Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. North Korea-linked APT group posed as Samsung recruiters is a spear-phishing campaign that targeted South Korean security companies that sell anti-malware solutions, Google TAG researchers reported.

Security 145

Security Phishing Information Security Communications 145

The Last Watchdog

JULY 30, 2018

Co-founder Jay took a business trip to South Korea in the fall of 2007. DataLocker honed its patented approach to manufacturing encrypted portable drives and landed some key military and government clients early on; the company has continued branching out ever since. You need to rely on external storage to securely transport your data.

Encryption 203

Encryption Military Passwords Authentication 203

Security Affairs

SEPTEMBER 10, 2022

Treasury Department sanctioned Iran ‘s Ministry of Intelligence and Security (MOIS) and its Minister of Intelligence over the Albania cyberattack. Treasury Department announced sanctions against Iran ‘s Ministry of Intelligence and Security (MOIS) and its Minister of Intelligence over the cyber attack that hit Albania in July.

Government 145

Government Security IT Information Security 145

Security Affairs

FEBRUARY 26, 2024

Recently the leak of a collection of files apparently stolen from the Chinese government hacking contractor, I-Soon, exposed Chinese hacking capabilities. i-SOON is a prominent contractor for various agencies of the Chinese government, including Ministry of Public Security, Ministry of State Security, and the People’s Liberation Army.

Government 140

Government Marketing IoT Data breaches 140

Security Affairs

APRIL 22, 2024

Microsoft has observed APT28 using GooseEgg in post-compromise activities against various targets, including government, non-governmental, education, and transportation sector organizations in Ukraine, Western Europe, and North America. This tool modifies a JavaScript constraints file and executes it with SYSTEM-level permissions.

Military 144

Military File names Education Phishing 144

Security Affairs

OCTOBER 27, 2021

The Evil Corp cybercrime group (aka the Dridex gang Indrik Spider , the Dridex gang, and TA505 ) has been active in cybercrime activities since 2007. The US Government announced sanctions for ransomware negotiation firms that will support victims of the Evil Corp group in the ransom payments. Pierluigi Paganini.

Ransomware 143

Ransomware Government IT Security 143

Security Affairs

NOVEMBER 28, 2021

Nexa Technologies offers a range of solutions for homeland security, including surveillance solutions. The cybersurveillance equipment was used by the Egyptian government to track down opponents. A weapon of choice for authoritarian governments.” “In short, Cerebro can suck up any data that is not encrypted.

Sales 141

Sales Government Encryption Communications 141

Security Affairs

APRIL 8, 2022

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The post Microsoft disrupted APT28 attacks on Ukraine through a court order appeared first on Security Affairs.

Military 141

Military Government Phishing Security 141

Security Affairs

JUNE 3, 2024

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , BlueDelta, and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. Insikt Group speculates the operation is aimed at influencing regional and military dynamics.

Military 144

Military Phishing Government Authentication 144

Schneier on Security

NOVEMBER 10, 2022

government agencies for more than a decade. […]. Vostrom filed papers in 2007 to do business as Packet Forensics, according to Virginia state records. Cory Doctorow does a great job explaining the context and the general security issues. More details by Reardon.

Paper 131

Paper Communications Government Security 131

Security Affairs

AUGUST 13, 2020

The FBI and NSA have published a joint security alert containing technical details about a new piece of Linux malware, tracked as Drovorub , allegedly employed by Russia-linked the APT28 group. The government agencies recommend that US organizations update any Linux system to a version running kernel version 3.7 Pierluigi Paganini.

Military 145

Military IoT Phishing Government 145

Security Affairs

OCTOBER 21, 2021

The Evil Corp cybercrime group (aka the Dridex gang Indrik Spider , the Dridex gang, and TA505 ) has been active in cybercrime activities since 2007. The US Government announced sanctions for ransomware negotiation firms that will support victims of the Evil Corp group in the ransom payments. Pierluigi Paganini.

Ransomware 144

Ransomware File names Encryption Government 144

Security Affairs

OCTOBER 8, 2021

Shane Huntley, the head of the Threat Analysis Group (TAG), wrote on Twitter that his group had sent an above-average batch of government-backed security warnings. . TAG sent a above average batch of government-backed security warnings yesterday. So why do we do these government warnings then? Pierluigi Paganini.

