“Vedo un’eccessiva spettacolarizzazione che potrebbe logorare l’interesse del pubblico. I tempi lunghi sono suicidi per il true crime perché il pubblico si aspetta una verità finale in tempi ragionevolmente brevi come nei romanzi gialli dove c’è un Poirot che riunisce tutti in salotto, indica l’assassino e quello confessa. Qui ci vorranno anni per avere peraltro una verità solo giudiziaria”.
Così CarloLucarelli, scrittore e narratore storico della cronaca nera italiana, inquadra le dinamiche del casoGarlasco in un’intervista al Corriere della Sera. Un delitto che, sebbene tragicamente reale, possiede secondo l’autore elementi prettamente letterari: “I protagonisti del romanzo giallo ci sono tutti: Stasi il biondino dagli occhi di ghiaccio, Sempio il torbido, Lovati l’imprevedibile, personaggio straordinario”.
The FBI is once again warning US citizens to be on the lookout for the scams that are so often rife around election season. With November’s midterms fast approaching, the FBI said scammers are known to use the names, imagery, and slogans of high-profile candidates for a range of frauds. These are often related to making donations and selling merchandise, but can also be geared toward stealing personal data for use in follow-on scams. And of course, more recently, fraudsters’ efforts can be all the more convincing given the rise in AI use and deepfake technology, which can also be used to more accurately imitate the likenesses of candidates and other officials. Campaign investment pool schemes are among the four big frauds the FBI wants the public to watch out for over the next few weeks. These involve scammers convincing their marks to pay into a campaign pool, which ostensibly pays out to all of those who donated after the candidate wins. More commonly, these types of pooled investment scams are based on collective investments into stocks and other appreciating assets. The FBI did not provide details about these campaign pools’ investment incentives or how victims are supposedly able to increase their stake by donating to the cause, but did say that no genuine campaign donations appreciate over time. Another common donation-based scam to be wary of is the one that convinces victims to fund a fake political action committee (PAC), one that collects supporters’ cash and promises to hand it to their favored party or candidate. Instead of forwarding money to a specific political campaign, however, the scammers pocket it all for themselves. Fraudsters are also known for claiming to sell merchandise related to political campaigns – orders that ultimately go unfulfilled. These constitute non-delivery scams, which rank in the top five genres of internet cons, according to the Internet Crime Complaint Center’s (IC3) most recent annual report. The same report put phishing at the number one spot in that same list, and the classic cyberattack features on the FBI’s list of midterm-related scams, too. Creating a sense of urgency, scammers will text victims claiming they have not yet registered to vote, and asking them to follow a link to a webpage where they can enter their details and complete the process, which of course leads to identity theft. While the FBI doesn’t include this detail in its advisory, Texans should be especially wary of these communication attempts given the recent computer issues that led to a massive backlog in registration applications. As of September 22, 226, around 600,000 applications were allegedly in limbo after a website flaw failed to record voters’ intentions to vote, and therefore did not receive registration forms from the Texas Secretary of State (SOS), according to a lawsuit [PDF] filed by voter registration organizations last week. However, spokesperson for the SOS’ office Alicia Pierce told USA Today that the backlog was only in the tens of thousands and that as of this week it was all-clear. Scammers may nevertheless continue to capitalize on the public awareness of the backlog when devising the lures for their phishing campaigns. The feds advised the public to be wary of these kinds of communications, and verify all political organizations, such as PACs, via the government’s election commission website. Although some scam PACs can appear on the website as registered, you can usually discern the suspicious ones when they report high expenses for matters such as consulting, fundraising, and other admin costs. The FBI's advisory follows separate action taken by X, which on Wednesday evening warned that influence campaigns originating from Iran, Russia, and China were targeting US voters, amplifying content across the political spectrum. The social media platform responded by nuking more than 13,000 accounts linked to the foreign interference attempts. ®
Tim Beasley, a senior incident response consultant at Semperis, was investigating a cyberattack involving Russia’s Midnight Blizzard when a package containing nesting dolls and other regional gifts showed up on his doorstep. At the time, Beasley served as the lead investigator for Microsoft’s Detection and Response Team (DART). He assumed it was from the group, which has been linked to the Kremlin’s Foreign Intelligence Service (SVR), although the sender didn’t leave a note. “Just little souvenirs and gift basket stuff from that area of the world,” he told The Register. “We-know-where-you-are kind of stuff. It’s a real eye-opener when you get that type of thing.” While digital intrusions having physical consequences is nothing new, cybercriminals in recent years have turned to real-life harm and mental and physical trauma to force victims into paying extortion demands. Some groups even use cybercrime as a gateway drug to real-life violence. Over the summer, Europol and its partners' investigators flagged 4,340 “horrific” URLs for removal as part of an ongoing crackdown on The Com (short for community), a loosely knit network of online groups whose young members participate in a range of illicit activities including hacking, swatting, digital extortion, real-life shootings, and other physical violence. “We’ve seen violence as a service get used,” Beasley said. He’s also investigated ransomware attacks where C-suite executives receive pictures of their kids’ schools directly from the cybercriminals in an attempt to apply psychological pressure to pay the extortion fee. “I've