2022-2 Cyber Security News
Identity theft is a leading cybercrime, according to the Microsoft Digital Defense Report
The report is based on an analysis by Microsoft’s security and research teams of 24 trillion signals; It consists of observations on more than 40 state-linked cyber attackers and more than 140 attack groups.
The report notices that the issue of “identity” has become a major problem in cybersecurity over the past year. It is also underlined that in the last 2 years when cyber threats have increased, not enough attention has been paid to identity protection and passwordless solutions. Research shows that only 22% of Microsoft customers benefit from Microsoft Azure Active Directory (Azure AD) service, Microsoft’s Cloud Identity Solution, so that it can implement a powerful identity protection system by December 2021.
Microsoft said it prevented 25.6 billion attacks to break Azure AD during the period January-December 2021; it also says that 35.7 billion emails sent through Microsoft Defender for Office 365 as Phishing e-mails have been blocked.
NEWS OF THE MONTH
Anonymous has published data belonging to the Russian Central Bank of the Threat Group, according to a cyber intelligence platform:
Anonymous, a hacktivist group, has recently launched a cyberattack against Russia called “OpRussia” because of the war between Ukraine and Russia.
As a result of the attack activity, the relevant threat actor group shared 28 GB of data obtained by the Russian central bank with the non-profit news site “DDoSecrets” (Distributed Denial of Secrets), which was established in 2018.
As a result of preliminary investigations by DDoSecrets, the relevant data leak included financial records dating back to 1999, internal memos, various bank statements, information about high-profile clients, and similar data.
TIP OF THE MONTH
Presidency of The Republic of Turkey Digital Transformation Office warns citizens about 8 different scams on social media.
Common scams on social media:
Credit Trap: It is a fraudulent method in which personal information and prepayment are requested, claiming that you can take out an instant loan.
Crypto Asset Fraud: A method of fraud that promises to make a profit by investing your money in crypto assets and is asked to pay.
Fake Corporate Accounts: A scam in which links and credit card information are stolen from accounts opened using the names of public institutions or companies.
Fake Friend Scam: A scam in which scammers who gain trust through friendship obtain personal information and then demand money.
Lottery Fraud: A fraudulent method that says you’ve won a prize and is asked to pay to win the prize.
Paid Membership Fraud: A fraudulent method in which you are asked to pay for allegedly giving an affordable membership of a movie or music platform.
Fake Social Media Emails: A fraudulent method in which usernames and passwords are obtained through emails prepared using the name and interface of social media platforms.
Low-Priced Sales Scam: It is a fraudulent method in which electronics are allegedly sold at prices well below the market price.