Ferrari may have been hacked / Hacker sentenced to 25 years after stealing $9.5M / YouTube channel spreading malware

Plus: Securiti raises a $75M Series C

Inside.com Part of   Network October 04, 2022

Presented by

Ferrari may have been hacked as a hacker group has taken credit for leaking company documents. Ferrari officials have denied any cyberattack. More: Ransomware named RansomEXX is believed to have been used to steal 7GB worth of data, including repair manuals, datasheets, communication documents, management-related documents, etc. The ransomware has been previously used to hack Brazil's Superior Court of Justice and the Texas Department of Transportation. RansomEXX affects both Windows and Linux. The malware is characterized by its deployment as a RaaS. The threat actor credited for having launched the ransomware is Gold Dupont. The hacker group has been active since 2018 and uses tools such as RansomEXX, Cobalt Strike, Metasploit, and Vatet Loader. Gold Dupont has mostly attacked entities located in the U.S., France, and Brazil, while its most targeted industry is manufacturing, followed by education and banking. The stolen data was leaked on a TOR website. Zoom Out: Ferrari was hacked as recently as 2021, as the company's website was used by hackers to sell an NFT scam.

A hacker has been sentenced to 25 years in prison after stealing $9.5M and trying to launder the funds through 50 different bank accounts. The hacker was based in Norcross, Georgia. More: The U.S.-based male individual was charged by a federal grand jury in February 2022 with one count of conspiracy to commit money laundering and 15 counts of substantive money laundering. According to the U.S. Department of Justice, the hacker had eight accomplices who helped him hide the money under false bank accounts. The individuals deposited the money under the pretense of running active businesses. The hacker and his accomplices used online dating sites to lure victims into sending them money. This hacking campaign was active from October 2018 to August 2020.

A message from SECURITY COMPASS This is your show developers! Watch our panel answer questions & offer advice on how we can all improve developer-centric threat modeling. What to expect: Earlier this year, Security Compass ran a survey that probed the mind of developers. During this interactive panel discussion, we discussed our findings with security experts who live in the developer and threat modeling space. What you will learn: 🎯 The connection between developer user stories or requirements, coding, and threat modeling. 📣 How to keep up with the ongoing discovery of software weaknesses. 👨‍💻 Practical advice for developers to stay current on threat modeling practices. Whether you are a developer, lead, architect, or threat modeler, this webinar will leave you with something to think about. Watch Now

Researchers have spotted a YouTube channel that is spreading malware. The threat actor is unknown so far. More: As the Tor Browser website is blocked in China, individuals in China often try downloading Tor from third-party websites. A channel with over 180,000 subscribers is promoting a video that redirects its viewers to a malicious file. If the file is clicked, users are led to a false TOR browser Windows installer. Researchers believe that all of the breached victims are located in China, while the video itself has over 65,000 views. The channel claims it is based in Hong Kong.

Data regulation startup Securiti has raised a $75M Series C funding round. This round was led by Owl Rock Capital. More: Other participants in the round include Mayfield and General Catalyst. Through its solution, it aims to be a one-stop shop for companies that want to be GDPR and CCPA compliant but also have strong cyber defense capacities.  In addition to the funding round, the company announced its new product named DataControls Cloud. The product helps protected data across all data hosting platforms. The startup claims its strategy of offering a universal solution has led to multiple seven and eight-figure contracts. The company was founded in 2019 and has 370 employees.

A message from CLICKUP What software will you be using in the future? How about just five or ten years from now? We're introducing ClickUp 3.0 (coming this year), our next-generation productivity platform built to support the new era of teamwork and connecting teams like never before.  Here's what you can expect:  Connecting people around shared projects and goals, so they feel like they’re working closely together, even when they’re far apart. Bringing work together not only from within ClickUp but from other applications too. Unleashing knowledge often trapped in siloed systems by making it easy to find in one place. Personalizing context based on users’ prioritized projects, relationships, and interests, so they can focus on the work that matters most without unnecessary distractions. Sign up for a business or unlimited plan with ClickUp and get 20% off your first year with code INSIDE. Claim my discount T&Cs: New customers only, apply code at check out, not combinable with other offers, business and unlimited plans only

Cybersecurity startup Tines has raised a $55M Series B funding round. Felicis led the round. More: Other participants in the round include Accel, Blossom Capital, Addition, and Lux Capital. The company is now valued at more than $300M. Tines offers a no-code platform that enables its user to create personalized workflows. The software solution uses APIs that integrate data from other software. Tines is based in Dublin, Ireland, and has over 150 employees.

Quick Hits: The 3 Things to Never Build In Your App: Authentication, Notifications, and Payments.* Field Effect Software, a Canadian company founded by a former employee of Canada's secret service, has raised $30M. The company aims to protect small businesses from hackers. Ten Eleven ventures led a $25M Series B round for Eclypsium. KOIF and J-Ventures also participated in the round. The U.S. Cybersecurity and Infrastructure Security Agency has announced that starting from April 2023, U.S. companies will have to take a series of steps, including keeping track of their assets and vulnerabilities in their network. They will have to conduct asset discovery every seven days, while all found vulnerabilities will have to be reported within 72 hours. Israel-based LayerX has raised a $7.5M Seed round led by Glilot Capital Partners. LayerX helps increase browser safety by monitoring suspicious web app activity. *This is sponsored content.

Upcoming events at Inside: October 11 - AMA with Mike Malone (Smallstep)* (Register Here) October 13 - AMA with Ram Bartov (Chief Accounting Officer at TripActions)* (Register Here) October 19 - AMA with Zecca Lehn (Responsibly VC) (Register Here) October 25 - Meet Our Fund 4, an Inside.com Summit (Register Here) November 02 - AMA with Bill Glenn (Executive Chairman at Crenshaw Associates) (Register Here) December 07 - Live AMA with Deividi Silva ( Head of Developer Relations at Gun.io) (Register Here) *This is a sponsored listing.

Arbër is an Inside writer who also has experience in entrepreneurship. He has experience covering Consumer Tech, Venture Capital, NFTs, Crypto, etc. Arbër holds a Bachelor's degree in Business from XAMK University in Finland. When he is not reading(and writing) business news, he chooses to watch sports or anime...and then read news about sports or anime. Editor Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 and 1972 Fords.

Security Compass is on a mission to accelerate software time-to-market while managing risk.

Sign up for a business or unlimited plan with ClickUp and get 20% off your first year with code INSIDE.

767 Bryant St. #203, San Francisco, CA 94107 Copyright © 2022 Inside.com

Did someone forward this email to you? Head over to inside.com to get your very own free subscription! You received this email because you subscribed to Inside Security. Click here to unsubscribe from Inside Security list or manage your subscriptions.