Security Affairs

DECEMBER 15, 2023

. “After data exfiltration often involving direct communications with victims demanding ransom, Snatch threat actors may threaten victims with double extortion, where the victims’ data will be posted on Snatch’s extortion blog if the ransom goes unpaid.” HENSOLDT is a company specializing in military and defense electronics.

Ransomware 333

Ransomware Computer and Electronics Military Agriculture 333

Security Affairs

MAY 24, 2022

Threat actors could perform reverse engineering of military-made malicious code and use their own versions in attacks in the wild. “The same applies for the digital weapons that, maybe today are used by the military, developed by military, and tomorrow will be available for criminals,” he explained. .

Military 293

Military Government Communications Security 293

Security Affairs

APRIL 8, 2022

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election. To nominate, please visit:?

Military 338

Military Government Phishing Security 338

Security Affairs

MAY 3, 2022

“ Curious Gorge, a group TAG attributes to China’s PLA SSF, has remained active against government, military, logistics and manufacturing organizations in Ukraine, Russia and Central Asia. The researchers also observed threat actors increasingly targeting organizations in the critical infrastructure. To nominate, please visit:?

Manufacturing 338

Manufacturing Phishing Passwords Military 338

Security Affairs

APRIL 9, 2023

made electronics on behalf of the Russian government and military. The Estonian man is accused of having helped the Russian government and military to purchase US-made electronics and hacking tools. Andrey Shevlyakov, an Estonian national, was charged in the US with conspiracy and other charges related to acquiring U.S.-made

Computer and Electronics 246

Computer and Electronics Military Manufacturing Government 246

Security Affairs

APRIL 10, 2022

April 5 – Anonymous targets the Russian Military and State Television and Radio propaganda. Anonymous continues to support Ukraine against the Russian criminal invasion targeting the Russian military and propaganda. Feb 27- Mar 05 Ukraine – Russia the silent cyber conflict. To nominate, please visit:? Pierluigi Paganini.

Military 246

Military Phishing Government Cybersecurity 246

Security Affairs

MAY 28, 2022

We public schemes, drawings, technologies, political and military secrets, accounting reports and clients databases. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). We gather data using vunlerability in their IT infrastructure. in their IT infrastructure.

Ransomware 363

Ransomware Military Security IT 363

Security Affairs

APRIL 18, 2022

We public schemes, drawings, technologies, political and military secrets, accounting reports and clients databases. Below is the description for the marketplace: “There you can buy or download for free private and compromising data of your competitors. We gather data using vunlerability in their IT infrastructure. Pierluigi Paganini.

Military 335

Military Sales Ransomware Cybersecurity 335

Security Affairs

MARCH 3, 2022

Researchers observed a spike in the attacks against Ukrainian WordPress sites since the beginning of the military invasion of the country. We will use the term “attack” in this blog post to indicate a sophisticated exploit attempt.” Ukrainian TLD before and after the invasion. This data set includes 8,320.UA UA websites.

Military 246

Military Government Security Access 246

Security Affairs

APRIL 4, 2023

Proofpoint researchers recently reported that a Russian hacking group, tracked as Winter Vivern (aka TA473), has been actively exploiting vulnerabilities ( CVE-2022-27926 ) in unpatched Zimbra instances to gain access to the emails of NATO officials, governments, military personnel, and diplomats. reads the post published by Proofpoint.

IT 246

IT Military Phishing Passwords 246

Security Affairs

MAY 3, 2022

RedFoxtrot has been active since at least 2014 and focused on gathering military intelligence from neighboring countries, it is suspected to work under the PLA China-linked Unit 69010. Experts observed overlap between the TTPs of the Moshen Dragon group with the ones of the Chinese Nomad Panda (aka RedFoxtrot). To nominate, please visit:?

Security 338

Security Military Insurance Cybersecurity 338

Security Affairs

APRIL 23, 2022

Since February the notorious cybercrime operation Trickbot is controlled by Conti ransomware, the ransomware gang that publicly announced its support to Russia after the invasion of Ukraine by Russian cyber militaries. The alert published by the Ukraine CERT-UA includes Indicators of Compromise (IoCs) for this campaign and recommendations.

