Security Affairs

MARCH 17, 2022

The collective Anonymous and its affiliated groups continue to target the Russian government and private organizations. The collective Anonymous, and other groups in its ecosystem, continue to target the Russian government and private organizations. Let’s summarize the most interesting attacks observed in the last few days.

Military 140

Military Communications Government Access 140

Data Matters

DECEMBER 9, 2021

The Proposed Rule would bring “connected software applications” into the scope of Commerce’s authority to review certain transactions involving information and communications technology and services (ICTS) in the U.S. When and with what information may Commerce initiate a review under the ICTS review mechanism?

Communications 88

Communications Manufacturing Risk Data collection 88

Security Affairs

SEPTEMBER 9, 2022

The Armed Forces General Staff (Portuguese: Estado-Maior-General das Forças Armadas), or EMGFA, is the supreme military body of Portugal. The documents were spotted by the US Information Services which immediately alerted the U.S. It is responsible for the planning, command and control of the Portuguese Armed Forces.

Military 138

Military Sales Data breaches Cybersecurity 138

Security Affairs

FEBRUARY 8, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The group also relies on customized versions of open-source tools for C2 communications and to stay under the radar.

Energy and Utilities 107

Energy and Utilities Communications Military Manufacturing 107

Security Affairs

FEBRUARY 28, 2024

. “As early as 2022, APT28 actors had utilized compromised EdgeRouters to facilitate covert cyber operations against governments, militaries, and organizations around the world.” and foreign governments and military, security, and corporate organizations. ” reads the joint report.

Energy and Utilities 95

Energy and Utilities Military Government Phishing 95

Security Affairs

NOVEMBER 18, 2023

The Gamaredon APT group continues to carry out attacks against entities in Ukraine, including security services, military, and government organizations. The LitterDrifter worm is written in VBS, it supports two main features: automatic USB propagating and communication with a broad, flexible set of C2.

Military 111

Military Communications IT Government 111

Security Affairs

JUNE 6, 2019

The Platinum cyber espionage group uses steganographic technique to hide communications with the Command and Control Servers (C&C). Experts from Kaspersky have linked the Platinum APT group with cyber attacks involving an elaborate, and new steganographic technique used to hide communications with C2 servers. Pierluigi Paganini.

Communications 70

Communications Encryption Military Government 70

Security Affairs

NOVEMBER 5, 2021

The SSU has managed to identify the perpetrators’ names, intercept their communication and obtain irrefutable evidence of their involvement in the attacks. This ‘line of work’ is coordinated by the FSB’s 18th Center (Information Security Center) based in Moscow.” ” reads the announcement published by the SSU.

Military 120

Military Metadata Government Passwords 120

Security Affairs

AUGUST 29, 2023

The intruders China-linked hackers may have gained access to sensitive data, according to three government and private sector sources familiar with the situation, reported the Financial Times. NISC disclosed a potential security breach involving personal data associated with email communications.

Cybersecurity 90

Cybersecurity Military Personal data Government 90

Security Affairs

APRIL 19, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The group also relies on customized versions of open-source tools for C2 communications and to stay under the radar.

Energy and Utilities 96

Energy and Utilities Communications Military Manufacturing 96

Security Affairs

JUNE 21, 2023

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , BlueDelta, and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. According to CERT-UA, this campaign targeted more than 40 Ukrainian organizations, including government entities.

Military 84

Military Phishing Government Communications 84

Security Affairs

JUNE 19, 2021

Experts attribute a series of cyber-espionage campaigns dating back to 2014, and focused on gathering military intelligence, to China-linked Unit 69010. These targets suggest the group is likely interested in gathering intelligence on military technology and defense” reads the report published by the Insikt Group.

Military 117

Military Mining Government Communications 117

Security Affairs

AUGUST 7, 2023

NPO Mashinostroyeniya (JSC MIC Mashinostroyenia, NPO Mash) is a leading Russian manufacturer of missiles and military spacecraft. Treasury Department in July 2014 due to its support to the Russian government in attempting of destabilizing eastern Ukraine and its ongoing occupation of Crimea. The Russian firm was sanctioned by the U.S.

