Security Affairs

AUGUST 17, 2022

Experts believe RedAlpha is a group of contractors conducting cyber-espionage activity on behalf of China. Experts also noticed that the attackers used domains spoofing major email and storage service providers like Yahoo (135 typosquat domains), Google (91 typosquat domains), and Microsoft (70 typosquat domains).

Phishing 107

Phishing Information Security Government Communications 107

Krebs on Security

FEBRUARY 10, 2020

They are each charged with three counts of conspiracy to commit computer fraud, economic espionage and wire fraud. They are each charged with three counts of conspiracy to commit computer fraud, economic espionage and wire fraud. The nine-count indictment names Wu Zhiyong (???), Wang Qian (??), and Liu Lei (??)

Military 246

Military Phishing Government Sales 246

Security Affairs

AUGUST 13, 2020

Threat Intel firm Group-IB has released an analytical report on the previously unknown APT group RedCurl, which focuses on corporate espionage. This could indicate that RedCurl’s attacks might have been commissioned for the purpose of corporate espionage. From Russia to Canada.

Cloud 139

Cloud Phishing Analytics Access 139

The Last Watchdog

APRIL 5, 2022

’ This firewall even goes as far as to block the latest versions of the encryption service TLS (v1.3) As the dust settles following the recently disclosed hack of NewsCorp , important lessons are emerging for the cybersecurity and journalism communities. Related: How China challenged Google in Operation Aurora.

Passwords 243

Passwords Access Cloud Government 243

IBM Big Data Hub

SEPTEMBER 1, 2023

Learn more about malware Social engineering and phishing Frequently referred to as “human hacking,” social engineering manipulates targets into taking actions that expose confidential information, threaten their own or their organization’s financial well-being, or otherwise compromise personal or organizational security.

Phishing 113

Phishing Passwords IoT Cybersecurity 113

Security Affairs

NOVEMBER 12, 2020

“During the past six months, the BlackBerry Research and Intelligence team have been monitoring a cyber-espionage campaign that is targeting disparate victims around the globe.” ” reads the analysis published by BlackBerry. ” reads the analysis published by BlackBerry.

Phishing 125

Phishing Ransomware Marketing IT 125

Security Affairs

JUNE 3, 2023

Some targeted entities may discount the threat posed by these social engineering campaigns, either because they do not perceive their research and communications as sensitive in nature, or because they are not aware of how these efforts fuel the regime’s broader cyber espionage efforts. A joint advisory from the FBI, the U.S.

IT 88

IT Phishing Systems administration Communications 88

Security Affairs

MARCH 8, 2022

The attackers carried out both phishing campaigns and DDoS attacks. This activity ranges from espionage to phishing campaigns.” ” FancyBear has conducted several large credential phishing campaigns aimed at the users of Ukrainian media company UkrNet. ” wrote Shane Huntley, Google’s TAG lead. .”

Military 92

Military Phishing File names Government 92

Security Affairs

DECEMBER 5, 2023

Microsoft’s Threat Intelligence is warning of Russia-linked cyber-espionage group APT28 (aka “Forest Blizzard”, “Fancybear” or “Strontium”) actively exploiting the CVE-2023-23397 Outlook flaw to hijack Microsoft Exchange accounts and steal sensitive information.

Military 103

Military Government Phishing Access 103

Security Affairs

AUGUST 6, 2023

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 76

Security Military Phishing Sales 76

Security Affairs

DECEMBER 7, 2023

The group operates out of military unity 26165 of the Russian General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center (GTsSS). The group operates out of military unity 26165 of the Russian General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center (GTsSS).

Military 108

Military Government Phishing Authentication 108

Security Affairs

AUGUST 15, 2022

Microsoft has disrupted activity by SEABORGIUM, a Russia-based actor launching persistent phishing, credential and data theft, intrusions, and hack-and-leak campaigns tied to espionage. Microsoft disrupted a hacking operation linked conducted by Russia-linked APT SEABORGIUM aimed at NATO countries.

Phishing 88

Phishing Education Security IT 88

The Last Watchdog

APRIL 13, 2022

Related: Cyber espionage is in a Golden Age. The Russian government, military, and intelligence service may wish to achieve some operational effect, for example, disrupting the power grid or interfering with telecommunications infrastructure, which may be part of a larger war plan. allied countries, and businesses steadily increases.

