Security Affairs

NOVEMBER 15, 2022

Happy BirthDay Security Affairs! I launched Security Affairs for passion in November 2011 and since then the blog was visited by tens of millions of readers. Eleven years ago I decided to launch Security Affairs, a blog that is considered today one of the most valuable sources of the cybersecurity industry.

Security 251

Security Cybersecurity Government IT 251

Security Affairs

JULY 19, 2021

US DoJ indicted four members of the China-linked cyberespionage group known as APT40 for hacking various entities between 2011 and 2018. The APT40 group has been active since at least 2013 and appears to be focused on supporting naval modernization efforts of the Government of Beijing. Ltd. (????) . ” states DoJ.

Government 308

Government Cybersecurity Security Access 308

Security Affairs

JANUARY 12, 2022

US Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) issued a joint alert to warn critical infrastructure operators about threats from Russian state-sponsored hackers. ” reads the joint alert. Pierluigi Paganini.

Cybersecurity 359

Cybersecurity Risk Government Phishing 359

Security Affairs

APRIL 22, 2024

The threat actors shared a portion of the stolen data with TechCrunch as proof of the hack, it includes records on current and former government officials, diplomats, and politically exposed people. Curiously, in 2011, Thomson Reuters acquired World-Check, then in October 2018, Thomson Reuters closed a deal with The Blackstone Group.

Risk 347

Risk Archiving Access Privacy 347

Security Affairs

JANUARY 20, 2020

Mitsubishi Electric disclosed a security breach that might have exposed personal and confidential corporate information. Mitsubishi Electric disclosed a security breach that might have exposed personal and confidential corporate data. According to the company, attackers did not obtain sensitive information about defense contracts.

Data breaches 363

Data breaches Computer and Electronics Government Access 363

Security Affairs

NOVEMBER 22, 2021

According to Iran’s Fars News Agency, Mahan Air was hit by similar attacks “many times,” for this reason Mahan’s Cyber Security Team rapidly neutralized these attacks. The US had sanctioned Mahan Air in 2011 for providing financial, material, or technological support to Iran’s Islamic Revolutionary Guard Corps. Pierluigi Paganini.

IT 349

IT Security Cybersecurity Government 349

Security Affairs

AUGUST 1, 2019

million to settle a legal dispute for selling vulnerable software to the US government. The case was filed in the Federal District Court for the Western District of New York and was handled under the False Claims Act, which specifically addresses fraud and misconduct in federal government contracts. Cisco is going to pay $8.6

Government 274

Government Sales Access Security 274

Security Affairs

MAY 15, 2020

The Tropic Trooper APT that has been active at least since 2011, it was first spotted in 2015 by security experts at Trend Micro when it targeted government ministries and heavy industries in Taiwan and the military in the Philippines. ” reads the analysis published by Trend Micro. ” continues the report.

Military 311

Military Government Security IT 311

Security Affairs

MARCH 4, 2020

Chinese security firm Qihoo 360 revealed that the US CIA has hacked Chinese organizations in various sectors for the last 11 years. Chinese security firm Qihoo 360 is accusing that the US Central Intelligence Agency (CIA) of having hacked Chinese organizations for the last 11 years. time zone. . Pierluigi Paganini.

Military 363

Military Government Security IT 363

Security Affairs

JULY 21, 2021

French cyber-security agency ANSSI warned of an ongoing cyberespionage campaign aimed at French organizations carried out by China-linked APT31 group. The French national cyber-security agency ANSSI warned of ongoing attacks against a large number of French organizations conducted by the Chine-linked APT31 cyberespionage group.

Government 296

Government Security IT Cybersecurity 296

Security Affairs

NOVEMBER 21, 2019

According to a report published by Symantec in 2017, Longhorn is a North American hacking group that has been active since at least 2011. ” The malware leverages the Microsoft implementation of SSL/TLS, Secure Channel, for C2 communication. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Communications 337

Communications Encryption Education Authentication 337

Security Affairs

AUGUST 28, 2020

Clearsky security researchers revealed that Iran-linked Charming Kitten APT group is using WhatsApp and LinkedIn to conduct spear-phishing attacks. Now, security researchers from Clearsky reported details about a new phishing campaign in which the threat actors impersonate journalists from ‘DeutscheWelle’ and the ‘Jewish Journal.’

Phishing 363

Phishing Security Government IT 363

Krebs on Security

FEBRUARY 22, 2024

Experts say the leak illustrates how Chinese government agencies increasingly are contracting out foreign espionage campaigns to the nation’s burgeoning and highly competitive cybersecurity industry. In 2021, the Sichuan provincial government named i-SOON as one of “the top 30 information security companies.”

