4/16/21

LP, AP & IT Security's #1 News Source

Organized Hacker Groups Pouncing on Hybrid Workforce
Protecting the human attack surface from the next ransomware attack

Ransomware is making another resurgence, particularly in targeted attacks from highly organized hacker groups. In fact, cybercrime is surging since the start of the pandemic.

When IT and security professionals plan how to respond, they must not underestimate the degree to which many of the transformative changes to our working patterns enacted due to COVID-19 have already changed our risk of ransomware attacks.

Many organizations are assuming a more distributed and hybrid workforce as their new normal in order to provide resilience, agility and a far broader reach in the battle for talent. However, this change has led to an uptick in focused ransomware campaigns by targeting the "human attack surface" of such organizations in a more subtle, insidious manner.

In a survey of 582 information security professionals, 50% say they do not believe their organization is prepared to repel a ransomware attack. Adding to this, 75% of companies infected with ransomware were running up-to-date endpoint protection. Covering each and every endpoint is no longer enough to guarantee security. In order to protect organizations from the next big ransomware attack, security teams must invest in protecting the human attack surface and understanding the enterprise technology habits within its organizations that make it most vulnerable.

In a world where the attack surface is now extended to thousands of homes, businesses require better visibility, governance, and access management in order to reduce the paths through which malware can propagate to critical systems and data stores. And this imperative extends beyond user to application access to application relationships that are often the second or third hop in a ransomware attack. This is the impetus for many new zero trust projects launching in 2021.

The move to a more distributed workforce has brought many blessings and is likely to become part of the new normal. However, when it comes to addressing the challenges of the human attack surface, prevention is better than double extortion attempts or the millions of dollars in damages caused by a single breach. helpnetsecurity.com

The U.S. Government's Cybersecurity Dilemma
How the Biden Administration Can Make Digital Identity a Reality

A digital identity framework is the answer to the US government's cybersecurity dilemma.

While data breaches and ransomware attacks kept the cybersecurity industry preoccupied last year, the scope of the SolarWinds data breach far surpassed common exploits, garnering mainstream and social media attention. The breach impacted several of the country's largest technology companies, including Cisco, Microsoft, and NVIDIA, as well as the US Departments of Commerce, Homeland Security, and Treasury. This incident prompted President Joe Biden to quickly sign the American Rescue Plan Act into law, prioritizing cybersecurity and allocating $2 billion to modernize the country's digital infrastructure.

The Biden administration has promised to broadly improve digital security, monitoring, and response times, establishing a modern "digital identity" system of particular importance. A digital identity system compiles specific information, such as proof of age, passport number, and basic health and financial data, into one "card" that resides on your phone, backed with biometric security.

By using recent European regulations as a foundation to secure individuals' data and link it to their digital identity, the federal government could close the security gaps that have historically led to fraud. Digital identity authentication would be faster, more accurate, and more useful than manually checking physical ID cards, accelerating public and private sector transactions.

A Holistic Approach to Digital Identity

Digital identity has already gained bipartisan support on Capitol Hill. In 2020, Representatives Bill Foster (D-IL) and John Katho (R-NY) introduced the Improving Digital Identity Act, designed to establish a nationwide approach to improving digital identity. Now, the Biden administration plans to leverage digital identity for modernization of public services, ranging from government assistance to healthcare to licensing.

Any error would allow bad actors to access sensitive data and impersonate customers, resulting in fraudulent requests for government services, credit cards, loans, or licenses. Implementing a secure, robust digital identity system is critical as scammers created over 145,000 suspicious domain registrations last year targeting recipients of stimulus checks, exploiting security gaps to intercept another person's money. darkreading.com

The CSO guide to top security conferences, 2021
Tracking postponements, cancellations, and conferences gone virtual - CSO Online's calendar of upcoming security conferences makes it easy to find the events that matter the most to you.

There is nothing like attending a face-to-face event for career networking and knowledge gathering, and we don't have to tell you how helpful it can be to get a hands-on demo of a new tool or to have your questions answered by experts.

Fortunately, plenty of great conferences are coming up in the months ahead.

We'll keep it updated with registration deadlines and new conferences so check back often. While we don't expect this calendar to be comprehensive, we do aim to have it be highly relevant. If there's something we've missed, let us know. You can email your additions, corrections and updates to Michael Nadeau (michael_nadeau@idg.com). csoonline.com

Long-Time Fugitive Admits Participation in Scheme to Steal 94,000 Debit & Credit Cards from Michaels' Stores in 19 States
Jose Salazar, aka "Tito," 44, of Riverside, California, was indicted in 2015 and has been a fugitive. He was apprehended in Mexico City in September 2020 and returned in January 2021 via Philadelphia International Airport, where he was arrested. Salazar pleaded guilty by videoconference to Count 1 of an indictment charging him with conspiracy to commit bank fraud.

