Security Affairs

NOVEMBER 2, 2023

[link] — 360 Netlab (@360Netlab) July 28, 2021 Earlier in August 2021, Microsoft researchers reported that the Mozi botnet was improved by implementing new capabilities to target network gateways manufactured by Netgear, Huawei, and ZTE. ” reads the analysis published by ESET. ” concludes the report. .

IoT 107

IoT Manufacturing IT Security 107

Security Affairs

DECEMBER 14, 2022

All too often, this gives them a false sense of security: when in fact, threat actors can not only access and watch your camera feed but exploit the unsecured device to hack into your network. After looking at 28 of the most popular manufacturers, our research team found 3.5 The reign of a Chinese brand.

Passwords 138

Passwords Manufacturing Authentication Government 138

Security Affairs

OCTOBER 19, 2023

The Europen Agency for cybersecurity ENISA releases its ENISA Threat Landscape 2023 (ETL) report , which is the annual analysis of the state of the cybersecurity threat landscape. It identifies the top threats, major trends observed with respect to threats, threat actors and attack techniques, as well as impact and motivation analysis.

Artificial Intelligence 122

Artificial Intelligence Ransomware Cybersecurity Manufacturing 122

Security Affairs

DECEMBER 19, 2022

The Qilin ransomware-as-a-service (RaaS) group uses a double-extortion model, with most of the victims in the manufacturing and IT industries. ” reads the analysis published by Trend Micro. ” reads the analysis published by Trend Micro. ” continues the analysis. AGENDA.THIAFBB.” AGENDA.THIAFBB.”

Ransomware 134

Ransomware Encryption Passwords Education 134

Security Affairs

NOVEMBER 15, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. PuTTY.exe Rhysida actors have been observed creating Secure Shell (SSH) PuTTy connections for lateral movement. The victims of the group are “targets of opportunity.”

Ransomware 124

Ransomware Manufacturing Education Passwords 124

Security Affairs

APRIL 10, 2020

Visser Precision is a parts maker for many companies in several industries, including aerospace, automotive, industrial and manufacturing. an antenna in an anti-mortar defense system), billing and payment forms, supplier information, data analysis reports, and legal paperwork. ” reads the statement published by El Reg.

Ransomware 104

Ransomware Manufacturing Military Cybersecurity 104

Security Affairs

JULY 5, 2023

Once inside the system, this malicious variant stealthily extracts sensitive information and proceeds to encrypt the compromised files.” ” reads the analysis published by Zscaler. ” continues the analysis. The malware communicates with the command and control servers through HTTPS.

Ransomware 92

Ransomware Energy and Utilities Encryption Manufacturing 92

Security Affairs

MARCH 7, 2023

Researchers discovered a new info stealer dubbed SYS01 stealer targeting critical government infrastructure and manufacturing firms. ” reads the analysis published by Morphisec. ” reads the analysis published by Morphisec. to lure victims into downloading a malicious file.

Government 97

Government Manufacturing Authentication Cybersecurity 97

Security Affairs

NOVEMBER 9, 2022

“The chain merited further analysis because it is a 3 vulnerability chain where all 3 vulnerabilities are within Samsung custom components, including a vulnerability in a Java component.” “The analysis of this exploit chain has provided us with new and important insights into how attackers are targeting Android devices.

Manufacturing 115

Manufacturing Access IT Security 115

Security Affairs

APRIL 27, 2022

“The forensic analysis has been completed and the result has shown that this was a targeted professional cyber attack.” .” reads the press release published by the company. ” Deutsche Windtechnik did not disclose details about the attack, but experts believe that the company was hit with ransomware.

Manufacturing 92

Manufacturing Ransomware Cybersecurity Security 92

Security Affairs

AUGUST 5, 2022

The attack took place in May and lasted seven days, the analysis of the network logs suggests TAC-040 exfiltrated around 700MBs of data from the victim system. “ATI’s thorough analysis determined that the attack occurred during the end of May over a seven day period. ” reads the analysis published by Deepwatch.

Manufacturing 139

Manufacturing Cybersecurity IT Access 139

Security Affairs

JULY 3, 2022

The malware was first spotted in September 2021, the experts observed Raspberry Robin targeting organizations in the technology and manufacturing industries. continues the analysis. The malware uses TOR exit nodes as a backup C2 infrastructure. Initial access is typically through infected removable drives, often USB devices.

