Security Affairs

DECEMBER 25, 2023

In some attacks, the APT group exploited a high-severity WinRAR flaw CVE-2023-38831 to deliver the LONEPAGE malware. In early August, the group UAC-0099 sent an email impersonating the Lviv city court using the ukr.net email service. ” The researchers pointed out that this attack technique can also deceive security-savvy victims.

Archiving 123

Archiving Phishing Security IT 123

Krebs on Security

OCTOBER 28, 2020

In March 2020, KrebsOnSecurity alerted Swedish security giant Gunnebo Group that hackers had broken into its network and sold the access to a criminal group which specializes in deploying ransomware. The company has operations in 25 countries, more than 4,000 employees, and billions in revenue annually.

Ransomware 335

Ransomware Security Agriculture Cybersecurity 335

Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. North Korea-linked APT group posed as Samsung recruiters is a spear-phishing campaign that targeted South Korean security companies that sell anti-malware solutions, Google TAG researchers reported.

Security 116

Security Phishing Information Security Communications 116

Security Affairs

SEPTEMBER 27, 2023

group claimed the hack of the Japanese giant NTT Docomo. According to cybersecurity experts, Ransomed.vc, is the syndicate emerged from an underground forum and later became one of the most rapidly developing groups for today in the Dark Web threatening large enterprises from the U.S., in their recent threat intelligence report.

Ransomware 109

Ransomware Cybersecurity Data breaches GDPR 109

Security Affairs

AUGUST 13, 2020

Threat Intel firm Group-IB has released an analytical report on the previously unknown APT group RedCurl, which focuses on corporate espionage. A presumably Russian-speaking group conducts thoroughly planned attacks on private companies across numerous industries using a unique toolset. From Russia to Canada.

Cloud 135

Cloud Phishing Analytics Access 135

eSecurity Planet

OCTOBER 11, 2022

The BlackByte ransomware group is actively exploiting a vulnerability in RTCore32.sys Researchers observed one particularly troubling exploit, as BlackByte recently used the vulnerability to jam security solutions such as EDR and antivirus software. sys and RTCore64.sys, These attacks target Windows systems.

Ransomware 107

Ransomware Authentication Security IT 107

Krebs on Security

AUGUST 10, 2022

For instance, if I were signing up at example.com, I might give my email address as krebsonsecurity+example@gmail.com. Then, I simply go back to my inbox and create a corresponding folder called “Example,” along with a new filter that sends any email addressed to that alias to the Example folder.

Security 203

Security Data breaches Passwords Retail 203

Security Affairs

APRIL 17, 2023

China-linked APT41 group used the open-source red teaming tool GC2 in an attack against a Taiwanese media organization. Google Threat Analysis Group (TAG) team reported that the China-linked APT41 group used the open-source red teaming tool Google Command and Control ( GC2 ) in an attack against an unnamed Taiwanese media organization.

Phishing 92

Phishing Cloud Government Education 92

eSecurity Planet

SEPTEMBER 21, 2022

Also read: Top Container Security Solutions. Such an approach is quite popular in the malware landscape, for example, with cryptominers. This example shows the attack process can be automated and replicated infinitely. For example, in this case, the container escape relies on the SYS_ADMIN capability to mount a Cgroup directory.

Cloud 122

Cloud Encryption Honeypots Mining 122

Krebs on Security

JANUARY 10, 2020

In July 2018, KrebsOnSecurity published the story Neo-Nazi Swatters Target Dozens of Journalists , which detailed the activities of a loose-knit group of individuals who had targeted hundreds of individuals for swatting attacks, including federal judges, corporate executives and almost three-dozen journalists (myself included). since 2017.

Computer and Electronics 179

Computer and Electronics Cybersecurity IT Security 179

Security Affairs

FEBRUARY 10, 2023

The TA886 hacking group targets organizations in the United States and Germany with new spyware tracked as Screenshotter. A recently discovered threat actor, tracked as TA886 by security firm Proofpoint, is targeting organizations in the United States and Germany with new malware dubbed Screenshotter.

Phishing 80

Phishing Sales Passwords Security 80

Security Affairs

AUGUST 20, 2022

TA558 cybercrime group is behind a malware campaign targeting hospitality, hotel, and travel organizations in Latin America. Researchers from Proofpoint are monitoring a malware campaign conducted by a cybercrime group, tracked as TA558, that is targeting hospitality, hotel, and travel organizations in Latin America.

