Nov 10, 2023NewsroomCyber Warfare / Network Security The notorious Russian hackers known as Sandworm targeted an electrical substation in Ukraine last year, causing a brief power outage in October 2022. The findings come from Google's Mandiant, which described the hack as a "multi-event cyber attack" leveraging a novel technique for impacting industrial control systems … [Read more...] about Russian Hackers Sandworm Cause Power Outage in Ukraine Amidst Missile Strikes
Strikes
Improved BlackCat Ransomware Strikes with Lightning Speed and Stealthy Tactics
Jun 01, 2023Ravie LakshmananEndpoint Security / Encryption The threat actors behind BlackCat ransomware have come up with an improved variant that prioritizes speed and stealth in an attempt to bypass security guardrails and achieve their goals. The new version, dubbed Sphynx and announced in February 2023, packs a "number of updated capabilities that strengthen the group's … [Read more...] about Improved BlackCat Ransomware Strikes with Lightning Speed and Stealthy Tactics
Bl00dy Ransomware Gang Strikes Education Sector with Critical PaperCut Vulnerability
May 12, 2023Ravie LakshmananVulnerability / Ransomware U.S. cybersecurity and intelligence agencies have warned of attacks carried out by a threat actor known as the Bl00dy Ransomware Gang that attempt to exploit vulnerable PaperCut servers against the education facilities sector in the country. The attacks took place in early May 2023, the Federal Bureau of Investigation … [Read more...] about Bl00dy Ransomware Gang Strikes Education Sector with Critical PaperCut Vulnerability
SysUpdate Malware Strikes Again with Linux Version and New Evasion Tactics
Mar 02, 2023Ravie LakshmananLinux / Cyber Threat The threat actor known as Lucky Mouse has developed a Linux version of a malware toolkit called SysUpdate, expanding on its ability to target devices running the operating system. The oldest version of the updated artifact dates back to July 2022, with the malware incorporating new features designed to evade security software … [Read more...] about SysUpdate Malware Strikes Again with Linux Version and New Evasion Tactics
Cisco Secure Endpoint Strikes Balance for School IT Teams
Education networks are a student data hub – everything from school records, social security numbers, to health records is available. Unfortunately, this data is a natural target for threat actors seeking to land and expand prized PII for their own goals. To ensure data protection, Education IT and security operation teams need to guard against ransomware and other threats. … [Read more...] about Cisco Secure Endpoint Strikes Balance for School IT Teams
Getting the Bacon from Cobalt Strike’s Beacon
In recent months, CrowdStrike® Services has observed a continued increase in the use of Cobalt Strike by eCrime and nation-state adversaries to conduct their operations following the initial access to victims’ environments. Cobalt Strike is a commercially available post-exploitation framework developed for adversary simulations and red team operations and features an … [Read more...] about Getting the Bacon from Cobalt Strike’s Beacon