Security Affairs

NOVEMBER 20, 2023

Researchers at cybersecurity firm NSFOCUS analyzed DarkCasino attack pattern exploiting the WinRAR zero-day vulnerability tracked as CVE-2023-38831. The economically motivated APT group used specially crafted archives in phishing attacks against forum users through online trading forum posts. ” concludes the report.

Phishing 138

Phishing Archiving Financial Services Cybersecurity 138

Security Affairs

MAY 26, 2024

The attackers sent out emails with ZIP archives containing an IMG files that serves as decoys for hidden EXE malware and ACCDB documents. CERT-UA warned Ukrainian CEOs to enhance cybersecurity measures for accountants’ automated workplaces. ” read the advisory published by CERT-UA. ” continues the report.

Archiving 110

Archiving Phishing Access Cybersecurity 110

OpenText Information Management

MARCH 30, 2023

OpenText™ Cybersecurity Services observed a recent malspam campaign where IcedID was delivered via an archived zip file containing a Visual Basic script. It targets a victim’s financial information and it is also capable of dropping other malware, most commonly CobaltStrike.

Archiving 73

Archiving Cybersecurity IT Security 73

Security Affairs

APRIL 16, 2023

MalwareHunterTeam researchers discovered the LockBit encryptors in a ZIP archive uploaded to VirusTotal. "locker_Apple_M1_64": BleepingComputer confirmed that the zip archive contained “previously unknown encryptors for macOS, ARM, FreeBSD, MIPS, and SPARC” architectures.

Archiving 98

Archiving Encryption Ransomware Education 98

eSecurity Planet

MARCH 15, 2024

HackerGPT, first launched in 2023, is a ChatGPT-powered tool that merges AI technology with cybersecurity-focused expertise. in February 2024, it serves as an extensive repository of hacking tools and techniques to actively assist users in managing complex cybersecurity protection strategies. Launch of HackerGPT 2.0

Cybersecurity 113

Cybersecurity Education Privacy Access 113

Security Affairs

SEPTEMBER 20, 2021

The popular cybersecurity research Bob Diachenko discovered his personal data online stored on an unprotected Elasticsearch database containing the personal details of more than 106 million visitors to Thailand. While the IP address of the database is still public, the database was taken offline and has been replaced with a honeypot.

Honeypots 135

Honeypots Archiving Personal data Cybersecurity 135

Security Affairs

MAY 13, 2024

New Jersey’s Cybersecurity and Communications Integration Cell (NJCCIC) reported that since April, threat actors used the the Phorpiex botnet to send millions of phishing emails as part of a LockBit Black ransomware campaign. Experts estimated that in one year it allowed to steal crypto assets worth of 500,000 dollars.

Phishing 114

Phishing Ransomware Security awareness Authentication 114

Security Affairs

DECEMBER 1, 2023

The popular cybersecurity researcher Patrick Wardle dissected the new macOS ransomware Turtle used to target Apple devices. The popular cyber security researcher Patrick Wardle published a detailed analysis of the new macOS ransomware Turtle. The experts speculate the malware was first developed for Windows, then ported to macOS.

Ransomware 129

Ransomware Encryption Archiving Cybersecurity 129

Security Affairs

DECEMBER 21, 2023

Cybersecurity researcher Jeremiah Fowler discovered an unprotected database associated with Estate Wealth Network. The archive, totaling 1.16 Goyzer claims to provide technological solutions for real estate developers, property managers, and brokers. During this period, another case has garnered attention. terabytes, housed over 1.5

Archiving 111

Archiving Phishing Cybersecurity Risk 111

Security Affairs

OCTOBER 14, 2023

Data in the archives suggest it is associated with employee badges, audits, commission payout data, and other account-related information. ” CDW revealed that it had detected suspicious activity related to the Sirius Federal servers and quickly launched an investigation with the help of external cybersecurity experts. “we

Ransomware 132

Ransomware Cybersecurity Archiving Education 132

Security Affairs

APRIL 24, 2022

The collective has leaked a 432GB archive containing 645,000 emails. The collective has leaked a 211GB archive containing 365,000 emails. The collective has leaked a 432GB archive containing 575,000 emails. The collective has leaked a 130GB archive containing 250,000 emails. Sawatzky is a property management company.

Archiving 105

Archiving Government Cybersecurity Security 105

Adam Levin

MARCH 31, 2022

When it comes to backing up your data, IT and cybersecurity experts alike consistently advise what’s known as the “3-2-1” rules, which are: Keep at least three copies of your data: The emphasis here is on at least. Backups are inherently fallible, and can fall prey to malware, ransomware, power surges, and hardware failure.

