Connect with us

Malware

Shadow PC Raises Alarm Over Data Breach as Hacker Attempts to Auction Gamers’ Information

Shadow PC, a cloud-based gaming service, has issued a warning regarding a potential data breach. A hacker is attempting to sell players’ information, including usernames, passwords, and email addresses. This incident highlights the importance of robust cybersecurity measures within the gaming industry. Shadow PC advises its users to change their passwords and enable two-factor authentication to safeguard their accounts.

Published

on

An illustration of two people in an office.

Shadow PC Warns Customers of Data Breach

A provider of high-end cloud computing services, Shadow PC, is alerting its customers about a recent data breach that has exposed their private information. This comes after a threat actor claimed to be selling the stolen data of over 500,000 customers.

What is Shadow PC?

Shadow PC is a cloud gaming service that allows users to stream high-end Windows PCs to their local devices such as PCs, laptops, smartphones, tablets, and smart TVs. This enables users to play demanding AAA games on a virtual computer.

Details of the Data Breach

Multiple Shadow PC customers have reported receiving data breach notifications following a successful social engineering attack on the company’s employees. According to the notice sent by Shadow PC, the attack began on the Discord platform when an employee downloaded malware disguised as a game on the Steam platform. This malware was proposed by an acquaintance of the employee who was also a victim of the same attack.

As a result of the attack, an info-stealer malware was able to steal an authentication cookie, which provided access to the management interface of one of Shadow PC’s SaaS providers. With this access, the attacker extracted customers’ full names, email addresses, dates of birth, billing addresses, and credit card expiration dates.

Actions Taken by Shadow PC

Shadow PC has taken immediate actions to address the breach. The stolen authentication cookie has been revoked, blocking the hacker’s access to their systems. Additionally, the company has implemented additional security measures to prevent similar incidents in the future.

It is important to note that the incident did not expose account passwords or other sensitive payment/banking information. The compromised service provider did not hold any additional user data beyond what is mentioned in the breach notice.

Recommendations for Affected Customers

While Shadow PC has taken steps to mitigate the impact of the breach, affected customers are advised to remain vigilant for phishing and scam attempts. It is also recommended to activate multi-factor authentication (MFA) on all their accounts for added security.

Confirmation of Data Sale on Hacker Forum

A threat actor claiming responsibility for the breach has announced the sale of the stolen database on a well-known hacking forum. The actor states that they gained access to the Shadow PC database at the end of September and obtained data for 533,624 users. The post also mentions the theft of IP connection logs in addition to the already confirmed data.

It is important to note that BleepingComputer has not independently verified whether the sold data indeed belongs to Shadow PC customers.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Malware

Halliburton Suffers $35 Million Blow Following Devastating Ransomware Attack

Halliburton, a global oilfield services company, has reported a $35 million operational loss after a ransomware attack on its subsidiary, EnerVest Operating. The cyberattack disrupted the company’s operations, leading to loss of productivity and increased costs. Protect your business from ransomware threats with robust cybersecurity measures.

Published

on

Large industrial tanks with the Halliburton logo stand resiliently surrounded by piping and cranes under a blue sky, despite a recent $35 million loss attributed to a sophisticated ransomware attack.

Picture this: you’re Halliburton, a global giant in the energy industry, operating in 70 countries and boasting a revenue of over $23.02 billion. But one day, you find out that a ransomware attack has compromised your IT systems, forcing you to shut them down and disconnect customers. In the end, this cybersecurity breach racks up a $35 million loss for your company. Sounds like a nightmare, right?

A Cybersecurity Wake-Up Call

Unfortunately, this scenario is not a hypothetical one. Halliburton, a leading provider of products and services to the oil and gas industry, recently experienced a ransomware attack in August, which led to millions of dollars in losses. The company reported the breach to the U.S. Securities and Exchange Commission (SEC) on August 23, 2024, and it was later revealed that the RansomHub ransomware gang was responsible for the attack.

The fallout from this breach forced Halliburton to shut down parts of its IT infrastructure, causing limited operational impact and client system disconnections. Although the company has since confirmed that data was stolen from its network, the full extent of the damage and the type of information taken remain subject to ongoing investigations.

A Drop in the Bucket or a Cause for Concern?

Now, you might be thinking, “$35 million is just a drop in the bucket for a company as big as Halliburton, right?” And to some extent, you’d be correct. Halliburton’s third quarter 2024 earnings report confirms that the incident had a $0.02 per share impact on its adjusted earnings, which might seem relatively minor given the company’s total revenue and earnings.

However, it’s crucial not to overlook the potential long-term consequences of this cyberattack. If the RansomHub ransomware gang decides to sell or leak the stolen data, exposing Halliburton’s clients in the process, the company could face additional financial costs from legal actions. Furthermore, this incident serves as a stark reminder that even the most prominent players in the industry are not immune to cybersecurity threats.

Don’t Be the Next Halliburton: Take Action Now

So, what can you learn from Halliburton’s experience? Don’t wait until it’s too late to invest in cybersecurity. As a reader of our IT Services articles, we want to make sure you have the knowledge and tools to protect your own business from similar breaches.

Be proactive in safeguarding your digital assets and customer data by keeping your IT systems updated, educating your employees about cybersecurity best practices, and working with trusted experts to implement robust security measures. Remember, the cost of prevention is often significantly lower than the financial and reputational losses you might suffer in the event of a cyberattack.

