NSA Warns Russia’s ‘Sandworm’ Group Is Targeting …

The Russian military group has been exploiting a flaw in the Exim mail transfer agent since last August, the NSA reports. The National Security Agency today published an advisory warning of Russian military attackers exploiting vulnerable email servers. Sandworm, an intelligence group also known as GRU Unit 74455, has been targeting a flaw in Exim
Read more
No Comments

Cybercrime Group Steals $1.3M from Banks

A look at how the so-called Florentine Banker Group lurked for two months in a sophisticated business email compromise attack on Israeli and UK financial companies. A cybercriminal group dubbed the Florentine Banker Group launched advanced business email compromise (BEC) attacks on leading Israeli and UK financial firms, stealing $1.3 million dollars in just four
Read more
5 Comments

China-Based Threat Group Launches Widespread …

The motives behind the attacks remain unclear, but likely triggers include the ongoing trade war between the US and China and the unfolding COVID-19 pandemic. APT41, a prolific advanced persistent threat group believed to be working on behalf of the Chinese government, has sharply ramped up its activities in recent months after a relative lull.
Read more
21 Comments

China-Based Cyber Espionage Group Reportedly Behind …

Personal data on over 8,100 individuals and confidential business information likely exposed in June 2019 incident. A data breach at Japan’s Mitsubishi Electric that may have exposed some 200 MB of personal and confidential business data is the latest reminder of the growing threat many organizations face from sophisticated cyber espionage groups. Mitsubishi on Monday
Read more
26 Comments

China-Based Cyber Espionage Group Targeting Orgs in …

Dozens of organizations across multiple sectors have become victims of APT20 in the past two years. An advanced persistent threat (APT) actor likely operating out of China has, for the past two years at least, been quietly targeting organizations in the United States and around the globe in a sweeping espionage campaign. Among its dozens
Read more
74 Comments

Facebook Fixes WhatsApp Group Chat Security Issue

Flaw allowed attackers to repeatedly crash group chat and force users to uninstall and reinstall app, Check Point says. Facebook has fixed a bug in its WhatsApp chat platform that gave attackers a way to send a malicious group-chat message capable of repeatedly crashing the entire application for all members of a targeted chat group.
Read more
70 Comments

The Newest Threat Group on Microsoft’s Radar

Hacking group has been targeting telecommunication providers. Microsoft today published a report detailing activity by a new threat group it dubbed Gallium in keeping with the company’s internal practice of assigning chemical elements to attack groups. The bulk of Gallium’s activity, which primarily targeted telecommunication providers, was observed throughout 2018 into mid-2019, report researchers with
Read more
25 Comments

Chinese Cyber Espionage Group Steals SMS Messages …

APT41’s new campaign is latest to highlight trend by Chinese threat groups to attack upstream service providers as a way to reach its intended targets, FireEye says. APT41, a Chinese hacking group known for its prolific state-sponsored espionage campaigns, has begun targeting telecommunications companies with new malware designed to monitor and save SMS traffic from
Read more
67 Comments

Suspected Hacker Group Creates Network of Fake LinkedIn Profiles

Author: Dell SecureWorks Counter Threat Unit™ Threat Intelligence Date: 07 October 2015 Summary While tracking a suspected Iran-based threat group known as Threat Group-2889[1] (TG-2889), Dell SecureWorks Counter Threat Unit™ (CTU) researchers uncovered a network of fake LinkedIn profiles. These convincing profiles form a self-referenced network of seemingly established LinkedIn users. CTU researchers assess with
Read more
19 Comments

Researchers Link Magecart Group 4 to Cobalt Group

Their findings demonstrate how Group 4 is likely conducting server-side skimming in addition to client-side activity. Security researchers have discovered a link between Magecart Group 4 and Cobalt Group, a well-known, financially motivated group in operation since 2015. Findings indicate Group 4 is not only conducting client-side skimming but was, and likely still is, doing
Read more
45 Comments