23 May 2022

DoJ Says White Hat Hackers Will No Longer Face Prosecution

The US Department of Justice (DoJ) recently announced that it will not prosecute “good faith” hackers in a historic policy shift. Up until this point, even white hat hackers could be prosecuted under the Computer Fraud and Abuse Act (CFAA), even when done to improve cybersecurity. The DoJ identified good-faith

Read More
13 Apr 2022

Opportunity Lost? FBI enters corporate networks as if they are their own

The United States said on Wednesday that it had secretly removed malware from computer networks around the world in recent weeks, a step to pre-empt Russian cyberattacks and send a message to President Vladimir V. Putin of Russia. When you advocate for cooperation and then act unilaterally, does that make future overtures more or less likely to resonate?

Read More
31 Mar 2022

Global Police Arrest 65 in Multimillion-Dollar BEC Bust

Global law enforcement is celebrating a huge victory after disrupting a massive business email compromise hacking gang thought to have targeted hundreds of victim organizations over the past few years. The US Department of Justice and international law enforcement partners carried out Operation Eagle Sweep, a name referring to the

Read More
04 Oct 2021

Hackers as Global Private Contractors is a Pandora’s Box You Do Not Want to Open

The U.S. Department of Justice (DoJ) recently fined three former National Security Agency (NSA) hackers who worked as service contractors for a United Arab Emirates (UAE) cybersecurity company named DarkMatter. These three individuals were not the only former ex-U.S. Intelligence officers working for the company. DarkMatter employed more than a dozen former NSA hackers who would use the skills and techniques learned from the NSA to help the UAE target and compromise the phones and computers of its enemies. These “enemies” included human rights activists, journalists, and political rivals. At the core of this issue is the fact that these ex-intelligence operatives used cutting-edge cyber-espionage tools learned from their time in the U.S. Intelligence Community on behalf of a foreign intelligence service.

Read More
15 Sep 2021

DOJ fines NSA hackers who assisted UAE in attacks on dissidents

The Justice Department has announced a deal with three former US Intelligence operatives that allows them to pay a fine rather than face jail time for breaking multiple laws when conducting offensive hacking for the government of the United Arab Emirates. The deal is controversial, as it allows the three

Read More
27 Aug 2021

US charges HeadSpin ex-CEO over fake $1bn valuation scheme

HeadSpin has been charged $1 billion by the SEC and the US Department of Justice for allegedly defrauding investors by falsely claiming that the company had achieved strong and consistent growth. The organization markets itself as an AI testing, dev-ops, and mobile testing platform. For two years, officials state that

Read More
02 Aug 2021

SolarWinds attackers breached email of US prosecutors, says Department of Justice

A new update to the SolarWinds attack has revealed that hackers breached the email accounts of US prosecutors, boasting access to the accounts for several months. Several top US intelligence agencies have confirmed that the attacks were likely the work of Russian state-sponsored hackers. US President Joe Biden has initiated

Read More
08 Jun 2021

Department of Justice Seizes $2.3 Million in Cryptocurrency Paid to the Ransomware Extortionists Darkside

Yesterday, the Department of Justice announced that it had seized roughly $2.3 million of the $4 million paid in ransom to the DarkSide ransomware gang by Colonial Pipeline following an attack against the latter’s networks. The seizure warrant was announced yesterday by Laurel Beeler, US Magistrate Judge for the Northern

Read More
22 Apr 2021

DoJ Launches Ransomware Taskforce as Apple Hit by Extortion Attempt

The US Department of Justice has launched a new task force that aims to combat and research ransomware attacks following an attack on Apple in which the infamous threat group REvil claims to have stolen the company’s trade secrets via a supplier. The group reportedly posted a blog to its

Read More
07 Jan 2021

DoJ’s Microsoft 365 Email Accounts Compromised in SolarWinds Attacks

The Department of Justice has conceded that its email accounts were breached by Russian attackers as part of the SolarWinds Orion software attacks, according to an announcement made yesterday. Roughly three percent of email accounts were breached, the department stated. The stealthy attacks lead to email compromise among other agencies

Read More