Zservers takedown, Zelle payment blocks, Finastra data breach
Feb 18, 2025
auto_awesome
Dutch police have successfully taken down Zservers, a critical move to block fraudulent Zelle payments associated with social media scams. Meanwhile, JPMorgan Chase is tightening its Zelle payment policies to combat fraud. The podcast also delves into a recent data breach at Finastra, informing victims of potential impacts. Additionally, it touches upon the increasing threat of cyberattacks, particularly from pro-Russia hackers targeting Italian infrastructure.
Dutch authorities dismantled Zservers, revealing the ongoing global efforts to combat cybercrime through coordinated actions against criminal infrastructure.
Emerging threats include Golang-based backdoors using Telegram for command and control, complicating defenses in cloud application security.
Deep dives
Law Enforcement Actions Against Cybercriminal Hosting Services
Dutch authorities have successfully dismantled Z-Servers, a Russian bulletproof hosting service linked to ransomware operations by groups like Lockbit. After an extensive year-long investigation, police seized 127 servers from Z-Servers, uncovering various hacking tools associated with major cybercriminal organizations such as Conti and Lockbit. This operation came on the heels of sanctions imposed by the US, UK, and Australia against the hosting service, which was known for providing its services on cybercriminal forums to evade law enforcement. The investigation highlights the ongoing global efforts to combat cybercrime and secure online environments through coordinated actions against infrastructure enabling such activities.
Emerging Threats in Cybersecurity
The podcast covers various emerging threats in cybersecurity, including a new Golang-based backdoor that uses Telegram for command and control, making it particularly adept at evading detection. This malware, currently in development, allows attackers to execute commands via Telegram, complicating defense strategies for cloud application security. Additionally, pro-Russia hacker group NoName57 conducted DDoS attacks targeting critical infrastructure in Italy in response to political statements, showcasing how geopolitical issues can manifest in cyber warfare. Finally, a new variant of macOS malware aimed at crypto theft has been identified, reminding users of the risks of using unverified software and the importance of stringent security practices.
1.
Cybersecurity Developments: Takedowns, Payment Blocks, and Breaches
Chase to block Zelle payments to sellers on social media
Finastra notifies victims of October data breach
Thanks to today's episode sponsor, Scrut Automation
Scrut Automation allows compliance and risk teams of any size to establish enterprise-grade security programs. Their best-in-class features like process automation, AI, and over 75 native integrations reverse compliance debt and help manage risk proactively as your business grows. Visit scrut.io to schedule a demo or learn more. That’s www.scrut.io.
For the stories behind the headlines, visit CISOseries.com.
Get the Snipd podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share & Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode