Security Affairs

SEPTEMBER 25, 2023

A stealthy APT group tracked as Gelsemium was observed targeting a Southeast Asian government between 2022 and 2023. Palo Alto Unit42 researchers an APT group tracked as Gelsemium targeting a Southeast Asian government. The experts tracked the cluster as CL-STA-0046, the malicious activity spanned over six months between 2022-2023.

Government 331

Government Manufacturing Education Access 331

Security Affairs

SEPTEMBER 15, 2020

CISA published an advisory on China-linked groups targeting government agencies by exploiting flaws in Microsoft Exchange, Citrix, Pulse, and F5 systems. Chinese state-sponsored hackers have probed US government networks looking for vulnerable networking devices that could be compromised with exploits for recently disclosed vulnerabilities.

Government 261

Government Energy and Utilities Healthcare Access 261

Security Affairs

APRIL 6, 2021

China-linked APT group Cycldek is behind an advanced cyberespionage campaign targeting entities in the government and military sector in Vietnam. China-linked APT group LuckyMouse (aka Cycldek, Goblin Panda , Hellsing, APT 27, and Conimes) is targeting government and military organizations in Vietnam with spear-phishing.

Military 294

Military Government Phishing Libraries 294

Security Affairs

JUNE 24, 2021

A new Trojan written in the Go programming language, tracked as ChaChi, was involved in ransomware attacks against government agencies and US schools. ChaChi has been first observed in the wild in the first half of 2020, but cybersecurity experts underestimated it. The Trojan leverages the gobfuscate GoLang tool for obfuscation.

Ransomware 361

Ransomware Education Cybersecurity Government 361

Security Affairs

MARCH 5, 2025

Silk Typhoon targets multiple sectors worldwide, including information technology (IT) services and infrastructure, remote monitoring and management (RMM) companies, managed service providers (MSPs) and affiliates, healthcare, legal services, higher education, defense, government, non-governmental organizations (NGOs), and energy.

Energy and Utilities 154

Energy and Utilities IT Cloud Passwords 154

Security Affairs

AUGUST 4, 2020

NetWalker ransomware operators continue to be very active, according to McAfee the cybercrime gang has earned more than $25 million since March 2020. McAfee researchers believe that the NetWalker ransomware operators continue to be very active, the gang is believed to have earned more than $25 million since March 2020. reads the alert.

Ransomware 214

Ransomware Phishing Encryption Education 214

Security Affairs

AUGUST 2, 2020

and foreign government organizations. and foreign government organizations. “As of June 2020, the FBI has received notifications of Netwalker ransomware attacks on U.S. and foreign government organizations, education entities, private companies, and health agencies by unidentified cyber actors.”

Ransomware 363

Ransomware Encryption Passwords Government 363

Security Affairs

SEPTEMBER 14, 2020

The project was launched in September 2019 and as of August 2020, the experts collected 680 records of ransomware attacks that took place since November 2013. now has 687 records assembled from publicly disclosed incidents between November 2013 and August 2020.” “This repository (version 10.2)

Ransomware 359

Ransomware Data collection Education Security 359

Security Affairs

DECEMBER 21, 2020

“In July and August 2020, government operatives used NSO Group ’s Pegasus spyware to hack 36 personal phones belonging to journalists, producers, anchors, and executives at Al Jazeera. In July 2020, KISMET was a zero-day against at least iOS 13.5.1 ” reads the report published by the researchers.

Government 353

Government Security awareness Education Sales 353

Security Affairs

MARCH 25, 2020

The group hit entities in several industries, including the gaming, healthcare, high-tech, higher education, telecommunications, and travel services industries. The paused coincides with the Chinese Lunar New Year holidays which occurred between January 24 and January 30, 2020.

Healthcare 363

Healthcare Education Manufacturing Government 363

Security Affairs

APRIL 25, 2024

Since at least June 2020, and possibly earlier, the cyberespionage group has used the tool GooseEgg to exploit the CVE-2022-38028 vulnerability. This tool modifies a JavaScript constraints file and executes it with SYSTEM-level permissions.

IT 349

IT Education Cybersecurity Risk 349

Security Affairs

NOVEMBER 25, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. According to the advisory, the threat actors have exploited Zerologon ( CVE-2020-1472 ) in Microsoft’s Netlogon Remote Protocol in phishing attempts.