The conspirators allegedly replaced POS terminals in 80 different stores operated by Michaels across 19 states, including New Jersey, with counterfeit POS devices. Each counterfeit device was equipped with wireless technology, which the conspirators used to retrieve the stolen information. From February 2011 to April 2011, conspirators stole approximately 94,000 debit and credit card account numbers. The stolen account information was used to produce counterfeit bank cards, which were used with the stolen PINs to withdraw funds from the compromised bank accounts.

They used the cards and PIN numbers to withdraw money using automated teller machines (ATMs) from hundreds of bank accounts. Angulo pleaded guilty on June 20, 2017, and was sentenced on March 15, 2018, to three years in prison.

The charge of conspiracy to commit bank fraud carries a maximum potential penalty of 30 years in prison and a $1 million fine. Sentencing is scheduled for Aug. 10, 2021. justice.gov

Georgia Man Gets 40 Months for $2.7M Business Email Compromise Scheme
Ifeanyi Eke, leader of an 'international BEC syndicate' that defrauded 35 victims for $2.7 million.

Between in or about 2016 and July 2018, EKE and his co-conspirators, including codefendants Cyril Ashu, Joshua Ikejimba, and Chinedu Ironuah, perpetrated a fraudulent BEC scheme through which they deceived dozens of victims, both foreign and domestic, into wiring millions of dollars to bank accounts controlled by the syndicate. The fraud was perpetrated by sending victims "spoofed" emails, which purported to be from counterparties whom the victims knew and trusted, and which contained wiring instructions fraudulently directing the victims to send funds to accounts that were in fact controlled by the defendants and others involved in the scheme. justice.gov

49% of employees prefer a hybrid work arrangement

The parallels of pandemic response and IoT security

Indianapolis, IN: 8 people dead, multiple victims shot at Indianapolis FedEx facility; shooter dead
The Indianapolis Metropolitan Police Department said at least eight people died and several others were wounded during a mass shooting on the southwest side. IMPD said the shooting happened at the FedEx facility in the 8900 block of Mirabel Road. When officers arrived around 11 p.m., they encountered an active shooter incident. "After a preliminary search of the grounds inside and out, we have located eight people at the scene with injuries consistent to gunshot wounds. Those eight were pronounced dead here at the scene," said Officer Genae Cook with IMPD.

Preliminary information from the department indicated the shooter took his own life, Cook said. Eight victims at the scene were pronounced dead. Police did not include the shooter in that toll. Several others wounded in the shooting were transported to area hospitals. There were multiple walk-ins at hospitals, Cook said. Four people were transported by ambulance, including one in critical condition with gunshot wounds. Three others were transported for other injuries, Cook said, while two victims were treated by medical staff at the scene. Because of the facility's proximity to multiple counties, several area hospitals were likely to treat victims.

Police said there was no ongoing threat at this time. They are asking anyone with family members who work at the facility that they have not been able to get in contact with to go to the Holiday Inn Express located at 8555 Stansted Drive.

Chaplains are on scene to assist families, police said. Detectives from IMPD and Indiana State Police were still interviewing victims to get a clearer picture of what happened.  fox59.com

Erwin, NC: Double shooting outside convenience store leaves 1 dead, 1 injured
According to police, officers responded to the Super Mart, located at 925 South 13th St., at approximately 8:12 p.m. following reports of a shooting in the area. Once at the scene, officers found that multiple vehicles had been struck by gunfire and one person at the scene had minor injuries "from a projectile striking the vehicle as they passed by the incident location," police said. The victim who was hurt at the scene was treated there and released, officials said. While police were still investigating at the Super Mart, officers received notification that there were two victims who were being treated at Betsy Johnson Hospital in Dunn for gunshot wounds. Both victims were transferred to the trauma center for further treatment. One of the gunshot victims later died and the second victim is listed in stable condition and receiving treatment, according to police. cbs17.com

Colorado Spring, CO: 1 shot during attempted break-in at Springs medical marijuana dispensary
Police tell 11 News that the would-be burglar tried to get into the store by ramming their vehicle into the building but was unsuccessful. A citizen who saw the burglary attempt unfolding tried to stop the suspect and was shot. The victim was rushed to the hospital in unknown condition and the suspect ran from the scene.  kktv.com

Frederick, MD: Police investigate fatal shooting at Frederick hotel near Francis Scott Key Mall; Suspect at large

Owensboro, KY: OPD investigating fatal shooting in pharmacy parking lot believed to be suicide

Chattanooga, TN: Manager Of CBD Store Arrested For Firing Shots At Vehicle After Theft Of A Jar Of Cannabis
 

