468 matches found
Fancy Bear Imposters Are on a Hacking Extortion Spree
Nice looking website you've got there. It'd be a shame if someone DDoS'd it...
Russia’s Fancy Bear Hackers Likely Penetrated a US Federal Agency
New clues indicate that APT28 may be behind a mysterious intrusion that US officials disclosed last week...
mama-bear.by Cross Site Scripting vulnerability OBB-1370213
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Russia’s Fancy Bear Hackers Are Hitting US Campaign Targets Again
Microsoft says the GRU hacking group has attacked hundreds of organizations over the past year, many of them tied to the upcoming election...
Ransom Demands Return: New DDoS Extortion Threats From Old Actors Targeting Finance and Retail
Update 08/24/2020 As mentioned below, the Akamai SIRT has been tracking attacks from the so-called Armada Collective and Fancy Bear actors, who are sending ransom letters to various industry verticals such as finance, travel, and e-commerce. In addition to the...
The NSA and FBI Expose Fancy Bear's Sneaky Hacking Tool
Plus: TikTok tracking, Russian SIMs, and more of this week's top security news...
Black Hat 2020: Influence Campaigns Are a Cybersecurity Problem
Social media used as a cudgel for nation-states to sway opinion is a cybersecurity threat CISOs can’t ignore — and need to understand better and mitigate against. That’s the message from Renée DiResta, research manager at the Stanford Internet Observatory, who said she is seeing a steady growth a...
Russia's GRU Hackers Hit US Government and Energy Targets
A previously unreported Fancy Bear campaign persisted for well over a year—and indicates that the notorious group has broadened its focus...
dancing-bear-tours.com Cross Site Scripting vulnerability OBB-1232969
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bear-rock.org Improper Access Control vulnerability OBB-1232752
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Getting ATT&CKed By A Cozy Bear And Being Really Happy About It: What MITRE Evaluations Are, and How To Read Them
Full disclosure: I am a security product testing nerd. I’ve been following the MITRE ATT&CK Framework for a while, and this week the results were released of the most recent evaluation using APT29 otherwise known as COZY BEAR. First, here’s a snapshot of the Trend eval results as I understand the...
The Dukes of Moscow
Overview APT29, also known as The Dukes or Cozy Bear, is a cyberespionage group active since at least 2008. It’s believed that the group operates either under the Russian Foreign Intelligence Service SVR or the Russian Federal Security Service FSB. They primarily target western governments and...
Magecart Hits Parents and Students via Blue Bear Attack
Blue Bear Software, an administration and e-commerce platform for K-12 schools and other educational institutions, is warning its customers that it has suffered a Magecart attack. Blue Bear’s platform enables management of school accounting, student fees and online stores. In a letter to those...
Reddit Says Influence Campaign is Behind Leaked U.S.-U.K. Trade Documents
Reddit has revealed that key U.S.-U.K. trade documents posted on its site were likely done so as part of a broader political-influence campaign that first appeared on Facebook and tied to Russia-based operatives. The online media aggregator says it has linked documents that were leaked on its sit...
Fake Cozy Bear Group Making DDoS Extortion Demands
A group calling themselves "Cozy Bear" has been emailing various companies with an extortion letter, demanding payment and threatening targeted DDoS attacks if their demands are not met...
A week in security (October 28 – November 3)
Last week on Malwarebytes Labs, we celebrated the birth of the Internet 50 years ago, highlighted reports about the US Federal Trade Commission FTC filing a case against stalkerware developer Retina-X, issued a PSI on disaster donation scams, looked at the top cybersecurity challenged SMBs face,...
News Wrap: Office 365 Voicemail Phish and Bed Bath and Beyond Breach
Threatpost editors Tara Seals and Lindsey O’Donnell break down the top security news of this week, from data breaches to advanced persistent threat APT activity. Top stories include: A Microsoft alert that APT group Fancy Bear has targeted anti-doping authorities and sporting organizations around...
Fancy Bear Targets Sporting, Anti-Doping Orgs As 2020 Olympics Loom
At least 16 anti-doping authorities and sporting organizations around the world have been hit by cyberattacks as the world begins to gear up for the Tokyo Summer Olympic Games, which kick off July 2020. The attacks, which began Sept. 16, have been linked to infamous Russian threat group Fancy Bea...
Russian Hackers Targeting Anti-Doping Agencies Ahead of 2020 Tokyo Olympics
As Japan gears up for the upcoming 2020 Summer Olympics in Tokyo for the next year, the country needs to brace itself for sophisticated cyberattacks, especially from state-sponsored hackers. Microsoft has issued a short notice, warning about a new wave of highly targeted cyberattacks by a group o...
Russian Hackers Targeting Anti-Doping Agencies Ahead of 2020 Tokyo Olympics
As Japan gears up for the upcoming 2020 Summer Olympics in Tokyo for the next year, the country needs to brace itself for sophisticated cyberattacks, especially from state-sponsored hackers. Microsoft has issued a short notice, warning about a new wave of highly targeted cyberattacks by a group o...