article thumbnail

Russia-linked APT28 hacked Roundcube email servers of Ukrainian entities

Security Affairs

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , BlueDelta, and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The Recorded Future’s Insikt Group believes that the campaign has been active since November 2021.

article thumbnail

Ransomware Protection in 2021

eSecurity Planet

Also Read: Best Encryption Tools & Software for 2021. Forensic Analysis. We also look into the most dangerous strains today and predictions for 2021. Others go further in estimating ransomware will cost as much as $6 trillion per year starting in 2021 ( Cybersecurity Ventures ). Screenshot example. Statistics.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

GUEST ESSAY: Rising cyber risks make business intelligence gathering more vital than ever

The Last Watchdog

However, in our research, Investing in Cyber Resilience (2021) we found that only 49 percent of companies have a fully implemented and rolled out cyber security strategy, indicating pervasive barriers to cyber strategy adoption. And who is creating and driving the cyber strategy?

Risk 279
article thumbnail

Winter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks

Security Affairs

The Winter Vivern group was first analyzed in 2021, it has been active since at least 2020 and it targets governments in Europe and Central Asia. The analysis of the email HTML source code revealed the presence of a SVG tag at the end, which contains a base64-encoded payload. ” reads the analysis published by ESET.

Military 114
article thumbnail

Asylum Ambuscade spear-phishing campaign targets EU countries aiding Ukrainian refugees

Security Affairs

Experts found similarities between the infection chain associated with this campaign, tracked as Asylum Ambuscade, and other attacks Proofpoint observed in July 2021, a circumstance that suggests they were conducted by the same threat actor. ” reads the analysis published by ProofPoint.

article thumbnail

Google blocked China-linked APT31’s attacks targeting U.S. Government

Security Affairs

The campaign took place in February and Google Threat Analysis Group (TAG) team was not able to link it to the ongoing invasion of Ukraine. Google Threat Analysis Group (TAG) director Shane Huntley confirmed that the IT giant was able to detect and block all phishing messages. government. government. Pierluigi Paganini.

article thumbnail

Google warns of APT28 attack attempts against 14,000 Gmail users

Security Affairs

Shane Huntley, the head of the Threat Analysis Group (TAG), wrote on Twitter that his group had sent an above-average batch of government-backed security warnings. . Some info for people who got the warning and a reminder what it means: [link] and also in this — Shane Huntley (@ShaneHuntley) October 7, 2021.