Security Affairs

JANUARY 21, 2025

Rahman has access to Sensitive Compartmented Information (SCI). On October 17, 2024, Rahman stole and leaked Top-Secret documents on a U.S. The CIA analyst photographed the classified documents and transmitted them to individuals he knew were not authorized to view them. “After Oct.

Media 69

Media Mobile Internet Internet 69

Security Affairs

NOVEMBER 12, 2024

Law enforcement warned that securely stored iPhones awaiting forensic examination are mysteriously rebooting, making them much harder to unlock, per a document obtained by 404 Media. 404 Media obtained the document from a mobile forensics source and verified it with another source. Three iPhones running iOS 18.0

Media 130

Media Wireless Mobile Encryption 130

Security Affairs

NOVEMBER 8, 2024

Law enforcement warns that securely stored iPhones awaiting forensic examination are mysteriously rebooting, making them much harder to unlock, per a document obtained by 404 Media. 404 Media obtained the document from a mobile forensics source and verified it with another source. security feature addition.”

Media 121

Media Mobile Passwords Hacking 121

Security Affairs

OCTOBER 21, 2024

It provides a range of development resources, including SDKs (Software Development Kits), documentation, sample code, and learning materials for networking, security, and cloud infrastructure. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, data breach)

Cybercrime 133

Cybercrime Data breaches Technology Banking 133

Security Affairs

MAY 18, 2025

“However, rogue communication devices not listed in product documents have been found in some Chinese solar power inverters by U.S experts who strip down equipment hooked up to grids to check for security issues, the two people said.” ” reported Reuters.

Energy and Utilities 145

Energy and Utilities Manufacturing Government Hacking 145

Security Affairs

JANUARY 14, 2025

The malware was operated by a China-linked threat actor, known as Mustang Panda (aka Twill Typhoon, to steal sensitive information from victim computers. According to court documents, the Chinese government paid Mustang Panda to develop PlugX malware, used since 2014 to target U.S., European, and Asian entities. systems. .”

Malware 122

Malware Government Hacking Cybersecurity 122

Security Affairs

JUNE 11, 2025

” As part of Operation Secure, Vietnamese police arrested 18 suspects and seized cash, SIMs, and documents tied to a scheme selling corporate accounts. Operation Secure has once again shown the power of intelligence sharing in disrupting malicious infrastructure and preventing large-scale harm to both individuals and businesses.”

Cybercrime 112

Cybercrime Data collection Scams Cyber threats 112

Security Affairs

DECEMBER 4, 2024

The group claimed to have stolen 500GB of data including Finacial data, Organisation data, Users data and personal documents, NDA’s, Confidential data, and more. As proof of the data breach, the group published multiple screenshots, including pictures of passports and other documents.

Ransomware 127

Ransomware Telecommunications Healthcare Insurance 127

Security Affairs

APRIL 7, 2025

OPERATIONAL MANUALS AND DECEPTION STRATEGIES As further evidence of the increasing professionalization of this illicit sector, Meridian Group reports the publication of informational content designed to guide the proper use of EDR services, presented as a detailed guide on how to correctly complete and unlawfully submit the requests.

Cybercrime 140

Cybercrime Social Engineering Accountability Government 140

Security Affairs

FEBRUARY 26, 2024

Recently the leak of a collection of files apparently stolen from the Chinese government hacking contractor, I-Soon, exposed Chinese hacking capabilities. Recently someone has leaked on GitHub [ 1 , 2 ] a collection of files apparently stolen from the Chinese hacking firm, I-Soon.

Hacking 135

Hacking Government Spyware Marketing 135

Security Affairs

MARCH 4, 2024

The Main Intelligence Directorate (GUR) of Ukraine’s Ministry of Defense claims that it hacked the Russian Ministry of Defense. Stolen documents include: confidential documents, including orders and reports circulated among over 2000 structural units of the Russian military service.

