Security Boulevard

MARCH 24, 2022

On March 15th, research firm ESET reported a new data-wiping malware targeting Ukraine named CaddyWiper. [ 1 ] The malware “destroys user data and partitions information from attached drives”. 13 ] In the beginning of 2022, the group claimed responsibility for hacking and extorting Impresa - the largest media company in Portugal.[

Ransomware 59

Ransomware Malware Government Antivirus 59

Krebs on Security

DECEMBER 29, 2022

You just knew 2022 was going to be The Year of Crypto Grift when two of the world’s most popular antivirus makers — Norton and Avira — kicked things off by installing cryptocurrency mining programs on customer computers. It emerges that email marketing giant Mailchimp got hacked. Uber blames LAPSUS$ for the intrusion.

Cryptocurrency 233

Cryptocurrency Cybercrime Computers and Electronics Scams 233

SecureList

MAY 11, 2023

Security researchers discovered an archive that contained test builds of the malware for a number of less common platforms, including macOS and FreeBSD, as well as for various non-standard processor architectures, such as MIPS and SPARC. Meanwhile, the malware itself evolved, adding an LDAP-based self-spreading mechanism.

Ransomware 115

Ransomware Malware Architecture Telecommunications 115

Krebs on Security

DECEMBER 14, 2023

The malware used in the Target breach included the text string “ Rescator ,” which also was the handle chosen by the cybercriminal who was selling all of the cards stolen from Target customers. For starters, the text string “Rescator” was found in some of the malware used in the Target breach.

Cybercrime 225

Cybercrime Accountability Advertising Computers and Electronics 225

SecureList

APRIL 27, 2021

In our initial report on Sunburst , we examined the method used by the malware to communicate with its C2 (command-and-control) server and the protocol used to upgrade victims for further exploitation. This campaign made use of a previously unknown malware family we dubbed FourteenHi.

Malware 138

Malware Spyware Government Social Engineering 138

Security Boulevard

APRIL 16, 2021

13, 2020, someone uploaded a suspected malicious file to VirusTotal, a service that scans submitted files against more than five dozen antivirus and security products. Last month, Microsoft and FireEye identified that file as a newly-discovered fourth malware backdoor used in the sprawling SolarWinds supply chain hack.

Telecommunications 59

Telecommunications Antivirus Internet Internet 59

Krebs on Security

APRIL 16, 2021

13, 2020, someone uploaded a suspected malicious file to VirusTotal , a service that scans submitted files against more than five dozen antivirus and security products. Last month, Microsoft and FireEye identified that file as a newly-discovered fourth malware backdoor used in the sprawling SolarWinds supply chain hack.

Telecommunications 275

Telecommunications Malware Hacking Software 275

SecureList

NOVEMBER 14, 2022

From a different angle, reporting from The Intercept revealed mobile surveillance capabilities available to Iran for the purposes of domestic investigations that leverage direct access to (and cooperation of) local telecommunication companies. One glaring example is Iran, which faced a series of spectacular hacks and sabotages.

Firmware 106

Firmware Surveillance Mobile Telecommunications 106