Government 329

Government Cybersecurity Sales Blockchain 329

Security Affairs

SEPTEMBER 27, 2020

Finisher, aka FinFisher, is a multiplatform surveillance software used by government and law enforcement agencies for their investigations, but unfortunately, it made the headlines because it was also used by oppressive regimes to spy on dissidents, activists, and Journalists. Pierluigi Paganini. SecurityAffairs – hacking, FinSpy).

Encryption 362

Encryption Communications IT Government 362

Security Affairs

OCTOBER 29, 2020

Iran-linked APT group Phosphorus successfully hacked into the email accounts of multiple high-profile individuals and security conference attendees. “Phosphorus, an Iranian actor, has targeted with this scheme potential attendees of the upcoming Munich Security Conference and the Think 20 (T20) Summit in Saudi Arabia.”

Security 214

Security Authentication Phishing Government 214

Security Affairs

JANUARY 25, 2020

This week, Mitsubishi Electric disclosed a security breach that might have exposed personal and confidential corporate data. Mitsubishi Electric disclosed the security incident only after two local newspapers, the Asahi Shimbun and Nikkei , reported the security breach.

Manufacturing 363

Manufacturing Data breaches Access Sales 363

The Last Watchdog

FEBRUARY 24, 2022

Yes, and that is what Sony exactly lost when they were hacked and the personal info of every one of its customers leaked in 2011. Now, let me give you a few reasons, why pen testing has emerged as a “must-have” security practice. For example, your website security may prove strong, applications not so much.

Security 233

Security Compliance Retail Risk 233

Security Affairs

APRIL 29, 2021

In April 2017, Symantec security experts who analyzed the alleged CIA hacking tools included in the Vault 7 dump that were involved in attacks aimed at least 40 governments and private organizations across 16 countries. Symantec believes Longhorn is a North American hacking group that has been active since at least 2011.

Government 315

Government Cybersecurity Education Security 315

Security Affairs

OCTOBER 14, 2020

Finisher, aka FinFisher, is a multiplatform surveillance software used by government and law enforcement agencies for their investigations, but unfortunately, it made the headlines because it was also used by oppressive regimes to spy on dissidents, activists, and Journalists. Pierluigi Paganini. SecurityAffairs – hacking, K-Electric).

Sales 318

Sales Communications Privacy IT 318

Security Affairs

OCTOBER 24, 2020

. “Today, the Department of the Treasury’s Office of Foreign Assets Control (OFAC) designated, pursuant to Section 224 of the Countering America’s Adversaries Through Sanctions Act (CAATSA), a Russian government research institution that is connected to the destructive Triton malware.” ” continues the press release.

Government 348

Government Cybersecurity Information Security IT 348

Security Affairs

SEPTEMBER 11, 2023

ESET researchers observed a series of attacks, conducted by the Iran-linked APT group Charming Kitten (aka Ballistic Bobcat APT, APT35 , Phosphorus , Newscaster , TA453 , and Ajax Security Team), which are targeting various entities in Brazil, Israel, and the United Arab Emirates. Israel, Iraq, and Saudi Arabia.

Education 329

Education Access Government Security 329

Security Affairs

JULY 17, 2020

Iran-linked Charming Kitten group, (aka APT35 , Phosphorus , Newscaster , and Ajax Security Team) made the headlines in 2014 when experts at iSight issued a report describing the most elaborate net-based spying campaign organized by Iranian hackers using social media. continues IBM. and Greek Navy.”. . Pierluigi Paganini.

Military 326

Military Authentication Cloud IT 326

Security Affairs

AUGUST 18, 2023

The campaign was launched to protest against the Government’s plan to release the treated radioactive water from the Fukushima nuclear plant into the sea. The security firm warns of a possible escalation of the attacks and urge to increase the level of cyber security of potential targets. ” reported the Japan Times.

Government 246

Government Security IT Information Security 246

Krebs on Security

MAY 13, 2024

The government alleges Khoroshev created, sold and used the LockBit ransomware strain to personally extort more than $100 million from hundreds of victim organizations, and that LockBit as a group extorted roughly half a billion dollars over four years. 2011 said he was a system administrator and C++ coder. Dmitry Yuryevich Khoroshev.

Ransomware 305

Ransomware Encryption Systems administration Government 305

Security Affairs

JULY 10, 2024

Multiple cybersecurity agencies released a joint advisory warning about a China-linked group APT40 ‘s capability to rapidly exploit disclosed security flaws. The group appears to be focused on supporting the naval modernization efforts of the Government of Beijing. and the U.S.

