Security Affairs

APRIL 9, 2020

Group-IB’s CERT-GIB analyzed hundreds of coronavirus -related phishing emails and discovered top malware strains in COVID-19 campaigns. Group-IB’s Computer Emergency Response Team ( CERT-GIB ) analyzed hundreds of coronavirus-related phishing emails between February 13 and April 1, 2020. Spyware: the most likely COVID-19 payload.

Phishing 356

Phishing Archiving Analytics Access 356

Security Affairs

MARCH 19, 2024

The campaign seems active since at least early 2022 and focuses primarily on government organizations. The APT group was spotted exploiting public-facing servers, it was observed sending spear phishing emails to deliver previously undetected backdoors. “Earth Krahang abuses the trust between governments to conduct their attacks.

Government 267

Government Phishing Access Passwords 267

Security Affairs

AUGUST 22, 2023

US Government and defense contractor Belcan left its super admin credentials open to the public, Cybernews research team reveals. Belcan is a government, defense, and aerospace contractor offering global design, software, manufacturing, supply chain, information technology, and digital engineering solutions.

Passwords 246

Passwords Military Manufacturing Analytics 246

Security Affairs

MAY 30, 2021

Hackers are attempting to exploit the return to the “new normal” after the governments are removing restrictions imposed in response to COVID-19. The number of COVID-19 infections are decreasing in many countries and some governments are reducing the restrictions for their citizens. ” continues the analysis.

Phishing 265

Phishing Authentication Access Government 265

Security Affairs

MARCH 27, 2020

Google announced to have warned users of almost 40,000 alerts of state-sponsored phishing or malware attacks during 2019. Google shared data on alerts related to state-sponsored attacks, the tech giant revealed that it issued almost 40,000 alerts of state-sponsored phishing or malware attacks to its users during 2019.

Phishing 363

Phishing Passwords Risk Personal data 363

Security Affairs

JUNE 3, 2024

40% of 2,280 official government email addresses from the British, European, and French Parliaments were exposed, including passwords, birth dates, and other details. Many of these MPs, MEPs, deputies, and senators hold senior positions, including heads of committees, government ministers, and senior opposition leaders.

Passwords 362

Passwords Government Data breaches Risk 362

Security Affairs

DECEMBER 11, 2018

Group-IB, an international company that specializes in preventing cyberattacks , has detected more than 40 000 compromised user credentials of online government services in 30 countries around the world. Group-IB Threat Intelligence has detected government websites’ user accounts compromised by cyber criminals in 30 countries.

Government 279

Government Passwords Military Archiving 279

Security Affairs

MAY 3, 2022

China-linked Curious Gorge APT is targeting Russian government agencies, Google Threat Analysis Group (TAG) warns. Google Threat Analysis Group (TAG) reported that an APT group linked to China’s People’s Liberation Army Strategic Support Force (PLA SSF), tracked as Curious Gorge , is targeting Russian government agencies.

Manufacturing 342

Manufacturing Phishing Passwords Military 342

Security Affairs

DECEMBER 1, 2019

Over 90 percent of the users identified by Google were targeted via “credential phishing emails” that attempt to trick victims into providing their password or other account credentials to hijack their Google account. “TAG tracks more than 270 targeted or government-backed groups from more than 50 countries.

Phishing 363

Phishing Passwords Authentication Risk 363

Security Affairs

JANUARY 14, 2021

According to the agency, the attackers conducted phishing campaigns and exploited poor cyber hygiene practices of the victims in the management of cloud services configuration. Government experts confirmed that the threat actors initially attempted brute force logins on some accounts without success.

Cloud 358

Cloud Phishing Passwords Authentication 358

Security Affairs

FEBRUARY 21, 2024

Mustang Panda has been active since at least 2012, it targeted American and European entities such as government organizations, think tanks, NGOs , and even Catholic organizations at the Vatican. In the 2022 campaigns, threat actors used European Union reports on the conflict in Ukraine and Ukrainian government reports as lures.

Phishing 355

Phishing Government Archiving Passwords 355

Security Affairs

NOVEMBER 15, 2023

Source: Cybernews Usernames Names Government ID numbers (CURP) Phone numbers Email addresses Home addresses Dates of Birth Gender KYC status IP addresses used to register for an account IP addresses used to log in Deposit amounts Withdrawal amounts Notes on users, submitted by admins and customer support agents. Amount of leaked data.

Passwords 251

Passwords Authentication Risk Access 251

Security Affairs

MARCH 20, 2020

The APT28 group (aka Fancy Bear , Pawn Storm , Sofacy Group , Sednit , and STRONTIUM ) has been active since at least 2007 and it has targeted governments, militaries, and security organizations worldwide. The cyberespionage group continues to target members of defense companies, embassies, governments, and the military.

Phishing 363

Phishing Military Government Passwords 363

Security Affairs

NOVEMBER 13, 2020

Several organizations targeted by the APT groups that have contracts with or investments from government agencies for Covid-19 related work. Strontium hackers launched password spraying and brute-force attacks to break into victim accounts and steal sensitive information. ” concludes the post. ” Pierluigi Paganini.

Healthcare 359

Healthcare Phishing Government Passwords 359

Security Affairs

AUGUST 2, 2020

and foreign government organizations. and foreign government organizations. and foreign government organizations, education entities, private companies, and health agencies by unidentified cyber actors.” Use two-factor authentication with strong passwords. ” reads the alert. public health organization. .”

Ransomware 363

Ransomware Encryption Passwords Government 363

Krebs on Security

JANUARY 30, 2024

The government says Urban went by the aliases “ Sosa ” and “ King Bob ,” among others. ” Group-IB dubbed the gang by a different name — 0ktapus — which was a nod to how the criminal group phished employees for credentials. On July 28 and again on Aug. According to an Aug.

Passwords 358

Passwords Phishing Access Encryption 358

Security Affairs

JANUARY 22, 2024

The dataset is extremely dangerous as threat actors could leverage the aggregated data for a wide range of attacks, including identity theft, sophisticated phishing schemes, targeted cyberattacks, and unauthorized access to personal and sensitive accounts,” the researchers said. The leak’s scale is of yet unseen proportions.

Data breaches 359

Data breaches Phishing Passwords Cybersecurity 359

Security Affairs

OCTOBER 2, 2020

The APT group, recently discovered by ESET, targeted government and private companies in Belarus, Moldova, Russia, Serbia, and Ukraine, including militaries and Ministries of Foreign Affairs. Experts also noticed that hackers also used NirSoft utilities to recover passwords from web browsers and email clients.

Military 360

Military Phishing Passwords Government 360

Data Breach Today

OCTOBER 14, 2022

Stopping Cyberattacks by Moving Away From Password-Based Authentication The January memorandum from President Biden’s Office of Management and Budget calls for adopting multifactor authentication that includes the verification of device-based security controls, continuous monitoring, and authentication and mandates a switch to phishing-resistant MFA (..)

Phishing 130

Phishing Government Authentication Passwords 130

Krebs on Security

OCTOBER 9, 2023

The fake USPS phishing page. Recent weeks have seen a sizable uptick in the number of phishing scams targeting U.S. Here’s a look at an extensive SMS phishing operation that tries to steal personal and financial data by spoofing the USPS, as well as postal services in at least a dozen other countries. com usps.trckspost[.]com

Phishing 332

Phishing Analytics Passwords Government 332

Security Affairs

FEBRUARY 7, 2020

candidate , government officials, and expatriate Iranians. “ Certfa Lab has identified a new series of phishing attacks from the Charming Kitten 1 , the Iranian hacking group who has a close relationship with Iran’s state and Intelligence services. .” Israel, Iraq, and Saudi Arabia. ” concludes the report.

Phishing 296

Phishing Government Passwords Authentication 296

Security Affairs

DECEMBER 1, 2022

While no plaintext passwords or financial data was stolen, the hack did expose answers to security questions. government agencies. government agencies and large organizations were hit by cyberattacks due to a vulnerability in their IT infrastructure provider – SolarWinds. Organizations must have a robust password policy.

Data breaches 270

Data breaches Passwords Encryption Cybersecurity 270

Security Affairs

AUGUST 8, 2024

The BlackSuit ransomware has targeted various critical infrastructure sectors, including commercial facilities, healthcare, government, and manufacturing. The BlackSuit actors gain initial access to victim networks through several methods, including Phishing campaigns, Remote Desktop Protocol (RDP) (Used in about 13.3%

Ransomware 329

Ransomware Communications Manufacturing Phishing 329

Security Affairs

OCTOBER 6, 2020

The CISA agency is warning of a surge in Emotet attacks targeting multiple state and local governments in the US since August. The Cybersecurity and Infrastructure Security Agency (CISA) issued an alert to warn of a surge of Emotet attacks that have targeted multiple state and local governments in the U.S. since August.

Government 357

Government Libraries Cybersecurity Phishing 357

Security Affairs

MARCH 31, 2023

A Russian hacking group, tracked Winter Vivern (aka TA473), has been actively exploiting vulnerabilities ( CVE-2022-27926 ) in unpatched Zimbra instances to gain access to the emails of NATO officials, governments, military personnel, and diplomats. The CVE-2022-27926 flaw affects Zimbra Collaboration versions 9.0.0,

Military 246

Military Phishing Passwords Government 246

Security Affairs

FEBRUARY 14, 2020

The government experts released new and updated Malware Analysis Reports (MARs) related to new malware families involved in new attacks carried out by North Korea-linked HIDDEN COBRA group. .” If these services are required, use strong passwords or Active Directory authentication. the extension matches the file header).

Passwords 361

Passwords Access Phishing Authentication 361

Security Affairs

APRIL 6, 2023

Google’s Threat Analysis Group (TAG) is warning of the North Korea-linked ARCHIPELAGO group that is targeting government and military personnel, think tanks, policy makers, academics, and researchers in South Korea, the US and elsewhere. The attack chain associated with ARCHIPELAGO starts with phishing emails that embed malicious links.

Phishing 246

Phishing Passwords Military Education 246

Security Affairs

AUGUST 13, 2020

The Israeli statement did not explicitly refer to the government of Pyongyang and did not provide details about the attack (the targeted companies, data of the attack). The attackers launched spear-phishing attacks against employees of the targeted firms, the messages impersonated managers, CEOs and leading officials in HR departments.

Agriculture 363

Agriculture Manufacturing Phishing Government 363

Security Affairs

JANUARY 26, 2019

Ukraine reported a surge in cyber attacks aimed at disrupting the upcoming presidential election, the Government believes that Russian nation-state actors could be responsible for them. Threat actors are carrying out spear-phishing attacks against election officials, in some cases, they are using stolen credentials purchased on the dark web.

Phishing 275

Phishing Passwords Government Access 275

Security Affairs

MARCH 8, 2020

The emails provide updates on the Coronavirus outbreak, it includes stats on the epidemic and contains an email of corona-virus@caramail.com that is likely used for phishing purposes. See Using Caution with Email Attachments and Avoiding Social Engineering and Phishing Scams for more information.

Phishing 363

Phishing Archiving Sales Encryption 363

Security Affairs

NOVEMBER 22, 2021

Mandate strong passwords and ensure they are not reused across multiple accounts. Government experts also warn of other malicious activities such as phishing scams , fraudulent sites spoofing reputable businesses , and unencrypted financial transactions. ” concludes the alert.

Ransomware 349

Ransomware Phishing Passwords Authentication 349

Security Affairs

APRIL 4, 2023

Proofpoint researchers recently reported that a Russian hacking group, tracked as Winter Vivern (aka TA473), has been actively exploiting vulnerabilities ( CVE-2022-27926 ) in unpatched Zimbra instances to gain access to the emails of NATO officials, governments, military personnel, and diplomats. reads the post published by Proofpoint.

IT 246

IT Military Phishing Passwords 246

Security Affairs

AUGUST 6, 2020

and foreign government organizations. Use two-factor authentication with strong passwords. Recently the FBI has issued a security alert about Netwalker ransomware attacks targeting U.S. The feds are recommending victims, not to pay the ransom and reporting incidents to their local FBI field offices. Consider installing and using a VPN.

Ransomware 351

Ransomware Passwords Marketing Access 351

Security Affairs

JULY 25, 2021

Japanese computers hit by a wiper malware ahead of 2021 Tokyo Olympics Obtaining password hashes of Windows systems with PetitPotam attack. If you want to also receive for free the international press subscribe here. If you want to also receive for free the international pre ss subscribe here.

Security 311

Security Ransomware Data breaches Personal data 311

Security Affairs

MAY 30, 2021

SonicWall fixes an NSM On-Prem bug, patch it asap! Follow me on Twitter: @securityaffairs and Facebook.

Security 262

Security Ransomware Passwords Phishing 262

Security Affairs

FEBRUARY 8, 2024

Phishing Attacks: Phishing is the top cyber attack, causing 90% of data breaches. Social Engineering Attacks: Social engineering attacks, such as phishing and pretexting, remain a top concern, with 65% of organizations experiencing phishing attempts and 47% falling victim to social engineering tactics.

Security 355

Security Phishing IoT Ransomware 355

Security Affairs

NOVEMBER 2, 2018

The Fédération Internationale de Football Association, aka FIFA, is a governing body of association football, futsal, and beach soccer. FIFA reveals it was the victim of a new s uccessful phishing campaign that resulted in the exposed confidential information of the organizations. ” states The New York Times. ” .

Phishing 274

Phishing Data breaches Passwords Government 274