4/8/21

LP, AP & IT Security's #1 News Source

Four Ransomware Gangs Form a Cartel for 'Media Attention'
Did 4 Major Ransomware Groups Truly Form a Cartel?

An analysis of well-known extortion groups and their cryptocurrency transactions reveals the answer.

A collection of ransomware groups that banded together to create a "cartel" rarely collaborate and don't share profits, suggesting that concerns over a sprawling cybercriminal organization are overblown, according to Analyst1.

The four cybercriminal groups - Twisted Spider, Viking Spider, Wizard Spider, and the Lockbit Gang - announced at different times throughout summer 2020 that they would be working together but gave few other details. By November, when Twisted Spider - also known as the Maze group - closed down, it denied there had ever been a cartel.

In a nearly 60-page report, Jon DiMaggio, a former contractor for the National Security Agency (NSA) and now chief security strategist at threat intelligence firm Analyst1, investigated whether the groups had actually joined forces. While he documented their sharing of data breach information, cross-posting of data, and sharing of techniques, he never saw any revenue sharing or coordination between the groups, he says.

"If you go look up what a cartel is ... the one driving theme is when these organizations work together and share profits with one another," DiMaggio says. "What I did not ever see, even one time, is one gang paying another gang. At the end of the day, they can call themselves a cartel, but I don't think they are a cartel."

To some extent, the cartel announcement appeared to be ransomware gangs trying to garner media attention. All four groups appeared to reach out to journalists and even made public statements. In particular, if a company refused to pay, Twisted Spider issued press releases criticizing companies, and Viking Spider - which infected victims with Ragnar Locker - used Facebook ads and a "wall of shame."  darkreading.com

IT Security Budgets Spiraling Out of Control?
IT security budgets to increase over the next 12 months

IT security budgets are spiralling out of control as organizations adapt to the everywhere workplace, an Ivanti survey reveals.

92% of CISOs highlighted the need to deploy additional security measures to better enable and secure employees as they work from anywhere as the primary budget growth driver. 80% of CISOs also pinpointed the need to replace passwords with more secure forms of authentication.

IT security budgets increase to include more UEM and biometrics

The study, which polled 400 CISOs across EMEA, found that the average IT security budget last year was over €64 million, and 81% expect this to increase over the next 12 months. When pressed on the specific software solutions they plan to invest in during the next year, unified endpoint management (UEM) and biometric authentication solutions came out on top.

Growth in phishing attacks

70% of CISOs claimed that their organization's reliance on biometric authentication to enable remote access to business data would increase, with 24% saying it would significantly increase. The heightened focus on biometric authentication is likely due to the significant growth in phishing attacks.

CISOs need to ensure they have full visibility into all devices

Nigel Seddon, VP EMEA West, Ivanti said: "The emergence of the everywhere workplace has led to an explosion of remote devices attempting to gain access to corporate resources. This new distributed work landscape has created a huge headache for CISOs worldwide as the influx of devices has provided cybercriminals with multiple new vectors to try and exploit. helpnetsecurity.com

Cybercriminals Targeting Digital Channels
More Shopping Done Online Exposes New Cybersecurity Risks

As shoppers flocked to digital venues to make their purchases in 2020, cybercriminals took aim and exposed the mounting vulnerabilities of e-commerce channels.

As shoppers flocked to digital venues to make their purchases in 2020, cybercriminals took aim and exposed the mounting vulnerabilities of e-commerce channels. In 2020, more than $1 trillion was lost to cyber crime, according to a recent report from Sift, a digital trust and safety company focused on fraud prevention.

With store closings and stay-at-home orders, online spending nearly doubled as online traffic rose 50%-70%. As the volume of e-commerce transactions grew, fraudsters seized on shopper behaviors and drove up attempted fraudulent purchases by 69% in 2020 compared to the prior year. Even worse, cybercriminals appeared to team up in 2020, increasing the complexity and reach of the fraud economy.

Fraudsters tend to follow the money, which means they also upped their attacks on mobile shopping, which was estimated to reach $284 billion last year, or 45% of the total U.S. e-commerce market. "Well over" 50% of the fraud attempted in 2020 was over mobile devices, the report noted, increasing 11% from 2019.

