Security Affairs

NOVEMBER 13, 2024

According to Microsoft, the campaign aimed at building capabilities that could disrupt critical communications infrastructure between the United States and Asia region in the case of future crises. The group also relies on customized versions of open-source tools for C2 communications and stay under the radar.

e-Discovery 299

e-Discovery Communications Ransomware Government 299

Security Affairs

MARCH 14, 2022

Many Israel government websites were offline after a cyberattack, defense sources claim that this is the largest-ever attack that hit the country. Israeli media reported that a massive DDoS attack has taken down many Israel government websites. As of now, all of the websites are operational.” Pierluigi Paganini.

Government 288

Government Communications Access Security 288

Security Affairs

MAY 18, 2022

The Conti ransomware gang is threatening to ‘overthrow’ the new government of Costa Rica after last month’s attack. Last month, the Conti ransomware gang claimed responsibility for the attack on Costa Rica government infrastructure after that the government refused to pay a ransom. ” reads the message.

Government 299

Government Ransomware Military Encryption 299

Security Affairs

APRIL 24, 2024

Nation-state actor UAT4356 has been exploiting two zero-days in ASA and FTD firewalls since November 2023 to breach government networks. “Gaining a foothold on these devices allows an actor to directly pivot into an organization, reroute or modify traffic and monitor network communications.”

Government 323

Government Authentication Communications Access 323

Security Affairs

APRIL 21, 2022

Threat intelligence firm Resecurity details how crooks are delivering IRS tax scams and phishing attacks posing as government vendors. The post Cybercriminals Deliver IRS Tax Scams & Phishing Campaigns By Mimicking Government Vendors appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook.

Phishing 318

Phishing e-Delivery Government Passwords 318

Security Affairs

OCTOBER 13, 2023

A cyberespionage campaign, tracked as Stayin’ Alive, targeted high-profile government and telecom entities in Asia. The backdoor uses HTTP for its communications. report – CurKeep collects information about the infected machine. In turn, the C2 responds with strings of commands. Is it linked to ToddyCat APT?

Government 320

Government IT Encryption Libraries 320

Security Affairs

MARCH 8, 2023

China-linked APT group Sharp Panda targets high-profile government entities in Southeast Asia with the Soul modular framework. CheckPoint researchers observed in late 2022, a campaign attributed to the China-linked APT group Sharp Panda that is targeting a high-profile government entity in the Southeast Asia.

Government 246

Government Communications Phishing IT 246

The Last Watchdog

NOVEMBER 12, 2024

Avaya Holdings , Check Point Software Technologies , and Mimecast Limited each minimized or obscured the extent of security breaches linked to the SolarWinds Orion hack, impacting investor trust and highlighting the critical importance of clear, truthful communication. SEC investigators gathered evidence that Unisys Corp.,

Cybersecurity 263

Cybersecurity Risk Government Compliance 263

Security Affairs

SEPTEMBER 12, 2020

DBS is a joint venture by the Seychelles government and some shareholders including Bank, Caisse Francaise de Cooperation, European Investment Bank, DEG, Standard Chartered Bank, and Barclays Bank. . DBS bought back Barclays’ share and Government purchased the shares of DEG, hence, increasing its shareholding to 60.50%.

Ransomware 363

Ransomware Communications Government Encryption 363

Security Affairs

MAY 17, 2024

Russia-linked Turla APT allegedly used two new backdoors, named Lunar malware and LunarMail, to target European government agencies. Notably, the attacker also included a second backdoor – which we named LunarMail – that uses a different method for command and control (C&C) communications.” ” continues the report.

Communications 347

Communications Phishing Government Encryption 347

Security Affairs

JANUARY 7, 2025

The US government does not explain the decision. The organizations in the Section 1260 list support the Military-Civil Fusion strategy of the Chinese government. The platform could support military communication, strategic message dissemination, public sentiment monitoring, and intelligence gathering.

Military 168

Military Cloud Government Analytics 168

Security Affairs

JANUARY 29, 2022

The Federal Communications Commission (FCC) revoked the license for the China Unicom Americas over serious national security concerns. The Federal Communications Commission (FCC) has revoked the license for China Unicom Americas over “serious national security concerns.” ” reads the order. Pierluigi Paganini.

