Security Affairs

AUGUST 8, 2024

FBI and CISA published a joint advisory on the BlackSuit Ransomware group, the document provides TTPs and IOCs as recently as July 2024. The BlackSuit ransomware has targeted various critical infrastructure sectors, including commercial facilities, healthcare, government, and manufacturing.

Ransomware 329

Ransomware Communications Manufacturing Phishing 329

Security Affairs

NOVEMBER 29, 2023

GossiTheDog @SOSIntel @UK_Daniel_Card @LisaForteUK pic.twitter.com/L7A3XNNxU7 — Dominic Alvieri (@AlvieriD) November 29, 2023 The group published images of stolen documents as proof of the hack. King Edward VII’s Hospital in London has been breached by Rhysida Ransomware. “Unique files are presented to your attention!

Ransomware 350

Ransomware Manufacturing Education Libraries 350

Security Affairs

DECEMBER 26, 2023

pic.twitter.com/6uHMDcNhTC — Dominic Alvieri (@AlvieriD) December 26, 2023 The group published images of stolen documents as proof of the hack. The ransomware gang hit organizations in multiple industries, including the education, healthcare, manufacturing, information technology, and government sectors.

Ransomware 349

Ransomware Manufacturing Education Libraries 349

Security Affairs

APRIL 23, 2020

The APT32 group has been active since at least 2012, it has targeted organizations across multiple industries and foreign governments, dissidents, and journalists. Since at least 2014, experts at FireEye have observed APT32 targeting foreign corporations with an interest in Vietnam’s manufacturing, consumer products, and hospitality sectors.

Government 314

Government Phishing Manufacturing Cybersecurity 314

Security Affairs

DECEMBER 7, 2021

APT15 has been active since at least 2010, it conducted cyber espionage campaigns against targets worldwide in several industries, including defense, high tech, energy, government, aerospace, and manufacturing. ” reads the post published by Microsoft. .” ” reads the post published by Microsoft.

Manufacturing 342

Manufacturing Phishing Government Security 342

Security Affairs

NOVEMBER 1, 2021

Experts uncovered a new threat actor, tracked as Balikbayan Foxes, that is impersonating the Philippine government to spread malware. . The group focuses on Shipping/Logistics, Manufacturing, Business Services, Pharmaceutical, and Energy entities, among others. ” reads the analysis published by the experts. .

Healthcare 279

Healthcare Phishing Government Manufacturing 279

Security Affairs

NOVEMBER 27, 2023

“The Defence Intelligence of Ukraine informs that as a result of a successful complex special operation in cyberspace, a large volume of confidential documents of the structural subdivision of the Russian Ministry of Transport – the Federal Air Transport Agency (Rosaviatsia) – is now acquired.”

Military 350

Military Manufacturing Government Authentication 350

Security Affairs

OCTOBER 7, 2020

Malwarebytes researchers Hossein Jazi and Jérôme Segura have documented a new fileless attack technique, dubbed Kraken, that abuses the Microsoft Windows Error Reporting (WER) service. Upon opening the document, a macro is triggered, the malicious code uses a custom version of the CactusTorch VBA module to perform a fileless attack.

Phishing 349

Phishing Manufacturing Archiving Security 349

Security Affairs

MAY 5, 2021

“For example, UNC2529 used a unique username, masquerading as an account executive for a small California-based electronics manufacturing company, which Mandiant identified through a simple Internet search.” In some attacks, the threat actors used weaponized Excel documents as a downloader.

Manufacturing 339

Manufacturing Phishing Military Retail 339

Security Affairs

AUGUST 31, 2022

Over the years, the group hit defence contractors, manufacturers, universities, government agencies, legal firms involved in diplomatic disputes, and foreign companies involved with Australasian policy or South China Sea operations. . “The RTF template injection URL returned a macro-laden Microsoft Word document.

Energy and Utilities 246

Energy and Utilities Manufacturing Phishing Government 246

Security Affairs

MAY 21, 2020

Mitsubishi Electric had also already notified members of the Japanese government and the Ministry of Defense. Mitsubishi Electric disclosed the security incident only after two local newspapers, the Asahi Shimbun and Nikkei , reported the security breach. ” states the AP press agency. ” states the AP press agency.

Security 310

Security Military Manufacturing Personal data 310

Security Affairs

SEPTEMBER 15, 2020

” states the document. The release of “The Vulnerability Disclosure Toolkit” is just a part of the efforts of the UK Government in the definition of national legislative frameworks. The guideline is organized into three main sections, Communication, Policy, and Security.txt.

