Skip to main content
Category

Cyber Attacks

Cyber Crime increased from $325 Million to $5 Billion in just 2 years!

Evolve MGA Cyber Insurance

Evolve MGA’s hacker insurance protects businesses in the event they experience cyber attacks. There’s no doubt that cyber crime is on the rise, but by how much, is what is alarming.  In 2015, global ransomware damage costs were $325 million and by 2017, costs were roughly $5 billion (15x increase in just two years).

Some additional facts surrounding this growth are listed below:

1. 54% of companies experienced one or more successful attacks that compromised data and/or IT infrastructure (Ponemon Institute)

2. 69% of organizations don’t believe their antivirus can stop the threats they’re seeing  (Ponemon Institute).

3. The total cost of a successful cyberattack is over $5 million, or $301 per employee (Ponemon Institute).

4. The percentage of malware payloads that were ransomware dropped over 70% in June 2017 to less than 5% in December — while crypto-mining malware impacted 55% of organizations globally (Check Point).

5. Cybersecurity Ventures estimated cyber attacks cost businesses $1.5 billion in 2016. Experts estimate the total global losses from last year’s WannaCry outbreak alone were in the ballpark of $4 billion.

The Bermuda cyber attack is about to expose some powerful people

Evolve | bermuda cyber attack

As if the Panama Papers release wasn’t alarming and damaging enough for those affected, the Bermuda Cyber Attack is on the verge of exposing all of the confidential and potentially shady business of some of the most powerful people in the world.

Information surrounding high net worth individuals and influential businesses has been released to a number of media companies, which in turn has led to those potentially affected to gear up with legal firms and PR consultants (who will be billing at an hourly rate).

Appleby law firm, which is based in Bermuda and probably has connections to tax affairs, probably doesn’t have hacker insurance to protect it from the “data security incident” that is most likely going to cost them A LOT of MONEY and heat from the government.

EvolveMGA ‘s hacker insurance protects businesses in the event they experience a similar hack attack. Head over to our homepage to Get a Quote!

If you’d like to read more about the Bermuda cyber attack, click here!

Hackers exploit telegram messenger with cryptocurrency mining malware

telegram messenger

Telegram messenger is one of the latest hack attacks that resulted in the spread of malware to mine cryptocurrency. Originally discovered in October of 2017 by Kaspersky Labs, cybercriminals tricked victims into downloading malicious malware onto their PCs that exploits their CPU power in order to mine ZCash and Monero.

According to Kaspersky Lab, the hackers used a hidden RLO Unicode character in the file name that reversed the order of the characters, thus renaming the file itself, and send it to Telegram messenger users. In this zero-day vulnerability, users who downloaded the malware, provided unnoticed, remote, computer access to hackers who then infected the victim’s computers with additional malicious softwares.

Although it wasn’t reported, we can assume in a scenario similar to Telegram Messenger’s hack that post breach spendings can include the following: data breach attorneys, computer forensic experts, and PR consultants, all billing at an hourly rate.

EvolveMGA‘s hacker insurance protects businesses in the even they experience a similar hack attack. Head over to our website to Get a Quote!

Check out The Hacker News for more information on this story.

Cyber criminals are stealing people’s rewards points to go on vacations

Evolve | Stolen Rewards Points

Researchers at Flashpoint found a new and thriving online marketplace where illicit booking services are offering rewards points for luxurious vacations at the expense of victims who have experienced account exposures. Cybercriminals have been accessing lucrative rewards sites via stolen bank account and credit card information in order to fund their posh vacations to some of the most beautiful places in the world. It is reported that over 3,600 vacations have been taken on victims points since 2015.

Although some providers are refunding stolen points, Flashpoint recommends improving security on rewards sites to avoid unexpected phishing attacks as hackers us brute-force password stealing software to expose credentials. All in all, individuals who practice safe security measures for their own accounts often translate into safe security practices for their respected employers.

With that in mind, EvolveMGA ‘s hacker insurance protects businesses in the event they experience a similar hack attack. Head over to our website to Get a Quote!

If you’d like to read more about this cyber attack on rewards points, check out the Independent.

Not even the Winter Olympics can stop hackers from making the headlines

Evolve | hackers win olympic gold medal for disruption showcase

WordPress Powered Businesses at Risk of Potential DoS

Evolve | Wordpress Powered Businesses at Risk of Potential DoS

WordPress powered businesses are at risk of being exposed by severe vulnerabilities due to the latest discovery from Barak Tawily, a security researcher. According to Tawily, an application-level denial of service in the WordPress CMS platform could potentially allow hackers to infiltrate most websites with a single machine (opposed to a typical network-level DDoS attack which needs a massive amount of bandwidth).

According to The Hacker News, WordPress has refused to acknowledge this potential vulnerability, saying that it should be mitigated at the server end or network level opposed to the application level, which is outside the control of WordPress. Considering WordPress powers nearly 30% of the web, this security risk can expose millions of website to hackers making them unavailable for legitimate users.

