Krebs on Security

FEBRUARY 22, 2024

Experts say the leak illustrates how Chinese government agencies increasingly are contracting out foreign espionage campaigns to the nation’s burgeoning and highly competitive cybersecurity industry. In 2021, the Sichuan provincial government named i-SOON as one of “the top 30 information security companies.”

Government 297

Government Cybersecurity Sales Blockchain 297

Security Affairs

APRIL 5, 2022

Anonymous continues to support Ukraine against the Russian criminal invasion targeting the Russian military and propaganda. Anonymous leaked personal details of the Russian military stationed in Bucha where the Russian military carried out a massacre of civilians that are accused of having raped and shot local women and children.

Military 128

Military Cybersecurity Security Government 128

Data Breach Today

JULY 29, 2023

Researchers Say APT37 Group Likely Behind Campaign Targeting South Koreans Government-backed North Korean hackers are posting convincing U.S. military job recruitment documents to lure Korean-speaking victims into downloading malware staged from legitimate but compromised South Korean websites, according to security researchers.

Military 180

Military Phishing Government Security 180

Security Affairs

AUGUST 5, 2019

Security experts from ESET uncovered a cyber-espionage group tracked as Machete that stole sensitive files from the Venezuelan military. Security experts from ESET reported that a cyberespionage group tracked as Machete has stolen sensitive files from the Venezuelan military. ” reads the analysis from ESET. Pierluigi Paganini.

Military 104

Military Archiving Security Government 104

Security Affairs

DECEMBER 20, 2022

Ukraine’s CERT-UA revealed the national Delta military intelligence program has been targeted with a malware-based attack. The message urges the recipient to update certificates in the “DELTA” system, it also uses an attached PDF document that imitates legitimate digests of the ISTAR unit of the Zaporizhzhia Police Department.

Military 98

Military Archiving Phishing Government 98

Security Affairs

JANUARY 26, 2023

The BlackCat Ransomware group claims to have hacked SOLAR INDUSTRIES INDIA and to have stolen 2TB of “secret military data.” The BlackCat Ransomware group claims to have breached the company infrastructure and to have stolen 2TB of data, including secret military data related to weapons production.

Military 98

Military Manufacturing Ransomware Mining 98

Security Affairs

MARCH 4, 2024

The Main Intelligence Directorate (GUR) of Ukraine’s Ministry of Defense announced it had breached the Russian Ministry of Defense servers as part of a special operation, and exfiltrated confidential documents. Rosaviatsia is the government agency responsible for the oversight and regulation of civil aviation in Russia.

Military 140

Military Data breaches Encryption Government 140

Data Breach Today

APRIL 14, 2023

Pakistan-Linked APT Group Using Spear-Phishing to Plant Info Stealer Malware A suspected Pakistan espionage threat actor that relies on phishing emails is expanding to the education sector after years of focusing on the Indian military and government.

Education 147

Education Military Phishing Government 147

Krebs on Security

AUGUST 29, 2023

government today announced a coordinated crackdown against QakBot , a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. government has used court orders to remotely disinfect systems compromised with malware. Today’s operation is not the first time the U.S.

Ransomware 287

Ransomware Government Military Access 287

Security Affairs

JANUARY 22, 2020

US military claims to have disrupted the online propaganda activity of the Islamic State (ISIS) in a hacking operation dating back at least to 2016. The documents have been release under a Freedom of Information Act request. ” reads a post published by the National Security Archive at George Washington University.

Military 93

Military FOIA Archiving Security 93

The Last Watchdog

JULY 12, 2018

military information for sale on the Dark Web for a nominal sum, in and of itself, is unfortunate and unremarkable. Department of Defense (DoD) generally handles unclassified documents such as these through the “Non-classified Internet Protocol Router Network,” or NIPRNet. What other documents could have been stored and exfiltrated?

Military 145

Military Sales Access Government 145

Security Affairs

FEBRUARY 15, 2024

“A January 2024 court-authorized operation has neutralized a network of hundreds of small office/home office (SOHO) routers that GRU Military Unit 26165 , also known as APT28, Sofacy Group , Forest Blizzard , Pawn Storm , Fancy Bear , and Sednit , used to conceal and otherwise enable a variety of crimes.”

