 17, was reported missing on Thursday after his parents in China told officials at his host high school in Riverdale, Utah, that he appeared to have been kidnapped and a ransom had been demanded.

Continue reading...