Security Affairs

MAY 23, 2022

Threat & Detection Research (TDR) team have uncovered a reconnaissance and espionage campaign conducted by Russia-linked Turla APT aimed at the Baltic Defense College, the Austrian Economic Chamber (involved in government decision-making such as economic sanctions) and NATO’s eLearning platform JDAL (Joint Advanced Distributed Learning).

Government 124

Government Communications Cybersecurity Security 124

Security Affairs

JANUARY 29, 2021

Microsoft, like Google TAG, observed a cyber espionage campaign aimed at vulnerability researchers that attributed to North Korea-linked Zinc APT group. Researchers from Microsoft monitored a cyber espionage campaign aimed at vulnerability researchers and attributed the attacks to North Korea-linked Zinc APT group.

Security 123

Security Encryption Passwords Communications 123

Security Affairs

NOVEMBER 28, 2021

North Korea-linked APT group posed as Samsung recruiters is a spear-phishing campaign that targeted South Korean security companies that sell anti-malware solutions, Google TAG researchers reported. Google TAG researchers reported that the same group, tracked as Zinc ,” also targeted security researchers in past campaigns.

Security 134

Security Phishing Information Security Communications 134

Security Affairs

JANUARY 21, 2024

CISA warns of actively exploited Ivanti EPMM flaw CVE-2023-35082 The Quantum Computing Cryptopocalypse – I’ll Know It When I See It Kansas State University suffered a serious cybersecurity incident CISA adds Chrome and Citrix NetScaler to its Known Exploited Vulnerabilities catalog Google TAG warns that Russian COLDRIVER APT is using a custom backdoor (..)

Security 110

Security e-Discovery Artificial Intelligence Ransomware 110

Security Affairs

APRIL 9, 2022

The security firm is tracking this cluster of malicious activities under the moniker Threat Activity Group 38 aka TAG-38. “The prolonged targeting of Indian power grid assets by Chinese state-linked groups offers limited economic espionage or traditional intelligence-gathering opportunities.

Cybersecurity 95

Cybersecurity Security Information Security IT 95

Security Affairs

NOVEMBER 15, 2021

In March, researchers from Google’s Threat Analysis Group (TAG) reported that North Korea-linked hackers are targeting security researchers via social media. Experts pointed out that the domain was involved in a past campaign carried out by the APT group and aimed at security professionals.

Cybersecurity 111

Cybersecurity Ransomware Security IT 111

Security Affairs

JULY 15, 2023

Russia-linked APT Gamaredon starts stealing data from victims between 30 and 50 minutes after the initial compromise The source code of the BlackLotus UEFI Bootkit was leaked on GitHub US CISA warns of Rockwell Automation ControlLogix flaws Indexing Over 15 Million WordPress Websites with PWNPress New AVrecon botnet remained under the radar for two (..)

Security 98

Security Data breaches Government Analytics 98

Security Affairs

JANUARY 9, 2023

In March 2022, the Google Threat Analysis Group (TAG) spotted phishing and malware attacks targeting Eastern European and NATO countries, including Ukraine. recently uncovered a cyber espionage campaign targeting at least three European NGOs investigating war crimes. Cybersecurity firm SEKOIA.IO ” reads the report.

Military 91

Military Phishing Cybersecurity Passwords 91

Security Affairs

JUNE 11, 2020

Dark Basin is a group of cyber mercenaries that conducted commercial espionage for its customers, the researchers from Citizen Lab linked it to BellTroX InfoTech Services (“ BellTroX ”), an Indian technology company. ” reads the report published by Citizen Lab. ” reads the report published by Citizen Lab.

Phishing 100

Phishing Communications Government IT 100

Security Affairs

MAY 9, 2022

The attacks were also reported by Google’s TAG team, which confirmed they were for intelligence purposes. By using summit- and conference-themed lures in Asia and Europe, this attacker aims to gain as much long-term access as possible to conduct espionage and information theft.” Asia and pseudo allies such as Russia.

