Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. North Korea-linked APT group posed as Samsung recruiters is a spear-phishing campaign that targeted South Korean security companies that sell anti-malware solutions, Google TAG researchers reported.

Security 131

Security Phishing Information Security Communications 131

Security Affairs

AUGUST 19, 2022

Undersecretary for Digital Transformation Luukas Ilves announced that Estonia was hit by the most extensive wave of DDoS attacks it has faced since 2007. Yesterday, Estonia was subject to the most extensive cyber attacks it has faced since 2007. The DDoS attacks targeted both public institutions and the private sector.

Computer and Electronics 123

Computer and Electronics Digital transformation Government IT 123

Security Affairs

JANUARY 29, 2021

. “In recent months, Microsoft has detected cyberattacks targeting security researchers by an actor we track as ZINC. “Observed targeting includes pen testers, private offensive security researchers, and employees at security and tech companies. .” ” states the report published by Microsoft.

Security 121

Security Encryption Passwords Communications 121

Schneier on Security

OCTOBER 12, 2021

I feel sorry for the accused : The “security incident” that forced a New-York bound flight to make an emergency landing at LaGuardia Airport on Saturday turned out to be a misunderstanding — after an airline passenger mistook another traveler’s camera for a bomb, sources said Sunday. I have lots of examples.

Security 130

Security IT 130

Krebs on Security

AUGUST 29, 2023

Emerging in 2007 as a banking trojan, QakBot (a.k.a. According to recent figures from the managed security firm Reliaquest , QakBot is by far the most prevalent malware “loader” — malicious software used to secure access to a hacked network and help drop additional malware payloads.

Ransomware 250

Ransomware Government Military Access 250

Security Affairs

FEBRUARY 26, 2024

i-SOON is a prominent contractor for various agencies of the Chinese government, including Ministry of Public Security, Ministry of State Security, and the People’s Liberation Army. The APT41 group, aka Winnti , Axiom, Barium , Blackfly, HOODOO) is a China-linked cyberespionage group that has been active since at least 2007.

Government 115

Government IoT Marketing Data breaches 115

Schneier on Security

SEPTEMBER 9, 2021

Here’s me in 2007 on the NSA backdoor. We knew the basics of this story , but it’s good to have more detail. Here’s me in 2015 about this Juniper hack.

IT 115

IT 115

Krebs on Security

OCTOBER 23, 2023

Police found a 2007 Lexus, driven by Patrick McGovern-Allen, 19, that had lost control and left the road, crashing into the eastern end of the 1600 building,” the story recounted. That Sept. The first showed two young men tossing a Molotov Cocktail at the side of a residence in Abington Township, Pa, setting it ablaze. According to a Sept.

Access 251

Access IT 251

Security Affairs

SEPTEMBER 22, 2022

More than 350,000 open source projects can be potentially affected by an unpatched Python vulnerability, tracked as CVE-2007-4559 (CVSS score: 6.8), that was discovered 15 years ago. As we dug into the issue, we realized this was in fact CVE-2007-4559.” ” reads the post published by security firm Trellix.”The

Archiving 99

Archiving File names Metadata Security 99

Data Breach Today

AUGUST 2, 2018

User data from 2007 and before was compromised. Security experts say the breach should serve as a reminder that using any two-factor authentication is better than none.

Authentication 124

Authentication Data breaches Security IT 124

Security Affairs

JUNE 30, 2021

for his key role in the distribution of the Gozi virus that infected more than a million computers from 2007 to 2012. The Gozi banking Trojan is not a new threat, it was first spotted by security researchers in 2007. The post Colombian authorities arrested hacker behind the Gozi Virus appeared first on Security Affairs.

Security 107

Security IT Cybersecurity Information Security 107

Security Affairs

SEPTEMBER 10, 2022

Treasury Department sanctioned Iran ‘s Ministry of Intelligence and Security (MOIS) and its Minister of Intelligence over the Albania cyberattack. Treasury Department announced sanctions against Iran ‘s Ministry of Intelligence and Security (MOIS) and its Minister of Intelligence over the cyber attack that hit Albania in July.

Government 132

Government Security IT Information Security 132

Security Affairs

DECEMBER 5, 2023

In October, the French National Agency for the Security of Information Systems ANSSI (Agence Nationale de la sécurité des systèmes d’information) warned that the Russia-linked APT28 group has been targeting multiple French organizations, including government entities, businesses, universities, and research institutes and think tanks.

