Tag: malware
-
Microsoft Security Blog: Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine
Source URL: https://www.microsoft.com/en-us/security/blog/2024/12/11/frequent-freeloader-part-ii-russian-actor-secret-blizzard-using-tools-of-other-groups-to-attack-ukraine/ Source: Microsoft Security Blog Title: Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine Feedly Summary: Since January 2024, Microsoft has observed Secret Blizzard using the tools or infrastructure of other threat groups to attack targets in Ukraine and download its custom backdoors Tavdig and…
-
The Register: US names Chinese national it alleges was behind 2020 attack on Sophos firewalls
Source URL: https://www.theregister.com/2024/12/11/sichuan_silence_sophos_zeroday_sanctions/ Source: The Register Title: US names Chinese national it alleges was behind 2020 attack on Sophos firewalls Feedly Summary: Also sanctions his employer – an outfit called Sichuan Silence linked to Ragnarok ransomware The US Departments of Treasury and Justice have named a Chinese business and one of its employees as the…
-
CSA: Why Is Cybersecurity Incident Response Vital?
Source URL: https://cloudsecurityalliance.org/blog/2024/12/10/strengthening-cybersecurity-with-a-resilient-incident-response-plan Source: CSA Title: Why Is Cybersecurity Incident Response Vital? Feedly Summary: AI Summary and Description: Yes **Summary:** The text discusses the critical importance of having a Cybersecurity Incident Response Plan (CSIRP) in place amidst rising ransomware and phishing threats. It outlines the key components and benefits of a CSIRP, emphasizing its role…
-
Microsoft Security Blog: Frequent freeloader part I: Secret Blizzard compromising Storm-0156 infrastructure for espionage
Source URL: https://www.microsoft.com/en-us/security/blog/2024/12/04/frequent-freeloader-part-i-secret-blizzard-compromising-storm-0156-infrastructure-for-espionage/ Source: Microsoft Security Blog Title: Frequent freeloader part I: Secret Blizzard compromising Storm-0156 infrastructure for espionage Feedly Summary: Microsoft has observed Secret Blizzard compromising the infrastructure and backdoors of the Pakistan-based threat actor we track as Storm-0156 for espionage against the Afghanistan government and Indian Army targets. The post Frequent freeloader part…
-
Krebs on Security: U.S. Offered $10M for Hacker Just Arrested by Russia
Source URL: https://krebsonsecurity.com/2024/12/u-s-offered-10m-for-hacker-just-arrested-by-russia/ Source: Krebs on Security Title: U.S. Offered $10M for Hacker Just Arrested by Russia Feedly Summary: In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as “Wazawaka," a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top…
-
The Register: Severity of the risk facing the UK is widely underestimated, NCSC annual review warns
Source URL: https://www.theregister.com/2024/12/03/ncsc_annual_review/ Source: The Register Title: Severity of the risk facing the UK is widely underestimated, NCSC annual review warns Feedly Summary: National cyber emergencies increased threefold this year The number of security threats in the UK that hit the country’s National Cyber Security Centre’s (NCSC) maximum severity threshold has tripled compared to the…