Phishing 91

Phishing Government Archiving Cybersecurity 91

Security Affairs

AUGUST 6, 2023

Rapid7 found a bypass for the recently patched actively exploited Ivanti EPMM bug Russian APT29 conducts phishing attacks through Microsoft Teams Hackers already installed web shells on 581 Citrix servers in CVE-2023-3519 attacks Zero-day in Salesforce email services exploited in targeted Facebook phishing campaign Burger King forgets to put a password (..)

Security 91

Security Military Phishing Sales 91

Security Affairs

JUNE 6, 2019

The Platinum cyber espionage group uses steganographic technique to hide communications with the Command and Control Servers (C&C). The embedded data is encoded with two steganography techniques and placed inside the <–1234567890> tag (see below). ” continues the analysis.

Communications 75

Communications Encryption Military Government 75

Security Affairs

JUNE 6, 2019

APT34 conducts cyber espionage on behalf of Iran. The attacker used an old version of Microsoft.Exchange.WebService.dll tagged as 15.0.0.0 Iran seeks to diminish the capabilities of other regional powers to create leverage and better establish itself. which according to Microsoft documentation dates back to 2012.

Computer and Electronics 87

Computer and Electronics Passwords Cybersecurity Security 87

Armstrong Archives

DECEMBER 18, 2023

Sensitive data leaks can lead to identity theft, fraud, or corporate espionage. We’ll take ownership of the entire scanning process, from collection to high-resolution scanning, metadata tagging, and OCR (Optical Character Recognition). Your vital documents will be scanned, indexed, and securely stored for easy web access.

Archiving 52

Archiving Paper Records Management Compliance 52

Security Affairs

FEBRUARY 11, 2024

Gov imposes visa restrictions on individuals misusing Commercial Spyware HPE is investigating claims of a new security breach Experts warn of a surge of attacks targeting Ivanti SSRF flaw How to hack the Airbus NAVBLUE Flysmart+ Manager Crooks stole $25.5

Security 105

Security Ransomware Sales Cybersecurity 105

Threatpost

APRIL 23, 2020

Iran's Charming Kitten and other nation-state actors are using the coronavirus pandemic to their advantage, for espionage.

Phishing 91

Phishing Government Security 91

ForAllSecure

AUGUST 14, 2019

BGR says the price tag for Pegasus is in the range of millions of dollars. Its apparent goal is espionage directed against the financial and energy sectors. Reports suggest that smishing is one possible attack vector for the spyware. Dave Bittner: [00:03:09] This isn't a commodity attack tool. Pegasus is pricey.

Cloud 52

Cloud Energy and Utilities Security Access 52

Security Affairs

NOVEMBER 20, 2023

APT29 along with APT28 cyber espionage group was involved in the Democratic National Committee hack and the wave of attacks aimed at the 2016 US Presidential Elections. Google TAG experts also observed the Russia-linked ATP28 group exploiting the flaw in attacks against Ukraine users.

Sales 113

Sales Archiving Communications Phishing 113

ForAllSecure

AUGUST 14, 2019

BGR says the price tag for Pegasus is in the range of millions of dollars. Its apparent goal is espionage directed against the financial and energy sectors. Reports suggest that smishing is one possible attack vector for the spyware. Dave Bittner: [00:03:09] This isn't a commodity attack tool. Pegasus is pricey.

Cloud 40

Cloud Energy and Utilities Security Access 40

ForAllSecure

AUGUST 14, 2019

BGR says the price tag for Pegasus is in the range of millions of dollars. Its apparent goal is espionage directed against the financial and energy sectors. Reports suggest that smishing is one possible attack vector for the spyware. Dave Bittner: [00:03:09] This isn't a commodity attack tool. Pegasus is pricey.

Cloud 40

Cloud Energy and Utilities Security Access 40

Security Affairs

APRIL 12, 2019

Figure 4: Payload stored in “Company” tag of document metadata. According to a report published by Symantec in October, the group was actively conducting cyber espionage campaigns against government and military organizations in Europe and South America.

Passwords 100

Passwords Metadata Military Government 100