Military 112

Military Government Phishing Access 112

Krebs on Security

MARCH 10, 2020

FBI officials last week arrested a Russian computer security researcher on suspicion of operating deer.io , a vast marketplace for buying and selling stolen account credentials for thousands of popular online services and stores. Social Security Numbers, dates of birth, and victim addresses,” the indictment states.

Sales 296

Sales Passwords Authentication Security 296

Krebs on Security

JULY 1, 2021

At the time, all you needed to view someone’s entire work and salary history was their Social Security number and date of birth. Equifax’s security improvements included the addition of four multiple-guess questions whose answers were based on publicly-available data. a data broker acquired by Equifax in 2007.

Financial Services 341

Financial Services Government Authentication IT 341

Krebs on Security

SEPTEMBER 17, 2020

Security firm FireEye dubbed that hacking blitz “one of the broadest campaigns by a Chinese cyber espionage actor we have observed in recent years.” Security analysts and U.S. APT41 was known to hide its malware inside fake resumes that were sent to targets. Tan DaiLin, a.k.a. Image: iDefense.

Government 355

Government Mining Big data Phishing 355

Schneier on Security

NOVEMBER 10, 2022

Vostrom filed papers in 2007 to do business as Packet Forensics, according to Virginia state records. Cory Doctorow does a great job explaining the context and the general security issues. government agencies for more than a decade. […]. More details by Reardon.

Paper 113

Paper Communications Government Security 113

Security Affairs

OCTOBER 27, 2023

France National Agency for the Security of Information Systems warns that the Russia-linked APT28 group has breached several critical networks. This information contains, for example, the list of installed security patches.” The document also includes a series of recommendations to protect against this type of attack.

Military 116

Military Phishing Government Security 116

Security Affairs

OCTOBER 27, 2021

The Evil Corp cybercrime group (aka the Dridex gang Indrik Spider , the Dridex gang, and TA505 ) has been active in cybercrime activities since 2007. The post Grief ransomware gang hit US National Rifle Association (NRA) appeared first on Security Affairs. In 2019, the U.S. Follow me on Twitter: @securityaffairs and Facebook.

Ransomware 125

Ransomware Government IT Security 125

Security Affairs

JULY 17, 2019

Security experts at Kaspersky revealed that the Russia-linked APT group Turla used new variants of the KopiLuwak Trojan in targeted attacks since early 2019. In the past months, security experts reported the APT group has been updating its arsenal. ” concludes Kaspersky. . Pierluigi Paganini.

IT 72

IT Encryption Security Government 72

Security Affairs

DECEMBER 7, 2023

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , BlueDelta, and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election.

Military 116

Military Government Phishing Authentication 116

The Last Watchdog

JUNE 26, 2023

“Based on the strong value proposition and impact of Flexxon’s hardware-based solutions, I look forward to driving the adoption of this novel approach and supporting management, partners and customers in making this transition towards a safer and more secure digital footprint for businesses, governments and individuals globally.”

Cybersecurity 100

Cybersecurity Marketing Communications Government 100

Security Affairs

OCTOBER 21, 2021

The Evil Corp cybercrime group (aka the Dridex gang Indrik Spider , the Dridex gang, and TA505 ) has been active in cybercrime activities since 2007. The post Evil Corp rebrands their ransomware, this time is the Macaw Locker appeared first on Security Affairs. In 2019, the U.S. Follow me on Twitter: @securityaffairs and Facebook.

Ransomware 123

Ransomware File names Encryption Government 123

Krebs on Security

FEBRUARY 7, 2024

“Hiding with purely technical parameters will not help in a serious matter,” Djamix advised Maza members in September 2007. “Hiding with purely technical parameters will not help in a serious matter,” Djamix advised Maza members in September 2007. One representation of the leaked Mazafaka database.

Military 248

Military IT Communications Risk 248

Security Affairs

NOVEMBER 15, 2021

North Korea-linked APT Lazarus targets security researchers using a trojanized pirated version of the popular IDA Pro reverse engineering software. ESET researchers reported that the North Korea-linked Lazarus APT group is targeting cyber security community with a trojanized pirated version of the popular IDA Pro reverse engineering software.