Phishing 116

Phishing Military Government Security 116

Security Affairs

OCTOBER 27, 2023

France National Agency for the Security of Information Systems warns that the Russia-linked APT28 group has breached several critical networks. The Government experts pointed out that in some cases the group did not deployed any backdoor in the compromised systems. ” The script was hosted on “mocky[.]io,”

Military 143

Military Phishing Government Security 143

Security Affairs

OCTOBER 29, 2020

Experts from the US Cyber Command’s Cyber National Mission Force (CNMF) unit and the Cybersecurity and Infrastructure Security Agency (CISA) uploaded the samples on the Virus Total online virus scan platform. The post US Cyber Command details implants used in attacks on parliaments and embassies appeared first on Security Affairs.

Cybersecurity 143

Cybersecurity Government Security IT 143

Security Affairs

JANUARY 18, 2022

A sophisticated threat actor, tracked as Earth Lusca, is targeting government and private organizations worldwide as for financial purposes. The Winnti group was first spotted by Kaspersky in 2013, but according to the researchers the gang has been active since 2007. ” Follow me on Twitter: @securityaffairs and Facebook.

Healthcare 141

Healthcare Phishing Archiving Education 141

Security Affairs

AUGUST 29, 2020

According to a joint advisory issued by the Cybersecurity and Infrastructure Security Agency (CISA), the Department of the Treasury, the Federal Bureau of Investigation (FBI), and U.S. Government refers to this team as BeagleBoyz, who represent a subset of HIDDEN COBRA activity.” ” reads the alert. Pierluigi Paganini.

Government 145

Government Access Ransomware Cybersecurity 145

Security Affairs

DECEMBER 7, 2023

Over the past 20 months, the group targeted at least 30 organizations within 14 nations that are probably of strategic intelligence significance to the Russian government and its military. The Government experts pointed out that in some cases the group did not deployed any backdoor in the compromised systems.

Military 140

Military Government Phishing Authentication 140

Security Affairs

OCTOBER 10, 2020

Orange Belgium is using Huawei equipment since 2007 for its mobile network in Belgium and Luxembourg, while the collaboration between Proximus and the Shenzhen-based company started in 2009 for the progressive upgrading of its network. The post Belgium telecom operators Proximus and Orange drop Huawei appeared first on Security Affairs.

Manufacturing 140

Manufacturing Risk Communications Security 140

Security Affairs

DECEMBER 5, 2023

In recent attacks spotted by Microsoft’s Threat Intelligence, the nation-state actors primarily targeted government, energy, transportation, and non-governmental organizations in the US, Europe, and the Middle East. The Government experts pointed out that in some cases the group did not deployed any backdoor in the compromised systems.

Military 136

Military Government Access Phishing 136

Security Affairs

DECEMBER 10, 2020

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. Zebrocy is mainly used against governments and commercial organizations engaged in foreign affairs.

Phishing 131

Phishing Healthcare Military Data collection 131

Security Affairs

JUNE 28, 2022

For this reason, the behavior of each actor in the cyber arena is becoming a national security concern for every government. Looking back at 2007, Estonia fell victim to a powerful cyber-attack that shut down government services, telecommunications, and banks in the country. Pierluigi Paganini.

Paper 134

Paper Military Government Security 134

Security Affairs

DECEMBER 1, 2020

Learn how the group tried to stay under the radar using threats perceived to be less alarming: [link] — Microsoft Security Intelligence (@MsftSecIntel) November 30, 2020. The hackers targeted organizations across multiple industries and have also hit foreign governments, dissidents, and journalists. ” Microsoft said.

Mining 138

Mining Manufacturing Government Phishing 138

Security Affairs

MARCH 13, 2020

The Turla APT group (aka Snake , Uroburos , Waterbug , Venomous Bear and KRYPTON ) has been active since at least 2007 targeting diplomatic and government organizations and private businesses in the Middle East, Asia, Europe, North and South America, and former Soviet bloc nations. Pierluigi Paganini.

Archiving 145

Archiving Government Communications IT 145

Security Affairs

MARCH 20, 2020

According to security researchers from Trend Micro, the Russia-linked APT28 cyberespionage group has been scanning vulnerable email servers for more than a year. The cyberespionage group continues to target members of defense companies, embassies, governments, and the military. ” reads the report published by Trend Micro.