Phishing 255

Phishing Military Ransomware Encryption 255

Security Affairs

JULY 1, 2020

Blog Link) [link] — Cyble (@AuCyble) June 30, 2020. Maze ransomware operators are very active in this period, recently they have stolen data from US military contractor Westech and the ST Engineering group , and they have released credit card data stolen from the Bank of Costa Rica (BCR) threatening to leak other lots every week.

Ransomware 347

Ransomware Encryption Military IT 347

Security Affairs

JUNE 11, 2022

The attack chain observed by the researchers starts with spear-phishing messages using weaponized Word document disguised as a news report related to military affairs in Iran. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”) To nominate, please visit:?

IT 363

IT Military Communications Phishing 363

Security Affairs

FEBRUARY 28, 2024

“As early as 2022, APT28 actors had utilized compromised EdgeRouters to facilitate covert cyber operations against governments, militaries, and organizations around the world.” and foreign governments and military, security, and corporate organizations. ” reads the joint report. ” continues the report.

Energy and Utilities 330

Energy and Utilities Military Government Phishing 330

Security Affairs

JUNE 21, 2022

The affected organizations, both governmental and military, show that this group is focused on very high-profile targets and is probably used to achieve critical goals, likely related to geopolitical interests. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”).

Military 361

Military Security Cybersecurity IT 361

Security Affairs

APRIL 30, 2023

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election.

Systems administration 246

Systems administration Military Phishing Government 246

Security Affairs

NOVEMBER 8, 2023

blog, which was chosen by the attackers in an attempt to appear as the legitimate cryptocurrency exchange swissborg.com. ” North Korea-linked threat actors continue to target organizations in the cryptocurrency industry to circumvent international sanctions and finance its military operations.

Blockchain 333

Blockchain Military Communications IT 333

Security Affairs

APRIL 13, 2023

Poland’s Military Counterintelligence Service and its Computer Emergency Response Team linked a recent string of attacks targeting NATO and European Union countries to the Russia-linked APT29 group (aka SVR group , Cozy Bear , Nobelium , and The Dukes ). The Military Counterintelligence Service and CERT.PL

Libraries 246

Libraries Military Education Government 246

The Last Watchdog

MAY 30, 2022

Meanwhile, 200,000 well-trained and technically skilled military service members are discharged each year. Yet, there’s still work to be done to make this path more accessible and known among the veteran and transitioning military community. This experience can also be helpful when training cybersecurity talent.

Cybersecurity 278

Cybersecurity Military Education Government 278

Security Affairs

MAY 8, 2022

The agency is responsible for national, military and police intelligence, as well as counterintelligence. The Conti ransomware gang added the Peru MOF – Dirección General de Inteligencia (DIGIMIN) to the list of its victims on its Tor leak site. The National Directorate of Intelligence is the premier intelligence agency in Peru.

Ransomware 246

Ransomware Military Cybersecurity Risk 246

Security Affairs

APRIL 20, 2023

In Q1 2023, threat actors linked to Russia’s military intelligence service focused their phishing campaigns on Ukraine, with the country accounting for over 60% of observed Russian targeting. ” reads the report published by the Google TAG.

Phishing 246

Phishing Military Ransomware Education 246

Security Affairs

NOVEMBER 23, 2018

The researchers of Yoroi ZLab, on 16 November, accessed to a new APT29’s dangerous malware which seems to be involved in the recent wave of attacks aimed at many important US entities, such as military agencies, law enforcement, defense contractors , media companies and pharmaceutical companies. New “Cozy Bear” campaign, old habits.

Healthcare 276

Healthcare Phishing Military Security 276

Security Affairs

APRIL 19, 2023

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election.

Military 246

Military Access Cybersecurity Education 246

Security Affairs

MAY 14, 2022

Our Legion conducts military cyber exercises in your countries in order to improve their skills. Killnet published a message on its Telegram channel, threatening further attacks may: “Dear media of Italy and Spain. killnet does not actually attack your countries like it did in Romania. To nominate, please visit:? Pierluigi Paganini.

