663 matches found
Ukraine Nabs Suspect in 773M Password ‘Megabreach’
In January 2019, dozens of media outlets raised the alarm about a new "megabreach" involving the release of some 773 million stolen usernames and passwords that was breathlessly labeled "the largest collection of stolen data in history." A subsequent review by KrebsOnSecurity quickly determined t...
Triton Malware Spearheads Latest Attacks on Industrial Systems | McAfee Blogs
ARCHIVED STORY Triton Malware Spearheads Latest Attacks on Industrial Systems Alexandre Mundo · MAR 26, 2020 Malware that attacks industrial control systems ICS, such as the Stuxnet campaign in 2010, is a serious threat. This class of cyber sabotage can spy on, disrupt, or destroy systems that...
Gamaredon APT Improves Toolset to Target Ukraine Government, Military
The Gamaredon advanced persistent threat APT group has been supercharging its operations lately, improving its toolset and ramping up attacks on Ukrainian national security targets. Vitali Kremez, head of SentinelLabs, said in research released on Wednesday that he has been tracking an uptick in...
2019 Global DDoS Threat Landscape Report
Today Imperva Research Labs, made up of senior researchers and industry experts who have been delivering sound and valid advice for over 15 years, is releasing a brand new Global DDoS Threat Landscape Report. The report is a statistical analysis of 3,643 network layer DDoS attacks throughout 2019...
New Zeppelin Ransomware Targeting Tech and Health Companies
A new variant of Vega ransomware family, dubbed Zeppelin, has recently been spotted in the wild targeting technology and healthcare companies across Europe, the United States, and Canada. However, if you reside in Russia or some other ex-USSR countries like Ukraine, Belorussia, and Kazakhstan,...
Trump's Ukraine Delusion, Tesla's Ford Showdown, and More News
Catch up on the most important news from today in two minutes or less...
Trump's Ukraine Server Delusion Is Spreading
Even secretary of state Mike Pompeo has given credence to Trump's demonstrably wrong theory that Ukraine hacked the DNC...
Solar, Wind Power Utility Disrupted in Rare Cyberattack
A cyberattack on the U.S. energy grid has just come to light, so to speak, which disrupted plant visibility at Utah-based sPower back in March. sPower, a Utah-based wind and solar provider, began experiencing a series of lost connections between its main control center and remote power-generation...
Pompeo Was Riding High—Until the Ukraine Mess Exploded
The US secretary of state may be a Trump favorite, but the Ukraine scandal appears to threaten Mike Pompeo’s ambitions for higher office...
The Ukraine Whistle-Blower Did Everything Right
The Trump administration's attacks on the whistle-blower aren't just baseless—they could have a corrosive long-term effect...
What Past Whistle-Blowers Think of the Trump-Ukraine Complaint
Two former intelligence community whistle-blowers say the life of whoever wrote the Trump-Ukraine complaint has been permanently altered...
Congress Grills Joseph Maguire Over Trump's Whistle-Blower Scandal
Acting director of national intelligence Joseph Maguire answered Congress's questions about the Ukraine whistle-blower complaint—but not always to satisfaction...
Trump’s Ukraine Mess Feels a Little Too Familiar
The unfolding drama ties two key threads of the Trump era: foreign interference in US elections and the president's distrust of his own intel agencies...
New Clues Show How Russia’s Grid Hackers Aimed for Physical Destruction
A fresh look at the 2016 blackout in Ukraine suggests that the cyberattack behind it was intended to cause far more damage...
NotPetya
Wired has a long article on NotPetya. EDITED TO ADD 9/12: Another good article on NotPetya...
A week in security (August 19 – 25)
Last week on Malwarebytes Labs, we reported on the presence of Magecart on a type of poker software; outlined how the Key Negotiation of Bluetooth KNOB attack works; followed the money on a Bitcoin sextortion campaign; looked back at DEF CON 27; and reported on continuing ransomware attacks on...
Malaysia Airlines Flight 17 investigation shows Russian disinformation campaigns have global reach
A little background: on July 17, 2014, Malaysia Airlines Flight 17 was shot from the sky on its way from Amsterdam to Kuala Lumpur above the Ukraine. The plane was hit by a surface-to-air missile, and as a result, all 298 people on board were killed. At that time, there was a revolt of pro-Russia...
No man’s land: How a Magecart group is running a web skimming operation from a war zone
Our Threat Intelligence team has been monitoring the activities of a number of threat actors involved in the theft of credit card data. Often referred to under the Magecart moniker, these groups use simple pieces of JavaScript code skimmers typically injected into compromised e-commerce websites ...
A New Ransomware Is Targeting Network Attached Storage (NAS) Devices
A new ransomware family has been found targeting Linux-based Network Attached Storage NAS devices made by Taiwan-based QNAP Systems and holding users' important data hostage until a ransom is paid, researchers told The Hacker News. Ideal for home and small business, NAS devices are dedicated file...
IT threat evolution Q1 2019
Targeted attacks and malware campaigns Go Zebrocy Zebrocy was first observed being used as a Sofacy backdoor in 2015. However, the collection of cases where this tool has been used mean that we consider it a subset of activity in its own right. On the basis of this threat actor's past behaviour, ...