Robberies, Incidents & Thefts

Greer, SC: Attempted Murder suspect assaulted several Dollar Tree employees before threatening to kill Greer officer
Greer Police said man accused of going on a tirade inside a Dollar Tree store, assaulting employees, and trying to run over a person with a shopping cart, all before attempting to punch a police officer with a ball-point pen clenched between his fingers, now faces a list of charges, including attempted murder. According to a police incident report, it all went down at the Dollar Tree on Wade Hampton Boulevard, next to the Walmart Supercenter, on Tuesday afternoon. The responding officer reported that she was called to the store for an assault that had just occurred. When she arrived, a female employee opened the door to the store and pointed to a man walking down the sidewalk toward the Walmart, and the employee advised the officer the man had been behind the assault in the store. foxcarolina.com

Saskatoon, Canada: Owner 'horrified' after altercation involving Indigenous woman outside his Saskatoon Grocery store
The owner of a Saskatoon FreshCo grocery store says he is "shocked" and "horrified" after an Indigenous woman was involved in an altercation with a security guard outside his store. The incident on Wednesday outside the store on 33rd Street West was captured on video and posted on Facebook by Jade Acikahte. The lengthy video, running over 9 minutes, shows a woman on the ground with a man on top of her. She then gets up and sits in the driver's seat of a vehicle where the man then gets on top of her again. "As Métis owner and a father of two daughters this should of not happened ever," said a Facebook post attributed to Chris Fowler, the owner of the store.

Saskatoon Police said they were called to the store at around 4 p.m. where officers found a 30-year-old female being detained by a loss prevention officer. Police said an altercation between the two individuals had taken place, resulting in minor injuries to the loss prevention officer. Chief Bobby Cameron of the Federation of Sovereign Indigenous Nations (FSIN), which represents First Nations across the province, says the incident, which was captured on video, is just one instance of violence Indigenous women face. He said it's a symptom of a larger issue in the province. In a post on the store's Facebook page, management indicated they have ended the contract with the third-party security firm in question. While Cameron said that's a good first step, he says the security guard should be fired. cbc.ca

New Albany, MS: Woman reportedly breaks into shop, spends 3 hours sampling merchandise, steals keys to van
When Magnolia Soap and Bath Co. Owner Magen Bynum arrived to her shop this morning, things were scattered everywhere. Thankfully, a security camera allowed her to see who made the mess. Camera footage showed 19-year-old Eden Dye changing clothes, writing on the company's whiteboard and eventually stealing the keys to the company's van. Police said 19-year-old Eden Dye broke into Magnolia Soap and Bath Co. early Thursday morning. Police identified the burglar as Eden Dye. Bynum said Dye broke into the business and stayed several hours. After stealing the van keys, she went to a local apartment complex. Police Chief Chris Robertson said Dye is out on bond for a previous charge when she was arrested last month for a burglary at the BNA Tennis Park Pro Shop. He said he expects the judge to revoke her bond for that arrest.  wtva.com

Newark, NJ: Two Men Charged with Producing False Identity Documents and Aggravated Identity Theft; Business was Used by Russian Organization that Targeted 2016 Presidential Election

Denver, CO: Eight suspects indicted by grand jury for multiple Armed Robberies in the metro area

Las Vegas, NV: Man faces dozens of charges in Las Vegas, Henderson burglary spree

Queensbury, NY: Burglar gets probation for stealing thousands in lottery tickets

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights
 

	Division Asset Protection - Herald Square & NYC Brooklyn, NY - posted April 14 As Senior Director, Asset Protection you will serve as subject matter expert in the following areas: shortage, fraud, investigations, legal compliance, and training. Create and implement AP strategies in partnership with VP, Asset Protection. Manage, direct, & deploy District Managers of Investigations (DMIs) to support districts & stores...
	Corporate Security Manager Calabasas, CA - posted April 6 The Corporate Security Manager will, among other things, (a) be responsible for ensuring a safe and secure environment for our employees, vendors, and visitors, (b) develop, manage, execute and continuously improve corporate security processes and protocols, and (c) lead a team of security specialists at our corporate offices...
	Regional Asset Protection Manager Roanoke or Richmond, VA - posted March 16 To provide support for loss prevention and safety for restaurants in assigned regions and protect the assets of the company by leveraging partnerships at all levels of the company and utilizing existing Asset Protection and Restaurant Operating systems and processes...
	Regional LP & Safety Manager Denver, CO - posted Feb. 9 The Regional Loss Prevention & Safety Manager implements Risk Management and Loss Prevention objectives within assigned region. The position will provide assistance and training to the field operations teams to address specific Risk Management and Loss Prevention issues within an assigned span of control.  Read job description here
	Manager of Asset Protection & Safety Operations Rockaway, NJ - posted Feb. 4 The Manager of Asset Protection & Safety Operations is responsible for the control and reduction of shrinkage and safety compliance for Party City Holdings, by successfully managing Asset Protection (AP) Safety programs and reporting...

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

View Featured Jobs   |   Post Your Job
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

FEEDBACK    /    downing-downing.com    /    Advertise with The D&D Daily