Interestingly, fraudsters spent stolen money on an array of goods, including attempting to spend $5 million on watches and $5,000 on gift cards. The fraudiest type of payments in 2020 included gift cards and store credit. retailleader.com

People are the weakest link in data breaches, but can they be held accountable?
In the people-process-technology triad, human error is the top reason for breaches, accounting for 70% of successful attacks, a Cyberinc survey reveals. The next biggest cause is vulnerability management through patches and upgrades, accounting for just 14% of successful attacks.

Securing remote users is top priority

The report also shows that more than 60% of respondents said that securing remote users is their top security priority in 2021, and roughly three-fourths of individuals indicated that their organization is unable to keep up with the increasing volume of cyber alerts. At the same time, only one in six respondents expressed confidence in their organization's current security investments.

A recent report shows that despite a 10% increase in security spending, the number of breaches in 2020 set a record, hitting a level greater than the previous 15 years combined. Additionally, IBM's recent report states that the average total cost of a data breach was $3.86M in 2020.

Cybersecurity is not the average employee's job

These statistics underscore the importance of putting in place new processes and technologies to protect organizations from a problem that will likely persist, given that cybersecurity is not the average employee's job. helpnetsecurity.com

DHS S&T Expands Pilot of Cybersecurity Tech for Emergency Communications Centers
The Department of Homeland Security (DHS) Science and Technology Directorate (S&T) is expanding pilot testing of a technology to improve the cybersecurity defenses of the nation's emergency communications infrastructure.  dhs.gov

Security & Surveillance are Key to Cannabis Compliance
Top 5 Compliance Infractions To Guard Against
Ah, compliance. The cannabis industry's favorite word. Remaining compliant is a headache, no doubt about it. The industry is unlike any other, and our processes are far from typical. Compliance, while frustrating at times, keeps products safe for consumers. Products intended for human consumption must be produced with certain standards in place.

Certain parts of the supply chain are more susceptible to lapses. We're going to highlight the top five areas that see the most infractions.

Security and Surveillance
Security is a primary concern within the cannabis industry. Security is required by state and local law when operating a cannabis business. Cameras are one of the most important safety measures required. A common compliance infraction is not retaining the proper history of video. Various governments require different time periods.

It's important to ensure there are no obstructions in the footage, like ceiling fans, air ducts or other pieces of equipment. Obstructions = fines. Take the extra steps to make sure there is a clear shot of the room and install overlapping fields of view to guarantee the best angles.

Dealing with Expired Product
Expiring product costs brands unnecessary money and the cannabis industry is no exception. Cannabinoids themselves won't really expire, though they do degrade over time. Cannabinoids aren't the only ingredients in many cannabis products. Edibles, for example, often have dairy in them - which will absolutely expire. Spoiled dairy is nobody's friend.

Documenting SOPs - Purchase Limits - Consumer Delivery Documentation cannabisbusinessexecutive.com

Warning to Marijuana Establishments
Scamming Activities Targeting Marijuana Licensees
This bulletin applies to licensed Marijuana Establishments and Medical Marijuana Treatment Centers ("licensees"). This notice is to inform licensees about potential scams and fraud.

The Cannabis Control Commission ("Commission") has received reports of individuals ("scammers") contacting licensees in Massachusetts and impersonating owners, managers, or executives by phone or text message. In these calls or texts, the scammers disclose pertinent information about licensed businesses to gain agents' trust.

The scammers may relay a message regarding a pending inspection (e.g. by the Commission, a fire department, etc.). To prepare for the inspection, the scammers request photos of the licensees' bank deposits, secure storage areas, and safety equipment. Additionally, the scammers request agents to deliver cash from their employer to a location off-premises, or deposit funds to a cryptocurrency account.

Reports of intended scams or fraud have been reported in other jurisdictions outside Massachusetts, all sharing many of these same attributes. As a result of these incidents, licensees may consider encouraging agent awareness of how intended scams or fraud are executed-and how to avoid them. sapphirerisk.com

'We're going to move forward, period'
Congress ready to change marijuana laws - even if Biden isn't
Senate Majority Leader Chuck Schumer, a strong advocate of marijuana legalization, is ready to move ahead with major changes to federal laws prohibiting the use, sale and production of cannabis products - with or without the support of President Joe Biden.

During the 2020 presidential campaign, Biden - a leading Democratic proponent of tough drug laws during his long Senate career - was the only leading Democratic primary candidate to oppose federal legalization of the plant, saying more study is needed. While the president supports legalizing the drug for medical use and the decriminalization of possession, White House press secretary Jen Psaki told reporters last week, Biden's "position has not changed" on full legalization since the campaign.