Risk 288

Risk Security Communications Government 288

Security Affairs

DECEMBER 2, 2021

Russian communications watchdog Roskomnadzor tightens the control over the Internet and blocked access to six more VPN services. In September Russian communications watchdog Roskomnadzor blocked access to Hola! In September Russian communications watchdog Roskomnadzor blocked access to Hola!VPN,

Communications 339

Communications Access Government Security 339

Security Affairs

MARCH 17, 2022

The collective Anonymous and its affiliated groups continue to target the Russian government and private organizations. The collective Anonymous, and other groups in its ecosystem, continue to target the Russian government and private organizations. Let’s summarize the most interesting attacks observed in the last few days.

Military 364

Military Communications Government Access 364

Security Affairs

SEPTEMBER 21, 2022

Federal Communications Commission (FCC) has added more Chinese telecom firms to the Covered List. Federal Communications Commission (FCC) has added Pacific Network Corp, ComNet (USA) LLC, and China Unicom (Americas) Operations Limited, to the Covered List. subject to section 214 of the Communications Act of 1934.

Communications 265

Communications Risk Government Information Security 265

Data Breach Today

APRIL 18, 2023

UK's Online Safety Bill Criticized for Infringing on Private Communications Major internet chat platforms are urging the United Kingdom government to reconsider a bill intended to decrease exposure to online harms but which opponents say would open the door to massive government surveillance.

Encryption 275

Encryption Communications Government 275

Security Affairs

MAY 19, 2024

Troll Stealer can also copy the GPKI (Government Public Key Infrastructure) folder on infected computers. GPKI is the public key infrastructure schema for South Korean government personnel and state organizations, suggesting that government agencies were among the targeted by state-sponsored hackers. ” (hardcoded).

Communications 342

Communications Government IT Encryption 342

Data Breach Today

AUGUST 30, 2023

Android Banking Trojan Disguised As Dating or Government App Hackers are deploying a novel Android malware using an uncommon communication method to steal banking login data from compromised devices primarily in Southeast Asia.

Phishing 283

Phishing Communications Government 283

Security Affairs

JUNE 3, 2024

40% of 2,280 official government email addresses from the British, European, and French Parliaments were exposed, including passwords, birth dates, and other details. Many of these MPs, MEPs, deputies, and senators hold senior positions, including heads of committees, government ministers, and senior opposition leaders.

Passwords 360

Passwords Government Data breaches Risk 360

Security Affairs

AUGUST 8, 2024

The BlackSuit ransomware has targeted various critical infrastructure sectors, including commercial facilities, healthcare, government, and manufacturing. Historically, Royal actors were observed leveraging Chisel , Secure Shell (SSH) client, PuTTY, OpenSSH, and MobaXterm for C2 communications.

Ransomware 320

Ransomware Communications Manufacturing Phishing 320

Security Affairs

OCTOBER 6, 2024

“A cyberattack tied to the Chinese government penetrated the networks of a swath of U.S. broadband providers, potentially accessing information from systems the federal government uses for court-authorized network wiretapping requests.” broadband providers is still ongoing, government experts are assessing its scope.

Government 360

Government Access Risk Security 360

Security Affairs

JULY 17, 2021

The US government is offering a $10 million reward to everyone that provides information on operations conducted by nation-state actors. The US government is offering a $10 million reward for information on campaigns conducted by state-sponsored hackers. The move was announced by the U.S. “The U.S.

Government 345

Government Ransomware Access Communications 345

Security Affairs

OCTOBER 7, 2024

A Ukrainian government source told Reuters that Kyiv’s hackers are behind the cyber attack that disrupted operations at the Russian state media company VGTRK on Putin’s birthday. The cyberattack on VGTRK disrupted online broadcasts, internal services, and communications, reportedly wiping servers and backups.

Government 332

Government Communications IT Information Security 332

Security Affairs

SEPTEMBER 23, 2024

Suspected China-linked APT Earth Baxia targeted a government organization in Taiwan by exploiting a recently patched OSGeo GeoServer GeoTools flaw. Trend Micro researchers reported that China-linked APT group Earth Baxia has targeted a government organization in Taiwan and potentially other countries in the Asia-Pacific (APAC) region.

