Connect with us

Technology

Two hackers charged with last year’s DEA portal breach

Published

on

Two hackers charged with last year’s DEA portal breach

Two males have been charged for his or her alleged roles in final 12 months’s hack of the Drug Enforcement Company’s net portal, as reported earlier by Gizmodo. In a press launch posted earlier this week, the Division of Justice says Sagar Steven Singh and Nicholas Ceraolo stole a police officer’s credentials to entry a federal regulation enforcement database that they used to extort victims.

Prosecutors declare the 19-year-old Singh and 25-year-old Ceraolo are members of a hacking group known as Vile, which frequently steals private data from victims after which threatens to dox them on-line in the event that they don’t obtain a cost. Whereas the DOJ doesn’t explicitly say which company Singh and Ceraolo allegedly hacked into, it states the portal incorporates “detailed, nonpublic data of narcotics and forex seizures, in addition to regulation enforcement intelligence stories.” This tracks with a report from Krebs on Safety that signifies the hack is expounded to the DEA.

In keeping with the criticism, Singh used the data from the federal portal to threaten his victims, and in a single occasion, wrote to at least one individual that he would hurt their household except they gave him the credentials to their Instagram accounts. He then hooked up the sufferer’s social safety quantity, driver’s license quantity, house deal with, and different private data he collected from the federal government’s database to his risk.

Faux emergency knowledge requests have gotten more and more frequent.

“By [the] portal, I can request data on anybody within the US doesn’t matter who, no one is secure,” Singh allegedly wrote to the sufferer. “You’re gonna comply to me for those who don’t need something adverse to occur to your dad and mom.”

Advertisement

In the meantime, Ceraolo used the portal to acquire the e-mail credentials belonging to a Bangladeshi police officer. Ceraolo allegedly posed because the officer throughout his correspondence with an unnamed social media platform, and satisfied the location to supply the house deal with, electronic mail deal with, and phone variety of a selected person underneath the guise that the sufferer “participated in ‘baby extortion,’ blackmail, and threatened the Bangladeshi authorities.” Ceraolo allegedly tried to rip-off a well-liked gaming platform and facial recognition firm the identical approach, however each refused the requests.

The rip-off carried out by Ceraolo is changing into more and more frequent. Final 12 months, a report from Bloomberg revealed that Apple, Meta, and Discord fell sufferer to comparable ploys that concerned hackers posing as law enforcement officials in search of emergency knowledge requests. Whereas regulation enforcement generally asks social media websites for knowledge a few specific person in the event that they’re concerned in a criminal offense, this requires a subpoena or search warrant signed by a decide. Nonetheless, emergency knowledge requests don’t want this type of approval, which is one thing hackers are profiting from.

As identified by Krebs on Safety, Ceraolo has really been described as a safety researcher in quite a few stories that credit score him with uncovering safety vulnerabilities associated to T-Cell, AT&T, and Cox Communications. Regulation enforcement raided Ceraolo’s house in Might 2022 earlier than looking out Singh’s residence in September.

Whereas Singh was arrested in Pawtucket, Rhode Island on Tuesday, Ceraolo turned himself in shortly after the DOJ introduced its prices. In keeping with the DOJ, Ceraolo faces as much as 20 years behind bars for conspiracy to commit wire fraud, and each Ceraolo and Singh might face 5 years in jail for conspiracy to commit laptop intrusions.

Advertisement
Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

Gaze upon Dell’s leaked Qualcomm X Elite-powered laptops

Published

on

Gaze upon Dell’s leaked Qualcomm X Elite-powered laptops

They unsurprisingly look like laptops — albeit with overall slimmer profiles.

The most interesting model is Dell’s new XPS 13 9345, which seems to be a sleeker rebirth of the XPS 13 Plus from 2022. It’s got the same touchy touch-bar on the top row and comes with only two USB-C ports for I/O.

There’s also a leaked new Inspiron 14 7441 Plus that’s reportedly equipped with a 16-core Snapdragon X Elite and has 16GB of base RAM. Inspirons are considered Dell’s everyman PC that isn’t as sleek as the XPS lineup, although this one looks like it has thinned, and seems to come with two USB-C ports, one USB-A, and a microSD card slot.

Dell had revealed a new XPS lineup in January which introduced keyboards that bear Microsoft’s new Copilot key on the bottom row — and it looks like these leaked ones have them, too. Dell, HP, and Lenovo have all partnered with Microsoft to release notebooks supporting Windows 11 AI features. And these leaked Dell laptops apparently have Microsoft’s upcoming “AI Explorer” features out of the box.

Qualcomm’s Snapdragon X series are due to appear in laptops this summer, and it’s the chipmaker’s big bet to challenge Apple Silicon, Intel, and AMD on performance.

