Tag: tactics

Source URL: https://it.slashdot.org/story/24/11/01/088213/inside-a-firewall-vendors-5-year-war-with-the-chinese-hackers-hijacking-its-devices?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Inside a Firewall Vendor’s 5-Year War With the Chinese Hackers Hijacking Its Devices Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a significant cybersecurity battle undertaken by Sophos against Chinese hackers targeting firewall products. This situation has implications for information security, particularly concerning the risks associated…

The Register: Gang gobbles 15K credentials from cloud and email providers’ garbage Git configs

Nov 1, 2024

—

by

Source URL: https://www.theregister.com/2024/10/31/emeraldwhale_credential_theft/ Source: The Register Title: Gang gobbles 15K credentials from cloud and email providers’ garbage Git configs Feedly Summary: Emeraldwhale gang looked sharp – until it made a common S3 bucket mistake A criminal operation dubbed Emeraldwhale has been discovered after it dumped more than 15,000 credentials belonging to cloud service and email…

Alerts: Foreign Threat Actor Conducting Large-Scale Spear-Phishing Campaign with RDP Attachments

—

by

Source URL: https://www.cisa.gov/news-events/alerts/2024/10/31/foreign-threat-actor-conducting-large-scale-spear-phishing-campaign-rdp-attachments Source: Alerts Title: Foreign Threat Actor Conducting Large-Scale Spear-Phishing Campaign with RDP Attachments Feedly Summary: CISA has received multiple reports of a large-scale spear-phishing campaign targeting organizations in several sectors, including government and information technology (IT). The foreign threat actor, often posing as a trusted entity, is sending spear-phishing emails containing malicious…

Slashdot: Chinese Attackers Accessed Canadian Government Networks For Five Years

—

by

Source URL: https://news.slashdot.org/story/24/10/31/1956250/chinese-attackers-accessed-canadian-government-networks-for-five-years?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Chinese Attackers Accessed Canadian Government Networks For Five Years Feedly Summary: AI Summary and Description: Yes Summary: Canada’s Communications Security Establishment (CSE) has reported a sustained cyber campaign by China targeting Canadian government and private sectors, emphasizing the severity of the threats. The report identifies espionage and intellectual property…

Cisco Talos Blog: Threat actors use copyright infringement phishing lure to deploy infostealers

—

by

Source URL: https://blog.talosintelligence.com/threat-actors-use-copyright-infringement-phishing-lure-to-deploy-infostealers/ Source: Cisco Talos Blog Title: Threat actors use copyright infringement phishing lure to deploy infostealers Feedly Summary: Cisco Talos has observed an unknown threat actor conducting a phishing campaign targeting Facebook business and advertising account users in Taiwan. The decoy email and fake PDF filenames are designed to impersonate a company’s legal department,…

Wired: Inside Sophos’ 5-Year War With the Chinese Hackers Hijacking Its Devices

—

by

Source URL: https://www.wired.com/story/sophos-chengdu-china-five-year-hacker-war/ Source: Wired Title: Inside Sophos’ 5-Year War With the Chinese Hackers Hijacking Its Devices Feedly Summary: Sophos went so far as to plant surveillance “implants” on its own devices to catch the hackers at work—and in doing so, revealed a glimpse into China’s R&D pipeline of intrusion techniques. AI Summary and Description:…

The Register: LottieFiles supply chain attack exposes users to malicious crypto wallet drainer

—

by

Source URL: https://www.theregister.com/2024/10/31/lottiefiles_supply_chain_attack/ Source: The Register Title: LottieFiles supply chain attack exposes users to malicious crypto wallet drainer Feedly Summary: A scary few Halloween hours for team behind hugely popular web plugin LottieFiles is overcoming something of a Halloween fright after battling to regain control of a compromised developer account that was used to exploit…

CSA: How Does Ransomware Threatens Your Business?

—

by

Source URL: https://cloudsecurityalliance.org/articles/tackling-ransomware-head-on-a-business-s-guide-to-understanding-and-defense Source: CSA Title: How Does Ransomware Threatens Your Business? Feedly Summary: AI Summary and Description: Yes Summary: The text elaborates on the growing threat of ransomware, detailing its mechanics and emphasizing its impact on businesses. It highlights the need for proactive cybersecurity measures, making it a pertinent read for professionals concerned with…

The Register: Russian spies use remote desktop protocol files in unusual mass phishing drive

Oct 30, 2024

—

by