Manufacturing 99

Manufacturing Libraries Communications Cybersecurity 99

Security Affairs

JUNE 15, 2023

The operation targeted many organizations in critical infrastructure sectors, including financial services, food and agriculture, education, energy, government and emergency services, healthcare, manufacturing, and transportation.

Ransomware 95

Ransomware Cybersecurity Agriculture Education 95

Security Affairs

NOVEMBER 19, 2023

The group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT. Security experts attributed 67 attacks to the group in May 2023, most of the victims are in the U.S. and Brazil.

Ransomware 132

Ransomware Encryption Metadata Manufacturing 132

Security Affairs

FEBRUARY 1, 2022

Researchers discovered tens of vulnerabilities in UEFI firmware code used by the major device manufacturers. Researchers at firmware security company Binarly have discovered 23 vulnerabilities in UEFI firmware code used by the major device makers. ” reads the analysis published by Binarly. ” continues the post.

Manufacturing 95

Manufacturing Security Access IT 95

Security Affairs

MARCH 26, 2021

Accenture security researchers published an analysis of the latest Hades campaign, which is ongoing since at least December 2020. . Experts discovered that threat actors targeted a large US transportation & logistics organization, a large US consumer products organization, and a global manufacturing organization.

Ransomware 144

Ransomware Encryption File names Manufacturing 144

Security Affairs

OCTOBER 18, 2022

The attacks detailed by Cybereason targeted technology and manufacturing companies primarily located in East Asia, Western Europe, and North America. ” reads the analysis published by Symantec. Symantec pointed out that the attacks against government organizations in Hong Kong remained undetected for a year in some cases.

File names 118

File names Encryption Manufacturing Libraries 118

Security Affairs

SEPTEMBER 2, 2022

The malware was first spotted on September 2021, the experts observed it targeting organizations in the technology and manufacturing industries. Now IBM Security X-Force researchers announced to have found evidence that Evil Corp is likely using Raspberry Robin infrastructure to carry out its attacks. ” reported IBM.

Security awareness 114

Security awareness Manufacturing Ransomware Cybersecurity 114

Security Affairs

DECEMBER 13, 2021

The TinyNuke malware is back and now was used in attacks aimed at French users working in manufacturing, technology, construction, and business services. The attackers used invoice-themed lures targeting entities in manufacturing, industry, technology, finance, and other verticals. .

Manufacturing 107

Manufacturing Business Services Communications IT 107

Security Affairs

DECEMBER 12, 2023

The experts observed the use of NineRAT at around September 2023 against a European manufacturing entity. ” reads the analysis published by Talos. Talos believes that NineRAT was built around May 2022, but was first spotted on March 2023 as part of Operation Blacksmith.

Agriculture 112

Agriculture Data collection Access Manufacturing 112

Security Affairs

DECEMBER 1, 2023

. “Our analysis suggests that Black Basta has received at least $107 million in ransom payments since early 2022, across more than 90 victims. ” Most of the victims are in the manufacturing, engineering and construction, and retail sectors. The average ransom payment was $1.2 61,9% of the victims are in the US, 15.8%

Ransomware 96

Ransomware Blockchain Retail Insurance 96

Security Affairs

JULY 3, 2023

reads the advisory The vulnerability is a heap-based buffer overflow issue and according to the vendor it may have been exploited in a limited number of attacks aimed at government, manufacturing, and critical infrastructure sectors. ” states the analysis published by Bishop Fox. states the report published by Fortinet. .

Manufacturing 92

Manufacturing Authentication Risk Security 92

Security Affairs

FEBRUARY 11, 2024

The malware was first spotted in September 2021, the experts observed it targeting organizations in the technology and manufacturing industries. The analysis of the samples before October, revealed that the operators also used an exploit for CVE-2023-29360. The malware uses TOR exit nodes as a backup C2 infrastructure.

Communications 125

Communications Manufacturing Libraries Cybersecurity 125

Security Affairs

MARCH 21, 2023

Cryptocurrency ATM maker General Bytes suffered a security breach over the weekend, the hackers stole $1.5M Cryptocurrency ATM manufacturers General Bytes suffered a security incident that resulted in the theft of $1.5M GENERAL BYTES is the world’s largest Bitcoin, Blockchain, and Cryptocurrency ATM manufacturer.

