Security Affairs

JUNE 18, 2020

Security researchers at ESET recently uncovered a campaign carried out by the InvisiMole group that has been targeting a small number of high-profile organizations in the military sector and diplomatic missions in Eastern Europe. The downloader communicates with C2 servers using DNS tunneling. Pierluigi Paganini.

Military 82

Military Communications Libraries Encryption 82

Security Affairs

JANUARY 29, 2024

Apart from conducting DDoS attacks, the man is suspected of disclosing strategic information to Russian intelligence. The information secretly provided to Moscow includes military secrets such as the locations of Ukrainian troops and military weaponry in the country.

Military 113

Military Communications Government Security 113

Data Matters

DECEMBER 9, 2021

The Proposed Rule would bring “connected software applications” into the scope of Commerce’s authority to review certain transactions involving information and communications technology and services (ICTS) in the U.S. When and with what information may Commerce initiate a review under the ICTS review mechanism? 4 See 15 C.F.R.

Communications 88

Communications Manufacturing Risk Data collection 88

Security Affairs

JUNE 17, 2020

Experts uncovered a new cyber-espionage campaign, dubbed “ Operation In(ter)receptio n,” aimed at aerospace and military organizations in Europe and the Middle East. For further communication with the customer, they used their own email address mimicking the victim’s.” ” continues the report. Pierluigi Paganini.

Military 76

Military Archiving Passwords Communications 76

Security Affairs

SEPTEMBER 9, 2022

The Armed Forces General Staff (Portuguese: Estado-Maior-General das Forças Armadas), or EMGFA, is the supreme military body of Portugal. According to the initial investigation, the documents were exfiltrated from systems in the EMGFA, in the secret military (CISMIL) and in the General Directorate of National Defense Resources.

Military 141

Military Sales Data breaches Cybersecurity 141

Security Affairs

MARCH 15, 2024

Russian hackers have knocked down the GPS and communications of Defence Secretary Grant Shapps RAF Dassault Falcon 900 jet with electronic warfare attack. A Sun’s defence editor onboard the RAF Dassault Falcon 900 jet reported that the GPS and communications were disabled by a jamming attack allegedly launched by Russia.

Communications 116

Communications Military Risk IT 116

Security Affairs

MARCH 17, 2022

The hacktivists also attempted to interfere with Russian military communications on the battlefield, recently they captured and shared Russian Military unencrypted High Frequency and morse code communications. Ukraine #Russia [link] — INFORMATION | WORLD HUMANITY | (@OpsAn0n) March 13, 2022.

Military 143

Military Communications Government Access 143

Security Affairs

NOVEMBER 18, 2023

The Gamaredon APT group continues to carry out attacks against entities in Ukraine, including security services, military, and government organizations. The LitterDrifter worm is written in VBS, it supports two main features: automatic USB propagating and communication with a broad, flexible set of C2.

Military 115

Military Communications IT Government 115

Security Affairs

JUNE 6, 2019

The Platinum cyber espionage group uses steganographic technique to hide communications with the Command and Control Servers (C&C). Experts from Kaspersky have linked the Platinum APT group with cyber attacks involving an elaborate, and new steganographic technique used to hide communications with C2 servers. Pierluigi Paganini.

Communications 71

Communications Encryption Military Government 71

Security Affairs

FEBRUARY 8, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The group also relies on customized versions of open-source tools for C2 communications and to stay under the radar.

Energy and Utilities 112

Energy and Utilities Communications Military Manufacturing 112

Security Affairs

DECEMBER 15, 2023

. “After data exfiltration often involving direct communications with victims demanding ransom, Snatch threat actors may threaten victims with double extortion, where the victims’ data will be posted on Snatch’s extortion blog if the ransom goes unpaid.” HENSOLDT is a company specializing in military and defense electronics.

Ransomware 115

Ransomware Computer and Electronics Military Agriculture 115

Hunton Privacy

OCTOBER 16, 2020

Arthur Pereira Sabbat (five-year mandate), currently Director of the Information Security department of the Brazilian Presidency. Joacil Basilio Rael (four-year mandate), computer engineer who graduated from the Military Engineering Institute.