Archiving 117

Archiving Cloud Cybersecurity Ransomware 117

eSecurity Planet

JUNE 3, 2024

The problem: Cybersecurity firm eSentire’s threat response unit discovered fake browser updates that delivered instances of BitRAT and Lumma Stealer malware. Discord, which has lately been heavily used as a cyberattack surface, hosts the zip archive file. When they try to upgrade, a zip file downloads onto their computer.

Authentication 109

Authentication Passwords Access Cybersecurity 109

Security Affairs

JUNE 21, 2021

The group published the link to 13 password-protected archives, allegedly containing sensitive data stolen from the chipmaker. Attention Password for the Archives: XXXXXXXXXXX#1JLDiw8″ reads the post published by the group on its leak site. !!Inside

Ransomware 138

Ransomware Archiving Passwords Authentication 138

Security Affairs

APRIL 5, 2022

Upon opening the file, a RAR-archive named “Viyskovi_zlochinci_RU.rar” is created. . The archive contains a link file named “War criminals destroying Ukraine (home addresses, photos, phone numbers, pages on social networks).lnk,” The script calculates a unique identifier of the computer based on its.

Military 118

Military Phishing File names Archiving 118

The Last Watchdog

NOVEMBER 8, 2021

However, M&A is a complex undertaking, and integrating and consolidating IT, cybersecurity and data privacy infrastructure only adds to the challenge. M&A invariably creates technology gaps that bad actor’s prey upon. Patient data exposures. Healthcare data security and privacy is a problem that continues to grow.

Access 349

Access Privacy Security IoT 349

IBM Big Data Hub

MAY 28, 2024

Unsurprisingly, companies are increasingly prioritizing data protection within their cybersecurity initiatives, realizing that a robust data protection strategy not only defends against potential data breaches but also ensures ongoing compliance with regulatory laws and standards.

Data breaches 83

Data breaches GDPR Compliance Encryption 83

Security Affairs

APRIL 17, 2023

“If the user complies, an archive will be downloaded from a remote server (compromised site), protected with a password given in the original PDF file.” ” Upon opening the attachment, it will retrieve an archive from a compromised website. The archive contains an obfuscated Windows Script File (.WSF)

e-Delivery 94

e-Delivery Archiving Education Passwords 94

Archive-It

NOVEMBER 26, 2018

by the Archive-It team. Archive-It and the Internet Archive’s Web Group welcomed three new teammates this fall. They have already contributed important updates and improvements to the web crawling, data service, and archival replay tools relied upon by Archive-It partners.

Archiving 20

Archiving Computer and Electronics IT Big data 20

Security Affairs

JUNE 7, 2021

Researchers at cybersecurity firm Shielder discovered a remote code execution on QNAP Q’center through a manipulated QPKG installation package. Researchers at cybersecurity firm Shielder discovered a remote code execution flaw on QNAP Q’center through a manipulated QPKG installation package.

Archiving 99

Archiving Cybersecurity IT Security 99

Security Affairs

MARCH 6, 2024

quickly attempted a comeback that has largely been dismissed by the cybersecurity community as a dud. In fact, the cybersecurity community often overlooks the fact that LockBit 3.0 was one of the first ransomware groups to start embedding leaked data into torrent files for download and uploading these archives to TOR.

Risk 120

Risk Ransomware Access Cybersecurity 120

Security Affairs

JUNE 1, 2022

This week, the cybersecurity researcher nao_sec discovered a malicious Word document (“05-2022-0438.doc”) Researchers from Proofpoint reported that TA413 is conducting a spear-phishing campaign that uses ZIP archives containing weaponized Word Documents. in Microsoft Office in attacks in the wild. app for the attacks.

Archiving 103

Archiving Cybersecurity Phishing Security 103

Security Affairs

JULY 31, 2022

A threat actor that goes online with the moniker Adrastea , and that defines itself as a group of independent cybersecurity specialists and researchers, claims to have hacked MBDA. We are “Adrastea” – a group of independent specialists and researchers in the field of cybersecurity. “Hello!

Manufacturing 118

Manufacturing Military Archiving Cybersecurity 118

Security Affairs

MARCH 17, 2024

Cybersecurity researchers discovered multiple GitHub repositories hosting cracked software that are used to drop the RisePro info-stealer. The researchers noticed that the users must unpack several layers of archives using the password “GIT1HUB1FREE,” which is provided in the README.md

Passwords 110

Passwords File names Archiving Cybersecurity 110

Security Affairs

JUNE 4, 2022

B00da and Porteur leaked a 1T archive containing data and emails from the law firm. Anonymous has leaked a 823 GB archive containing 1.5 B00da , Porteur , and Wh1t3 Sh4d0w leaked a 184 GB archive containing company emails. million emails.

