InfoSec on Musings by Eliza Ng

Norton Password Manager Accounts breached in Credential Stuffing Attack

Sat, 21 Jan 2023 16:43:50 +0500

The news of a recent cyberattack on Norton Password Manager accounts is alarming. In December 2022, hackers successfully hacked some accounts using a credential-stuffing attack. This type of attack involves the use of stolen usernames and passwords to gain access to accounts.

This attack is particularly concerning because it highlights a major security flaw in the way many online services store and manage passwords. Many services, including Norton Password Manager, rely on users to create strong passwords and then store them in a secure location. Unfortunately, this is not always the case.

Malicious code embedded on LCBO website

Fri, 13 Jan 2023 15:43:48 +0800

Recently, LCBO, a popular Canadian liquor store, was the victim of a cybersecurity incident. On April 16th, LCBO discovered that malicious code had been embedded on its checkout page, allowing hackers to steal customer information.

The malicious code was designed to steal customer data, such as names, addresses, and credit card information. It is believed that the hackers were able to gain access to the website through a vulnerability in the e-commerce platform.

TrustCor and Untrustworthy Certificate Authorities

Thu, 15 Dec 2022 15:43:48 +0800

Untrustworthy certificate authorities like TrustCor can pose a serious threat to online security. TrustCor, a certificate authority that operated during the early 2010s, was responsible for issuing fraudulent digital certificates. These certificates are used to verify the identity of websites and establish secure connections between users and those websites.

TrustCor was able to issue fraudulent certificates because it was part of a network of trusted certificate authorities. These organizations are trusted by web browsers and operating systems to issue digital certificates, so when TrustCor issued a fraudulent certificate, it was automatically trusted by most users’ devices.