article thumbnail

Conti’s Ransomware Toll on the Healthcare Industry

Krebs on Security

Weiss now serves as the chief security officer of the Health Information Sharing & Analysis Center (H-ISAC), an industry group that shares information about cyberattacks against healthcare providers. National Security Agency (NSA). Conti shames victims who refuse to pay a ransom by posting their internal data on their darkweb blog.

article thumbnail

Google warned users of 33,015 nation-state attacks since January

Security Affairs

Shane Huntley, Director at Google’s Threat Analysis Group (TAG), revealed that her team has shared its findings with the campaigns and the Federal Bureau of Investigation. Google sent 11,856 government-backed phishing warnings during Q1 2020, 11,023 in Q2 2020, and 10,136 in Q3 2020. Tbps, the largest DDoS attack of ever.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

North Korea-linked Lazarus APT targets the COVID-19 research

Security Affairs

The attacks aimed at a Ministry of Health and a pharmaceutical company involved in the development of the COVID-19 vaccine. The systems at the pharmaceutical company were targeted with the BookCode malware, while in the attack against a Ministry of Health the APT group used the wAgent malware. .

article thumbnail

Why IDMP compliance requires adaptive data governance

Collibra

Pharmaceutical, biotech and medical devices firms, among others, must comply with a plethora of regulations. This requires every company to perform gap analysis to determine what is required and then update their systems, processes, workflows and data management strategy accordingly to ensure compliance.

article thumbnail

New financially motivated attacks in Western Europe traced to Russian-speaking threat actors

Security Affairs

At least two companies operating in pharmaceutical and manufacturing sectors have been affected. If the latter are the ones to blame, this marks the first time the gang has launched the attacks against pharmaceutical and manufacturing companies and may indicate a significant shift in their modus operandi. . 126 and 37.120.145 [. ]

article thumbnail

Russia-linked APT28 and crooks are still using the Moobot botnet

Security Affairs

The analysis of memory dumps and command-and-control connections revealed that the botnet is running a variant of the Ngioweb malware. Trend Micro also discovered that at least two prominent cybercriminal groups and the Russia-linked APT group Pawn Storm used the botnet. ” reported Trend Micro. ” reported Trend Micro.

article thumbnail

Chronicle experts spotted a Linux variant of the Winnti backdoor

Security Affairs

Chronicle researchers while investigating the cyber attack that hit the Bayer pharmaceutical company in April. “In April 2019, reports emerged of an intrusion involving Winnti malware at a German Pharmaceutical company.” ” reads the analysis published by Chronicle. samples designed specifically for Linux.”