Archiving 88

Archiving Phishing IT Security 88

eSecurity Planet

NOVEMBER 4, 2021

Ransomware groups seem to change form daily. In the latest news, the BlackMatter ransomware group announced it was shutting down – and just hours later came news that its victims were being transferred to the rival LockBit site. FIN7 Dupes Security Job Applicants. Fake vs real security company (source: Gemini Advisory).

Ransomware 92

Ransomware Systems administration Cybersecurity Phishing 92

Schneier on Security

NOVEMBER 8, 2023

We can and should get the benefits of the cloud while taking security back into our own hands. These ideas, which we’ll refer to in the aggregate as “decoupling,” allow us to rethink both security and privacy. In security this is called Least Privilege. Here we outline a strategy for doing that.

Security 94

Security Cloud Encryption Privacy 94

Security Affairs

AUGUST 21, 2022

In October 2021, a report released by the Amnesty International revealed that the Donot Team group employed Android applications posing as secure chat application and malicious emails in attacks aimed at a prominent Togolese human rights defender. This is because popular security solutions such as NGAV, EDR, EPP, XDR etc.

IT 92

IT Phishing Military Encryption 92

Security Affairs

DECEMBER 12, 2022

A hack-for-hire group dubbed Evilnum is targeting travel and financial entities with the new Janicab malware variant. Kaspersky researchers reported that a hack-for-hire group dubbed Evilnum is targeting travel and financial entities. This once again shows the threat actor is likely a hack-for-hire group with diverse motivation.”

Phishing 85

Phishing Archiving IT Security 85

eSecurity Planet

APRIL 14, 2022

Critical infrastructure , industrial control (ICS) and supervisory control and data acquisition (SCADA) systems are under increasing threat of cyber attacks, according to a number of recent warnings from government agencies and private security researchers. Also read: SANS Outlines Critical Infrastructure Security Steps as Russia, U.S.

Authentication 121

Authentication Security awareness Cybersecurity Passwords 121

Schneier on Security

JANUARY 19, 2023

A group of Swiss researchers have published an impressive security analysis of Threema. As one example, we present a cross-protocol attack which breaks authentication in Threema and which exploits the lack of proper key separation between different sub-protocols.

Security 115

Security Encryption Paper Authentication 115

The Security Ledger

MARCH 27, 2024

In this episode of The Security Ledger Podcast (#257) Paul speaks with Dennis Kengo Oka, a senior principal automotive security strategist at the firm Synopsys about the growing cyber risks to automobiles as connected vehicle features proliferate in the absence of strong cybersecurity protections. Read the whole entry. »

Security 52

Security Cybersecurity Risk IT 52

The Last Watchdog

APRIL 19, 2022

While global commerce is an important aspect of the world economy, individuals who hold national security clearances need to be aware that some of the activities they engage in could pose a security risk and may negatively impact their security clearances. national security secrets. national security secrets.

Security 210

Security Risk Military Government 210

eSecurity Planet

OCTOBER 25, 2022

Still, as a recent breach of an Indian power company by a different ransomware group demonstrates, the extra effort of stealing data doesn’t always pay off for the attackers — even when it leads to embarrassing data leaks for the victim. The technique was pioneered, Rapid7 noted, by the Maze ransomware group.

Ransomware 107

Ransomware Encryption Cloud Risk 107

Security Affairs

JUNE 17, 2021

UNC2465 cybercrime group that is affiliated with the Darkside ransomware gang has infected with malware the website of a CCTV camera vendor. UNC2465 is considered one of the main affiliated of the DARKSIDE group, along with other affiliates gangs tracked by FireEye/Mandiant as UNC2628 and UNC2659. ” concludes the report.

Ransomware 103

Ransomware Phishing Authentication Passwords 103

Security Affairs

APRIL 16, 2024

The number of cyberattacks involving hacktivist groups and foreign misinformation campaigns has nearly tripled. One prolific example of this dynamic is the China-linked Mustang Panda group, which Resecurity observed using cyberspace to stage sophisticated information warfare campaigns.

Government 91

Government Security Information Security IT 91

Krebs on Security

OCTOBER 18, 2023

New research shows the attackers behind one such scheme have developed an ingenious way of keeping their malware from being taken down by security experts or law enforcement: By hosting the malicious files on a decentralized, anonymous cryptocurrency blockchain. Previously, the group had stored its malicious update files on Cloudflare, Guard.io

Blockchain 267

Blockchain Security awareness Security IT 267

Krebs on Security

JANUARY 9, 2023

Identity thieves have been exploiting a glaring security weakness in the website of Experian , one of the big three consumer credit reporting bureaus. All that was needed was the person’s name, address, birthday and Social Security number. states to place a security freeze on their credit files.

