article thumbnail

China-linked Budworm APT returns to target a US entity

Security Affairs

The China-linked APT27 group has been active since 2010, it targeted organizations worldwide, including U.S. defense contractors , financial services firms, and a national data center in Central Asia. It is designed to load malicious DLLs and encrypt payloads.” based organization.

article thumbnail

Experts linked ransomware attacks to China-linked APT27

Security Affairs

The APT group has been active since 2010, targeted organizations worldwide, including U.S. defense contractors , financial services firms, and a national data center in Central Asia. The hackers used the Windows drive encryption tool BitLocker to lock the servers.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

FTC Seeks Comment on Proposed Changes to its GLBA Safeguards and Privacy Rules

Data Matters

Of particular note, the Safeguards Rule NPRM proposes to align the FTC’s requirements with those of the New York Department of Financial Services (“NYDFS”), as found in its cybersecurity regulations, and the National Association of Insurance Commissioners (“NAIC”), as found in its insurance data security model law.

Privacy 68
article thumbnail

Chinese LuckyMouse APT has been using a digitally signed network filtering driver in recent attacks

Security Affairs

The APT group has been active since at least 2010, the crew targeted U.S. defense contractors and financial services firms worldwide. In March 2018, security experts at Kaspersky Lab have observed an attack powered by the Chinese APT group, the experts speculate the campaign was started in the fall of 2017.

article thumbnail

Cybersecurity Standards for the Insurance Sector – A New Patchwork Quilt in the US?

HL Chronicle of Data Protection

For example, the New York Department of Financial Services (‘NYDFS’) in March 2017 issued its Cybersecurity Regulation (23 NYCRR 500) (‘the NYDFS Cybersecurity Regulation’), a groundbreaking and far-reaching regulatory regime focused on financial institutions licensed in New York, including insurance companies.

article thumbnail

FTC Seeks Comment on Proposed Changes to GLBA Implementing Rules

HL Chronicle of Data Protection

When the GLBA was enacted in 1999, the FTC was one of several federal regulators with rulemaking authority, and the FTC’s Privacy Rule applied to a broad range of non-bank financial institutions, such as payday lenders, mortgage brokers, check cashers, and debt collectors. Specific information security measures.

Privacy 40
article thumbnail

FTC Proposes Changes to GLB Privacy and Safeguards Rules

Hunton Privacy

The proposed changes would add more detailed requirements on how financial institutions must protect customer information. Notably, the proposed amendments would require covered financial institutions to encrypt all customer data held or transmitted by the institution both in transit over external networks and at rest.

Privacy 55