Security Affairs

FEBRUARY 20, 2020

Britain and the United governments blame Russia for being behind a destructive cyber attack that hit Georgia during 2019. The governments of Britain and the US declared that Russia’s military intelligence service GRU is behind the massive cyber attack that hit Georgia during 2019. ” said the Foreign Secretary Dominic Raab.

Military 346

Military IT Government Encryption 346

Security Affairs

MARCH 25, 2022

has indicted four Russian government employees for their involvement in attacks on entities in critical infrastructure. has indicted four Russian government employees for their role in cyberattacks targeting hundreds of companies and organizations in the energy sector worldwide between 2012 and 2018. Pierluigi Paganini.

Energy and Utilities 285

Energy and Utilities Government Cybersecurity Military 285

Security Affairs

OCTOBER 7, 2018

The APT28 group has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. According to experts from Symantec, the group is now actively conducting cyber espionage campaigns against government and military organizations in Europe and South America.

Military 278

Military Government Phishing Security 278

Security Affairs

MAY 1, 2019

The Military Intelligence and Security Service (MIVD) warn of “worrying” cyber espionage activities carried out by Russia and China. The Military Intelligence and Security Service (MIVD) warn of “worrying” cyber espionage activities carried out by Russia and China.

Military 261

Military Security Government IT 261

Security Affairs

FEBRUARY 20, 2019

Microsoft says Russian APT28 group carried out multiple cyberattacks on democratic institutions in Europe between September and December 2018. The APT28 group has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. ” reads the post published by Microsoft.

Military 275

Military Phishing Government Security 275

Security Affairs

JUNE 26, 2022

Department of Justice brought charges against four Russian nationals suspected of using TRITON malware in cyber attacks on behalf of the Russian government between 2012 and 2018. ” reported the American Military News website. ” continues the American Military News website. Pierluigi Paganini.

Military 323

Military Cloud Government Security 323

Security Affairs

JULY 31, 2020

The Council of the European Union announced sanctions imposed on a Russia-linked military espionage unit, as well as companies operating for Chinese and North Korean threat actors that launched cyber-attacks against the EU and its member states. ” states the Council of the European Union.” ” conclude the EU.

Military 322

Military Cloud Government Phishing 322

Krebs on Security

JANUARY 19, 2021

military and government employees and giving it to an Islamic State hacker group in 2015 has been charged once again with fraud and identity theft. The release was granted in part due to Ferizi’s 2018 diagnosis if asthma, as well as a COVID outbreak at the facility where he was housed in 2020.

Military 350

Military Government Passwords Personal data 350

Security Affairs

AUGUST 23, 2020

The Transparent Tribe cyber-espionage group continues to improve its arsenal while targets Military and Government entities. The Transparent Tribe APT group is carrying out an ongoing cyberespionage campaign aimed at military and diplomatic targets worldwide. ” reads the analysis published by Kaspersky.

Military 363

Military Phishing Passwords Access 363

Security Affairs

SEPTEMBER 9, 2019

Experts at Symantec first exposed the activity of the Chinese-linked APT Thrip in 2018, now the security firm confirms that cyber espionage group has continued to carry out attacks in South East Asia. The China-linked APT group Thrip is continuing to target entities in Southeast Asia even after its activity was uncovered by Symantec.

Military 267

Military Communications Government Education 267

Security Affairs

AUGUST 21, 2018

Microsoft has spotted a new hacking campaign targeting 2018 midterm elections, the experts attributed the attacks to Russia-linked APT28 group. Microsoft has spotted a new hacking campaign targeting 2018 midterm elections. Securi ty Affairs – APT28, 2018 midterm elections). Pierluigi Paganini.

Military 185

Military Education Phishing Authentication 185

Security Affairs

JUNE 10, 2021

The intrusion was uncovered by the Dutch intelligence service AIVD, the government experts discovered that a Dutch police IP address was connecting to servers operated by Russia-linked APT. The group has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide.

Military 305

Military Government Ransomware Security 305

Security Affairs

MAY 23, 2024

A previously unknown China-linked threat actor dubbed ‘Unfading Sea Haze’ has been targeting military and government entities since 2018. Since at least 2018, they used SilentGh0st, TranslucentGh0st, and three variants of the.NET agent SharpJSHandler supported by Ps2dllLoader.