Cybersecurity 324

Cybersecurity Government Phishing IT 324

Security Affairs

JUNE 8, 2019

A security researcher found new evidence of activities conducted by the ICEFOG APT group, also tracked by the experts as Fucobha. Chi-en (Ashley) Shen, a senior security researcher at FireEye, collected evidence that demonstrates that China-linked APT group ICEFOG (aka Fucobha ) is still active. Pierluigi Paganini.

Agriculture 279

Agriculture Government Military Communications 279

Security Affairs

OCTOBER 6, 2019

Microsoft says that the Iran-linked cyber-espionage group tracked as Phosphorus (aka APT35 , Charming Kitten , Newscaster , and Ajax Security Team) a 2020 presidential campaign. Microsoft has been tracking the threat actors at least since 2013, but experts believe that the cyberespionage group has been active since at least 2011. .

Passwords 263

Passwords Government Access Authentication 263

Security Affairs

SEPTEMBER 17, 2018

The authorities reported that since 2011, 7 million Bitcoin went into the BTC-e exchange and 5.5 The Russian government officially asked the Greek government to extradite Vinnik to Russia, where he is facing around $10,000 worth of fraud charges, practically nothing compared the charges in the US and France. .

Government 261

Government Security IT 261

Security Affairs

APRIL 29, 2022

ECM’s domestic clients include the Novovoronezh, Kursk and Smolensk nuclear power plants, Russian Railways JSC, State enterprise Moscow Power Directorate, the Energy department of Moscow Government, the Moscow united electric grid JSC branch, and Baltic Oil Pipelines LLC. The collective has released a 1.7 Pierluigi Paganini.

ECM 260

ECM Archiving Government Cybersecurity 260

Security Affairs

OCTOBER 28, 2018

Many experts linked the Regin malware to the Five Eyes alliance , they found alleged references to the super spyware in a number of presentations leaked by Edward Snowden and according to malware researchers, it has been used in targeted attacks against government agencies in the EU and the Belgian telecoms company Belgacom.

Communications 275

Communications Access Phishing Security 275

Security Affairs

FEBRUARY 7, 2020

Iran-linked Charming Kitten group, (aka APT35 , Phosphorus , Newscaster , and Ajax Security Team) made the headlines in 2014 when experts at iSight issued a report describing the most elaborate net-based spying campaign organized by Iranian hackers using social media. candidate , government officials, and expatriate Iranians.

Phishing 296

Phishing Government Passwords Authentication 296

Security Affairs

SEPTEMBER 11, 2022

APT42’s TTPs overlap with another Iran-linked APT group tracked as APT35 (aka ‘ Charming Kitten ‘, ‘ Phosphorus ‘, Newscaster , and Ajax Security Team) which made the headlines in 2014 when experts at iSight issued a report describing the most elaborate net-based spying campaign organized by Iranian hackers using social media.

Phishing 251

Phishing Government Authentication IT 251

Security Affairs

AUGUST 10, 2023

The intelligence agency attributes the attack to the Iran-linked APT group Charming Kitten (aka APT35 , Phosphorus , Newscaster , and Ajax Security Team). Intelligence officers believe that Iranian dissidents tracked by the government of Teheran could be killed by the regime. Israel, Iraq, and Saudi Arabia.

Phishing 246

Phishing Security Government Access 246

Security Affairs

OCTOBER 13, 2019

Security experts at ClearSky analyzed attacks recently uncovered by Microsoft that targeted a US presidential candidate, government officials, journalists, and prominent expatriate Iranians. The post Charming Kitten Campaign involved new impersonation methods appeared first on Security Affairs. Pierluigi Paganini.

Phishing 228

Phishing Government Security Information Security 228

Security Affairs

DECEMBER 23, 2019

China-linked cyber espionage group APT20 has been bypassing two-factor authentication (2FA) in recent attacks, cyber-security firm Fox-IT warns. Security experts from cyber-security firm Fox-IT warns of a new wave of attacks, tracked as Operation Wocao, carried out by China-linked cyber espionage group APT20 that has been bypassing 2FA.

Authentication 243

Authentication Insurance Access Government 243

Security Affairs

OCTOBER 5, 2019

But this new directorate seems to signal a pivot towards a more public approach to security than the Agency has taken in the past. The directorate also reflects a change in the importance of national cybersecurity and provides a hint as to how government agencies are rethinking how cybersecurity divisions should be organized.

Cybersecurity 276

Cybersecurity Military Security Access 276

Security Affairs

AUGUST 31, 2022

Over the years, the group hit defence contractors, manufacturers, universities, government agencies, legal firms involved in diplomatic disputes, and foreign companies involved with Australasian policy or South China Sea operations. . ” read the report published by the experts. Follow me on Twitter: @securityaffairs and Facebook.

Energy and Utilities 246

Energy and Utilities Manufacturing Phishing Government 246