Ethereum Scam Nets $25M in 12 Seconds

CybersecurityHQ News

Welcome reader to your CybersecurityHQ report.

Headlines

It’s a major election year, and according to a recent study, that’s leading to an explosion of fake accounts on X posting about politics. Israeli tech company Cyabra used AI tools to discover the origin of accounts on the platform. Their research found that a full 15% of accounts posting support for Trump and opposition to Biden are fake. Similarly, 7% of accounts posting support for Biden and opposition to Trump are fake. The study also found that fake accounts have gone up 10x between March and April.

This is stoking fears of a misinformation tsunami, but we are seeing some pushback. The FCC recently proposed $8 million in fines for a robocall sent out to New Hampshire voters featuring a deep fake of President Biden’s voice.

Popular video downloading service Dirpy exposed users’ IP addresses and even revealed the content they downloaded, including explicit content. The incident involves an open Kibana instance, leaving the door open for compromising users of the platform, which is very popular in Japan and the US.

Because Kibana, an open-source data visualization tool, allows for real-time data monitoring, anyone with access to the open instance could generate a report for themselves. The platform is mostly used for downloading YouTube and adult videos, which is generally legal for private use.

European Parliament employees’s data has been leaked — including passports, criminal records, work experience documents, and more. The revelation came in the form of an internal email sent out on May 22, but the breach was discovered on April 25.

The breach happened on PEOPLE, a recruitment system the European Parliament uses as their HR tool. All documents in their system were potentially leaked.

Interesting Read

Two brothers, both graduates of MIT, stole $25 million from traders on the Ethereum blockchain by exploiting a vulnerability in a common component in an operation that lasted all of 12 seconds. Now, they face charges from the US Department of Justice, but the greater impact of their scheme remains to be seen.

Robert Lemos, writing for DarkReading, covers the story and its implications for the world of decentralized finance.

Cybersecurity Career Opportunities

Employment Tip: Do Pro Bono Work

Working pro bono is no way to make a living, but it does pay you back many things in return — even if not in literal dollars. You contribute to a good cause, and you get experience working on complex projects that you might not have access to yet in a paid capacity. That makes it a fulfilling way to beef up your resume. Consider reaching out to local charities to see what their needs are.

For the latest openings in cybersecurity careers, check CybersecurityHQ.

Stay Safe, Stay Secure.

The CybersecurityHQ Team