Cybersecurity 214

Cybersecurity Military Passwords Education 214

Security Affairs

SEPTEMBER 26, 2022

Experts noticed that the threat actors have regularly reused phishing email sender addresses for up to several years (such as tseringkanyaq@yahoo[.]com Experts noticed that the threat actors have regularly reused phishing email sender addresses for up to several years (such as tseringkanyaq@yahoo[.]com com and mediabureauin@gmail[.]com),

Phishing 103

Phishing Access Security IT 103

Security Affairs

JUNE 15, 2023

“Through the investigation, Mandiant identified a suspected China-nexus actor, currently tracked as UNC4841, targeting a subset of Barracuda ESG appliances to utilize as a vector for espionage, spanning a multitude of regions and sectors.” ” reads the report published by Mandiant. reads the update provided by the company.

Access 79

Access Security Phishing IT 79

Security Affairs

AUGUST 13, 2023

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 86

Security Data breaches Honeypots Artificial Intelligence 86

Security Affairs

JULY 15, 2023

The Gamaredon APT group continues to carry out attacks against entities in Ukraine, including security services, military, and government organizations. Since the beginning of the Russian invasion of Ukraine, the cyber espionage group has carried out multiple campaigns against Ukrainian targets.

Military 96

Military Phishing Government Security 96

Security Affairs

JUNE 15, 2023

The Gamaredon APT group (aka Shuckworm, Actinium, Armageddon, Primitive Bear, UAC-0010, and Trident Ursa) continues to carry out attacks against entities in Ukraine, including security services, military, and government organizations. The attack chain commences with spear-phishing emails with malicious attachments (.docx,rar,sfx

Military 81

Military File names Archiving Phishing 81

Security Affairs

DECEMBER 11, 2020

Facebook has suspended some accounts linked to APT32 that were involved in cyber espionage campaigns to spread malware. Vietnam-linked APT group APT32 , also known as OceanLotus and APT-C-00, carried out cyber espionage campaigns against Chinese entities to gather intelligence on the COVID-19 crisis.

Agriculture 126

Agriculture IT Retail Manufacturing 126

Security Affairs

SEPTEMBER 27, 2020

Microsoft announced this week to have removed 18 Azure Active Directory applications from its Azure portal that were created by a China-linked cyber espionage group tracked as APT group Gadolinium (aka APT40 , or Leviathan ). ” states Microsoft’s report. . ” states Microsoft’s report. ” continues the analysis.

Cloud 139

Cloud Phishing IT Security 139

Security Affairs

FEBRUARY 6, 2022

Russia-linked APT group Gamaredon is behind spear-phishing attacks against Ukrainian entities and organizations since October 2021. Palo Alto Network experts mapped out three large clusters of the infrastructure used by the nation-state APT group used to support different phishing and malware campaigns.

Military 81

Military Phishing Government Security 81

Security Affairs

JANUARY 9, 2023

Threat actors created fake login pages for each organization and sent spear-phishing messages to nuclear scientists in an attempt to trick them into providing their passwords. In March 2022, the Google Threat Analysis Group (TAG) spotted phishing and malware attacks targeting Eastern European and NATO countries, including Ukraine.

Military 76

Military Phishing Cybersecurity Passwords 76

Security Affairs

AUGUST 29, 2023

Through the investigation, Mandiant identified a suspected China-nexus actor, currently tracked as UNC4841, targeting a subset of Barracuda ESG appliances to utilize as a vector for espionage, spanning a multitude of regions and sectors.” reads the report published by Mandiant. reads the report published by Mandiant.

Government 104

Government Access Security Cybersecurity 104

IT Governance

OCTOBER 24, 2023

Another small firm suffers a serious ransomware attack: Cadre Services gets mauled by AlphV Date of breach: 19 September 2013 (AlphV uploaded first part of data to its website on 19 October 2023). International Criminal Court says cyberattack was attempted espionage Date of breach: 19 September 2023 ( update on 20 October 2023).

Data Privacy 107

Data Privacy Privacy Security Data breaches 107

Security Affairs

JULY 8, 2023

The spear-phishing message appears as a benign conversation lure masquerading as a senior fellow with the Royal United Services Institute (RUSI) to the public media contact for a nuclear security expert at a US-based think tank focused on foreign affairs. TA453 also employed multi-persona impersonation in its unending espionage quest.”