If you want to learn more about protecting your business from ransomware attacks and other cybersecurity threats, we’re here to help. Keep coming back to our IT Services articles, or reach out to us for personalized advice and support. Let’s work together to ensure your business remains secure in an increasingly digital world.

Continue Reading

Malware

Revolutionary SaaS Management Platform: Empower Cloud-Native IT & Security Teams with Unparalleled Efficiency

Discover how Nudge Security’s SaaS Management platform effectively identifies and manages shadow IT, mitigating risks and ensuring compliance. Learn about its features, including real-time visibility, actionable insights, and automated workflows for better security and control over your organization’s SaaS ecosystem.

Published

on

A blue and purple geometric background featuring Mr. Cooper.

Discover your full SaaS inventory on Day One

Imagine starting a free trial with an IT service that instantly gives you a comprehensive inventory of all your organization’s cloud and SaaS assets. Well, that’s precisely what we offer. Within minutes of signing up, you’ll gain insight into every SaaS account introduced by any employee, anywhere. This includes both free and paid accounts, all users, the first user, and more. It’s like having a personal IT detective at your fingertips!

Get all the insights you need in one convenient location

Our IT Services don’t just stop at providing an inventory. We also give you the power to view spend, risk, and usage insights all in one place. You’ll be able to discover expenditures from invoices emailed to your team, review vendor security profiles to assess third-party risks, and see who’s actually using what. This way, you can make data-driven technology investment decisions with ease and confidence.

Say goodbye to wasted SaaS spending

Let’s face it: wasted spending on SaaS accounts is like throwing money down the drain. But don’t worry, our IT Services can help you eliminate this unnecessary expense. We’ll identify and remove abandoned SaaS accounts, find and dedupe redundant apps and tenants, and even reclaim all licenses during employee offboarding. In other words, we’ll help you cut the fat and keep your organization lean and efficient.

Optimize your upcoming renewals and save big

Picture this: you’re about to renew a contract, but you’re unsure whether your current terms are the best for your organization. Our IT Services can help you take the guesswork out of the process. By showing you upcoming renewals and helping you consolidate instances, we’ll enable you to negotiate better contract terms with ease. Plus, we’ll proactively right-size licenses by nudging employees about whether they still need access. So not only will you save time, but you’ll also save money in the long run.

Don’t wait another day – contact us now!

Ready to take control of your organization’s SaaS inventory, spending, and security? Then it’s time to take advantage of our IT Services. Contact us today to start your free trial and unlock a world of insights, optimizations, and cost savings. And remember, we’re always here to help you navigate the ever-evolving landscape of cybersecurity. So keep coming back to learn more and stay ahead of the curve.

Continue Reading

Malware

Schneider Electric Confirms Dev Platform Breach: Hacker Seizes Sensitive Data in Bold Cyberattack

Schneider Electric has confirmed that its developer platform suffered a data breach, resulting in unauthorized access to product security vulnerability details. The breach was discovered on 10 August, after a hacker claimed to have stolen the data. Schneider Electric is working with security researchers to identify the individual responsible and the extent of the breach.

Published

on

A green sign featuring the Schneider Electric logo and "Life Is On" slogan stands prominently against a blurred green background, subtly reminding viewers of their resilience even amidst challenges like a cyberattack.

Imagine waking up one morning to find out that your entire database has been hacked, and critical information is now held hostage by a group of cybercriminals. That’s precisely what happened to Schneider Electric, a French multinational corporation known for its energy and automation products.

Unauthorized access to Schneider Electric’s data

A threat actor, who goes by the name “Grep,” recently taunted Schneider Electric on X, indicating they had breached the company’s systems. They claimed to have accessed Schneider Electric’s JIRA server using exposed credentials and scraped 400k rows of user data, including 75,000 unique email addresses and full names of the company’s employees and customers.

Schneider Electric confirmed the breach, stating that they were investigating a cybersecurity incident involving unauthorized access to one of their internal project execution tracking platforms. The company assured that its products and services remain unaffected by the breach.

A new hacking group emerges

Grep revealed to us that they had recently formed a new hacking group called the International Contract Agency (ICA), named after the game Hitman: Codename 47. Initially, the group didn’t extort companies they breached. However, upon discovering that the “ICA” name was associated with a group of Islamic terrorists, the threat actors rebranded themselves as the Hellcat ransomware gang and began developing an encryptor for future extortion attacks.

Extortion demands and a history of breaches

Grep is now extorting Schneider Electric, demanding $125,000 not to leak the stolen data and half of that amount if the company releases an official statement. This isn’t the first time Schneider Electric has faced a cybersecurity breach. Earlier this year, its “Sustainability Business” division fell victim to a Cactus ransomware attack, where the threat actors claimed to have stolen terabytes of data.

Don’t let this happen to you

As technology advances, so do the methods and tactics employed by cybercriminals. It’s essential to take cybersecurity seriously and invest in the right tools and strategies to protect your valuable data. Don’t wait until you become the next Schneider Electric. Instead, take action now to secure your digital assets and prevent a potential breach.

Keep coming back to learn more about the latest cybersecurity trends, tips, and best practices. We’re here to help you stay informed and protect your business from the ever-evolving world of cyber threats.

Continue Reading

Trending

Copyright © 2023 IT Services Network.