Cybersecurity 109

Cybersecurity Ransomware Security IT 109

Security Affairs

DECEMBER 6, 2020

Kopter Group is Switzerland-based company that was founded in 2007 that was acquired by Leonardo in April 2020. The post LockBit Ransomware operators hit Swiss helicopter maker Kopter appeared first on Security Affairs. The company focuses on the design of small and medium-class civilian helicopters such as the SH09 helicopter.

Ransomware 105

Ransomware Encryption Authentication Passwords 105

Security Affairs

APRIL 30, 2023

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election. ” continues the alert.

Systems administration 96

Systems administration Military Phishing Government 96

Security Affairs

JANUARY 10, 2019

Reddit locked down a large number of user accounts after due to a security concern after detecting suspicious activity on them. . A large group of accounts were locked down due to a security concern. In August 2018, Reddit warned users of a security breach, an attacker broke into the systems of the platform and accessed user data.

Security 85

Security Passwords Data breaches Access 85

Security Affairs

OCTOBER 10, 2020

Orange Belgium is using Huawei equipment since 2007 for its mobile network in Belgium and Luxembourg, while the collaboration between Proximus and the Shenzhen-based company started in 2009 for the progressive upgrading of its network. The post Belgium telecom operators Proximus and Orange drop Huawei appeared first on Security Affairs.

Manufacturing 120

Manufacturing Risk Communications Security 120

Security Affairs

MARCH 27, 2023

Supply chain security firm Phylum discovered a malicious Python package on the Python Package Index (PyPI) repository that uses Unicode to evade detection and deliver information-stealing malware. Researchers discovered a malicious package on PyPI that uses Unicode to evade detection while stealing sensitive data.

Security 90

Security IT Information Security 90

Security Affairs

DECEMBER 17, 2021

VMware released security patches for a critical server-side request forgery (SSRF) vulnerability in Workspace ONE UEM console. and above 2007 Workspace ONE UEM patch 20.7.0.17 The SSRF vulnerability in Workspace ONE UEM console was privately reported to the company which released security patches and workarounds.

Access 113

Access Authentication Cloud Security 113

Security Affairs

OCTOBER 18, 2022

Winnti (aka APT41 , Axiom, Barium , Blackfly) is a cyberespionage group that has been active since at least 2007. The post China-linked APT41 group targets Hong Kong with Spyder Loader appeared first on Security Affairs. ” reads the analysis published by Symantec. exe for the execution of the malware loader.

File names 115

File names Encryption Manufacturing Libraries 115

Security Affairs

APRIL 17, 2023

The APT41 group, aka Winnti , Axiom, Barium , Blackfly, HOODOO) is a China-linked cyberespionage group that has been active since at least 2007. The attack took place in October 2022, threat actors sent phishing emails that contained links to a password-protected file hosted in Drive. HOODOO’s use of GC2 is an example of this trend.

Phishing 97

Phishing Cloud Government Education 97

Security Affairs

MARCH 1, 2019

In 2018, Emissary Panda was observed using an updated version of the ZxShell RAT first developed in 2006 and whom code was released in 2007. The post Emissary Panda updated its weapons for attacks in the past 2 years appeared first on Security Affairs. Windows NT 6.3; ” continues the analysis. ” Secureworks concludes.

IT 80

IT File names Financial Services Communications 80

Security Affairs

FEBRUARY 27, 2020

Security experts Simon Zuckerbraun from Zero Day Initiative published technical details on how to exploit the Microsoft Exchange CVE-2020-0688 along with a video PoC. ” Now the popular security researcher Kevin Beaumont reported mass scanning for the CVE-2020-0688 (Microsoft Exchange 2007+ RCE vulnerability).

Authentication 100

Authentication Data breaches Communications Access 100

Security Affairs

OCTOBER 8, 2021

Shane Huntley, the head of the Threat Analysis Group (TAG), wrote on Twitter that his group had sent an above-average batch of government-backed security warnings. . TAG sent a above average batch of government-backed security warnings yesterday. So why do we do these government warnings then? Pierluigi Paganini.

Phishing 100

Phishing Military Government Security 100

Security Affairs

NOVEMBER 3, 2020

“As reflected in court documents, from 2007 through 2019, Brovko worked closely with other cybercriminals to monetize vast troves of data that had been stolen by “botnets,” or networks of infected computers. Brovko was involved in the illegal practice between 2007 and 2019. ” reads the press release published by the DoJ.

Data collection 108

Data collection Access Security IT 108