Phishing 343

Phishing File names Cloud Government 343

Security Affairs

OCTOBER 11, 2020

The US Census Bureau is the largest US federal government statistical agency responsible dedicated to providing current facts and figures about America’s people, places, and economy. Data collected by the agency is used by the federal government to allocate over $675 billion in federal funds to tribal, local, and state governments every year.

Government 362

Government Data collection Access Communications 362

Security Affairs

JUNE 16, 2021

Poland ‘s government announced that it was targeted by an ‘Unprecedented’ series of cyber attacks, hackers hit against institutions and individuals. Mateusz Morawiecki had to provide details about the attacks presenting secret documents related to attacks, as anticipated by government spokesman Piotr Muller.

Metadata 343

Metadata Government Phishing Communications 343

Security Affairs

SEPTEMBER 29, 2022

The latter downloads a payload that extracts and injects in itself a new PE (Portable Executable) file, that the analysis showed to be a variant of a malware family known as Graphite, that uses the Microsoft Graph API and OneDrive for C&C communications.” ” reads the analysis published by Cluster25. Microsoft[.]com,

Metadata 334

Metadata Communications Government IT 334

Security Affairs

DECEMBER 13, 2023

According to Microsoft, the campaign aimed at building capabilities that could disrupt critical communications infrastructure between the United States and Asia region in the case of future crises. The group also relies on customized versions of open-source tools for C2 communications and stay under the radar.

Communications 332

Communications Manufacturing Education Government 332

Security Affairs

MAY 26, 2021

The Federal Public Service Interior’s communications director, Olivier Maerens, confirmed that the attackers were not able to breach the server of the ministry, this means that threat actors did not steal any data. The websites of the Belgium government and police services were also unavailable.

IT 325

IT Education Government Communications 325

Security Affairs

FEBRUARY 8, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The group also relies on customized versions of open-source tools for C2 communications and to stay under the radar.

Energy and Utilities 332

Energy and Utilities Communications Military Manufacturing 332

Security Affairs

JULY 15, 2020

“This attack was done solely for fun” The group claims to have hacked numerous organizations and government agencies over the years, including US military, European Union, Washington DC, Israeli Defense Forces, the Indian Government, and some central banks.

Military 363

Military Government Communications Access 363

Security Affairs

SEPTEMBER 6, 2024

The government expert pointed out that Unit 29155 operates independently from other GRU-affiliated groups like Unit 26165 and Unit 74455. The threat actors targeted critical infrastructure sectors such as government, finance, transportation, energy, and healthcare. Since 2022, the unit focused on disrupting aid efforts for Ukraine.

Financial Services 341

Financial Services Government IoT Communications 341

Security Affairs

APRIL 26, 2023

German government warns that technology to regulate power consumption in Huawei network appliances could be used for sabotage purposes. government officials as well as European security authorities, which have warned of the risks associated with Chinese telecoms equipment.” The activity will be completed in the coming months.

Government 246

Government Communications Risk Cybersecurity 246

Security Affairs

FEBRUARY 26, 2024

Recently the leak of a collection of files apparently stolen from the Chinese government hacking contractor, I-Soon, exposed Chinese hacking capabilities. i-SOON is a prominent contractor for various agencies of the Chinese government, including Ministry of Public Security, Ministry of State Security, and the People’s Liberation Army.

Government 328

Government IoT Marketing Data breaches 328

Krebs on Security

DECEMBER 16, 2020

FireEye said hacked networks were seen communicating with a malicious domain name — avsvmcloud[.]com Today, FireEye responded that the domain seizure was part of a collaborative effort to prevent networks that may have been affected by the compromised SolarWinds software update from communicating with the attackers.

Communications 362

Communications Sales Cybersecurity Government 362

Security Affairs

APRIL 19, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The group also relies on customized versions of open-source tools for C2 communications and to stay under the radar.

Energy and Utilities 323

Energy and Utilities Communications Military Access 323

Security Affairs

JANUARY 27, 2021

and foreign government organizations. In July, the FBI warned of NetWalker attacks targeting government organizations. Bulgarian authorities seized a dark website used by NetWalker affiliates to communicate with victims. In August 2020, the FBI has issued a security alert about Netwalker ransomware attacks targeting U.S.

Ransomware 362

Ransomware Government Communications Security 362