Security Affairs

APRIL 21, 2024

Government agencies revealed that Akira ransomware has breached over 250 entities worldwide and received over $42 million in ransom payments. The government experts observed the use of PowerTool by Akira threat actors to exploit the Zemana AntiMalware driver and terminate antivirus-related processes.

Ransomware 351

Ransomware Encryption Education Phishing 351

Security Affairs

DECEMBER 3, 2023

The malware was used in attacks against multiple industries, including education, real estate, retail, non-profit organizations, telecom companies, and governments. The backdoor is written in.NET and leverages the domain name service (DNS) protocol to establish a covert communication channel with the command and control infrastructure.

Retail 359

Retail Education Communications Government 359

Security Affairs

NOVEMBER 21, 2019

The group is very sophisticated and used zero-day exploits and complex malware to conduct targeted attacks against governments and organizations in almost every industry, including financial, energy, telecommunications, and education, aerospace. Then the DePriMon malware uses Schannel for the communication.

Communications 338

Communications Encryption Education Authentication 338

Security Affairs

APRIL 19, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The group also relies on customized versions of open-source tools for C2 communications and to stay under the radar.

Energy and Utilities 330

Energy and Utilities Communications Military Access 330

Security Affairs

MARCH 2, 2024

The attacks were observed as recently as February 2024, they targeted government, education, emergency services, healthcare, and other critical infrastructure sectors. For communication purposes, Phobos actors employ diverse instant messaging applications such as ICQ, Jabber, and QQ.

Ransomware 353

Ransomware Education Phishing Government 353

Security Affairs

APRIL 14, 2020

PaloAlto Networks experts warn of malicious Coronavirus themed phishing campaigns targeting government and medical organizations. Recently organizations in healthcare, research, and government facilities have been hit by Coronavirus-themed attacks that deployed multiple malware families, including ransomware and information stealers (i.e.

Ransomware 361

Ransomware Phishing Government File names 361

Security Affairs

JUNE 21, 2019

Turla (aka Snake , Uroburos , Waterbug , Venomous Bear and KRYPTON ), has been active since at least 2007 targeting government organizations and private businesses. The three recent Turla campaigns targeted governments and international organizations worldwide.

Communications 268

Communications Government Data collection Education 268

Security Affairs

DECEMBER 14, 2020

The cyber espionage group has tampered with updates released by IT company SolarWinds, which provides its products to government agencies, military, and intelligence offices, two people familiar with the matter told the Reuters agency. . Threat actors carried out a highly-sophisticated supply chain attack.

Military 351

Military Cybersecurity Communications Government 351

Security Affairs

SEPTEMBER 9, 2019

The group has continued launching attacks against entities in Southeast Asia, including military, satellite communications, media and educational organizations. The Thrip group has been active since 2013, but this is the first time Symantec publicly shared details of its activities. ” concludes the report. . Pierluigi Paganini.

Military 267

Military Communications Government Education 267

Security Affairs

NOVEMBER 7, 2022

The group of threat actors calling themselves ‘Justice Blade’ published leaked data from Smart Link BPO Solutions, an outsourcing IT vendor working with major enterprises and government agencies in the Kingdom of Saudi Arabia and other countries in the GCC.

Communications 251

Communications Government Data breaches Education 251

Security Affairs

MARCH 1, 2020

Google sued by New Mexico attorney general for collecting student data through its Education Platform. ObliqueRAT, a new malware employed in attacks on government targets in Southeast Asia. European Commission has chosen the Signal app to secure its communications. The best news of the week with Security Affairs.

Security 331

Security Ransomware Military Data breaches 331

Security Affairs

APRIL 26, 2023

German government warns that technology to regulate power consumption in Huawei network appliances could be used for sabotage purposes. government officials as well as European security authorities, which have warned of the risks associated with Chinese telecoms equipment.” The activity will be completed in the coming months.

Government 246

Government Communications Risk Cybersecurity 246

Security Affairs

AUGUST 14, 2024

The group targeted multiple industries, including media and communications, telecoms, technology, healthcare, and education and government entities. Trend Micro researchers observed the APT targeting countries like Italy, Germany, UAE, and Qatar, and the group is suspected to have targeted also entities in Georgia and Romania.