Phishing 145

Phishing Military Government Passwords 145

Security Affairs

FEBRUARY 15, 2020

Despite all the intensive security measures, there is no 100-percent protection against cyberattacks.”. The highest possible data security at the Foreign Ministry is guaranteed and no damage to the IT equipment could be detected.”. The attack took place on the evening of Saturday 4 January evening and it was quickly detected.

Government 143

Government IT Security Access 143

Security Affairs

SEPTEMBER 23, 2020

Russia-linked cyberespionage group APT28 uses fake NATO training documents as bait in attacks aimed at government bodies. The Russia-linked cyberespionage group APT28 is behind a string of attacks that targeting government bodies with Zebrocy Delphi malware. ” reads the report published QuoIntelligence. Pierluigi Paganini.

Military 126

Military Government Encryption Communications 126

Krebs on Security

JANUARY 8, 2024

For years, security experts — and indeed, many top cybercriminals in the Spamit affiliate program — have expressed the belief that Sal and Icamis were likely the same person using two different identities. He is currently housed in a federal prison in Michigan, serving the final stretch of a 60-month sentence.

Computer and Electronics 247

Computer and Electronics Passwords Government Sales 247

Security Affairs

NOVEMBER 29, 2020

The Bandook was spotted last time in 2015 and 2017 campaigns, dubbed “ Operation Manul ” and “ Dark Caracal “, respectively attributed to Kazakh and the Lebanese governments. The post Operators behind Dark Caracal are still alive and operational appeared first on Security Affairs. ” reads the report published by Check Point.

Energy and Utilities 142

Energy and Utilities Government Archiving Education 142

Security Affairs

OCTOBER 7, 2018

The APT28 group has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. According to experts from Symantec, the group is now actively conducting cyber espionage campaigns against government and military organizations in Europe and South America. .”

Military 111

Military Government Phishing Security 111

Security Affairs

JANUARY 11, 2021

Security experts from Kaspersky have identified multiple similarities between the Sunburst malware used in the SolarWinds supply chain attack and the Kazuar backdoor that has been employed in cyber espionage campaigns conducted by Russia-linked APT group Turla. Pierluigi Paganini. SecurityAffairs – hacking, Turla).

Security 141

Security Government IT Information Security 141

Security Affairs

JUNE 19, 2020

The Turla APT group (aka Snake , Uroburos , Waterbug , Venomous Bear and KRYPTON ) has been active since at least 2007 targeting diplomatic and government organizations and private businesses in the Middle East, Asia, Europe, North and South America, and former Soviet bloc nations. of the driver. Pierluigi Paganini.

Security 144

Security Government IT Information Security 144

Security Affairs

DECEMBER 25, 2020

This threat actor has been active since at least 2009, possibly as early as 2007, and it was involved in both cyber espionage campaigns and sabotage activities aimed to destroy data and disrupt systems. If you want to receive the weekly Security Affairs Newsletter for free subscribe here. Pierluigi Paganini.

Healthcare 144

Healthcare Phishing Passwords Ransomware 144

Security Affairs

OCTOBER 18, 2022

Winnti (aka APT41 , Axiom, Barium , Blackfly) is a cyberespionage group that has been active since at least 2007. Symantec pointed out that the attacks against government organizations in Hong Kong remained undetected for a year in some cases. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

File names 137

File names Encryption Manufacturing Libraries 137

Security Affairs

MAY 22, 2019

Security experts discovered tens of critical vulnerabilities were found in 10 South Korean ActiveX controls as part of a short research project. Security researchers at Risk Based Security have discovered tens of critical vulnerabilities in 10 South Korean ActiveX controls as part of a research project.

Risk 97

Risk Government Security Cybersecurity 97

Security Affairs

DECEMBER 2, 2020

The Turla APT group (aka Snake , Uroburos , Waterbug , Venomous Bear and KRYPTON ) has been active since at least 2007 targeting diplomatic and government organizations and private businesses in the Middle East, Asia, Europe, North and South America, and former Soviet bloc nations. ” Pierluigi Paganini.

Archiving 145

Archiving Communications Government Access 145

Security Affairs

OCTOBER 21, 2019

The Turla APT group (aka Snake , Uroburos , Waterbug , Venomous Bear and KRYPTON ) has been active since at least 2007 targeting diplomatic and government organizations and private businesses in the Middle East, Asia, Europe, North and South America, and former Soviet bloc nations. ” reported the FT. .

Government 104

Government Military Security IT 104