$620M in crypto stolen from Axie Infinity in hack / FBI warns U.S. election officials of hacking attempts / Russia's Federal Air Transport Agency has all of its data hacked

Plus: An entity in Ukraine is trying to hack Russians who are visiting banned websites by the Russian government.

Inside.com Part of   Network March 30, 2022

Presented by

Dear Inside Community, This Thursday, March 30, we would love for you to attend our free “How to Build in Web 3.0” event. This virtual event will be packed with expertise and loaded with insights about the infrastructure that powers online applications. Register for free. Our event is at 11:00 a.m. PDT, and we hope to see you there. Thanks to our sponsor Lohika for making this learning experience possible. —The Inside Team Arbër

A hacker has stolen nearly $620M in ethereum and USDC tokens from Axie Infinity's sidechain Ronin network bridge. The hacker took 173,600 ETH and 25.5M USDC tokens. More: Axie Infinity is an NFT-based online game with over 8 million players and over $4B in sales. Its creator studio, Sky Mavis, developed the Ronin sidechain as a way to transfer tokens in the game. The hacker was able to take control of five validator signatures out of the nine in total.  This breach happened one week ago, but the studio only found out recently.

The Federal Bureau of Investigation warned U.S. election officials of an ongoing and widespread phishing campaign trying to steal their credentials. The campaign has been active since Oct. 2021. More: The FBI has contacted election officials in at least nine states in the U.S. who've received phishing emails. These emails were sent as fake invoices and requested the officials to put in their login credentials. The attackers sent the emails from U.S.-based emails that were on the watch list and were compromised. Similar attacks are expected to increase as the 2022 mid-term elections get closer.

A message from SONRAI SECURITY Get a list of data and identity security measures that you should implement to protect your AWS org. As the market leader, AWS is constantly innovating, creating more powerful and complex ways to set up your cloud infrastructure. Innovation breeds value, but it also requires vigilant updating of your security priorities. That's why we made the AWS Security Checklist for 2022. There are many benefits to using AWS, but how do you manage security, compliance, and access risk within the AWS environment? Ignoring security gaps and relying on a single vendor dramatically increases risk, but with many cloud and security teams being asked to reduce costs in the challenging economic climate, taking a single vendor approach can be tempting. To ease the worry of a misconfiguration, we’ve collected the best tips and tricks from our clients and pulled them together in our AWS Security Checklist. Claim your Free AWS Security Checklist

A cyberattack on the Russian Federal Air Transport Agency (Rosaviatsia) infrastructure has deleted all the data from its servers, including documents, emails, aircraft registration data, etc. That's 65 terabytes of data. More: This attack supposedly happened on Saturday. The Russian government has denied being hacked and instead has blamed a "temporary lack of internet."  The IT company responsible for the security of the Rosaviatsia is also being blamed. Hacktivist group Annonymous denied any involvement with the cyberattack.

A Ukrainian-based actor/group is trying to hack Russians who are using services that have been banned by the Kremlin. The exact identity and source of the spearphishing attempts are not known yet. More: People using websites, social networks, instant messengers, and VPN services banned by the Russian government are being targeted with cyberattacks. Targets are being sent emails with fake announcements from the government on what charges they will face due to their actions and are told to click on an unsafe attachment. The attackers use a remote code execution vulnerability in Windows that allows attackers to craft malicious Microsoft Office documents. The email sent by the hackers has an RTF with an URL that downloads an HTML file that exploits the MSHTML bug, which then uses Javascript code to access the device remotely.

A message from PIPE The world’s first trading platform for recurring revenue—turn revenue streams into up-front capital Growing a business takes hard work, planning, great instincts, and capital—lots of capital. If you’re scaling any business with recurring revenue, you can now tap into alternative financing designed with your business model in mind. Why? Because: Debt and equity can take months to line up Covenants and warrants can limit your agility Dilution gets more expensive as your business grows Whether your business is bootstrapped, equity-backed, or beyond, Pipe makes it easy for founders to finance growth on their terms—without restrictive loans or dilution. Trade your recurring revenue streams on Pipe to access fast, flexible capital for growth.  Get Started

Almost a third (31%) of businesses experience cyberattacks or breaches at least once a week, according to new figures published by the U.K. government. 26% of U.K. charities experience cyberattacks weekly. More: The annual survey of U.K. businesses, charities, and education institutions found that around two in five (39%) companies and roughly a third (30%) of charities experienced breaches or attacks in the past 12 months. The most common way hackers attempted to attack was phishing, with 83% of total cases. For small and medium-sized firms, the average attack costs £4,200 ($5,529). For large companies, on average, an attack costs £19,400 ($25,538).

Quick Hits: Don’t let the daily grind become a nightly one. Get custom nightguards and teeth whitening for 80% less than the dentist. — Use code INSIDE33 for 33% off.* Russian search engine Yandex is sending iOS user data to the Russian government. 82% of public sector applications have security flaws, the highest proportion of any industry, according to a new study. The Log4Shell vulnerability was used in 31% of cyberattack cases over the past six months. Ukraine has suffered its worst internet connection disruption yet, as a result of a cyberattack.  Give your recruiting team an unfair advantage with Trinsly. Start your 21-day free trial.* *This is sponsored content.

Upcoming events at Inside: March 31 - How To Build In Web 3.0 (Register Here) April 04 - Blockchain and the Law (Register Here) April 05 - Venturing in VC - Episode #14 with Jay Kapoor (VSC Ventures) (Register Here) April 06 - Entertainment in the Metaverse (Register Here) April 07 - Road to Autonomy: Sidewalk Robots with Ali Kashani (Serve Robotics) (Register Here) April 14 - Shopping In The Metaverse (Register Here) April 28 - Alternative Investments 2: Crypto Safety Standards (Register Here) May 12 - Making Metaverse Dating a Reality (Register Here) May 19 - Understanding Fractionalization (Register Here) May 24 - Meet Our Fund 3 (Register Here) June 01 - Selling Consumer Goods in Web3 (Register Here)

Arbër is an Inside writer who also has experience in entrepreneurship. He has experience covering Consumer Tech, Venture Capital, NFTs, Crypto, etc. Arbër holds a Bachelor's degree in Business from XAMK University in Finland. When he is not reading(and writing) business news, he chooses to watch sports or anime...and then read news about sports or anime. Editor Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 Ford.

Powered by our identity graph, Sonrai Security combines CIEM, CSPM, and data security into one cloud security platform.

Pipe is the world's first trading platform for recurring revenue.

Click to Share ➞

767 Bryant St. #203, San Francisco, CA 94107 Copyright © 2022 Inside.com

Did someone forward this email to you? Head over to inside.com to get your very own free subscription! You received this email because you subscribed to Inside Security. Click here to unsubscribe from Inside Security list or manage your subscriptions.