Tag: tactics

Source URL: https://www.wired.com/story/inside-the-massive-crime-industry-thats-hacking-billion-dollar-companies/ Source: Wired Title: Inside the Massive Crime Industry That’s Hacking Billion-Dollar Companies Feedly Summary: When you download a piece of pirated software, you might also be getting a piece of infostealer malware, and entering a highly complex hacking ecosystem that’s fueling some of the biggest breaches on the planet. AI Summary and…

Microsoft Security Blog: Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files

—

by

Source URL: https://www.microsoft.com/en-us/security/blog/2024/10/29/midnight-blizzard-conducts-large-scale-spear-phishing-campaign-using-rdp-files/ Source: Microsoft Security Blog Title: Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files Feedly Summary: Since October 22, 2024, Microsoft Threat Intelligence has observed Russian threat actor Midnight Blizzard sending a series of highly targeted spear-phishing emails to individuals in government, academia, defense, non-governmental organizations, and other sectors. This activity is…

Microsoft Security Blog: Chinese threat actor Storm-0940 uses credentials from password spray attacks from a covert network

—

by

Source URL: https://www.microsoft.com/en-us/security/blog/2024/10/31/chinese-threat-actor-storm-0940-uses-credentials-from-password-spray-attacks-from-a-covert-network/ Source: Microsoft Security Blog Title: Chinese threat actor Storm-0940 uses credentials from password spray attacks from a covert network Feedly Summary: Since August 2023, Microsoft has observed intrusion activity targeting and successfully stealing credentials from multiple Microsoft customers that is enabled by highly evasive password spray attacks. Microsoft has linked the source…

Slashdot: Inside a Firewall Vendor’s 5-Year War With the Chinese Hackers Hijacking Its Devices

—

by

Source URL: https://it.slashdot.org/story/24/11/01/088213/inside-a-firewall-vendors-5-year-war-with-the-chinese-hackers-hijacking-its-devices?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Inside a Firewall Vendor’s 5-Year War With the Chinese Hackers Hijacking Its Devices Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a significant cybersecurity battle undertaken by Sophos against Chinese hackers targeting firewall products. This situation has implications for information security, particularly concerning the risks associated…

The Register: Gang gobbles 15K credentials from cloud and email providers’ garbage Git configs

—

by

Source URL: https://www.theregister.com/2024/10/31/emeraldwhale_credential_theft/ Source: The Register Title: Gang gobbles 15K credentials from cloud and email providers’ garbage Git configs Feedly Summary: Emeraldwhale gang looked sharp – until it made a common S3 bucket mistake A criminal operation dubbed Emeraldwhale has been discovered after it dumped more than 15,000 credentials belonging to cloud service and email…

Alerts: Foreign Threat Actor Conducting Large-Scale Spear-Phishing Campaign with RDP Attachments

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2024/10/31/foreign-threat-actor-conducting-large-scale-spear-phishing-campaign-rdp-attachments Source: Alerts Title: Foreign Threat Actor Conducting Large-Scale Spear-Phishing Campaign with RDP Attachments Feedly Summary: CISA has received multiple reports of a large-scale spear-phishing campaign targeting organizations in several sectors, including government and information technology (IT). The foreign threat actor, often posing as a trusted entity, is sending spear-phishing emails containing malicious…

Slashdot: Chinese Attackers Accessed Canadian Government Networks For Five Years

—

by

Source URL: https://news.slashdot.org/story/24/10/31/1956250/chinese-attackers-accessed-canadian-government-networks-for-five-years?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Chinese Attackers Accessed Canadian Government Networks For Five Years Feedly Summary: AI Summary and Description: Yes Summary: Canada’s Communications Security Establishment (CSE) has reported a sustained cyber campaign by China targeting Canadian government and private sectors, emphasizing the severity of the threats. The report identifies espionage and intellectual property…

Cisco Talos Blog: Threat actors use copyright infringement phishing lure to deploy infostealers

—

by

Source URL: https://blog.talosintelligence.com/threat-actors-use-copyright-infringement-phishing-lure-to-deploy-infostealers/ Source: Cisco Talos Blog Title: Threat actors use copyright infringement phishing lure to deploy infostealers Feedly Summary: Cisco Talos has observed an unknown threat actor conducting a phishing campaign targeting Facebook business and advertising account users in Taiwan. The decoy email and fake PDF filenames are designed to impersonate a company’s legal department,…

Wired: Inside Sophos’ 5-Year War With the Chinese Hackers Hijacking Its Devices

—

by