Security Affairs

JUNE 3, 2022

Microsoft blocked an attack activity aimed at Israeli organizations attributed to a previously unknown Lebanon-based hacking group tracked as POLONIUM. Microsoft announced to have blocked a series of attacks targeting Israeli organizations that have been conducted by a previously unknown Lebanon-based hacking group tracked as POLONIUM.

Security Intelligence 83

Security Intelligence Antivirus Hacking Authentication 83

Security Affairs

NOVEMBER 22, 2023

The researchers discovered the botnet in October 2023, but they believe it has been active since at least 2022. In October, Akamai’s Security Intelligence Response Team (SIRT) noticed an anomalous activity to the company’s honeypots targeting a rarely used TCP port.

DDOS 106

DDOS Wireless Security Intelligence Authentication 106

Security Affairs

AUGUST 7, 2023

In October 2022, the Finnish Security Intelligence Service ( Suojelupoliisi or SUPO ) warned of a highly likely intensification of cyberespionage activities conducted by Russia-linked threat actors over the winter. reads the unclassified National Security Overview 2022 published last week by the Finnish agency.

Ransomware 89

Ransomware Government Cyber threats Security Intelligence 89

Security Affairs

MAY 20, 2023

Researchers at Microsoft Security Intelligence team published a series of tweets to warn of a new wave of attacks aimed at distributing the Clop ransomware and linked it to the financially motivated cybercriminal group Sangria Tempest (ELBRUS, FIN7 ). ” reads one of the tweets published by the experts. We are in the final!

Cybercrime 82

Cybercrime Ransomware Security Intelligence Hacking 82

Security Affairs

NOVEMBER 11, 2022

Get TTPs and protection info: [link] — Microsoft Security Intelligence (@MsftSecIntel) October 14, 2022. From August 2022, Recorded Future researchers observed a rise in command and control (C2) infrastructure used by Sandworm (tracked by Ukraine’s CERT-UA as UAC-0113). Pierluigi Paganini.

Ransomware 79

Ransomware Telecommunications DNS Hacking 79

Security Affairs

JANUARY 26, 2023

Throughout 2022, both groups targeted sectors included academia, defence, governmental organisations, NGOs, think-tanks, as well as politicians, journalists and activists. SEABORGIUM’s campaigns begin with a reconnaissance activity of target individuals, with a focus on identifying their contacts on social networks or the sphere of influence.

Phishing 72

Phishing Media Hacking Education 72

Security Affairs

AUGUST 28, 2023

The Akamai Security Intelligence Response Team (SIRT) discovered a new version of the KmsdBot botnet that employed an updated Kmsdx binary targeting Internet of Things (IoT) devices. Researchers spotted an updated version of the KmsdBot botnet that is now targeting Internet of Things (IoT) devices.

IoT 85

IoT DDOS Architecture Internet 85

Security Affairs

AUGUST 15, 2022

Microsoft disrupted a hacking operation linked conducted by Russia-linked APT SEABORGIUM aimed at NATO countries. Microsoft has disrupted activity by SEABORGIUM, a Russia-based actor launching persistent phishing, credential and data theft, intrusions, and hack-and-leak campaigns tied to espionage. SecurityAffairs – hacking, NATO).

Phishing 84

Phishing Accountability Hacking Surveillance 84

Security Affairs

JANUARY 19, 2022

We reported our discovery to SolarWinds, and security updates have been released. More info: [link] — Microsoft Security Intelligence (@MsftSecIntel) January 19, 2022. SecurityAffairs – hacking, SolarWinds). The post SolarWinds Serv-U bug exploited for Log4j attacks appeared first on Security Affairs.

Authentication 97

Authentication Hacking Ransomware Security Intelligence 97

Security Affairs

SEPTEMBER 20, 2022

pic.twitter.com/v6sexKgDSg — Microsoft Security Intelligence (@MsftSecIntel) September 16, 2022. SecurityAffairs – hacking, malware). The post IT giants warn of ongoing Chromeloader malware campaigns appeared first on Security Affairs. Microsoft attributes the attack to a threat actor tracked as DEV-0796.

Malware 98

Malware Adware Ransomware Security Intelligence 98

Security Affairs

JANUARY 26, 2022

link] — Kevin Beaumont (@GossiTheDog) January 20, 2022. link] — Microsoft Security Intelligence (@MsftSecIntel) January 11, 2022. reads the security advisory published by NHS. . SecurityAffairs – hacking, VMware Horizon). to add a shell. Pierluigi Paganini.

Internet 91

Internet Internet Ransomware Hacking 91

Security Affairs

JULY 28, 2022

The DSIRF website states the provide services “to multinational corporations in the technology, retail, energy and financial sectors ” and that they have “ a set of highly sophisticated techniques in gathering and analyzing information. Confirm that Microsoft Defender Antivirus is updated to security intelligence update 1.371.503.0

Surveillance 85

Surveillance Malware Authentication DNS 85

Security Affairs

OCTOBER 16, 2022

Get TTPs and protection info: [link] — Microsoft Security Intelligence (@MsftSecIntel) October 14, 2022. SecurityAffairs – hacking, DEV-0960). The post Mysterious Prestige ransomware targets organizations in Ukraine and Poland appeared first on Security Affairs. ” concludes the report.

Ransomware 82

Ransomware Encryption Backups Security Intelligence 82