seen threats involving people's families, from social media reconnaissance, and in our world you more and more come to expect it, which is unfortunate,” Beasley said. This type of psychological intimidation and harm against victim companies’ employees has seen an uptick in the last several years to the point where it's almost common. Thirty-seven percent of ransomware attacks involved psychological or physical threats against staff, according to Semperis’ annual ransomware risk report. The global study of 1,200 post-ransomware organizations conducted over the first half of the year found attackers threatening psychological intimidation (23 percent) and physical threats (17 percent), to force payment. They are not only targeting executives and staff, but also families of their victims. A quarter of these victims experienced doxxing – posting individuals' personal details, such as names, home and work addresses, and phone numbers online – while another 25 percent had to seek psychological and/or medical treatment in response to ransomware infections. Nearly the same number (24 percent) hired personal security teams, while 23 percent experienced swatting calls – that's when attackers phone emergency services and report a bogus incident like a bomb or active-shooter threat to trigger an armed response. Additionally, more than half (53 percent) of respondents reported that ransomware attackers carried through on threats in the past year. Some of these threats reported by ransomed organizations’ employees include: threatening texts, letters, or packages: 57 percent threats against family or friends: 37 percent physical intrusion: 19 percent abduction: 17 percent bodily harm: 13 percent stalking: 6 percent. “It's the more well-known groups,” using psychological and physical threats to force payments, Beasley said. “I've seen Scattered Spider, I've seen ShinyHunters, I've seen Lapsus$.” For what it's worth, ShinyHunters claimed in an exclusive interview with The Register that they “don't attack human beings.” They did, however, admit that “there are times in the work we do sometimes we have to push the corporate to the absolute limit to get them on the table.” The takeaway for defenders and executives from this report is to “stand your ground,” Beasley said. “Don’t buckle under the pressure, and just know that you know it's going to be okay. If you feel like you're under duress, then by all means get law enforcement involved. Don't be afraid to call the cops. Don't be afraid to get the FBI involved, sooner rather than later. And don’t pay them.” This last piece of advice is important, as once you pay, they're going to come back for more. Semperis’ report found that 69 percent of surveyed ransomware victims were targeted multiple times within the past 12 months, and 31 percent made multiple payments to attackers. “Don’t pay anything,” Beasley said. “Never pay them.”®
The owner of Hobbs, Phase Eight, and Whistles is the latest fashion retailer to suffer a cyberattack, leaving several IT systems offline and customers facing order delays. South African retail giant The Foschini Group (TFG) confirmed on Tuesday that its UK business, TFG London, discovered a cybersecurity incident on October 11 that affected all three brands. Two days later, several systems remain unavailable, and the company is still trying to establish whether any personal or sensitive information has been compromised. The incident hasn’t forced stores to close, but TFG said some website functions may be unavailable. Customers have also been warned that orders placed on or after Sunday could be delayed, according to an email seen by The Telegraph. "Stores are open as normal but some of our brand's website capabilities may not be available as the investigation continues," the company said. "We apologize for any disruption and will provide additional updates to our customers as appropriate." TFG said it immediately activated its incident response and business continuity plans, brought in external cybersecurity specialists, and notified the relevant UK authorities. A spokesperson at the ICO told The Register: “We can confirm we have received a breach report from TFG Brands (London) Limited and we are assessing the information provided.” There is at least some good news for shoppers worried about their payment details. In an email to customers, TFG London said a third-party provider handles payment processing and that, based on its investigation so far, it has no reason to believe payment information is at risk. Whether other customer data has escaped into the wild is another matter. TFG said it is still investigating that possibility and will notify affected individuals or organizations if it finds evidence of a compromise. The company has yet to disclose how attackers gained access, whether ransomware was involved, or when it expects to have its systems fully restored, and did not respond to The Register’s questions. The disruption appears to be confined to the three fashion brands. TFG said its White Stuff and Inside Story businesses are unaffected, as are its operations in Africa and Australia, which run on separate IT systems. The attack comes during a particularly miserable spell for fashion retailers, which seem to be attracting cybercriminals almost as enthusiastically as shoppers chasing a sale. Last week, ASOS customers received an unexpected notification informing them that the online fashion retailer had been hacked. ASOS subsequently confirmed that an attacker had gained access to an employee account by impersonating a trusted contact and obtaining login credentials. Armed with those credentials, the attacker got into third-party platforms holding customer names and contact details. Meanwhile, H&M is reportedly investigating claims that it was targeted by the notorious ShinyHunters cybercrime group. According to The Times, the Swedish fashion giant is examining allegations involving a limited amount of company data, although it stressed that it had found no indication its systems had been compromised. No evidence currently links the incidents at TFG London, ASOS, and H&M, and the latter has not confirmed a breach. Still, with three major fashion businesses linked with cyber trouble in little more than a week, October's hottest retail trend appears to be incident response.®
Accedi
