Security Affairs

MARCH 21, 2022

Ukraine CERT (CERT-UA) warns of spear-phishing ??attacks The Government Team for Response to Computer Emergencies of Ukraine (CERT-UA) warns of spear-phishing messages conducted by UAC-0035 group (aka InvisiMole) against Ukrainian state bodies. The messages use an archive named “501_25_103.zip”, Pierluigi Paganini.

Phishing 95

Phishing Military Archiving Government 95

Security Affairs

NOVEMBER 4, 2022

The attacks were spotted while analyzing network artifacts associated with RomComRAT infections resulting from attacks targeting Ukrainian military institutions. Then they trojanizing a legitimate application and distributed it through the decoy website, deploying targeted phishing emails to the victims.

Passwords 120

Passwords Military Ransomware Archiving 120

Security Affairs

FEBRUARY 17, 2020

Gamaredon Group is a Cyber Espionage persistent operation attributed to Russians FSB ( Federal Security Service ) in a long-term military and geo-political confrontation against the Ukrainian government and more in general against the Ukrainian military power. . Information about first SFX archive. cmd” and “28847”.

Archiving 97

Archiving Military IT Phishing 97

Security Affairs

AUGUST 9, 2022

In January 2022, researchers at Kaspersky ICS CERT uncovered a series of targeted attacks on military industrial enterprises and public institutions in Afghanistan and East Europe. China-linked threat actors targeted dozens of industrial enterprises and public institutions in Afghanistan and Europe.

Encryption 112

Encryption Military Archiving Phishing 112

Security Affairs

DECEMBER 7, 2019

Russia-linked Gamaredon cyberespionage group has been targeting Ukrainian targets, including diplomats, government and military officials. Russia linked APT group tracked as Gamaredon has been targeting several Ukrainian diplomats, government and military officials, and law enforcement. The Gamaredon group.

Military 62

Military Government Phishing Archiving 62

Security Affairs

SEPTEMBER 24, 2019

The Fancy Bear APT group has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. ” The threat actors used phishing messages containing a malicious attachment that launches a long chain of downloaders , ending with a backdoor. dotm hosted at Dropbox. .

Phishing 95

Phishing Military Archiving Security 95

Security Affairs

NOVEMBER 9, 2019

According to Microsoft, the Platinum has been active since at least 2009, it was responsible for spear phishing attacks on ISPs, government organizations, intelligence agencies, and defense institutes. The backdoor deploys an SFX archive containing a Windows task installation script. ” reads the analysis publisjed by Kaspersky.

IT 53

IT Archiving Encryption Passwords 53

Security Affairs

FEBRUARY 21, 2020

The Operation Transparent Tribe was first spotted by Proofpoint Researchers in Feb 2016, in a series of espionages operations against Indian diplomats and military personnel in some embassies in Saudi Arabia and Kazakhstan. The macro creates two folders inside %PROGRAMDATA% path, “ systemidleperf ” and “ SppExtComTel ”.

Military 128

Military Communications Encryption IT 128

Security Affairs

JANUARY 18, 2024

The ColdRiver APT (aka “ Seaborgium “, “Callisto”, “Star Blizzard”, “TA446”) is a Russian cyberespionage group that has been targeting government officials, military personnel, journalists and think tanks since at least 2015. The nation-state actor is carrying out spear-phishing attacks for cyberespionage purposes.

Phishing 110

Phishing Encryption Military Archiving 110

The Last Watchdog

DECEMBER 3, 2018

I have a Yahoo email account, I’ve shopped at Home Depot and Target , my father was in the military and had a security clearance, which included a dossier on his family, archived at the U.S. Office of Personnel Management , I’ve had insurance coverage from Premera Blue Cross and I’ve stayed at the Marriott Marquis in San Francisco.

Authentication 157

Authentication Military Access Insurance 157

Security Affairs

DECEMBER 11, 2018

Government employees, military and civilian citizens who had accounts on official government portals of France ( gouv.fr ), Hungary ( gov.hu ) and Croatia ( gov.hr ) became victims of this data compromise. Phishing emails were sent to personal and corporate email accounts.

Government 102

Government Passwords Military Archiving 102

IT Governance

APRIL 9, 2024

Police launch investigation into spear phishing attack on MPs Leicestershire Police have begun an inquiry after 12 people working in Westminster reported that they had received unsolicited WhatsApp messages. It’s also started automatically blocking bulk emails to help prevent spam and phishing campaigns.

Data Privacy 52

Data Privacy Privacy Security Manufacturing 52

IT Governance

APRIL 22, 2024

International law enforcement operation disrupts LabHost phishing-as-a-service platform A law enforcement operation involving 19 countries has disrupted LabHost, one of the world’s largest phishing-as-a-service platforms. Alternatively, you can view our full archive.

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

IT Governance

SEPTEMBER 6, 2023

It also breaks down each month’s cyber security incidents and provides more information about the biggest and most notable breaches of the month. – JDSupra (unknown) VNS Health Confirms Data Breach at TMG Health Resulted in Data of 103,775 Consumers Being Leaked | Console and Associates, P.C.

Data breaches 94

Data breaches Ransomware Insurance Privacy 94

Security Affairs

JUNE 18, 2021

Most of the victims of the threat actor were located in Israel and Palestine, they belong to multiple industries including governments, telecommunications, finance, military, universities, and technology. The lure is usually based on a geopolitical topic related to the situation in the Middle East, especially the Gaza conflict.

Archiving 97

Archiving Passwords Government Military 97