Data Privacy Weekly: Your Industry News Series

02. Russian Cybercriminal ‘Megatraffer’ Trafficking Fake Code-Signing Certificates

The investigation by Brian Krebs exposes the operations of Russian cybercriminal “Megatraffer,” who specializes in trafficking fake code-signing certificates. These certificates are crucial for ensuring the authenticity and security of software. Megatraffer’s scheme involves offering stolen or falsified certificates, making it easier for malware to spread undetected.

The cybercriminal has been active since 2015 and has expanded his business to various cybercriminal forums. He has also provided services to ransomware groups, including helping Conti with their malware. Intel 471, an American threat intelligence company, has identified Megatraffer as Konstantin Evgenievich Fetisov, an experienced cybercriminal involved in spam networks in the past.

04. Estée Lauder Faces Data Breach by Ransomware Groups

Cosmetics giant Estée Lauder faces a data breach as two ransomware groups claim responsibility for stealing vast amounts of information. Estée Lauder confirmed the cybersecurity incident, stating that an unauthorized third party accessed some of its systems and obtained data. The extent of the compromised data is under assessment, and the company has engaged external cybersecurity experts and informed law enforcement. The Cl0p and BlackCat/Alphv ransomware gangs assert involvement, with the latter still claiming access despite intervention from Microsoft and Mandiant. This incident marks the second data breach for Estée Lauder, following a previous exposure of 440 million records in 2020.