Government 297

Government Military Data breaches Cybersecurity 297

Security Affairs

SEPTEMBER 19, 2021

military and various government contractors, then with a U.S. This is just a first step, and we will continue to strive to earn your trust,” ExpressVPN blog post on the issue read. . The surveillance it represents is completely antithetical to our mission.” ” reads the response. and its ally, the U.A.E.,

Cybersecurity 363

Cybersecurity Military Privacy Compliance 363

Security Affairs

APRIL 21, 2023

The organisation works with national authorities, air navigation service providers, civil and military airspace users, airports, and other organisations. A senior Eurocontrol official told The Wall Street Journal , that the Pro-Russia hackers cannot access systems for aviation safety because these systems are air-gapped.

Military 246

Military Education Access Cybersecurity 246

Security Affairs

APRIL 10, 2022

The APT group has attempted to hack into the Facebook accounts of dozens of Ukrainian military personnel, in some cases they posted videos calling on the Army to surrender as if these posts were coming from the legitimate account owners. Meta revealed to have blocked the sharing of these videos. To nominate, please visit:? Pierluigi Paganini.

Military 246

Military Cybersecurity Government Security 246

Security Affairs

APRIL 10, 2022

Please vote for Security Affairs as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog” and others of your choice. Pierluigi Paganini.

Security 245

Security Data breaches Military Manufacturing 245

Krebs on Security

DECEMBER 14, 2020

A blog post by Microsoft says the attackers were able to add malicious code to software updates provided by SolarWinds for Orion users. . “Treat all hosts monitored by the SolarWinds Orion monitoring software as compromised by threat actors and assume that further persistence mechanisms have been deployed,” CISA advised.

Military 364

Military Government Cybersecurity Security 364

Security Affairs

NOVEMBER 17, 2021

Learn more from this blog summarizing these trends, as presented at #CyberWarCon : [link] — Microsoft Security Intelligence (@MsftSecIntel) November 16, 2021. Over the past year, Microsoft Threat Intelligence Center (MSTIC) has observed an evolution of the tools, techniques, and procedures employed by Iranian nation-state actors.

Ransomware 335

Ransomware Passwords Military Authentication 335

Security Affairs

APRIL 30, 2023

Cyber security of satellite systems is becoming crucial due to the growing number of commercial and military applications that rely on them. .” Thales pointed out that throughout the entire exercise, ESA had access to the satellite’s systems to retain control. ” said Pierre-Yves Jolivet, VP Cyber Solutions, Thales.

Cybersecurity 246

Cybersecurity Military Access Education 246

Security Affairs

APRIL 26, 2023

However, the attackers chose a domain name that gives the impression of a connection to the South African military. This domain has been hosted on eight other IPs throughout its history, none of these IPs were directly affiliated with the South African government. Experts added that the IP 196.216.136[.]139 139 resolved to vpn729380678.softether[.]net

Communications 246

Communications Military Government Libraries 246

Security Affairs

APRIL 19, 2023

“Microsoft assesses that Mint Sandstorm is associated with an intelligence arm of Iran’s military, the Islamic Revolutionary Guard Corps (IRGC), an assessment that has been corroborated by multiple credible sources including Mandiant , Proofpoint , and SecureWorks.” ” reads the report published by Microsoft.

Energy and Utilities 246

Energy and Utilities Military Education Phishing 246

Security Affairs

APRIL 9, 2023

billion rubles. Nominate here: [link] Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, newsletter newsletter) The post Security Affairs newsletter Round 414 by Pierluigi Paganini – International edition appeared first on Security Affairs.

Security 246

Security Computer and Electronics Ransomware Marketing 246

Security Affairs

APRIL 6, 2023

Google’s Threat Analysis Group (TAG) is warning of the North Korea-linked ARCHIPELAGO group that is targeting government and military personnel, think tanks, policy makers, academics, and researchers in South Korea, the US and elsewhere.

Phishing 246

Phishing Passwords Military Education 246

Security Affairs

MAY 31, 2022

SideWinder has been active since at least 2012, the group main targeted Police, Military, Maritime, and the Naval forces of Central Asian countries. sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog”). To nominate, please visit:? Pierluigi Paganini.

Encryption 251

Encryption Military Phishing Communications 251