Wired reports that more threat actors have been leveraging pig butchering schemes that involve cryptocurrency and other forms of financial trading in compromising their targets.
First discovered in China, pig butchering scams involve attackers cold-contacting targets through SMS or other communication platforms to eventually lure them into making cryptocurrency investments.
Attackers establish a malicious platform that may masquerade as trusted financial institutions wherein victims would be able to view real-time market data and watch the growth of their supposed investments. Upon the completion of the victim's deposit, the account would be shut down and the attackers would disappear.
"Thats the whole pig butchering thing, they are going for the whole hog. They go after people who are vulnerable. Some of the victims are people who have had long-term health problems, who are older, people who feel isolated. They want to get every last bit of oink, and they are persistent," said Sophos Senior Threat Researcher Sean Gallagher.
Meanwhile, digital forensic analyst Michael Roberts noted that the scheme has been offloaded by attackers to inexperienced scammers and human trafficking victims who have been forced to do the scam.
Included in the exposed dataset labeled "PDL" were individuals' full names, email addresses, phone numbers, location data, professional summaries, and skills, as well as education and employment histories.
Attackers could leverage the issue — which impacts Nexus 3000, 7000, and 9000 series switches with vulnerable NX-OS versions with DHCPv6 activated and are in standalone NX-OS mode — to facilitate continuous crashes of the dhcp_snoop process and a denial-of-service condition.
Higher rewards of up to $250,000 will be given by Google for the discovery of memory corruption flaws in the Chrome browser shown to achieve remote code execution using a non-sandboxed process as part of a more robust vulnerability reward program.