Schumer told Politico he respects Biden's desire for more study on the subject, but he said "we will move forward" even if the president's view stays the same. usatoday.com

Virginia Becomes 16th State to Legalize Cannabis
It's official: Virginia legalizes marijuana possession starting this summer
The Virginia General Assembly gave final approval to a bill to legalize simple possession of marijuana and limited home growth beginning July 1, 2021, three years sooner than initially planned.

The accelerated timeline won a majority in the House and Lt. Gov. Justin Fairfax (D) broke a 20-20 tie in the Senate on Wednesday during a session dedicated to the consideration of Gov. Ralph Northam's budget and bill amendments.

The vote makes Virginia the first state in the South to green light recreational cannabis and the 16th state overall, including D.C. wric.com

Florida Lawmakers Holding Out Hope For Recreational Marijuana This Session

Connecticut Lawmakers Approve Marijuana Legalization Bill In Committee

Two-thirds of Louisiana voters support legalizing marijuana

Murder-for-Hire Plot
Austin, TX: Two men plead guilty in murder-for-hire plot that left well-known Austin jeweler dead
A man accused of planning his father's death in a murder-for-hire plot to get insurance money has pleaded guilty, according to the Travis County District Attorney's office. Nicholas Shaughnessy and Aerion Smith have both taken responsibility for the death of Theodore Shaughnessy, Nicholas' father, in March of 2018. The elder Shaughnessy was the owner of a Central Austin jewelry store, Gallerie Jewelers, while his son was the sole beneficiary of a $2 million life insurance policy. The murder-for-hire plot was orchestrated by Nicholas, prosecutors said, in order to collect on the policy in the event of his parents' death. foxsanantonio.com
 

Robberies, Incidents & Thefts

Berry Hill, TN: C-Store clerk falls from speeding getaway car
Berry Hill Police are on the lookout for a man who was a shoplifting suspect one moment and an aggravated assault suspect the next. The crime occurred Sunday, March 21 at a convenience store on the 700 block of Thompson Lane. A suspect grabbed a carton of cigarettes and got into a white car. Surveillance video shows the 26-year-old store clerk chase after the suspect and lean into the window of the moving car to confront the thief. The video then shows the white car racing out of the parking lot.

Another video from a business over 100 yards down the road shows the white car speeding down the road at upwards of 30 to 40 miles per hour. The video shows the clerk falling off the moving car and then rolling three to four times across the hard asphalt. The car managed to get away and the clerk was left dazed and confused in front of a restaurant packed with diners. Amazingly, the clerk who preferred not to be identified was not seriously injured. When police arrived, the shaken store clerk said, "They stole a carton of cigs. I tried to get it back from them, and I held on to the side of the car and they sped off and I went rolling." wkrn.com

Dallas, TX: SWAT Called To Rescue Assault Victim Held Hostage
At Convenience Store
A convenience store manager, who was assaulted and held hostage, had to rescued by a Dallas police SWAT team just after midnight on April 7. The incident happened on South Westmoreland Road. Police say when officers arrived witnesses told them that a man, later identified as 30-year-old Deandre Levels, had come into the store and caused a 'disturbance' with several customers. Witnesses said at some point Levels got into a fistfight with a clerk working at the store. The employee an into a back office space, where Levels allegedly followed, trapped him in the space and continued with the assault. Police say the store clerk was stabbed several times. A SWAT team was called in and after making entry was able to get the clerk to safety and arrest Levels. dfw.cbslocal.com

Louisville, KY: Suspicious suitcase left by man at Jeffersontown Kroger prompts evacuation
The discovery of a suspicious package at the Kroger in Jeffersontown prompted the store to be evacuated around 3:30 p.m. Wednesday. Jeffersontown Police Department Det. Chris Morris confirmed the package was found at the Stony Brook Kroger on Taylorsville Road; store employees called the department after finding a travel suitcase with wheels in the middle of an aisle. Morris said a man was seen on surveillance video wheeling the suitcase while shopping with a cart. He left the piece of luggage in the aisle before walking away with the cart and leaving the store. The Louisville Metro Police Department Bomb Squad and ATF investigators were called to the store to aid Jeffersontown PD officers in the investigation. Morris said an LMPD bomb robot was initially sent into the store to survey the area; a larger bot was sent in to retrieve the suitcase around 5:15 p.m. It was determined the suspect who left the suitcase could have been homeless, Morris said, as what was found inside the luggage were tarps, blankets, and jackets. Morris said detectives are reviewing footage to try to identify the man; it is unlikely he will face criminal charges. wave3.com