Encryption 309

Encryption Education Communications Access 309

Krebs on Security

MAY 23, 2024

Two weeks before Russia invaded Ukraine in February 2022, a large, mysterious new Internet hosting firm called Stark Industries Solutions materialized and quickly became the epicenter of massive distributed denial-of-service (DDoS) attacks on government and commercial targets in Ukraine and Europe. Click to enlarge. PEACE HOSTING?

Cloud 330

Cloud Education Government Communications 330

The Last Watchdog

MAY 30, 2022

Yet, there’s still work to be done to make this path more accessible and known among the veteran and transitioning military community. Fundamentally, cybersecurity professionals identify weaknesses and design systems and processes to protect any organization — government agencies, private companies — from cyberattacks.

Cybersecurity 278

Cybersecurity Military Education Government 278

Security Affairs

APRIL 26, 2023

In recent years, the researchers observed the group expanding its operations to include financial institutions and government entities. PingPull, was first spotted by Unit 42 in June 2022, the researchers defined the RAT as a “difficult-to-detect” backdoor that leverages the Internet Control Message Protocol (ICMP) for C2 communications.

Communications 246

Communications Military Government Libraries 246

Security Affairs

AUGUST 19, 2020

The bot is written in Golang and implements wormable capabilities, experts reported attacks against entities in government, education, and finance sectors. In this network with no single point-of-failure, peers constantly communicate with each other to keep the network alive, resilient and up-to-date.”

Encryption 363

Encryption Mining Communications Access 363

Security Affairs

FEBRUARY 28, 2024

. “As early as 2022, APT28 actors had utilized compromised EdgeRouters to facilitate covert cyber operations against governments, militaries, and organizations around the world.” and foreign governments and military, security, and corporate organizations. ” reads the joint report. ” concludes the report. .

Energy and Utilities 332

Energy and Utilities Military Government Phishing 332

Krebs on Security

MARCH 5, 2021

On March 2, Microsoft released emergency security updates to plug four security holes in Exchange Server versions 2013 through 2019 that hackers were actively using to siphon email communications from Internet-facing systems running Exchange. Microsoft’s initial advisory about the Exchange flaws credited Reston, Va.

Cybersecurity 364

Cybersecurity Government Cleanup Cloud 364

Krebs on Security

MAY 14, 2021

“After that, you will be free to communicate with them wherever you want in any way you want,” the instructions read. The word ‘ransomware’ has been put on a par with a number of unpleasant phenomena, such as geopolitical tensions, extortion, and government-backed hacks. This word has become dangerous and toxic.”

Ransomware 364

Ransomware Education Communications Access 364

Security Affairs

MAY 25, 2023

According to Microsoft, the campaign aims at building capabilities that could disrupt critical communications infrastructure between the United States and Asia region in the case of future crises. The group also relies on customized versions of open-source tools for C2 communications and stay under the radar.

Communications 246

Communications Manufacturing Access Archiving 246

Security Affairs

FEBRUARY 28, 2024

Targeted Sector Vulnerabilities: Financial Services, IT, Healthcare, Education, and Government sectors have emerged as primary targets, with attackers fine-tuning their strategies to exploit specific vulnerabilities within these industries. About the Author: Stefanie Shank.

Security 345

Security Phishing Communications Financial Services 345

Security Affairs

AUGUST 27, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The group also relies on customized versions of open-source tools for C2 communications and to stay under the radar.

Energy and Utilities 325

Energy and Utilities Communications Authentication Access 325

The Last Watchdog

AUGUST 23, 2021

For instance, if you have employees in China and the EU, you’ll have to obtain Chinese government approval to provide data from China to EU authorities enforcing the GDPR. Government Monitoring. In some countries, government agencies may monitor your employees’ web activity. Slow Communication. Unsecured Wi-Fi.

Communications 223

Communications Cybersecurity GDPR Risk 223

Data Breach Today

JUNE 26, 2023

Group Targeting Transportation, Construction, Government Agencies, CrowdStrike Says A Chinese state hacker is using novel tradecraft to gain initial access to victim systems, according to CrowdStrike.