Security 324

Security Authentication Mining Cybersecurity 324

IT Governance

JUNE 18, 2018

Last month, I published an article looking at two examples of the use of social engineering in everyday life. The man, who is still at large, walked in through the front door at regular hours, skipped through all security measures and walked out with the loot. “He Diamonds, diamonds, DIAMONDS. If you’re planning on stealing USD$27.9

Phishing 110

Phishing Authentication Marketing Access 110

Security Affairs

NOVEMBER 25, 2020

Group-IB supported an INTERPOL-led operation Falcon targeting business email compromise cybercrime gang from Nigeria, dubbed TMT. Group-IB , a global threat hunting and intelligence company, supported an INTERPOL-led operation Falcon targeting business email compromise (BEC) cybercrime gang from Nigeria, dubbed TMT by Group-IB.

Phishing 121

Phishing Communications Government Authentication 121

Krebs on Security

SEPTEMBER 18, 2023

The victim shaming website operated by the cybercriminals behind 8Base — currently one of the more active ransomware groups — was until earlier today leaking quite a bit of information that the crime group probably did not intend to be made public. The 8Base ransomware group’s victim shaming website on the darknet.

Ransomware 227

Ransomware Communications Encryption IT 227

Security Affairs

MARCH 28, 2022

On Friday, Anonymous announced that the affiliate group Black Rabbit World has leaked 28 GB of data stolen from the Central Bank of Russia. The group plans to distribute the stolen documents to various points on the internet to prevent they are censored. Our Anonymous brother @OpsAn0n got suspended by @Twitter. Pierluigi Paganini.

Government 96

Government Communications IT Security 96

Security Affairs

JULY 6, 2021

Group-IB supported INTERPOL in its Operation Lyrebird that allowed to identify a threat actor presumably responsible for multiple attacks. The alleged perpetrator, who turned out to be a citizen of Morocco, was arrested in May by the Moroccan police based on the data about his cybercrimes that was provided by Group-IB.

Phishing 92

Phishing Cybersecurity IT Security 92

Krebs on Security

DECEMBER 18, 2018

Virtually all companies like to say they take their customers’ privacy and security seriously, make it a top priority, blah blah. That’s because very few of the world’s biggest companies list any security executives in their highest ranks. banks) would have this role in their executive leadership team.

Security 209

Security Marketing Cybersecurity Data breaches 209

Security Affairs

JULY 10, 2020

Over the years, the group added new tools to its arsenal, including custom and homemade malware along with software purchased from the Golden Chickens malware-as-a-service (MaaS) provider. The group aimed at harvesting financial information from financial technology companies, such as trading platforms. Pierluigi Paganini.

Archiving 92

Archiving Phishing IT Access 92

Security Affairs

OCTOBER 3, 2021

Proofpoint researchers have discovered a new Ursnif baking Trojan campaign carried out by a group tracked as TA544 that is targeting organizations in Italy. The TA544 group leverages phishing and social engineering techniques to lure victims into enabling macro included in weaponized documents. Banca Sella UniCredit Group.

Retail 79

Retail Phishing Cybersecurity Risk 79

Security Affairs

MAY 12, 2019

Two hacking groups associated with large-scale crypto mining campaigns, Pacha Group and Rocke Group , wage war to compromise as much as possible cloud-based infrastructure. The first group tracked as Pacha Group has Chinese origins, it was first detected in September 2018 and is known to deliver the Linux.GreedyAntd miner.

Mining 59

Mining Cloud Security IT 59

eSecurity Planet

APRIL 21, 2022

This allows EDR to deploy very quickly, but it also allows for a number of security vulnerabilities. Here we’ll discuss why EDR vendors choose these configurations, and how organizations can tune their EDR systems to fit their organization and improve security. How do certain user groups behave differently?

Security 98

Security Access Sales e-Discovery 98

Security Affairs

FEBRUARY 3, 2022

We were inactive for many years, for example, we stopped in 2017 and after 2-3 years we came back in 2020, because all of us have been around and done things that only a few people can imagine, with different and many alias and nicknames. (or We are a really mixed group. or even find them childish and boring). Pierluigi Paganini.

Education 88

Education Ransomware Government Access 88

IT Governance

OCTOBER 6, 2022

This October is Cyber Security Awareness Month, an event designed to educate people about information security and the steps they can take to stay safe online. Now in its nineteenth year, the campaign provides tools and resources to help people learn more about the cyber security industry and the ways they can get involved.

Security awareness 130

Security awareness Security Phishing Passwords 130