Minneapolis, MN: Illinois Man Pleads Guilty To Arson Of Cell Phone Store
According to the defendant's guilty plea and documents filed with the court, on May 28, 2020, Maatthew Lee Rupert, a resident of Galesburg, Illinois, posted messages on his Facebook account referencing the public protests occurring in the Twin Cities following the death of George Floyd, including one that stated, "I'm going to Minneapolis tomorrow who coming only goons I'm renting hotel rooms." On May 29, 2020, RUPERT posted a self-recorded cell phone video to his Facebook account indicating that he was in Minneapolis, Minnesota. In his Facebook Live video, RUPERT announced that he came "to riot," and is depicted encouraging violence against law enforcement officers, actively damaging property, breaking into buildings, and looting businesses. A sentencing date will be scheduled at a later time. justice.gov

Butler, CO: Store Loss Prevention at Liberty Center narrowly avoids car
as suspect flees
The Butler County Sheriff's released video of a pair of people they are looking for after they almost ran a man over. The security guard is fine but barely avoided serious injury as the car that almost hit him did deal some damage to nearby vehicles. fox19.com

San Mateo, CA: Officer Walks In On Armed Robbery at 7-Eleven; 2 Arrested

Atlantic City, NJ: Clothing Store Clerk Charged With Reporting Fake Robbery

Quincy, MA: Men Arrested for Lewis County Thefts, Burglaries

McDonough, GA: Shaquille O'Neal Pays for Stranger's Engagement Ring at Georgia Jewelry Store
 

Skimming

Fresno, CA: Man arraigned on charges of Credit Card Skimming, faces a 33-count indictment for bank fraud and credit card fraud
According to court documents, Arman Mkhitaryan, 33 of Glendale, installed credit card skimming devices at Fresno area gas stations and stole individuals' credit card information. Talbert said he then used that information to create counterfeit credit cards and purchase more than $160,000 in postage stamps via self-service kiosks at U.S. Post Offices, according to acting U.S. Attorney Phillip A. Talbert. If convicted of bank fraud, he faces a maximum penalty of 30 years in prison and a fine of up to $1 million. If convicted of credit card fraud, he faces a maximum penalty of 10 years in prison and a fine of up to $250,000.  yourcentralvalley.com

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights
 

	Corporate Security Manager Calabasas, CA - posted April 6 The Corporate Security Manager will, among other things, (a) be responsible for ensuring a safe and secure environment for our employees, vendors, and visitors, (b) develop, manage, execute and continuously improve corporate security processes and protocols, and (c) lead a team of security specialists at our corporate offices...
	Regional Asset Protection Manager Roanoke or Richmond, VA - posted March 16 To provide support for loss prevention and safety for restaurants in assigned regions and protect the assets of the company by leveraging partnerships at all levels of the company and utilizing existing Asset Protection and Restaurant Operating systems and processes...
	Sr. Manager, Retail Asset Protection Baltimore, MD - posted Feb. 23 The Senior Manager, Retail Asset Protection is responsible for implementing strategies and training to ensure the effective execution of Protect Retail initiatives. This position will be responsible for leading a team that executes core programs and strategies relating to safety and security, theft and fraud mitigation and operational excellence in retail stores...
	Regional LP & Safety Manager Denver, CO - posted Feb. 9 The Regional Loss Prevention & Safety Manager implements Risk Management and Loss Prevention objectives within assigned region. The position will provide assistance and training to the field operations teams to address specific Risk Management and Loss Prevention issues within an assigned span of control.  Read job description here
	Manager of Asset Protection & Safety Operations Rockaway, NJ - posted Feb. 4 The Manager of Asset Protection & Safety Operations is responsible for the control and reduction of shrinkage and safety compliance for Party City Holdings, by successfully managing Asset Protection (AP) Safety programs and reporting...

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

View Featured Jobs   |   Post Your Job
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

FEEDBACK    /    downing-downing.com    /    Advertise with The D&D Daily