Manufacturing 147

Manufacturing Education Communications Government 147

Security Affairs

MARCH 18, 2019

UK intelligence agency GCHQ, as part of the celebration of its centenary , has released emulators for World War II cipher machines that can be executed in the encryption app CyberChef released for educational purposes. We even tested them against the real thing!

Encryption 264

Encryption Military Education Communications 264

Security Affairs

OCTOBER 26, 2023

“As part of our ongoing response, we temporarily blocked external communication with the affected servers and have installed EDR (Endpoint Detection and Response) systems on all servers and PCs to detect unauthorized activity. SII) were compromised.” ” reads the update published by Seiko.

Data breaches 358

Data breaches Ransomware Personal data Cybersecurity 358

Security Affairs

APRIL 9, 2023

made electronics on behalf of the Russian government and military. The Estonian man is accused of having helped the Russian government and military to purchase US-made electronics and hacking tools. manufacturers on behalf of Russian end-users, including defense contractors and other Russian government agencies.

Computer and Electronics 246

Computer and Electronics Military Manufacturing Government 246

Security Affairs

MARCH 3, 2023

According to government experts, the Royal ransomware attacks targeted numerous critical infrastructure sectors including, manufacturing, communications, healthcare and public healthcare (HPH), and education. The operators have recently been observed using the Chisel tunneling tool for C2 communication.

Ransomware 246

Ransomware Encryption Cybersecurity Communications 246

Hunton Privacy

JULY 5, 2022

On June 21, 2022, President Biden signed into law, the State and Local Government Cybersecurity Act of 2021 (S. 1097) (the “Cyber Workforce Program Act”), two bipartisan bills aimed at enhancing the cybersecurity postures of the federal, state and local governments.

Cybersecurity 108

Cybersecurity Government Education Communications 108

eSecurity Planet

FEBRUARY 26, 2025

As businesses rely more on mobile devices for authentication and communication, these evolving threats are slipping past conventional security defenses, putting corporate networks at greater risk. Zimperium found that mishing activity peaked in August 2024, with over 1,000 daily attacks recorded. What is mishing?

Phishing 88

Phishing Data breaches Education Risk 88

Security Affairs

OCTOBER 13, 2020

As a result, you will prevent unauthorized access or communication interception. As an example, we could use communications between systems that are not properly encrypted. Hackers or other malicious sources can intercept poorly encrypted communications on the web. Instead, you should change your credentials regularly.

IoT 357

IoT Cybersecurity Passwords Manufacturing 357

Security Affairs

SEPTEMBER 23, 2023

According to government experts, the Royal ransomware attacks targeted numerous critical infrastructure sectors including, manufacturing, communications, healthcare and public healthcare (HPH), and education. million to mitigate the May Royal ransomware attack appeared first on Security Affairs.

Ransomware 334

Ransomware Encryption Systems administration Cybersecurity 334

Security Affairs

AUGUST 6, 2019

The STRONTIUM APT group (aka APT28 , Fancy Bear , Pawn Storm , Sofacy Group , and Sednit ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The group was involved also in the string of attacks that targeted 2016 Presidential election. ” concludes Microsoft.

IoT 247

IoT Military Access Education 247

Security Affairs

MAY 15, 2023

The highly-targeted attacks aim at organizations in government, aviation, education, and telecom sectors. The instances of the Merdoor backdoor analyzed by the researchers only differ for the embedded and encrypted configuration, which includes C2 communication method, service details, and the installation directory.

Encryption 246

Encryption Phishing Communications Education 246

Security Affairs

MARCH 3, 2022

Along with this comes the need for secure communication as machines operate increasingly on behalf of humans. But instead of usernames and passwords, machines use keys and certificates that serve as machine identities so they can connect and communicate securely. About the author: Anastasios Arampatzis.

Digital transformation 246

Digital transformation IoT Passwords Cloud 246

Security Affairs

DECEMBER 15, 2022

The services were involved in attacks against millions of individuals and organizations in multiple industries, including educational institutions, government agencies, and gaming platforms. The suspects offered the services claiming they were legitimate “stresser” services that could used by organizations for network testing.

Education 246

Education Communications Government Access 246