Remove DNS Remove Government Remove Spyware
article thumbnail

Security Affairs newsletter Round 507 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

CISA adds Aviatrix Controllers vulnerability to its Known Exploited Vulnerabilities catalog ESET detailed a flaw that could allow a bypass of the Secure Boot in UEFI systems Russia-linked APT Star Blizzard targets WhatsApp accounts Prominent US law firm Wolf Haldenstein disclosed a data breach Clop Ransomware exploits Cleo File Transfer flaw: dozens (..)

Spyware 73
article thumbnail

Russia-linked InvisiMole APT targets state organizations of Ukraine

Security Affairs

The Government Team for Response to Computer Emergencies of Ukraine (CERT-UA) warns of spear-phishing messages conducted by UAC-0035 group (aka InvisiMole) against Ukrainian state bodies. Ukraine CERT (CERT-UA) warns of spear-phishing ??attacks attacks conducted by UAC-0035 group (aka InvisiMole) on state organizations of Ukraine.

Spyware 98
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Russia-linked Gamaredon APT targets Ukrainian authorities with new malware

Security Affairs

Russia-linked threat actor Gamaredon employed new spyware in cyber attacks aimed at public authorities and critical information infrastructure in Ukraine. The government experts pointed out that the threat actor continues to evolve its TTPs to avoid detection. shop/09.01_otck/quicker[.]rtf.

Malware 98
article thumbnail

IT threat evolution Q1 2022

SecureList

The group uses various malware families, including Wroba, and attack methods that include phishing, mining, smishing and DNS poisoning. Subsequently, DDoS attacks hit some government websites. One of the things you can do to protect yourself from advanced mobile spyware is to reboot your device on a daily basis. Other malware.

Phishing 134
article thumbnail

Security Affairs newsletter Round 210 – News of the week

Security Affairs

Scranos – A Cross Platform, Rootkit-Enabled Spyware rapidly spreading. Analyzing OilRigs malware that uses DNS Tunneling. Hacker broke into super secure French Governments Messaging App Tchap hours after release. Ecuador suffered 40 Million Cyber attacks after the Julian Assange arrest. Code execution – Evernote.

article thumbnail

Security Affairs newsletter Round 221 – News of the week

Security Affairs

Singapore Government will run its third bug bounty program. ViceLeaker Android spyware targets users in the Middle East. Godlua backdoor, the first malware that abuses the DNS over HTTPS (DoH). Israel blamed Russia for jamming at Israeli Ben Gurion airport. Israeli blamed Russia for jamming at Israeli Ben Gurion airport.

Scams 73
article thumbnail

Security Affairs newsletter Round 502 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

CISA adds Microsoft Windows CLFS driver flaw to its Known Exploited Vulnerabilities catalog Microsoft December 2024 Patch Tuesday addressed actively exploited zero-day SAP fixed critical SSRF flaw in NetWeaver’s Adobe Document Services Romanian energy supplier Electrica Group is facing a ransomware attack Deloitte denied its systems were hacked (..)