Archiving 325

Archiving Military Communications Phishing 325

Security Affairs

OCTOBER 6, 2019

Affected sectors include government, military, academic, business and healthcare,”. The CVE-2018-13379 flaw could be exploited to obtain administrator credentials in plain text. APT groups also exploit CVE-2018-13382, CVE-2018-13383, and CVE-2019-1579, in Palo Alto Networks products.

Military 277

Military Data breaches Security Government 277

Security Affairs

APRIL 13, 2021

The Swedish Sports Confederation organization was compromised in 2017-18 by hackers working for Russian military intelligence, officials said. In the same period, Russia-linked hackers working for the military intelligence service GRU targeted other prominent sporting bodies, including World Anti-Doping Agency (WADA) and FIFA.

Military 240

Military Government Security IT 240

Security Affairs

FEBRUARY 12, 2020

The list of Crypto’s customers included Iran, India and Pakistan, military juntas in Latin America and the Vatican. Crypto was liquidated in 2018, but its products are still in use in more than a dozen countries. The company was completely under the control of the spy agencies since 1970. That’s not credible,” he said.

Military 284

Military Communications Encryption Government 284

Security Affairs

JULY 1, 2020

Last week China accused the US government of “oppressing Chinese companies” after U.S. The Federal Communications Commission blocked the Chinese companies from receiving subsidies from a government fund. “We organizations from using government Universal Service Fund for acquiring equipment or services provided by the Chinese firms.

Communications 265

Communications Security Government Military 265

Security Affairs

JUNE 8, 2019

The cyber mercenaries were recruited by governments and private companies, it was composed of highly skilled hackers able to conduct sophisticated attacks. Military contractors, shipbuilders, satellite operators, high-tech companies ) in Japan and South Korea. Some samples for both variants have been compiled between 2014 and 2019.

Agriculture 279

Agriculture Government Military Communications 279

Security Affairs

OCTOBER 4, 2024

government and nonprofits. Intelligence Community, Department of Defense, Department of State, Department of Energy, and military defense contractors. The Russian government ran this scheme to steal Americans’ sensitive information, using seemingly legitimate email accounts to trick victims into revealing account credentials.

Phishing 318

Phishing Military Government IT 318

Security Affairs

DECEMBER 22, 2022

The Government of Pyongyang focuses on crypto hacking to fund its military program following harsh U.N. According to local media, US federal prosecutors believe that North Korea’s government considers cryptocurrency a long-term investment and it is amassing crypto funds through illegal activities. ” reported the AP agency.

Military 346

Military Government Ransomware Security 346

Security Affairs

OCTOBER 9, 2019

The UK agency reported that APT groups target several vulnerabilities, including CVE-2019-11510 and CVE-2019-11539 in Pulse Secure VPN solutions, and CVE-2018-13379 , The CVE-2018-13379 is a path traversal vulnerability in the FortiOS SSL VPN web portal that could be exploited by an unauthenticated attacker to download FortiOS system files.

Military 274

Military Security Access Government 274

Security Affairs

OCTOBER 1, 2019

Iran ’s Passive Defense Organization chief Gholamreza Jalali declared that the US government has started its cyber war against the country. Jalali is an Islamic Revolution Guard Corps (IRGC) brigadier general, in November 2018 he announced that government experts have uncovered and neutralized a new strain of Stuxnet.

Military 279

Military Government IT Security 279

Security Affairs

AUGUST 12, 2019

Cloud Atlas threat actors used a new piece of polymorphic malware in recent attacks against government organizations. The Cloud Atlas cyberespionage group, aka Inception, continues to carry out attacks against government organizations and was observed using a new piece of polymorphic malware dubbed VBShower.

Cloud 266

Cloud Phishing Government Military 266

Security Affairs

AUGUST 25, 2018

The Australian government considers risky the involvement of Huawei for the rolling out of next-generation 5G communication networks. — Huawei Australia (@HuaweiOZ) August 22, 2018. The Chinese firm denies having shared Australian customer data with the Chinese intelligence, but it is not enough for the Australian Government.

Security 222

Security Military Manufacturing Retail 222

Security Affairs

OCTOBER 20, 2020

Department of Justice announced charges against six members of Russia’s GRU military intelligence agency for their alleged role in several major cyberattacks conducted over the past years. The crimes committed by Russian government officials were against real victims who suffered real harm.