Military 83

Military Communications Manufacturing Phishing 83

Security Affairs

APRIL 9, 2023

made electronics on behalf of the Russian government and military. The Estonian man is accused of having helped the Russian government and military to purchase US-made electronics and hacking tools. manufacturers on behalf of Russian end-users, including defense contractors and other Russian government agencies.

Computer and Electronics 80

Computer and Electronics Military Manufacturing Government 80

Security Affairs

APRIL 26, 2023

In recent years, the researchers observed the group expanding its operations to include financial institutions and government entities. PingPull, was first spotted by Unit 42 in June 2022, the researchers defined the RAT as a “difficult-to-detect” backdoor that leverages the Internet Control Message Protocol (ICMP) for C2 communications.

Communications 93

Communications Military Government Libraries 93

Security Affairs

MAY 24, 2022

Threat actors could perform reverse engineering of military-made malicious code and use their own versions in attacks in the wild. “The same applies for the digital weapons that, maybe today are used by the military, developed by military, and tomorrow will be available for criminals,” he explained. .

Military 105

Military Government Communications Security 105

Security Affairs

JULY 1, 2020

Federal Communications Commission (FCC) announced that Chinese telecommunications giants Huawei and ZTE are considered as national security threats. Last week China accused the US government of “oppressing Chinese companies” after U.S. regulators declared Huawei and ZTE to be national security threats.

Communications 82

Communications Security Government Military 82

Security Affairs

MARCH 2, 2022

A spear-phishing campaign, tracked as Asylum Ambuscade, targets European government personnel aiding Ukrainian refugees. ” Since Russia’s invasion of Ukraine, the Ghostwriter APT group has launched , multiple attacks against the private email accounts of Ukrainian military personnel. .

Phishing 77

Phishing Military Government Communications 77

Security Affairs

SEPTEMBER 1, 2020

French President Emmanuel Macron announced that his government will not exclude Chinese telecom giant Huawei from the building of the upcoming 5G telecommunication networks. However, Macron said that France will favor European providers of 5G technology due to security concerns.

IT 130

IT Military Manufacturing Risk 130

Security Affairs

AUGUST 13, 2020

.” The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election.

Military 137

Military IoT Phishing Government 137

Security Affairs

JULY 15, 2020

“This attack was done solely for fun” The group claims to have hacked numerous organizations and government agencies over the years, including US military, European Union, Washington DC, Israeli Defense Forces, the Indian Government, and some central banks.

Military 144

Military Government Communications Access 144

Security Affairs

DECEMBER 14, 2020

The cyber espionage group has tampered with updates released by IT company SolarWinds, which provides its products to government agencies, military, and intelligence offices, two people familiar with the matter told the Reuters agency. . Threat actors carried out a highly-sophisticated supply chain attack.

Military 128

Military Cybersecurity Communications Government 128

Security Affairs

SEPTEMBER 9, 2019

The group has continued launching attacks against entities in Southeast Asia, including military, satellite communications, media and educational organizations. Security experts at Symantec speculate that Thrip is a sub-group of Billbug. Researchers discovered that Sagerunex borrows code from an older Billbug tool dubbed Evora.

Military 80

Military Communications Government Education 80

Security Affairs

FEBRUARY 23, 2022

The Bvp47 backdoor was first discovered in 2013 while conducting a forensic investigation into a security breach suffered by a Chinese government organization. The name “ Bvp47 ” comes form numerous references to the string “Bvp” and the numerical value “0x47” used in the encryption algorithm.

Encryption 113

Encryption Military Archiving Government 113

Security Affairs

FEBRUARY 13, 2023

The attack also impacted the website of the Strategic Airlift Capability , which is a multinational initiative that provides its participating nations assured access to military airlift capability to address the growing needs for both strategic airlifts and tactical airlifts. ” reported The Telegraph.

