Remove 2000 Remove Malware Remove VPN
article thumbnail

Security Affairs newsletter Round 457 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

Clorox estimates the costs of the August cyberattack will exceed $49 Million Mastodon fixed a flaw that can allow the takeover of any account Iranian hackers breached Albania’s Institute of Statistics (INSTAT) Operation Synergia led to the arrest of 31 individuals Ex CIA employee Joshua Adam Schulte sentenced to 40 years in prison Cloudflare breached (..)

article thumbnail

Russia-linked Sandworm APT compromised 11 Ukrainian telecommunications providers

Security Affairs

The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). The malware maintains persistence through Cron jobs. “Note (!)

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

These are the 15 Top Cyber Threats Now

SecureWorld News

First, however, let's look at the top 15 cyber threats organizations face right now, according to the report: Malware. Trends in Malware attacks. We can't look at all of these categories, but let's talk about the number one cyber attack threat of malware. 46,5%_of all malware in e-mail messages found in ‘.docx’

article thumbnail

France agency ANSSI links Russia’s Sandworm APT to attacks on hosting providers

Security Affairs

Sandworm (aka BlackEnergy and TeleBots) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). This backdoor is version 3.1.4. At the time of this writing it is not clear if the hackers exploited a vulnerability in the Centreon software.

Software 135
article thumbnail

Security Affairs newsletter Round 233

Security Affairs

Privilege Escalation flaw found in Forcepoint VPN Client for Windows. North Korea-linked malware ATMDtrack infected ATMs in India. Study shows connections between 2000 malware samples used by Russian APT groups. Malware-based attacks disrupted operations of Rheinmetall AG and Defence Construction Canada.

article thumbnail

Russia-linked Sandworm APT uses WinRAR in destructive attacks on Ukraine’s public sector

Security Affairs

The Sandworm group (aka BlackEnergy , UAC-0082 , Iron Viking , Voodoo Bear , and TeleBots ) has been active since 2000, it operates under the control of Unit 74455 of the Russian GRU’s Main Center for Special Technologies (GTsST). The attackers used a BAT script dubbed RoarBat that recursively searches for files with specific extensions (.doc,docx,rtf,txt,xls,xlsx,ppt,pptx,vsd,vsdx,pdf,png,jpeg,jpg,zip,rar,7z,mp4,sql

VPN 98
article thumbnail

IT threat evolution Q2 2024

SecureList

DuneQuixote campaign targeting the Middle East In February, we discovered a new malware campaign targeting government entities in the Middle East that we dubbed DuneQuixote. While we have only identified two of these implants, we strongly believe that there may be more in the form of completely different malware.

Malware 108