Archiving 123

Archiving Government Passwords Cybersecurity 123

Security Affairs

MAY 8, 2023

Threat actors are using emails sent from compromised accounts with the subject “bill/payment” with an attachment in the form of a ZIP archive. “The mentioned ZIP archive is a polyglot file containing a decoy document and a JavaScript file “pax_2023_AB1058.js” We are in the final!

Archiving 95

Archiving Phishing Access Cybersecurity 95

Security Affairs

OCTOBER 9, 2023

Cybersecurity researchers 3xp0rt reported that a threat actor that goes online with the moniker ‘kapuchin0’ (and also uses the alias Gookee) has leaked the source code of the HelloKitty ransomware on the XSS forum. kapuchin0 claims that the leaked code is the first breach of the HelloKitty ransomware. ” said kapuchin0.

Ransomware 122

Ransomware Archiving Encryption Cybersecurity 122

Security Affairs

MARCH 30, 2024

The archive contains 73.481.539 records. “It “AT&T has launched a robust investigation supported by internal and external cybersecurity experts. The seller, who goes online with the moniker MajorNelson, claims that the data was obtained from an unnamed AT&T division by @ ShinyHunters in 2021. It was leaked online today.”

Data breaches 136

Data breaches Sales Archiving Access 136

Security Affairs

MAY 28, 2022

Now the Microsoft-owned company provided an update on the incident, the attackers were able to escalate access to npm infrastructure and access the following files exfiltrated from npm cloud storage: A backup of skimdb.npmjs.com containing data from April 7, 2021, with the following information:An archive of user information from 2015.

Metadata 142

Metadata Passwords Archiving Access 142

Security Affairs

JUNE 6, 2022

The popular cybersecurity expert Kevin Beaumont, who named the bug Follina , published an analysis of the flaw. Last week, the cybersecurity researcher nao_sec discovered a malicious Word document (“05-2022-0438.doc”) Gathered data are exfiltrated in the form of zip archives to the address 45.77.156[.]179.

Phishing 105

Phishing Archiving Cybersecurity Government 105

The Texas Record

NOVEMBER 21, 2019

Robbins took the audience on a journey introducing all the conference themes that were then touched on throughout the day– building and growing relationships between records management and other related groups, namely cybersecurity and information technology.

Archiving 89

Archiving Records Management Security Information governance 89

Security Affairs

JUNE 7, 2021

Three Ukrainian cybersecurity agencies ( Ukrainian Secret Service , Ukrainian Cyber Police , and CERT Ukraine ), including the Ukrainian Secret Service, warned last week of a “massive” spear-phishing campaign conducted by Russia-linked hackers against its government and organizations in the private industry. Details in the application… ».

Phishing 96

Phishing Archiving Government Passwords 96

Security Affairs

AUGUST 10, 2022

The Cybersecurity & Infrastructure Security Agency (CISA) has added a recently disclosed security flaw, tracked as CVE-2022-30333 (CVSS score: 7.5), in the UnRAR utility to its Known Exploited Vulnerabilities Catalog. The vulnerability was reported in late June by cybersecurity researcher Simon Scannell from SonarSource.

Archiving 97

Archiving Cybersecurity Risk Security 97

Adam Levin

JULY 10, 2020

A recent article released by cybersecurity and antivirus firm Bitdefender shows that 8.4 Quidd (4 million records): An archive of 4 million usernames, email addresses, and hashed passwords from online marketplace Quidd were found online following an April data breach. Marriott (5.2

Data breaches 100

Data breaches Cybersecurity Archiving Personal data 100

Security Affairs

APRIL 20, 2022

Anonymous claims to have stolen 426,000 emails and leaked an archive of 160 GB in size. Anonymous claims to have stolen 15,600 emails and leaked an archive of 9.5 Anonymous claims to have stolen 87,500 emails and leaked an archive of 107 GB in size. GUOV i GS – General Dept. GB in size.

Archiving 128

Archiving Access Government Cybersecurity 128

Security Affairs

MAY 4, 2023

doc,docx,rtf,txt,xls,xlsx,ppt,pptx,vsd,vsdx,pdf,png,jpeg,jpg,zip,rar,7z,mp4,sql ,php,vbk,vib,vrb,p7s and.sys,dll,exe,bin,dat) to archive them using the legitimate WinRAR program. The attackers were observed using WinRAR with the “-df” option to delete the source file after being added to the archives.

Archiving 91

Archiving Education Authentication Ransomware 91

eSecurity Planet

JULY 12, 2021

While many cybersecurity vendors approach zero trust from the perspective of microsegmentation , shrinking the network as much as possible, one startup thinks security needs to be as close to the data as possible and is thus focused on data storage. Secure file server stops attacks.

Security 125

Security Ransomware Metadata Cloud 125