Communications 336

Communications Risk Manufacturing Government 336

Security Affairs

JULY 9, 2020

Researchers at Malwarebytes have found malware pre-installed on smartphones sold in the United States, this is the second time as documented in a report published in January. The phone was being shipped to users with two malicious malware masqueraded as Wireless Update application and a Settings app respectively.

Manufacturing 363

Manufacturing Government Security IT 363

Security Affairs

JANUARY 20, 2020

Mitsubishi Electric had also already notified members of the Japanese government and Ministry of Defense. The amount of unauthorized access is approximately 200 megabytes, mainly for documents.” This morning, at a press conference, Yoshii Kan, a secretary-general of Japan, said that the company had reported the intrusion.

Data breaches 363

Data breaches Computer and Electronics Government Manufacturing 363

Security Affairs

SEPTEMBER 16, 2024

Because of these efforts, along with the efforts of others in the industry and national governments to combat the rise of commercial spyware, Defendants have been substantially weakened.” The software developed by the surveillance firm was used to spy on activists, journalists, researchers, and government officials.

Risk 300

Risk Government Manufacturing IT 300

Security Affairs

NOVEMBER 20, 2023

Organizations need to govern and control the API ecosystem, this governance is the role of API management. organizations need to govern and control the API ecosystem. This governance is the role of API management. APIs – like any other technical resource – won’t manage themselves.

Authentication 342

Authentication Risk Government Security 342

Security Affairs

FEBRUARY 28, 2024

. “As early as 2022, APT28 actors had utilized compromised EdgeRouters to facilitate covert cyber operations against governments, militaries, and organizations around the world.” and foreign governments and military, security, and corporate organizations. ” reads the joint report. ” concludes the report.

Energy and Utilities 333

Energy and Utilities Military Government Phishing 333

Security Affairs

OCTOBER 1, 2023

Patch your TeamCity instance to avoid server hack Is Gelsemium APT behind a targeted attack in Southeast Asian Government?

Artificial Intelligence 321

Artificial Intelligence Security Ransomware Data breaches 321

Security Affairs

FEBRUARY 28, 2021

Bug bounty hacker earned $5,000 reporting a Stored XSS flaw in iCloud.com Experts warn of threat actors abusing Google Alerts to deliver unwanted programs FBI warns of the consequences of telephony denial-of-service (TDoS) attacks An attacker was able to siphon audio feeds from multiple Clubhouse rooms Georgetown County has yet to recover from a sophisticated (..)

Security 278

Security Blockchain Manufacturing Analytics 278

Security Affairs

AUGUST 17, 2023

The documents used in the campaign used the “Farewell to Ambassador of Germany” and “Day of German Unity” themes. “EclecticIQ Analysts assess with high confidence that the identified pdf documents are part of a wider campaign targeting diplomatic corps across the globe. zulipchat[.]com) ” concludes the report.

Phishing 246

Phishing Manufacturing Government Authentication 246

Security Affairs

OCTOBER 13, 2020

Users could leave all the responsibility to governments and other institutions. The Flaws in Manufacturing Process. Manufacturers saw this as an opportunity and rushed in to grab their own piece of the IoT market. The results – unsupervised and cheap manufacturing processes and lack or complete absence of compliance.

IoT 357

IoT Cybersecurity Passwords Manufacturing 357

Security Affairs

JUNE 9, 2020

A threat actor is offering for sale in a darkweb black-market internal documents of the Indian defence contractor Bharat Earth Movers Limited (BEML). As part of the regular monitoring of cybercrime forums and markets in the deep-web and darkweb , Cyble researchers spotted a threat actor named as R3dr0x who leaked (BEML) internal documents.

Data breaches 217

Data breaches Mining Passwords Marketing 217

Krebs on Security

OCTOBER 28, 2020

In August, Gunnebo said it had successfully thwarted a ransomware attack, but this week it emerged that the intruders stole and published online tens of thousands of sensitive documents — including schematics of client bank vaults and surveillance systems. What’s more, Syrén seemed to downplay the severity of the exposure.

Security 358

Security Ransomware Agriculture Cybersecurity 358

Security Affairs

APRIL 22, 2019

Attackers hit organizations in several industries including Technology, Retail, Manufacturing, State/Local Government, Hospitality, Medical, and other Professional business. Researcher an analyzed a bait document built to load a malicious macro-enabled document from a remote server via Template Injection.

Retail 246

Retail Manufacturing Passwords Government 246

Security Affairs

MARCH 5, 2019

A cyber-espionage group, tracked as APT40, apparently linked to the Chinese government is focused on targeting countries important to the country’s Belt and Road Initiative. Jumper , and Leviathan ), apparently linked to the Chinese government, is focused on targeting countries important to the country’s Belt and Road Initiative (i.e.

