article thumbnail

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Krebs on Security

Megatraffer explained that malware purveyors need a certificate because many antivirus products will be far more interested in unsigned software, and because signed files downloaded from the Internet don’t tend to get blocked by security features built into modern web browsers. “Why do I need a certificate? WHO IS MEGATRAFFER?

article thumbnail

North Korea-linked Lazarus APT targets the COVID-19 research

Security Affairs

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. The attacks aimed at a Ministry of Health and a pharmaceutical company involved in the development of the COVID-19 vaccine.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

China-linked APT10 leverages ZeroLogon exploits in recent attacks

Security Affairs

The group, also known as Cicada, Stone Panda , and Cloud Hopper , has been active at least since 2009, in April 2017 experts from PwC UK and BAE Systems uncovered a widespread hacking campaign, tracked as Operation Cloud Hopper , targeting managed service providers (MSPs) in multiple countries worldwide. ” Pierluigi Paganini.

article thumbnail

US DoJ indicts Chinese hackers over state-sponsored cyber espionage

Security Affairs

. “Zhu and Zhang were members of a hacking group operating in China known within the cyber security community as Advanced Persistent Threat 10 (the APT10 Group).” The post US DoJ indicts Chinese hackers over state-sponsored cyber espionage appeared first on Security Affairs. Pierluigi Paganini.

article thumbnail

CVS Sued for Alleged Privacy Violations

Hunton Privacy

The letters encouraged the physicians to prescribe drugs made by pharmaceutical manufacturers, who paid CVS to send them. The Texas complaint alleged that CVS disclosed PHI to pharmaceutical manufacturers for the manufacturers’ marketing purposes. In 2009, CVS paid $2.25

Privacy 40
article thumbnail

French Data Protection Authority Issues 2008 Annual Activity Report

Hunton Privacy

On May 13, 2009, the French Data Protection Authority (“CNIL”) published its Annual Activity Report. The CNIL is increasingly engaged in assisting companies to ensure individuals’ privacy rights as part of diverse technology projects like Streetview, Bluetooth advertising and implementation of an electronic pharmaceutical database.

article thumbnail

US DoJ charged two Chinese hackers working with MSS

Security Affairs

US DoJ charged two Chinese hackers working with China’s Ministry of State Security with hacking into computer systems of government organizations and companies worldwide. The post US DoJ charged two Chinese hackers working with MSS appeared first on Security Affairs. aka Oro0lxy), 34, and DONG Jiazhi (???), Demers declared.