Military 136

Military Government Access Cybersecurity 136

Security Affairs

JUNE 12, 2020

Russia-linked Gamaredon APT use a new module for Microsoft Outlook that creates custom emails with malicious documents and sends them to a victim’s contacts. The group targeted government and military organizations in Ukraine. The VBA code builds the email body and attaches the malicious document to the email in both .docx

Military 142

Military Phishing Government IT 142

Threatpost

JUNE 11, 2021

"We hereby keep a right (sic) to forward all of the relevant documentation and data to military agencies of our choise (sic)" REvil reportedly wrote.

Military 138

Military Cloud Government Security 138

Security Affairs

FEBRUARY 10, 2020

Malaysia’s MyCERT issued a security alert to warn of a hacking campaign targeting government officials that was carried out by the China-linked APT40 group. Malaysia’s Computer Emergency Response Team (MyCERT) warns of a cyber espionage campaign carried out by the China-linked APT40 group aimed at Malaysian government officials.

Government 145

Government Military Phishing Security 145

Unwritten Record

SEPTEMBER 1, 2022

But what about the first government films? The oldest known government-produced film in our holdings is First Army Aeroplane Flight, Fort Myer, Virginia , which captured daring test flights of the Wright Military Flyer. government film was almost a whole year older than documented! At that time, the U.S.

Military 65

Military Government Agriculture Archiving 65

Krebs on Security

OCTOBER 7, 2020

When it came time for companies to sign legal documents, Bernard’s victims invariably interacted with a 40-something Inside Knowledge employee named “ Katherine Miller ,” who claimed to be his lawyer. government to secure Davies’ extradition, but he appears to have slipped away once again. John Bernard.

Communications 277

Communications Military Security Government 277

Security Affairs

MARCH 7, 2021

Jauniskis explained that the Russian government is using military and economic means to carry out its operation, including disinformation campaigns. In the last years, security experts documented multiple hacking and disinformation campaigns, attributed to Russia-linked APT groups, that targeted Lithuania, Estonia , and Latvia.

Military 138

Military Government Security IT 138

AIIM

OCTOBER 22, 2019

Also known as “capture,” this capability is characterized by the ability to scan paper documents to store and use them in digital form instead of paper. First developed over 30 years ago, capture systems have evolved from simple solutions for basic scanning into sophisticated and expensive systems for enterprise-wide document automation.

Paper 93

Paper Computer and Electronics Access Archiving 93

Security Affairs

OCTOBER 27, 2023

The French National Agency for the Security of Information Systems ANSSI (Agence Nationale de la sécurité des systèmes d’information) warns that the Russia-linked APT28 group has been targeting multiple French organizations, including government entities, businesses, universities, and research institutes and think tanks.

Military 139

Military Phishing Government Security 139

Security Affairs

OCTOBER 10, 2018

A previously unknown cyber espionage group, tracked as Gallmaker, has been targeting entities in the government, military and defense sectors since at least 2017. Gallmaker is a politically motivated APT group that focused its surgical operations on the government, military or defense sectors. ” continues Symantec.

Military 108

Military File names Government Libraries 108

The Last Watchdog

JANUARY 18, 2019

The disclosure that malicious intruders hacked the computer systems of the South Korean government agency that oversees weapons and munitions acquisitions for the country’s military forces is not much of a surprise. The hackers reportedly manipulated server software and succeeded in siphoning records from connected workstations.

Encryption 157

Encryption Authentication Military Government 157

Security Affairs

JANUARY 18, 2024

The ColdRiver APT (aka “ Seaborgium “, “Callisto”, “Star Blizzard”, “TA446”) is a Russian cyberespionage group that has been targeting government officials, military personnel, journalists and think tanks since at least 2015. This sample, ​​named “Proton-decrypter.exe”, used the C2 address 45.133.216[.]15:3000,

Phishing 132

Phishing Encryption Military Archiving 132

Security Affairs

MARCH 4, 2024

Threat actors stole sensitive information from the company, including military and government documents, revealed Taiwan’s Defense Ministry. TeraBytes of data” that included government contracts. Threat actors claim they have stolen 1.7 ” reported AFP agency.

