November 21, 2022

CyberSec Roundup
A synopsis of the Latest Cybersecurity News

Stealing Discord Tokens with Ransomware

Cyble Research and Intelligence Labs discovered a new brand of ransomware called AXLocker. Ransomware operators can not only encrypt a victim’s files, but also steal the user’s Discord token, if they use the app. This will allow a threat actor to take control of that victim’s account, which can be used to further scam other Discord users, especially if the victim leads a community on the platform.

Holiday Phishing

Akamai Security Research has observed a new sophisticated phishing campaign that tries to impersonate major American retail brands. These schemes are common during the holiday season, with Thanksgiving and Black Friday on the horizon. Everyone needs to be very careful when they receive special offers via email, as many times they can be too good to be true.

Whoosh Hacked

Whoosh, the Russian scooter-sharing service, recently confirmed they were the victims of a cyber-attack but told customers that the attack was contained by their IT team. However, this seems not to be the case, since customer information for 7.2 million of their customers was released onto the dark web for sale. The company has since updated its stance on the severity of the attack.

By: David Pinder
IT & Cybersecurity Consultant
Certified Ethical Hacker (Master)