CyberSecurity Insiders

OCTOBER 22, 2021

CrowdStrike security researchers have discovered that a hacking group dubbed LightBasin aka UNC1945 has been hiding in the networks of renowned telecom networks from the past 5 years, monitoring all their business operations and sending censorious data to remote servers.

Cyber Attacks 139

Cyber Attacks Telecommunications DNS Government 139

Security Affairs

JANUARY 23, 2019

DHS has issued a notice of a CISA emergency directive urging federal agencies of improving the security of government-managed domains (i.e.gov) to prevent DNS hijacking attacks. The notice was issued by the DHS and links the emergency directive Emergency Directive 19-01 titled “Mitigate DNS Infrastructure Tampering.”.

DNS 86

DNS Government Telecommunications Advertising 86

Security Affairs

JANUARY 10, 2019

Security expert uncovered a DNS hijacking campaign targeting organizations in various industries worldwide and suspects Iranian APT groups. The same IPs were previously associated with cyber attacks conducted by Iranian cyberspies. With these techniques, attackers are able to harvest usernames , passwords and domain credentials.

DNS 81

DNS Telecommunications Government Encryption 81

CyberSecurity Insiders

MARCH 5, 2021

Basically, the attacker employs two different decoding functions: one is a customized BASE32_decode function and another is a more customized letter replacement cipher when the domain name only has lower cases plus [0_-.]. Infected Domains Analysis. Conclusions.

DNS 138

DNS Education Malware Telecommunications 138

Security Affairs

JANUARY 15, 2020

If so we are facing a state-sponsored group with high capabilities in developing persistence and hidden communication channels (for example over DNS) but without a deep interest in exploiting services. The group’s victims are mainly in the telecommunications, government (IT services), and oil sectors.” Pierluigi Paganini.

Computers and Electronics 76

Computers and Electronics Penetration Testing Malware Government 76