Military 108

Military Sales Government Information Security 108

Security Affairs

OCTOBER 2, 2020

The APT group, recently discovered by ESET, targeted government and private companies in Belarus, Moldova, Russia, Serbia, and Ukraine, including militaries and Ministries of Foreign Affairs. XDSpy is the name used by ESET researchers to track a nation-state actor that has been active since at least 2011.

Military 143

Military Phishing Passwords Government 143

Security Affairs

FEBRUARY 28, 2024

. “As early as 2022, APT28 actors had utilized compromised EdgeRouters to facilitate covert cyber operations against governments, militaries, and organizations around the world.” and foreign governments and military, security, and corporate organizations. ” reads the joint report.

Energy and Utilities 132

Energy and Utilities Military Government Phishing 132

Security Affairs

MARCH 1, 2020

Garda and military intelligence agencies believe the Russian agents were sent by the military intelligence branch of the Russian armed forces, the GRU. The documents also revealed the existence of other spy bases located in secret places identified with codes “TIMPANI”, “GUITAR” and “CLARINET”. Source [link].

Military 145

Military Communications Data collection Access 145

IT Governance

MARCH 8, 2022

The Ukrainian government and its military were targeted by DDoS (distributed denial-of-service) attacks, while a pro-Ukrainian group attacked the Belarusian railway system with ransomware after discovering that it was being used by Russia to transport tanks and weapons. Tesco warns customers of voucher scam. Get started.

Phishing 142

Phishing Military Access Education 142

Security Affairs

AUGUST 3, 2020

The attackers were spreading fabricated content, including falsified news articles, quotes, correspondence, and other documents designed to appear as coming from military officials and political figures in the target countries. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

Military 139

Military CMS Security Government 139

Security Affairs

NOVEMBER 5, 2021

The group targeted government and military organizations in Ukraine. In December 2019, the APT group targeted several Ukrainian diplomats, government and military officials, and law enforcement. However, the group’s activities are characterized by intrusiveness and audacity. ” concludes the announcement.

Military 139

Military Metadata Government Passwords 139

Security Affairs

JANUARY 4, 2021

A British court has rejected the request of the US government to extradite Wikileaks founder Julian Assange to the country. government will likely appeal the decision. He published thousands of classified diplomatic and military documents on WikiLeaks in 2010. Of course, the U.S.

Military 142

Military Government Risk Passwords 142

Security Affairs

MAY 24, 2023

The US Department of the Treasury’s Office of Foreign Assets Control (OFAC) announced sanctions against four entities and one individual for their role in malicious cyber operations conducted to support the government of North Korea. The sanctioned entities conducted operations to steal funds to support the military strategy of the regime.

Government 98

Government Military Financial Services Security 98

Security Affairs

DECEMBER 10, 2020

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. Zebrocy is mainly used against governments and commercial organizations engaged in foreign affairs.

Phishing 122

Phishing Healthcare Military Data collection 122

Security Affairs

NOVEMBER 16, 2021

Security researchers at the Mandiant Threat Intelligence team believe that Ghostwriter APT group is linked to the government of Belarus. Mandiant Threat Intelligence researchers believe that the Ghostwriter disinformation campaign (aka UNC1151) was linked to the government of Belarus. ” reads the report published by Mandiant.

Military 121

Military CMS Government Security 121

Security Affairs

MARCH 5, 2022

Anonymous announced to have hacked more than 2,500 websites linked to the Russian and Belarusian governments, state-owned media outlets spreading disinformation, Russian private organizations, banks, hospitals, airports. JUST IN: #Anonymous leaks database of the Russian Government website [ [link] ].

Passwords 145

Passwords Government Military Authentication 145

Security Affairs

DECEMBER 7, 2019

Russia-linked Gamaredon cyberespionage group has been targeting Ukrainian targets, including diplomats, government and military officials. Russia linked APT group tracked as Gamaredon has been targeting several Ukrainian diplomats, government and military officials, and law enforcement. ” concludes Anomaly.

Military 89

Military Government Phishing Archiving 89

Security Affairs

MARCH 26, 2021

The attackers are suspected to be hackers of the tracked as Ghostwriter group that works under the control of the Russian military secret service GRU. Der Spiegel also reported that the threat actors, according to government circles, also targeted political activists in Hamburg and Bremen.

Military 114

Military CMS Phishing Government 114