Evolve MGA’s hacker insurance protects businesses in the even they experience a similar hack attack. Head over to our website to Get a Quote and learn more about our coverage.

If you’d like to read more about the vulnerabilities surrounding this DoS in the WordPress CMS platform, click here.

New Malware Strain, UDPoS, Poses Risks to Point of Sale Systems

Evolve | UDPoS | New Strain of Malware

Cybercriminals are getting more innovative and untraceable every day, which makes being protected with hacker insurance more vital to your business’ future. Forcepoint Labs recently discovered a new strain of malware, called UDPoS (User Datagram Protocol Point of Sale), that relies on the UDP DNS traffic to expose credit card information from POS systems.

This news comes just weeks after Jason’s Deli (a well known fast casual restaurant chain) was hacked by cybercriminals who exposed over 2 million payment cards were stolen across 14 states. Although cost hasn’t been disclosed, it has been proven that such attacks can result in business interruption, credit monitoring fees for all customers effected, harmful reputation (or loss of customers), computer forensic investigators, etc.

Currently there is no evidence that UDPos malware has stolen any payment card information, Forcepoint Labs explains that the malware is capable of doing so successfully.

Evolve MGA’s hacker insurance protects businesses in the even they experience a similar hack attack. Head over to our website to Get a Quote and learn more about our coverage.

To read more about UDPoS, head over to The Hacker News.

Jason’s Deli: Hackers Dine Out on 2 Million Payment Cards

Evolve | jasons deli hackers dine out on 2 million payment cards

Jason’s Deli is one of the latest hospitality and/or retail businesses that has been hacked via POS system. The restaurant chain has confirmed that the data breach exposed 2 million payment cards in 164 restaurants across 14 states.

According to the report, the cyber criminals successfully installed RAM-scraping malware, which was only to be discovered by card issuers who spotted fraudulent patterns that point back to the restaurant chain.

Since the attack, Jason’s Deli has contacted the FBI, Secret Service, PR consultants, data breach attorneys, and computer forensic experts, all billing at an hourly rate. Additionally, they are working with card issuers to track down and flag affected cards, which will most likely result in credit monitoring costs.

To make matters worse, customers have taken to social media, threatening to sue, and filing multiple class action lawsuits, which can result in a HUGE business interruption and reputational harm financial loss.

Business owners! Evolve MGA offers hacker insurance that covers policyholders in the event their cloud data is hacked, lost, or stolen. Contact us!

To read more about the hack on Jason’s Deli, click here!

Critical Oracle Micros POS Flaw Affects Over 300,000 Payment Systems

Evolve | Critical Oracle Micros POS Flaw Affects Over 300,000 Payment Systems

Walk into any restaurant or retail store today and you’ll almost always encounter a point of sale (POS) system to authorize your payment. POS has undoubtedly helped businesses transition into becoming more digital, and ultimately more seamless, but at the turn of the new year, security firm, #ERPScan, discovered an exploitable vulnerability that can potentially affect businesses using Oracle’s Micros POS. Since the discovery, #Oracle has released a security patch that will address the potential vulnerability, but it’s noting that over 300,000 small businesses use Oracle’s #POS system on a daily basis, which if exploited in a cyber attack, can put a lot of small businesses at risk of being exposed in a data breach.

According to #HackerNews, using directory traversal flaw, an unauthorized insider with access to the vulnerable application could read sensitive files from the MICROS workstation, including service logs and configuration files, which ultimately will give #hackers access to user credentials that can easily be used for additional business accounts containing sensitive data.  Stay protected!

Evolve MGA offers hacker insurance that covers policyholders in the event their cloud data is hacked, lost, or stolen. Contact us!

To learn more about this potential vulnerability, click here.

Nearly 2000 WordPress Websites Infected with a Keylogger

Evolve | Nearly 2000 WordPress Websites Infected with a Keylogger

Malicious malware found in over 2,000 WordPress websites is being used to steal visitors resources in order to mine cryptocurrencies and log visitors keystrokes.  More than 75 million businesses rely on WordPress websites and just last month over 5,000 websites were infected with a similar malware, called cloudflare.  Security researchers have been able to track this malware campaign back to Coinhive, a popular in browser service that offers website owners to embed a JavaScript to utilize CPUs power of their website visitors in an effort to mine the Monero cryptocurrency. However, not only does this malware capture the keylogging from everyday visitors, but also can affect website administrators who are accessing the website’s backend, which ultimately puts your business and confidential information at risk.

If hackers gain access to the dashboard, we can expect a post breach strategy to include the following: data breach attorneys, computer forensic experts, and PR consultants, all billing at an hourly rate. Depending on their findings, notification and credit monitoring costs could follow.

Evolve MGA’s hacker insurance covers policyholders in the event their cloud data is hacked, lost, or stolen. Contact us!

To learn more about this developing story, check out Hacker News!