Computer and Electronics 116

Computer and Electronics Military Paper Communications 116

Security Affairs

OCTOBER 29, 2023

“We continue targeting internet and telecom providers to disrupt enemy communications. Another blow by our cyber army disrupting enemy military communication at the frontlines.” .” The IT Army is inviting supporters to joint its operations by installing their software. am on October 27, 2023.

IT 122

IT Communications Military Security 122

Security Affairs

NOVEMBER 8, 2023

The experts discovered a Mach-O universal binary communicating with a domain that they had previously classified as malicious. The binary is ad-hoc signed that was observed communicating with the domain swissborg[.]blog, The APT group’s campaigns focus on cryptocurrency exchanges, venture capital firms, and banks.

Blockchain 110

Blockchain Military Communications IT 110

Security Affairs

APRIL 19, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The group also relies on customized versions of open-source tools for C2 communications and to stay under the radar.

Energy and Utilities 100

Energy and Utilities Communications Military Manufacturing 100

Security Affairs

AUGUST 7, 2023

NPO Mashinostroyeniya (JSC MIC Mashinostroyenia, NPO Mash) is a leading Russian manufacturer of missiles and military spacecraft. The cyberspies targeted NPO Mashinostroyeniya in an attempt to steal highly confidential intellectual property on sensitive missile technology currently in use and under development for the Russian military.

Military 89

Military Communications Manufacturing Phishing 89

Security Affairs

NOVEMBER 5, 2021

The SSU has managed to identify the perpetrators’ names, intercept their communication and obtain irrefutable evidence of their involvement in the attacks. This ‘line of work’ is coordinated by the FSB’s 18th Center (Information Security Center) based in Moscow.” ” reads the announcement published by the SSU.

Military 123

Military Metadata Government Passwords 123

Security Affairs

JUNE 19, 2021

Experts attribute a series of cyber-espionage campaigns dating back to 2014, and focused on gathering military intelligence, to China-linked Unit 69010. These targets suggest the group is likely interested in gathering intelligence on military technology and defense” reads the report published by the Insikt Group.

Military 120

Military Mining Government Communications 120

Security Affairs

JANUARY 5, 2024

The Ukrainian telecommunications company provides communication services and data transmission based on a broad range of fixed and mobile technologies, including 4G (LTE) in Ukraine. All mobile communications and internet access were temporarily interrupted. The SBU helped Kyivstar in recovering from the cyber attack.

Military 92

Military Communications Access Ransomware 92

Security Affairs

AUGUST 29, 2023

NISC disclosed a potential security breach involving personal data associated with email communications. “Tokyo is embarking on deeper military co-operation with the US and regional allies, including work on a joint fighter project with the UK and Italy, in which top secret technological data will be exchanged.”

Cybersecurity 94

Cybersecurity Military Personal data Government 94

Security Affairs

NOVEMBER 24, 2023

Upon enabling the macro, the embedded VBA displays a Russian article titled “Western Assessments of the Progress of the Special Military Operation.” “The payload incorporates a UAC bypass and encrypted communication with a C2 server, enabling the threat actor to execute privileged commands.”

Encryption 109

Encryption Military Phishing Communications 109

Security Affairs

FEBRUARY 28, 2024

“As early as 2022, APT28 actors had utilized compromised EdgeRouters to facilitate covert cyber operations against governments, militaries, and organizations around the world.” and foreign governments and military, security, and corporate organizations. ” reads the joint report. ” concludes the report.

Energy and Utilities 99

Energy and Utilities Military Government Phishing 99

Security Affairs

APRIL 15, 2024

The Blackjack group is believed to be affiliated with Ukrainian intelligence services that carried out other attacks against Russian targets, including an internet provider and a military infrastructure. Subsequently, the threat actors erase the router’s routing table, rendering its communication with other devices non-functional.

IoT 126

IoT Access Communications Military 126

Security Affairs

JUNE 21, 2023

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , BlueDelta, and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election.

Military 90

Military Phishing Government Communications 90

Security Affairs

FEBRUARY 21, 2020

The Defense Information Systems Agency (DISA) US agency in charge of secure IT and communication for the White House has disclosed a data breach. The agency sent a data breach notification to its employees last week informing them of a security breach that took place last year between May and July.

