Tech

Ahoy, there’s malice in your repos—PyPI is the latest to be abused

Enlarge (credit: Getty Images) Counterfeit packages downloaded roughly 5,000 times from the official Python repository contained secret code that installed cryptomining software on infected machines, a security researcher has found. The malicious packages, which were available on the PyPI repository, in many cases used names that mimicked those of legitimate and often widely used packages […]

Tech

A week after arrests, Cl0p ransomware group dumps new tranche of stolen data

Enlarge (credit: Getty Images) A week after Ukrainian police arrested criminals affiliated with the notorious Cl0p ransomware gang, Cl0p has published a fresh batch of what’s purported to be confidential data stolen in a hack of a previously unknown victim. Ars won’t be identifying the possibly victimized company until there is confirmation that the data […]

Tech

Monero emerges as crypto of choice for cybercriminals

Enlarge (credit: 53 Studios | Getty Images) For cybercriminals looking to launder illicit gains, bitcoin has long been the payment method of choice. But another cryptocurrency is coming to the fore, promising to help make dirty money disappear without a trace. While bitcoin leaves a visible trail of transactions on its underlying blockchain, the niche […]

Tech

Connecting to malicious Wi-Fi networks can mess with your iPhone

Enlarge (credit: Apple) There’s a bug in iOS that disables Wi-Fi connectivity when devices join a network that uses a booby-trapped name, a researcher disclosed over the weekend. By connecting to a Wi-Fi network that uses the SSID “%p%s%s%s%s%n” (quotation marks not included), iPhones and iPads lose the ability to join that network or any […]

Tech

Ukraine arrests ransomware gang in global cybercriminal crackdown

Enlarge / A Colonial Pipeline facility in Woodbridge, New Jersey. Hackers last month disrupted the pipeline supplying petroleum to much of the East Coast. (credit: Michael M. Santiago, Getty Images) Ukrainian police have arrested members of a notorious ransomware gang that recently targeted American universities, as pressure mounts on global law enforcement to crack down […]

Tech

Newly discovered Vigilante malware outs software pirates and blocks them

Enlarge (credit: Getty Images) A researcher has uncovered one of the more unusual finds in the annals of malware: boobytrapped files available on sites frequented by software pirates that rat out downloaders and try to prevent unauthorized downloading in the future. Vigilante, as SophosLabs Principal Researcher Andrew Brandt is calling the malware, gets installed when […]

Tech

Starlink dishes go into “thermal shutdown” once they hit 122° Fahrenheit

Enlarge / Starlink satellite dish and equipment in the Idaho panhandle’s Coeur d’Alene National Forest. (credit: Wandering-coder) A Starlink beta user in Arizona said he lost Internet service for over seven hours yesterday when the satellite dish overheated, demonstrating one of the drawbacks of SpaceX’s broadband service. When the user’s Internet service was disrupted, the Starlink […]

Tech

CD Project Red does an about-face, says ransomware crooks are leaking data

Enlarge (credit: Aurich Lawson) CD Projekt Red, the maker of The Witcher series, Cyberpunk 2077, and other popular games, said on Friday that proprietary data taken in a ransomware attack disclosed four months ago is likely circulating online. “Today, we have learned new information regarding the breach and now have reason to believe that internal […]

Tech

Data-thieving hackers strike again, stealing EA source code and police data

Enlarge (credit: Getty Images) Game maker Electronic Arts and the Presque Isle Police Department in Maine are responding to an event they had both been dreading: the theft of gigabytes of private data by hackers who breached their Internet-connected networks. In EA’s case, the theft included 780GB of source code and tools for FIFA 21, […]

Tech

Mystery malware steals 26M passwords from 3M PCs. Are you affected?

Enlarge (credit: Getty Images) Researchers have discovered yet another massive trove of sensitive data, a dizzying 1.2TB database containing login credentials, browser cookies, autofill data, and payment information extracted by malware that has yet to be identified. In all, researchers from NordLocker said on Wednesday, the database contained 26 million login credentials, 1.1 million unique […]