Security Affairs

APRIL 5, 2022

The group targeted government and military organizations in Ukraine. In December 2019, the APT group targeted several Ukrainian diplomats, government and military officials, and law enforcement. Upon opening the file, a RAR-archive named “Viyskovi_zlochinci_RU.rar” is created. .

Military 115

Military Phishing File names Archiving 115

Security Affairs

NOVEMBER 5, 2023

The attackers attempted to trick victims into downloading and decompress a ZIP archive (Cross-Platform Bridges.zip) containing the malicious Python code masqueraded by an arbitrage bot. log – SUGARLOADER Stage 3 (Loader)- Discord (fake) – HLOADER Stage 4 (Payload) – KANDYKORN Decompressing the archive, it reveals a Main.py

Blockchain 97

Blockchain Archiving Military Encryption 97

Security Affairs

JUNE 15, 2023

The Gamaredon APT group (aka Shuckworm, Actinium, Armageddon, Primitive Bear, UAC-0010, and Trident Ursa) continues to carry out attacks against entities in Ukraine, including security services, military, and government organizations. The attack chain commences with spear-phishing emails with malicious attachments (.docx,rar,sfx

Military 82

Military File names Archiving Phishing 82

Security Affairs

JULY 31, 2022

The attackers said that the stolen data includes information about the employees of the company involved in military projects, commercial activities, contract agreements and correspondence with other companies. “Hello! ” reads the adv published by the group on a popular hacker forum.

Manufacturing 117

Manufacturing Military Archiving Cybersecurity 117

Security Affairs

MARCH 28, 2022

The phishing messages use a RAR-archive named “Saboteurs.rar”, which contains RAR-archive “Saboteurs 21.03.rar.” “The archive contains documents and images of the bait, as well as VBScript code (Thumbs.db), which will create and run the.NET program “dhdhk0k34.com.” Pierluigi Paganini.

Archiving 91

Archiving CMS File names Phishing 91

Security Affairs

MAY 16, 2021

The Operation Transparent Tribe (Operation C-Major, APT36, and Mythic Leopard) was first spotted by Proofpoint Researchers in Feb 2016, in a series of cyber espionage operations against Indian diplomats and military personnel in some embassies in Saudi Arabia and Kazakhstan. ” read the analysis published Cisco Talos.

IT 104

IT Military Phishing Archiving 104

Security Affairs

FEBRUARY 17, 2020

Gamaredon Group is a Cyber Espionage persistent operation attributed to Russians FSB ( Federal Security Service ) in a long-term military and geo-political confrontation against the Ukrainian government and more in general against the Ukrainian military power. . Information about first SFX archive.

Archiving 92

Archiving Military IT Phishing 92

Security Affairs

NOVEMBER 4, 2022

The attacks were spotted while analyzing network artifacts associated with RomComRAT infections resulting from attacks targeting Ukrainian military institutions. In the KeePass RomCom campaign threat actors distributed an archive named “KeePass-2.52.zip” ” reads the report published by BlackBerry.

Passwords 106

Passwords Military Ransomware Archiving 106

Security Affairs

MARCH 21, 2022

The messages use an archive named “501_25_103.zip”, In past campaigns, the group targeted a small number of high-profile organizations in the military sector and diplomatic missions in Eastern Europe. The post Russia-linked InvisiMole APT targets state organizations of Ukraine appeared first on Security Affairs.

Phishing 84

Phishing Military Archiving Government 84

Security Affairs

AUGUST 14, 2020

GB archive called “STRATEGICPLANNINGpart62.zip” Maze operators were very active during the past months, they have also stolen data from US military contractor Westech and the ST Engineering group , and they have released credit card data stolen from the Bank of Costa Rica (BCR) threatening to leak other lots every week.

Ransomware 123

Ransomware Archiving Military Encryption 123

Security Affairs

FEBRUARY 23, 2022

The group targeted multiple industries, including governments, telecom, aerospace, energy, financial institutions, nuclear research, oil and gas, military, transportation, and companies developing encryption technologies. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini. SecurityAffairs – hacking, backdoor).

