Cyber Security News (20th July 2018)

1. America’s largest diagnostics service LabCorp suffers massive data breach

According to a DailyMail’s report, cybercriminals have managed to breach the security of America’s leading clinical laboratory and medical diagnostics center LabCorp that can put health records of not thousands but millions of patients at risk.

The breach occurred over the weekend during which hackers tried to steal private medical records of patients, which led to a forced shutdown of the LabCorp network.

LabCorp’s website states that the company facilitates over 115m patient encounters on an annual basis and a security breach would mean that the records of all the patients are at risk. It is responsible for performing routine and specialty diagnostic tests including HIV tests, bloodwork and urine analysis.

As per the company’s technology experts, the system will soon be back online after the attack.


 

2. No compromise on security on passport application mobile app: External Affairs Minister Sushma Swaraj (India)

External Affairs Minister Sushma Swaraj said, There has been no compromise on security aspects with regard to passport applications through the new mobile app and any attempt to get fake passports made from cyber cafes will be rejected.

Replying to a query during Question Hour in the Rajya Sabha, Swaraj said “all security measures” were being followed and once the data centre recieves the application, it will be automatically deleted from the sender’s mobile.

Likewise, the data centre automatically rejects fake applications filed through cyber cafes etc, she said, adding that all security measures which are adhered to in advanced nations were being followed here.

The External Affairs Ministry’s passport seva moble application, which allows users to apply for a travel document from anywhere in the country, has registered one million downloads in just two days of its launch on June 26.


 

3. DanaBot Trojan steals sensitive information of bank customers

A new phishing email campaign, DanaBot banking Trojan, has been targeting Australian customers with a fake standard MYOB-like HTML invoice template that really contains a novel banking Trojan.

MYOB is an Australian multinational corporation that provides tax, accounting and other business services software for SMBs.

With this new campaign, attackers used FTP links instead of the usual HTTP links and most of the FTP sites linked with the Australian domains points to a zip file that contains a JavaScript that downloads the final payload DanaBot malware.

Cyber Security Tips:  (For Safe Banking)

  • Always remember that any of your bank’s representatives never send you email/SMS or call you over phone to get your personal information, password or one time SMS.
  • Never click on any links provided in the emails.
  • Always log on to a banking site by typing the proper URL in the address bar.
  • Immediately change your passwords if you have accidentally revealed your credentials to anyone.
  • Before providing your user id and password, ensure that the URL of the login page starts with the text ‘https://‘ and is not ‘http://’.
  • Ensure that you have installed the latest anti-virus/anti spyware/activated firewall/security patches on your computer or even your smart phones.

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

Create a free website or blog at WordPress.com.

Up ↑

%d bloggers like this: