article thumbnail

New LookingGlass CEO Bryan Ware to Diversify Customer Base

Data Breach Today

New Attack Surface Management Tool Should Help Reach New Clients New CEO Bryan Ware plans to leverage LookingGlass' nascent attack surface management capabilities to capture clients in verticals such as pharmaceuticals, manufacturing and utilities.

article thumbnail

NailaoLocker ransomware targets EU healthcare-related entities

Security Affairs

Possible motives include a false-flag distraction, dual-purpose financial and espionage attacks, or an independent actor leveraging state tools for profit. Though similar to past espionage campaigns, its ransomware use is unusual. Despite overlaps with known groups, Green Nailao remains unattributed. ” concludes the report.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Iranian Peach Sandstorm group behind recent password spray attacks

Security Affairs

The cyber espionage activity attacks are aimed at organizations in the satellite, defense, and pharmaceutical sectors. Peach Sandstorm is an Iranian nation-state threat actor who has recently pursued organizations in the satellite, defense, and pharmaceutical sectors around the globe.” ” Microsoft concludes.

Passwords 342
article thumbnail

Iran-linked APT33 targets Defense Industrial Base sector with FalseFont backdoor

Security Affairs

The cyber espionage activity attacks are aimed at organizations in the satellite, defense, and pharmaceutical sectors. Peach Sandstorm is an Iranian nation-state threat actor who has recently pursued organizations in the satellite, defense, and pharmaceutical sectors around the globe.” reads the report published by Microsoft.

article thumbnail

China-linked APT10 leverages ZeroLogon exploits in recent attacks

Security Affairs

Targeted sectors include: Automotive Clothing Conglomerates Electronics Engineering General Trading Company Government Industrial Products Managed Service Providers Manufacturing Pharmaceutical Professional Services. The APT10 is well-resourced cyberespionage group that employed multiple tools and sophisticated techniques in its attacks.

article thumbnail

New financially motivated attacks in Western Europe traced to Russian-speaking threat actors

Security Affairs

At least two companies operating in pharmaceutical and manufacturing sectors have been affected. The tools used in the attacks were traced to Silence and TA505 – Russian-speaking financially-motivated groups. Group-IB has immediately contacted the victims upon discovery. Slight modifications of Silence. ProxyBot and Silence.

article thumbnail

Russia-linked APT28 and crooks are still using the Moobot botnet

Security Affairs

The threat actors used the botnet harvest credentials, collect NTLMv2 digests, proxy network traffic, and host spear-phishing landing pages and custom tools. The Moobot botnet has been active since at least 2016, it also includes other routers and virtual private servers (VPS). ” reported Trend Micro. ” reported Trend Micro.