Credit: Getty Images. NB. not the actual fish involved
We have talked about phishing before and warned you of the dangers of phishing emails that spread malware, ransomware and other toxic payloads. Today however we are talking fish. Actual fish.
It was never going to be long before the obsession with web-enabling everything from air conditioning to kettles, caused a bit of a problem. In this case, a web-enabled fish tank (stay with us) was hacked and using this fish tank’s connection, criminals managed to move through the network and steal data from the fish home a ‘smart tank’ in a casino…
If you consider the use web-enabled equipment, including any animal enclosures, please risk assess it thoroughly and please protect it properly from fishers, phishers and other cyber botherers. Criminals will head for the point of least resistance every time and you need to know where that is before they do.
If you want to view some free content of ours on cyber protection, head over here.
Players are being asked to exercise caution in what they post in the TwoPlusTwo forum and some have been advised to change their passwords.
Any question of a hack should mean all users would be sensible to change their passwords and to something they do not use elsewhere, that is robust and does not contain dictionary words. If you would like some guidance on the best way to do this, try our main blog here.
If you would like to read the whole story, click here.
Reading a recent story about the sentencing of a UK teen for carrying out a Distributed Denial of Service (DDoS) attack on an online casino, we were reminded of how important it is to understand and scope all of the motivations for carrying out cyber attacks.
An apparently disaffected young person, with no other intent other than to gain notoriety or ‘see if they can’, is as real a threat to an online casino as a determined criminal seeking to harvest credit card details. It has cost the business money and inconvenience, the only good thing to be said about it is that apparently no customer details were compromised.
Other details of the teen in question included his collection of weaponry bought over the internet from China. His sentence may have been suspended but interest in him and his online habits are unlikely to be…
If you would like to read the whole story click here.
(US) Michigan casino Four Winds has discovered that cardholder data including all of the data stored on the mag strip, has been stolen by hackers and the casino is warning users between October 2014 and October 21, 2015 , that their information may have been compromised and/or stolen.
Cybercrime knows no geography, so it is important not to be distracted by the location of the crime. This may have happened in Michigan, but the criminals could be anywhere.
There are no details available yet on how the hackers managed to upload the code that allowed this information to be copied from the casino system. Phishing of employees is one of the most popular and successful routes into a business and ensuring employees are able to spot phishing and its more aggressive and successful big brother, spear phishing, is imperative. Employees are always going to be the Achilles heel of a security strategy and that is why businesses that handle personal information, need to ensure they place enough importance on training and re-training them with security awareness and the latest threats.
Insider threat is often a worry for many businesses too and it is the other end of the human threat; when the nefarious individual is already on the inside. Obviously, we don’t know what happened in this instance but this offers all such businesses a warning to review security training, vetting and overall strategy.
The Register has today reported the theft of 150k credit card details from an unnamed casino. Apparently, the casino was a virtual security-free zone, not even sporting a firewall. Experts say there may be six more casinos targeted by the Fin5 hacker gang.