Military 116

Military Data breaches Security Communications 116

Security Affairs

AUGUST 15, 2021

The MoD is offering a salary of £33k to “work alongside some of the best scientists and engineers within defence and will be tasked with delivering prototype solutions directly to the soldiers and officers of a unique and specialized military unit.” ”What unique and specialised military unit is famously based in Hereford?

Military 102

Military Computer and Electronics Manufacturing Communications 102

Security Affairs

MAY 24, 2022

Threat actors could perform reverse engineering of military-made malicious code and use their own versions in attacks in the wild. “The same applies for the digital weapons that, maybe today are used by the military, developed by military, and tomorrow will be available for criminals,” he explained. .

Military 107

Military Government Communications Security 107

Security Affairs

JUNE 7, 2020

The press release published by the Ministry of Defence announced that the cyber unit will provide the basis of the new Army Cyber Information Security Operations Centre. The new cyber regiment focuses on the cyber Defence, it will work with the Royal Navy and Royal Air Force to provide secure networks for all military communications.

Military 101

Military Cybersecurity Communications Information Security 101

Security Affairs

APRIL 9, 2023

made electronics on behalf of the Russian government and military. The Estonian man is accused of having helped the Russian government and military to purchase US-made electronics and hacking tools. Andrey Shevlyakov, an Estonian national, was charged in the US with conspiracy and other charges related to acquiring U.S.-made

Computer and Electronics 86

Computer and Electronics Military Manufacturing Government 86

Security Affairs

APRIL 26, 2023

PingPull, was first spotted by Unit 42 in June 2022, the researchers defined the RAT as a “difficult-to-detect” backdoor that leverages the Internet Control Message Protocol (ICMP) for C2 communications. Experts also found PingPull variants that use HTTPS and TCP for C2 communications instead of ICMP. org over port 8443 for C2.

Communications 96

Communications Military Government Libraries 96

Thales Cloud Protection & Licensing

DECEMBER 12, 2022

His approach uses the philosophy that is used in the military, whereby an untrained individual is placed into positions based on aptitude. If corporations looked internally, they could find people who demonstrate a proclivity towards security, and those people could be trained to be part of the security workforce.

Cybersecurity 87

Cybersecurity Digital transformation Military Communications 87

Security Affairs

DECEMBER 6, 2020

Italian police have arrested two people that have been accused of stealing 10 GB of confidental data and military secrets from defense company Leonardo S.p.A. The prosecutors state that Leonardo’s security systems did not detect the malware that was allegedly used by the unfaithful employee.

Military 102

Military Computer and Electronics Communications Personal data 102

Security Affairs

JULY 1, 2020

Federal Communications Commission (FCC) announced that Chinese telecommunications giants Huawei and ZTE are considered as national security threats. regulators declared Huawei and ZTE to be national security threats. Last week China accused the US government of “oppressing Chinese companies” after U.S. In November 2019, the U.S.

Communications 88

Communications Security Government Military 88

Security Affairs

MARCH 2, 2022

” Since Russia’s invasion of Ukraine, the Ghostwriter APT group has launched , multiple attacks against the private email accounts of Ukrainian military personnel. . .” reads the analysis published by ProofPoint. ” Proofpoint also shared Indicators of Compromise (IOCs) for the Asylum Ambuscade.

Phishing 83

Phishing Military Government Communications 83

Security Affairs

JUNE 11, 2022

“The malware employs the DNS protocol for command and control (C2) communication which increases stealth and keeps the malware communication probes under the radar to evade detection.” ” reads the analysis published ZScaler.

IT 144

IT Military Communications Phishing 144

The Last Watchdog

MAY 13, 2020

Chief Information Security Officers were already on the hot seat well before the COVID-19 global pandemic hit, and they are even more so today. Observes Salvi: “We’ve gone to a stage where the Chief Information Security Officer has become a well-defined, mainstream role. Related: Why U.S.

Security 309

Security Cybersecurity Military Risk 309

Security Affairs

APRIL 10, 2020

The huge trove of data includes sensitive documents related to military equipment designed by Lockheed-Martin (i.e. an antenna in an anti-mortar defense system), billing and payment forms, supplier information, data analysis reports, and legal paperwork. The same answer was provided by the company to El Reg that asked about the dump.

Ransomware 102

Ransomware Manufacturing Military Cybersecurity 102