Military 281

Military Government Risk Access 281

Security Affairs

DECEMBER 10, 2020

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. Zebrocy is mainly used against governments and commercial organizations engaged in foreign affairs.

Phishing 299

Phishing Healthcare Military Data collection 299

Security Affairs

DECEMBER 3, 2018

The Sofacy APT group has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. In September 2018, security experts from ESET spotted the first UEFI rootkit of ever, the code tracked as LoJax was used in attacks in the wild.

Military 273

Military Government Security IT 273

Security Affairs

MARCH 21, 2022

The Government Team for Response to Computer Emergencies of Ukraine (CERT-UA) warns of spear-phishing messages conducted by UAC-0035 group (aka InvisiMole) against Ukrainian state bodies. In past campaigns, the group targeted a small number of high-profile organizations in the military sector and diplomatic missions in Eastern Europe.

Phishing 246

Phishing Military Archiving Government 246

Security Affairs

NOVEMBER 29, 2019

According to Group-IB’s experts, the most frustrating trend of 2019 was the use of cyberweapons in military operations. While 2017 was the year of WannaCry , NotPetya , and BadRabbit ransomware epidemics, 2018 revealed a lack of preparedness for side-channel attacks and threats related to microprocessor vulnerabilities.

IT 303

IT Military Cybersecurity Phishing 303

Security Affairs

DECEMBER 1, 2022

ScarCruft has been active since at least 2012, it made the headlines in early February 2018 when researchers revealed that the APT group leveraged a zero-day vulnerability in Adobe Flash Player to deliver malware to South Korean users. Kaspersky first documented the operations of the group in 2016.

Military 321

Military Cloud Communications Access 321

Security Affairs

FEBRUARY 17, 2021

Justice Department indicted three North Korean military intelligence officials, members of the Lazarus APT group, for their involvement in cyber-attacks, including the theft of $1.3 In 2018, the U.S. government as “ FASTCash ” – including the October 2018 theft of $6.1 ” reads the press release published by the DoJ.

Blockchain 277

Blockchain Ransomware Military Phishing 277

Krebs on Security

AUGUST 1, 2024

Klyushin is the owner of M-13 , a Russian technology company that contracts with the Russian government. government says four of Klyushin’s alleged co-conspirators remain at large, including Ivan Ermakov , who was among 12 Russians charged in 2018 with hacking into key Democratic Party email accounts. countries.

Military 284

Military Ransomware Government IT 284

Security Affairs

JANUARY 24, 2019

Zebrocy’s targets are widely spread across the Middle East, Europe and Asia and the targets’ profiles are mostly government-related.” The Zebrocy malware was used by Russia-linked APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ), that operates under the Russian military agency GRU.

Military 261

Military Phishing Government Security 261

Security Affairs

DECEMBER 7, 2023

The Callisto APT group (aka “ Seaborgium “, “Star Blizzard”, “ ColdRiver” , “TA446”) targeted government officials, military personnel, journalists and think tanks since at least 2015. The nation-state actor is carrying out spear-phishing attacks for cyberespionage purposes.

Phishing 303

Phishing Government Military Cloud 303

Security Affairs

MARCH 4, 2020

According to the firm, the US cyber spies are targeting various industry sectors and government agencies. The Qihoo 360 experts claim that a CIA hacking unit tracked as APT-C-39 has hacked organizations in the aviation, scientific research, oil, technology industries, it also targeted government agencies.

Military 362

Military Government Security IT 362

Security Affairs

NOVEMBER 17, 2021

“In the early part of 2021, PHOSPHORUS actors scanned millions of IPs on the internet for Fortinet FortiOS SSL VPN that were vulnerable to CVE-2018-13379. This vulnerability allowed the attackers to collect clear-text credentials from the sessions file on vulnerable Fortinet VPN appliances.”

Ransomware 330

Ransomware Passwords Military Authentication 330

Security Affairs

JUNE 6, 2019

According to Microsoft, the Platinum has been active since at least 2009, it was responsible for spear phishing attacks on ISPs, government organizations, intelligence agencies, and defense institutes. The hackers don’t appear to be financially motivated due to the nature of targeted entities and TTPs of the group.

Communications 253

Communications Encryption Military Government 253