Military 84

Military Communications Government Security 84

Security Affairs

JANUARY 31, 2024

“The Sliver backdoors contact their C2 server using HTTP/HTTPS communication. Targets span across the globe, they include both small businesses and large organizations. “Based on my observations, all the samples download a Sliver (Golang) backdoor, though from different URLs.” ” reads the report published by Synacktiv.

Authentication 89

Authentication Military Communications Security 89

Security Affairs

MARCH 1, 2020

Ireland is a strategic place for intercontinental communications because it represents the place where undersea cables which carry internet traffic connect to Europe. Garda and military intelligence agencies believe the Russian agents were sent by the military intelligence branch of the Russian armed forces, the GRU.

Military 125

Military Communications Data collection Access 125

Security Affairs

DECEMBER 1, 2022

Cyber attacks conducted by the APT37 group mainly targeted government, defense, military, and media organizations in South Korea. Dolphin abuses Google Drive cloud storage for Command & Control communication. Kaspersky first documented the operations of the group in 2016. ” reads the post published by ESET.

Military 111

Military Cloud Communications Access 111

Security Affairs

DECEMBER 14, 2020

The alarming data emerged in a filing with the Securities and Exchange Commission (SEC) on Monday. “On December 13, 2020, SolarWinds delivered a communication to approximately 33,000 Orion product customers that were active maintenance customers during and after the Relevant Period. ” reads the SEC filing.

Military 127

Military Government Communications Cybersecurity 127

Security Affairs

FEBRUARY 12, 2020

According to a joint report published by Germany’s ZDF public broadcaster and The Washington Post the Swiss-based firm Crypto AG was operating for CIA and the German Intelligence agency providing them with access to encrypted communications of more than 120 countries for decades. That’s not credible,” he said. They shut both eyes.”.

Military 80

Military Communications Encryption Government 80

Hunton Privacy

JUNE 11, 2021

national security. Under the EO, “foreign adversary” is defined as any foreign government or non-government entity engaged in a long-term pattern or serious instances of conduct significantly adverse to the national security of the U.S. or the security or safety of U.S.

Risk 112

Risk Military Manufacturing Sales 112

Security Affairs

MARCH 13, 2023

In February 2023, EclecticIQ researchers spotted multiple KamiKakaBot malware samples that were employed by the Dark Pink APT group (aka Saaiwc) in attacks against government entities in Southeast Asia countries. The C2 communication relies on a Telegram bot controlled by the threat actor. ” concludes the report.

Phishing 74

Phishing Encryption Military Government 74

Security Affairs

AUGUST 4, 2019

The US government is testing high-altitude balloons manufactured by Sierra Nevada to conduct surveillance over American soil. The US government is planning to use high-altitude balloons to conduct surveillance over Americans. ” states The Guardian. ” states the authorization. . ” states the authorization.

Military 75

Military Manufacturing Communications Government 75

Lenny Zeltser

JUNE 2, 2018

Information security? Computer security, perhaps? If we examine the factors that influence our desire to use one security title over the other, we’ll better understand the nature of the industry and its driving forces. Paul Melson and Loren Dealy Mahler viewed cybersecurity as a subset of information security.

Computer and Electronics 64

Computer and Electronics Information Security Cybersecurity Communications 64

Security Affairs

AUGUST 21, 2022

The Donot Team has been active since 2016, it focuses on government and military organizations, ministries of foreign affairs, and embassies in India, Pakistan, Sri Lanka, Bangladesh, and other South Asian countries. To understand which modules are used in the current infection, the malware communicates with another C2 server.”

IT 92

IT Phishing Military Encryption 92

IT Governance

MARCH 11, 2024

Other news ISO/IEC 27006:2024 published ISO (the International Organization for Standardization) and the IEC (International electrotechnical Commission) have published a new standard in the ISO 27000 information security series. Source (New) Professional services Netherlands Yes 28.3

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

Security Affairs

MARCH 6, 2022

State communications watchdog Roskomnadzor has ordered to block access to Facebook in Russia amid the ongoing invasion of Ukraine. Russian government released a list containing IP addresses and domains behind DDoS attacks that hit Russian infrastructure after the invasion.

Ransomware 86

Ransomware Phishing Military Government 86