article thumbnail

Hive0117 group targets Russian firms with new variant of DarkWatchman malware

Security Affairs

The financially-motivated group targeted organizations in the media, tourism, finance, insurance, manufacturing, energy, telecommunications, biotechnology and retail sectors. The DarkWatchman malware can evade detection by standard antivirus software.

article thumbnail

SideWinder targets the maritime and nuclear sectors with an updated toolset

SecureList

The new version uses a different WMI, which collects the name of the antivirus and the related “productState” Furthermore, the malware compares all running process names against an embedded dictionary. In the previous version, the malware used a simple WMI query to obtain a list of installed products.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Operation SyncHole: Lazarus APT goes back to the well

SecureList

The campaign, dubbed “Operation SyncHole”, has impacted at least six organizations in South Korea’s software, IT, financial, semiconductor manufacturing, and telecommunications industries, and we are confident that many more companies have actually been compromised.

article thumbnail

Privacy Roundup: Week 12 of Year 2025

Security Boulevard

but given the Salt Typhoon breach and the apparent lackluster security practices and culture at just about every American telecommunications company, this was too interesting to ignore. Cape is a mobile carrier startup claiming to provide a more secure and private service alternative to traditional telecommunications services.

article thumbnail

Hacking Group Moshen Dragon Targets Asian Telecommunication Companies

Heimadal Security

When it comes to sideloading malicious Windows DLLs into antivirus programs, stealing passwords to move laterally, and finally exfiltrating data from affected PCs, the hackers are quite persistent. The post Hacking Group Moshen Dragon Targets Asian Telecommunication Companies appeared first on Heimdal Security Blog. What Happened?

article thumbnail

U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise

Krebs on Security

Malicious code added to an Orion software update may have gone undetected by antivirus software and other security tools on host systems thanks in part to guidance from SolarWinds itself. all ten of the top ten US telecommunications companies. That seems like a fair bet. Fortune 500. all five branches of the U.S. accounting firms.

article thumbnail

Chinese Hackers Caught Exploiting Popular Antivirus Products to Target Telecom Sector

The Hacker News

A Chinese-aligned cyberespionage group has been observed striking the telecommunication sector in Central Asia with versions of malware such as ShadowPad and PlugX.