@infosec.bsky.social
Microsoft reveals a new Russian threat actor, Cadet Blizzard, linked to GRU, with a lower success rate but high destructive activity. https://thehackernews.com/2023/06/microsoft-warns-of-new-russian-state.html
The threat actors behind the LockBit ransomware-as-a-service (RaaS) scheme have extorted $91 million following hundreds of attacks against numerous U.S. organizations since 2020. https://thehackernews.com/2023/06/lockbit-ransomware-extorts-91-million.html
A new phishing technique called "file archiver in the browser" can be leveraged to "emulate" a file archiver software in a web browser when a victim visits a .ZIP domain. https://thehackernews.com/2023/05/dont-click-that-zip-file-phishers.html
A new stealthy information stealer malware called Bandit Stealer has caught the attention of cybersecurity researchers for its ability to target numerous web browsers and cryptocurrency wallets. https://thehackernews.com/2023/05/new-stealthy-bandit-stealer-targeting.html
It’s been a big month for US data privacy. Indiana, Iowa, and Tennessee all passed state privacy laws, bringing the total number of states with a privacy law up to eight. https://www.schneier.com/blog/archives/2023/05/indiana-iowa-and-tennessee-pass-comprehensive-privacy-laws.html
The Indian manufacturing plant responsible for manufacturing Suzuki motorcycles has been forced to shut down following a cyber attack, with the loss of an estimated 20,000 vehicles. https://www.bitdefender.com/blog/hotforsecurity/suzuki-motorcycle-plant-shut-down-by-cyber-attack/
A U.K. national, responsible for his role as the administrator of the now-defunct iSpoof online phone number spoofing service has been sentenced to 13 years and 4 months in prison. https://thehackernews.com/2023/05/uk-fraudster-behind-ispoof-scam.html
Researchers are worried about Google’s .zip and .mov domains, because they are confusing. Mistaking a URL for a filename could be a security vulnerability. https://www.bleepingcomputer.com/news/security/new-zip-domains-spark-debate-among-cybersecurity-experts/
A Russian man identified by KrebsOnSecurity in January 2022 as a prolific and vocal member of several top ransomware groups was the subject of two indictments unsealed by the Justice Department. https://krebsonsecurity.com/2023/05/russian-hacker-wazawaka-indicted-for-ransomware/
A former employee of Ubiquiti has been sentenced to six years in jail after he pleaded guilty to posing as an anonymous hacker and a whistleblower in an attempt to extort almost $2 million worth of cryptocurrency. https://thehackernews.com/2023/05/former-ubiquiti-employee-gets-6-years.html
U.S. cybersecurity and intelligence agencies have warned of attacks carried out by a threat actor known as the Bl00dy Ransomware Gang that attempt to exploit vulnerable PaperCut servers against the education facilities sector. https://thehackernews.com/2023/05/bl00dy-ransomware-gang-strikes.html
U.S. authorities have announced the seizure of 13 internet domains that offered DDoS-for-hire services to other criminal actors.The takedown is part of an ongoing international initiative dubbed Operation PowerOFF. https://thehackernews.com/2023/05/us-authorities-seize-13-domains.html
What can you do if someone steals your keys but you can’t change the lock? Naked Security explains the dilemma in plain English. https://nakedsecurity.sophos.com/2023/05/09/low-level-motherboard-security-keys-leaked-in-msi-breach-claim-researchers/
Digital storage giant Western Digital confirms the theft of personal information of its online store customers. https://thehackernews.com/2023/05/western-digital-confirms-customer-data.html
PHP software package repository Packagist revealed that an "attacker" gained access to four inactive accounts on the platform to hijack over a dozen packages with over 500 million installs to date. https://thehackernews.com/2023/05/packagist-repository-hacked-over-dozen.html
Apple delivers first-ever Rapid Security Response “cyberattack” patch – leaves some users confused https://nakedsecurity.sophos.com/2023/05/01/apple-delivers-first-ever-rapid-security-response-cyberattack-patch-leaves-some-users-confused/
A Vietnamese threat actor has been attributed as behind a "malverposting" campaign on social media platforms to infect over 500,000 devices worldwide over the past three months to deliver variants of information stealers. https://thehackernews.com/2023/05/vietnamese-threat-actor-infects-500000.html
Google disclosed that its improved security features and app review processes helped it block 1.43 million bad apps from being published to the Play Store in 2022. https://thehackernews.com/2023/05/google-blocks-143-million-malicious.html
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of cyber attacks perpetrated by Russian nation-state hackers targeting various government bodies in the country. https://thehackernews.com/2023/05/apt28-targets-ukrainian-government.html