Advertisement
Continue Reading

Technology

Hospitals facing unprecedented threats; you must secure your health records today

Published

on

Hospitals facing unprecedented threats; you must secure your health records today

Imagine you rush to the emergency room, but after five hours, they tell you to find another hospital. 

Or you check in at your specialist’s office for a chronic condition, only to find they have no access to your entire medical history. Both of these scenarios happened.

The cyberattack on one of the largest health systems in the U.S., Ascension, was bad — really bad. Before you say, “Another data breach? So what, Kim?” know that having your records sold on the dark web is the least of your worries.

I’M A TECH EXPERT AND YOU NEED TO MAKE THESE TECH CHANGES NOW BEFORE IT’S TOO LATE

Code red

Advertisement

The hack on Ascension sent its 140 hospitals and 40 senior centers into full-blown chaos. It took down patient record systems and medication prescribing systems, forcing doctors and nurses to rely on paper charts and handwritten records to keep things running.

One patient, Zackery Lopez, checked himself in at an Ascension-run hospital in Southfield, Michigan. He was suffering from internal bleeding and thought his cancer had returned. Zackery waited a grueling seven hours before a nurse could help him. As he waited, he saw patients checking themselves out. 

Dr. Alia Broman, right, examines a 6-year-old patient at Denver Health in Denver, Colo., April 25, 2024.  (Hyoung Chang/The Denver Post)

Keep your health records safe

When hospital systems get hacked, it’s a matter of life and death. And it’s happening more and more often. Keeping physical records sounds old school, but if digital systems go down, it could save your life. 

Advertisement
  • Start with a list. Make a list of all your meds, including dosages and names, and keep both digital and physical copies. Store a physical copy in your purse or wallet if you’re in treatment or in case of emergency.

I also recommend compiling your full medical records and having a printed copy on hand. If you have an iPhone, you can sync them to your Health app:

7 WAYS TO STOP PAYING SO MUCH ON STREAMING EVERY DANG MONTH

Add your health records

  • Open the Health app on your iPhone or iPad.
  • If you’re on your iPhone, tap the Summary tab, then your profile picture in the upper-right corner. On iPad, tap Profile in the upper-left corner.
  • Scroll down to Features > Health Records > Get Started.
  • Search for your hospital or network, then tap it. FYI: It’ll ask you to add location services to find hospitals and health networks near you, but you don’t have to enable it to search.
  • Under Available to Connect, choose Connect Account. Sign in to your health care provider’s website or app.
  • Wait for your records to update. It might take a minute for your information to appear.
  • Repeat these steps for each supported provider. Start by going to Features, then tap Add Account.
Woman on iPad

Woman at home feeling worried after checking COVID-19 symptoms online (iStock)

View your health records

  • Open the Health app on your iPhone or iPad.
  • If you’re on your iPhone, tap Browse. On iPad, open the sidebar.
  • Under Health Records, tap a category.
  • Tap an item to see more information about it.

I have medical reporting dating back to 2012 in my account, and it’s a 66-page PDF! Yes, you really do want that much detail.

SMARTPHONE TRICKS EVERY IPHONE AND ANDROID USER SHOULD KNOW

Use an Android?

Advertisement

Unfortunately, Google doesn’t have a built-in health app equivalent. That doesn’t mean you’re out of luck.

Lots of folks like the free, privacy-friendly CommonHealth app. It’s from the nonprofit organization The Commons Project Foundation and connects with 15,000 health providers.

Doctor with cancer patient

A doctor showing a patient the results of her medical tests. (iStock)

Most of the options in the Play Store include some kind of data collection, but not this one. Data is stored on your device online, and the developers say it won’t be sold, shared or used for marketing.

Get tech-smarter on your schedule

Advertisement

Award-winning host Kim Komando is your secret weapon for navigating tech.

Continue Reading

Technology

Bungie’s classic sci-fi shooter Marathon is now free on Steam

Published

on

Bungie’s classic sci-fi shooter Marathon is now free on Steam

Before there was Halo and Destiny, there was Marathon — and now Steam users can check out the classic sci-fi shooter for themselves. Bungie just announced that the first game in the original trilogy has surprise-dropped on Steam, and it’s available on both Mac and PC. Even better, you can play it for free.

The game is actually credited to Aleph One Developers, which is described as an “open source continuation of Bungie’s Marathon 2 game engine.” In fact, the group has already made the entire trilogy available to download right here with support for Mac, PC, and Linux. But the Steam launch opens up the games to a big new audience of gamers, and Bungie says the plan is to bring both sequels — Marathon 2: Durandal and Marathon Infinity — to Valve’s platform as well.

Continue Reading
Advertisement

Trending