Phishing 272

Phishing Passwords Government Manufacturing 272

Security Affairs

AUGUST 27, 2020

After selecting a sample of 50,000 open printers and creating a custom printing script, we managed to print out PDF documents on 27,944 unprotected devices. Our selection was based on: Device location (to cover the entire globe) Device manufacturer Protocols used to access the printers. How we did it. Change the default password.

Security 363

Security IoT Passwords Manufacturing 363

Security Affairs

JUNE 17, 2022

Lookout Threat Lab researchers uncovered enterprise-grade Android surveillance spyware, named Hermit, used by the government of Kazakhstan to track individuals within the country. The malware samples analyzed impersonated the applications of telecommunications companies or smartphone manufacturers. ” continues the report.

Military 265

Military Manufacturing Government Security 265

eSecurity Planet

JANUARY 22, 2021

As more information about IoT device vulnerabilities is published, the pressure on industry and government authorities to enhance security standards might be reaching a tipping point. government, standards will not apply to the IoT market at-large. government, standards will not apply to the IoT market at-large.

IoT 145

IoT Cybersecurity Manufacturing Government 145

Security Affairs

JANUARY 25, 2020

Mitsubishi Electric had also already notified members of the Japanese government and Ministry of Defense. The amount of unauthorized access is approximately 200 megabytes, mainly for documents.”. The two media outlets attribute the cyber attack to a China-linked cyber espionage group tracked as Tick (aka Bronze Butler ).

Manufacturing 363

Manufacturing Data breaches Sales Access 363

Security Affairs

DECEMBER 30, 2019

Open Media pointed out that that Windows XP is the last operating system developed by Microsoft that was approved by the Kremlin for use on official Russian government computers. Microsoft Windows 10 is only allowed only for government systems that don’t manage secret information. ” reads the post published by The Guardian.

Government 246

Government Communications Military Manufacturing 246

Security Affairs

NOVEMBER 18, 2022

The authorities reported that from June 2021 through at least November 2022, threat actors employed the Hive ransomware in attacks aimed at a wide range of businesses and critical infrastructure sectors, including Government Facilities, Communications, Critical Manufacturing, Information Technology, and especially Healthcare and Public Health (HPH).

Ransomware 246

Ransomware Blockchain Manufacturing Analytics 246

Security Affairs

AUGUST 31, 2020

Most of the infections were observed in organizations in the US and Europe, the most targeted industries were in the government, military, and manufacturing sectors. . The researchers documented multiple QBots’ module inlucing: Executable Update – Updates the current executable with a newer version or newer bot list.

Passwords 296

Passwords Military Manufacturing Encryption 296

Security Affairs

AUGUST 3, 2023

The researchers analysed 13 infusion pumps that despite being no longer manufactured are still working in numerous medical organizations worldwide. The researchers pointed out that they haven’t found online documented data purge processes for device decommissioning. ” reads the analysis published by Rapid7.

Marketing 246

Marketing Authentication Communications Manufacturing 246

Security Affairs

SEPTEMBER 23, 2020

Since March, the attackers have been trying to conduct multistage attacks on large corporate networks of medical labs, banks, manufacturers, and software developers in Russia. In other instances, the gang exploited the COVID-19 theme and anti-government rallies in Belarus in their phishing emails.

Ransomware 304

Ransomware Phishing Encryption Authentication 304

Security Affairs

DECEMBER 3, 2020

The TrickBoot functionality was documented by experts from Advanced Intelligence (AdvIntel) and Eclypsium. The Secure Boot mechanism allows the execution of only software that is trusted by the Original Equipment Manufacturer (OEM). ” reads the joint analysis published by AdvIntel and Eclypsium. ” continues the post.

Manufacturing 300

Manufacturing Security Ransomware IT 300

Security Affairs

DECEMBER 19, 2023

BlackCat/ALPHV ransomware gang has been active since November 2021, the list of its victims is long and includes industrial explosives manufacturer SOLAR INDUSTRIES INDIA , the US defense contractor NJVC , gas pipeline Creos Luxembourg S.A. , the fashion giant Moncler , the Swissport , NCR , and Western Digital.

Ransomware 329

Ransomware IT Access Manufacturing 329

Security Affairs

MAY 14, 2019

Kaspersky first documented the operations of the group in 2016. Cyber attacks conducted by the APT37 group mainly targeted government, defense, military, and media organizations in South Korea. The hackers targeted organizations in the chemicals, manufacturing, electronics, aerospace, healthcare, and automotive sectors.

IT 258

IT Military Manufacturing Government 258