Ransomware 354

Ransomware Manufacturing Education Libraries 354

Security Affairs

JUNE 1, 2021

Just recently, the group has published a stolen data allegedly belonging to the Mexican Government which still remains available for sale today, and possibly becoming the first cybercriminal group that has touched a major state in Latin America on such a level. Mexican Government data is published for sale. Pierluigi Paganini.

Ransomware 254

Ransomware Sales Government GDPR 254

Security Affairs

SEPTEMBER 20, 2020

Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Security 317

Security Ransomware Data breaches Manufacturing 317

Security Affairs

APRIL 22, 2024

Since at least June 2020, and possibly earlier, the cyberespionage group has used the tool GooseEgg to exploit the CVE-2022-38028 vulnerability. This tool modifies a JavaScript constraints file and executes it with SYSTEM-level permissions. The group was involved also in the string of attacks that targeted 2016 Presidential election.

Military 355

Military File names Education Phishing 355

Security Affairs

APRIL 14, 2020

PaloAlto Networks experts warn of malicious Coronavirus themed phishing campaigns targeting government and medical organizations. Recently organizations in healthcare, research, and government facilities have been hit by Coronavirus-themed attacks that deployed multiple malware families, including ransomware and information stealers (i.e.

Ransomware 361

Ransomware Phishing Government File names 361

Security Affairs

FEBRUARY 19, 2024

Since January 2020, affiliates utilizing LockBit have targeted organizations of diverse sizes spanning critical infrastructure sectors such as financial services, food and agriculture, education, energy, government and emergency services, healthcare, manufacturing, and transportation. on January 5, 2020.

Energy and Utilities 333

Energy and Utilities Ransomware Agriculture Financial Services 333

Security Affairs

OCTOBER 28, 2020

Steelcase is a US-based furniture company that produces office furniture, architectural and technology products for office environments and the education, health care and retail industries. billion in 2020. “On October 22, 2020, Steelcase Inc. It is the largest office furniture manufacturer in the world.

Ransomware 318

Ransomware Computer and Electronics Manufacturing Mining 318

Security Affairs

APRIL 21, 2024

Government agencies revealed that Akira ransomware has breached over 250 entities worldwide and received over $42 million in ransom payments. The attackers mostly used Cisco vulnerabilities CVE-2020-3259 and CVE-2023-20269. Like other ransomware gangs, the group has developed a Linux encryptor to target VMware ESXi servers.

Ransomware 349

Ransomware Encryption Education Phishing 349

IG Guru

DECEMBER 17, 2020

Robert McLauchlinDec 10, 2020 Palmyra, NJ (December 10, 2020) – The Foundation (ARMA International Educational Foundation, AIEF) is pleased to announce Vital Records Control’s sponsorship of $3,500.

Education 98

Education IT Information governance Government 98

Security Affairs

MARCH 1, 2020

Google sued by New Mexico attorney general for collecting student data through its Education Platform. ObliqueRAT, a new malware employed in attacks on government targets in Southeast Asia. FireEye Mandiant M-Trends 2020 report: 500+ new Malware strains in 2019. Lampion malware v2 February 2020.

Security 328

Security Ransomware Military Data breaches 328

IT Governance

JANUARY 26, 2021

In 2020, we recorded 1,120 breaches and cyber attacks that were reported on in mainstream media, which accounted for 20,120,074,547 leaked records. Typically, there is a relatively even split between the number of cyber attacks and accidental breaches we report on, but that wasn’t the case in 2020. billion breached records.

Security 136

Security Data breaches Education Phishing 136

Security Affairs

NOVEMBER 29, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. According to the advisory, the threat actors have exploited Zerologon ( CVE-2020-1472 ) in Microsoft’s Netlogon Remote Protocol in phishing attempts.

Ransomware 346

Ransomware Manufacturing Education Libraries 346

Security Affairs

DECEMBER 26, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. According to the advisory, the threat actors have exploited Zerologon ( CVE-2020-1472 ) in Microsoft’s Netlogon Remote Protocol in phishing attempts.

Ransomware 345

Ransomware Manufacturing Education Libraries 345

Security Affairs

DECEMBER 3, 2023

The malware was used in attacks against multiple industries, including education, real estate, retail, non-profit organizations, telecom companies, and governments. The analysis of the C2 infrastructure revealed that it dates back to 2020.

