Mid-Week Intel: Dark Web Leak Site, Rogue Negotiator, and MFA Bypass
It's Wednesday, and we're halfway through the week. Here's what's on the radar from DarkWatch and the news, with a focus on what it means for ordinary households in the UK.
DarkWatch snapshot
DarkWatch has logged over 150,000 captures and more than 2,800 alerts. One recent capture was an active dark web leak site. We don't publish the address, but these sites are used to publish stolen data. If your email or password appears on one, change that password wherever you still use it, and turn on two-step verification. Don't reuse passwords across accounts.
Rogue negotiator?
The FBI suspect a ransom negotiator was actually running a ShinyHunters extortion site. If you're ever dealing with ransomware, stick to official advice from the police or government-backed services. Be wary of anyone who approaches you offering to help for a fee.
Certificate authority keys compromised
Eight eMudhra certificate authority keys were compromised, prompting emergency fixes across browsers and software. Certificate authorities act like the passport office of the internet. The practical step for households is simple: keep your browser and devices updated, and don't ignore update prompts.
Business software flaws
A critical FortiSIEM flaw now has a public exploit, and Qilin and INC ransomware groups are exploiting a Palo Alto Networks flaw to bypass multi-factor authentication. These are business and IT systems, not typical home devices. If you work in IT, check with your team. At home, keep your router and devices updated.
Today's action
Turn on two-step verification for your main email account. It takes two minutes and adds a strong layer of protection.
Related reading