Manufacturing 89

Manufacturing Passwords Blockchain Cloud 89

Security Affairs

AUGUST 21, 2022

The campaign began in June 2022 and is still ongoing, the attacks hit organizations in multiple industries, such as Automotive, Chemicals Manufacturing, and others. ” reads the post published by Zscaler. ” concludes the report. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Archiving 99

Archiving Phishing Communications Manufacturing 99

Security Affairs

NOVEMBER 16, 2022

” continues the analysis. Kaspersky reported attacks against entities in multiple industries, including education, chemical manufacturing, governmental research centers and policy institutes, IT service providers, utility providers and telecommunications.

Manufacturing 132

Manufacturing Education Encryption IT 132

Security Affairs

JANUARY 4, 2023

Cybersecurity researcher Sam Curry and his colleagues discovered many vulnerabilities in the vehicles manufactured by tens of carmakers and services implemented by vehicle solutions providers. ” reads the analysis published by Curry.

Sales 98

Sales Access Manufacturing Authentication 98

Security Affairs

MAY 29, 2023

Cisco Talos and the Citizen Lab researchers have published a technical analysis of the powerful Android spyware Predator. Security researchers at Cisco Talos and the Citizen Lab have shared technical details about a commercial Android spyware named Predator that is sold by the surveillance firm Intellexa (formerly known as Cytrox).

IT 96

IT Communications Access Manufacturing 96

Security Affairs

SEPTEMBER 1, 2020

It’s normal that … we want a European solution” because of the importance of “the security of our communication,” Macron told reporters. In July, the French information security agency ANSSI announced that Huawei Technologies Ltd. .'” reported the Associated Press agency.

IT 135

IT Military Manufacturing Risk 135

Security Affairs

JUNE 28, 2023

The group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT. ” Security experts attributed 67 attacks to the group in May 2023, most of the victims are in the U.S. and Brazil. and Brazil. ” reported NCC.

Ransomware 94

Ransomware Encryption Manufacturing Business Services 94

Security Affairs

JANUARY 26, 2023

It has been estimated that the flaw CVE-2021-35394 affects almost 190 models of devices from 66 different manufacturers. The analysis of the attacks in the wild revealed the use of the following three types of payloads: A script executes a shell command on the targeted server (mostly from the Mirai).

IoT 97

IoT Manufacturing IT Security 97

Security Affairs

NOVEMBER 24, 2022

RansomExx operation has been active since 2018, the list of its victims includes government agencies, the computer manufacturer and distributor GIGABYTE , and the Italian luxury brand Zegna. ” reads the analysis published by IBM Security X-Force.

Ransomware 99

Ransomware Encryption Manufacturing Government 99

Security Affairs

JULY 31, 2019

A few hours ago, I have written about an interesting analysis of the possible hack of avionics systems, not DHS warns of cyber attacks against small airplanes. Patrick Kiley, a senior security consultant at Rapid7 conducted an investigation into the security of avionics systems inside small airplanes. Pierluigi Paganini.

Computer and Electronics 82

Computer and Electronics Manufacturing Access Authentication 82

Security Affairs

NOVEMBER 27, 2023

“Their analysis shows that the civil aviation sector of terrorist Russia is on the verge of collapse.” The state-sponsored hackers claimed to have stolen sensitive documents that contained proof of a crisis in Russia’s aviation industry. ” continues the announcement.

Military 122

Military Manufacturing Government Authentication 122

Security Affairs

AUGUST 4, 2022

Tens of router models from Taiwanese SOHO manufacturer DrayTek are affected by a critical, unauthenticated, remote code execution vulnerability, tracked as CVE-2022-32548, that can be exploited to fully compromise a vulnerable device and gain unauthorized access to the broader network. . ” continues the analysis.

Passwords 99

Passwords Manufacturing Access IT 99

Security Affairs

MAY 25, 2021

The audio equipment manufacturer Bose Corporation said it was the victim of a ransomware attack that took place earlier this year, on March 7. Performed detailed forensics analysis on impacted server to analyse the impact of the malware/ransomware.

Ransomware 127

Ransomware Manufacturing Encryption Passwords 127

Security Affairs

OCTOBER 7, 2020

” Threat actors employed anti-analysis and evasion techniques, including, code obfuscation and performing some checks for sandbox or debugger environments. At the time of the analysis, the hard-coded target URL of the malware was not reachable making it impossible to attribute the Kraken technique to a specific threat actor.

Phishing 131

Phishing Manufacturing Archiving Government 131