Encryption 115

Encryption Military Archiving Government 115

Security Affairs

MAY 6, 2022

GB archive containing 75,000 files, emails and disk images from CorpMSP. GB archive containing 31,990 emails from LLC Capital. According to NB65, the 9GB of files included client contracts and image files of the Ministry of Defense contracts. The Anonymous-linked group leaked a 482.5 Anonymous leaked a 20.4

IT 82

IT Archiving Military Government 82

Security Affairs

AUGUST 9, 2022

In January 2022, researchers at Kaspersky ICS CERT uncovered a series of targeted attacks on military industrial enterprises and public institutions in Afghanistan and East Europe. The attackers breached dozens of enterprises and in some cases compromised their IT infrastructure, taking over systems used to manage security solutions.

Encryption 98

Encryption Military Archiving Phishing 98

Security Affairs

MARCH 17, 2021

Back in December, the SolarWinds supply chain attack made the headlines when a Russian cyber espionage group tampered with updates for SolarWinds’ Orion Network Management products that the IT company provides to government agencies, military, and intelligence offices. ” reads the incident report published by mimecast.

Encryption 97

Encryption Military Access Archiving 97

Security Affairs

AUGUST 18, 2021

APT37 has been active since at least 2012, it mainly targeted government, defense, military, and media organizations in South Korea. Spawn a thread to recursively search a path and upload files as a ZIP archive. The watering hole attacks on the Daily NK was conducted from March 2021 until early June 2021. services. .

Metadata 111

Metadata Military Archiving Cybersecurity 111

Security Affairs

NOVEMBER 9, 2019

In June 2018, experts at Kaspersky were investigating attacks against government and military entities in South and Southeast Asian countries, The experts tracked the campaign as EasternRoppels, they speculate it may have started as far back as 2012. The backdoor deploys an SFX archive containing a Windows task installation script.

IT 46

IT Archiving Encryption Passwords 46

Security Affairs

SEPTEMBER 24, 2019

The Fancy Bear APT group has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. It also contains an embedded ZIP archive that the macros dropped and extracted.” The group was involved also in the string of attacks that targeted 2016 Presidential election.

Phishing 86

Phishing Military Archiving Security 86

Security Affairs

FEBRUARY 21, 2020

The Operation Transparent Tribe was first spotted by Proofpoint Researchers in Feb 2016, in a series of espionages operations against Indian diplomats and military personnel in some embassies in Saudi Arabia and Kazakhstan. Introduction. The macro creates two folders inside %PROGRAMDATA% path, “ systemidleperf ” and “ SppExtComTel ”.

Military 114

Military Communications Encryption IT 114

Schneier on Security

JUNE 6, 2023

He had been working on the Edward Snowden archive for a couple of months, and had a pile of more technical documents that he wanted help interpreting. Those of us in the information security community had long assumed that the NSA was doing things like this. And what I was working on would become public in a few weeks.

Computer and Electronics 125

Computer and Electronics Encryption Government Privacy 125

Security Affairs

JANUARY 18, 2024

The ColdRiver APT (aka “ Seaborgium “, “Callisto”, “Star Blizzard”, “TA446”) is a Russian cyberespionage group that has been targeting government officials, military personnel, journalists and think tanks since at least 2015.

Phishing 95

Phishing Encryption Military Archiving 95

Security Affairs

JUNE 4, 2019

During recent times, Gamaredon is targeting the Ukrainian military and law enforcement sectors too, as officially stated by the CERT-UA. The infection chain is composed by different stages of password protected SFX (self extracting archive), each containing vbs or batch scripts. Information about initial SFX file.

Archiving 63

Archiving Passwords File names Military 63

IT Governance

MARCH 11, 2024

Other news ISO/IEC 27006:2024 published ISO (the International Organization for Standardization) and the IEC (International electrotechnical Commission) have published a new standard in the ISO 27000 information security series. Alternatively, you can view our full archive.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

Security Affairs

JUNE 18, 2021

Most of the victims of the threat actor were located in Israel and Palestine, they belong to multiple industries including governments, telecommunications, finance, military, universities, and technology.

Archiving 85

Archiving Passwords Military Government 85