Archiving 92

Archiving Cloud File names Metadata 92

Security Affairs

JUNE 11, 2020

Dark Basin is a group of cyber mercenaries that conducted commercial espionage for its customers, the researchers from Citizen Lab linked it to BellTroX InfoTech Services (“ BellTroX ”), an Indian technology company. Citizen Lab first uncovered the activity of the group in 2017 while investigating phishing attacks against a journalist.

Phishing 97

Phishing Communications Government IT 97

Security Affairs

APRIL 29, 2023

“The TA also provides additional services such as a web panel for managing victims, meta mask brute-forcing for stealing seed and private keys, crypto checker, and dmg installer, after which it shares the logs via Telegram. These services are offered at a price of $1000 per month.” ” concludes the report.

Passwords 80

Passwords Archiving Education Phishing 80

Security Affairs

JUNE 2, 2021

WizCase’s security team discovered an unsecured ElasticSearch server owned by AMT Games which exposed 1.47 TB of data. This leak exposed users’ email addresses, IP addresses, Facebook data, and more to potential attack. The leaked data numbers in the millions and was accessible to anyone who possessed the link. The leak has since been secured.

Data breaches 107

Data breaches Phishing Access Personal data 107

Krebs on Security

FEBRUARY 18, 2019

This post seeks to document the extent of those attacks, and traces the origins of this overwhelmingly successful cyber espionage campaign back to a cascading series of breaches at key Internet infrastructure providers. But to date, the specifics of exactly how that attack went down and who was hit have remained shrouded in secrecy.

Passwords 267

Passwords Government Access Security 267

Security Affairs

JUNE 17, 2023

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 87

Security Ransomware Data breaches Military 87

Security Affairs

DECEMBER 30, 2019

Microsoft sued Thallium North Korea-linked APT for hacking into its customers’ accounts and networks via spear-phishing attacks. Microsoft sued a North Korea-linked cyber espionage group tracked as Thallium for hacking into its customers’ accounts and networks via spear-phishing attacks. 27 in the U.S.

Computer and Electronics 64

Computer and Electronics Phishing Communications Privacy 64

Security Affairs

SEPTEMBER 27, 2022

The so-called hacktivist groups conducted distributed denial-of-service (DDoS) and defacement attacks against Ukrainian websites, but the experts believe that they are a front for information operations and destructive cyber activities coordinated by the Kremlin. Most of APT28s’ campaigns leveraged spear-phishing and malware-based attacks.

Military 84

Military Phishing Government Security 84

Security Affairs

OCTOBER 5, 2018

The United States Department of Homeland Security (DHS) is warning of ongoing activity from an advanced persistent threat (APT) actor targeting global managed service providers (MSPs). The DHS issued an alert on ongoing attacks aimed at global managed service providers (MSPs) that are carried out by an advanced APT group.

Communications 85

Communications Manufacturing Cybersecurity Phishing 85

Security Affairs

MARCH 3, 2021

WizCase experts found a major breach in phone-tracking service Ringostat ’s database, millions of Phone Numbers, Recordings, and Call Logs Compromised. WizCase security team has found a major breach in phone-tracking service Ringostat ’s database. The leak has since been secured. What’s Happening? What Data Was Leaked?

Data breaches 98

Data breaches Metadata Phishing B2B 98

Security Affairs

SEPTEMBER 3, 2023

Being Used to Phish So Many of Us? A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 105

Security Ransomware Data breaches IoT 105

Security Affairs

MAY 27, 2019

In April 2019, China-linked cyber-espionage group tracked as APT10 has added two new loaders to its arsenal and used it against government and private organizations in Southeast Asia. In September 2018, researchers from FireEye uncovered and blocked a campaign powered by the Chinese APT10 cyber espionage group aimed at Japanese media sector.

Libraries 82

Libraries Phishing Government Cloud 82

Security Affairs

JULY 21, 2021

FormBook is a data-stealing malware that is used in cyber espionage campaigns, like other spyware it is capable of extracting data from HTTP sessions, keystroke logging, stealing clipboard contents. The customers pay for access to the platform and generate their executable files as a service. ” continues the report.

Sales 100

Sales Phishing Communications IT 100