Retail 357

Retail Education Communications Government 357

Krebs on Security

FEBRUARY 14, 2024

has a business unit called Securence , which specializes in providing filtered, secure email services to businesses, educational institutions and government agencies worldwide. and cityoffrederickmd.gov , the website for the government of Frederick, Md. The last press release on the site dates back to March 2020.

Education 362

Education Data breaches Government Security 362

Security Affairs

DECEMBER 4, 2020

The hackers claimed to have breached an Israeli water facility, likely recycled water, in a video that was published the night of December 1st, 2020. This group also hit other American websites, including a governmental education website in Texas. ” reads the blog post published by OTORIO. ” concludes the post.

Access 344

Access Agriculture Authentication Education 344

Security Affairs

SEPTEMBER 18, 2024

The botnet has been active since at least May 2020, reaching its peak with 60,000 compromised devices in June 2023. and Taiwan across various sectors, including military, government, higher education, telecommunications, defense industrial base, and IT.” “This botnet has targeted entities in the U.S.

IoT 340

IoT Military Education Cybersecurity 340

Security Affairs

OCTOBER 8, 2021

Microsoft revealed that Russia-linked cyberespionage groups are behind the majority of the nation-state cyber attacks on US government agencies. Microsoft revealed that most of the cyber attacks on US government agencies are orchestrated by Russia-linked cyberespionage groups. ” continues the report.

Government 250

Government Education Security IT 250

Security Affairs

JUNE 15, 2023

organizations since 2020. organizations since 2020. The operation targeted many organizations in critical infrastructure sectors, including financial services, food and agriculture, education, energy, government and emergency services, healthcare, manufacturing, and transportation. law enforcement).

Ransomware 246

Ransomware Cybersecurity Agriculture Education 246

Security Affairs

NOVEMBER 15, 2023

The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors. According to the advisory, the threat actors have been observed exploiting Zerologon ( CVE-2020-1472 ) in Microsoft’s Netlogon Remote Protocol in phishing attempts.

Ransomware 335

Ransomware Manufacturing Education Passwords 335

AIIM

JUNE 30, 2020

What does content management look like in 2020, years after ECM died? AIIM has been the go-to resource for information professionals to find research, education, and training for over 70 years. AIIM believes that Information Management and Information Governance should NOT be done just for the sake of doing them.

ECM 232

ECM Content services Paper Information architecture 232

eSecurity Planet

JANUARY 22, 2021

As more information about IoT device vulnerabilities is published, the pressure on industry and government authorities to enhance security standards might be reaching a tipping point. government, standards will not apply to the IoT market at-large. government, standards will not apply to the IoT market at-large.

IoT 145

IoT Cybersecurity Manufacturing Government 145

Security Affairs

NOVEMBER 23, 2020

likely a pun ) and was published to npm registry around November 11, 2020. as Sonatype-2020-1096, Sonatype-2020-1097, and Sonatype-2020-1109. November 9th, 2020: npm team is notified the same day of malicious packages, and public disclosure is made via blog post. and ac-addon. About the author: Ax Sharma.

Archiving 356

Archiving IT Security Education 356

Security Affairs

APRIL 26, 2023

German government warns that technology to regulate power consumption in Huawei network appliances could be used for sabotage purposes. government officials as well as European security authorities, which have warned of the risks associated with Chinese telecoms equipment.” The activity will be completed in the coming months.

Government 246

Government Communications Risk Cybersecurity 246

Security Affairs

JUNE 16, 2023

The US authorities arrested the man in Arizona last month DoJ states that from at least as early as August 2020 to March 2023, Astamirov and other members of the LockBit ransomware gang committed wire fraud and compromised many computer systems worldwide attempting to extort the victims of ransomware attacks. organizations since 2020.

Ransomware 246

Ransomware Agriculture Education Government 246

Security Affairs

FEBRUARY 21, 2024

government offers rewards of up to $15 million for information that could lead to the identification or location of LockBit ransomware gang members and affiliates. According to the press release published by the Department of State , the Lockbit ransomware operators carried out over 2,000 attacks against victims worldwide since January 2020.

Energy and Utilities 329

Energy and Utilities Ransomware Agriculture Manufacturing 329