Remove Cleanup Remove Communications Remove Security
article thumbnail

A ransomware attack took 100 Romanian hospitals down

Security Affairs

Romanian Ministry of Health added that cybersecurity specialists, including cybersecurity experts from the National Cyber Security Directorate, are monitoring the situation. Another 79 hospitals took their systems down as a precautionary measure.

article thumbnail

Iran-linked APT35 group exploits Log4Shell flaw to deploy a new PowerShell backdoor

Security Affairs

The class runs a PowerShell command with a base64-encoded payload that handles communications with C2, and eventually receives and executes additional payloads. The additional modules sent by the C2 are the following: Applications Screenshot Process System information Command Execution Cleanup. amazonaws[.]com/doclibrarysales/3

Cleanup 315
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

8220 Gang Cloud Botnet infected 30,000 host globally

Security Affairs

The 8220 group has been active since at least 2017, the threat actors are Chinese-speaking and the names of the group come from the port number 8220 used by the miner to communicate with the C2 servers. The post 8220 Gang Cloud Botnet infected 30,000 host globally appeared first on Security Affairs. Pierluigi Paganini.

Cloud 260
article thumbnail

Android Spyware Monokle, developed by Russian defense contractor, used in targeted attacks

Security Affairs

Record audio and calls Suicide functionality and cleanup of staging files. As anticipated, Monokle was developed by STC, the experts noticed that Monokle and the STC’s Android security suite called Defender are digitally signed with the same digital certificates and have the same C&C infrastructure. Pierluigi Paganini.

Cleanup 265
article thumbnail

At Least 30,000 U.S. Organizations Newly Hacked Via Holes in Microsoft’s Email Software

Krebs on Security

On March 2, Microsoft released emergency security updates to plug four security holes in Exchange Server versions 2013 through 2019 that hackers were actively using to siphon email communications from Internet-facing systems running Exchange. Speaking on condition of anonymity, two cybersecurity experts who’ve briefed U.S.

article thumbnail

Red TIM Research found two rare flaws in Ericsson OSS-RC component

Security Affairs

The Operations Support Systems are all those systems used by companies that provide communication services for networks’ integrated function. Vulnerability Description : Incomplete Cleanup. – SecurityAffairs – hacking, cyber security). CWE-459 Software Version : <=18B NIST : [link] CVSv3 : 4.9 Pierluigi Paganini.

Cleanup 274
article thumbnail

China-linked APT group VANGUARD PANDA uses a new tradecraft in recent attacks

Security Affairs

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure.

Cleanup 246