Hacking 142

Hacking Data breaches Encryption Government 142

Krebs on Security

FEBRUARY 22, 2024

A new data leak that appears to have come from one of China’s top private cybersecurity firms provides a rare glimpse into the commercial side of China’s many state-sponsored hacking groups. In 2021, the Sichuan provincial government named i-SOON as one of “the top 30 information security companies.”

Government 335

Government Hacking Cyber threats Mobile 335

Security Affairs

DECEMBER 23, 2024

Court documents state that on October 29, 2019, plaintiffs filed this lawsuit, alleging that the defendants used WhatsApp to target approximately 1,400 mobile phones and devices to infect them with the surveillance software. ” reads the court document. WhatsApp won a legal case against NSO Group in a U.S. ” The U.S.

Spyware 110

Spyware Surveillance Software Hacking 110

Security Affairs

OCTOBER 14, 2024

The company confirmed that financial data was not exposed and Fidelity customer accounts were not hacked. Fidelity Investments has informed attorney generals in various states that the attacker had created two customer accounts, which they used to obtain images of documents pertaining to Fidelity customers from an internal database.

Data breaches 135

Data breaches Financial Services Accountability Hacking 135

Security Affairs

NOVEMBER 4, 2024

for phishing scams that stole millions by hacking email accounts. According to court documents, Mr. Ojelade sent phishing emails to real estate businesses, then after gaining unauthorized access to victims’ accounts monitored their email traffic to determine when large transactions were about to take place. “We

Scams 126

Scams Phishing Identity Theft Accountability 126

Security Affairs

FEBRUARY 5, 2025

In the updated statement published by ICAO, the agency said it is actively investigating reports of a potential information security incident allegedly linked to a threat actor known for targeting international organizations. ” reads the statement published by the International Civil Aviation Organization.

Data breaches 100

Data breaches Information Security Hacking Marketing 100

Security Affairs

APRIL 26, 2025

Security footage reportedly shows the man attempting to access multiple offices before installing malicious software designed to capture screenshots every 20 minutes and transmit them to an external IP address. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, malware )

Malware 145

Malware Cybersecurity Healthcare Media 145

Security Affairs

NOVEMBER 29, 2024

Russian authorities arrested ransomware affiliate Mikhail Matveev, aka Wazawaka, for developing malware and ties to hacking groups. Russian news agency RIA Novosti, citing an anonymous source, confirmed that the arrested man is the “programmer” as Mikhail Matveev, as reported in court documents.

Ransomware 120

Ransomware Healthcare Hacking Malware 120

Security Affairs

MARCH 3, 2025

Amnesty International documented the incident. “Amnesty Internationals Security Lab performed a forensic analysis on Vedrans Samsung Galaxy A32 to check if the device was tampered with while Vedran was detained at the police station. He refused, but his phone was taken and later returned switched off at 12:45 AM.

Hacking 69

Hacking Spyware Technology Surveillance 69

Security Affairs

MAY 11, 2025

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape iClicker site hack targeted students with malware via fake CAPTCHA New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms Backdoor found in popular ecommerce components Stealthy Linux backdoor leveraging (..)

Malware 97

Malware eCommerce Hacking Ransomware 97

Security Affairs

OCTOBER 25, 2024

Cisco warned customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services configured on Cisco Secure Firewall devices. The company published a document containing recommendations against password spray attacks aimed at Remote Access VPN (RAVPN) services.

VPN 114

VPN Firewall Technology Passwords 114

Security Affairs

DECEMBER 4, 2024

Since 2012, Crimenetwork facilitated the sale of illegal goods and services, including drugs, forged documents, hacking tools, and stolen data. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, cybercrime) Source Computerworld.ch

Cybercrime 115

Cybercrime Cryptocurrency Hacking Internet 115

Security Affairs

DECEMBER 16, 2024

“In at least two cases Amnesty International documented, the Cellebrite UFED product and associated exploits were used to covertly bypass phone security features, enabling Serbian authorities to infect the devices with NoviSpy spyware. . ” reported the Associated Press. ” concludes the report.

Spyware 106

Spyware Surveillance Technology Mobile 106

Security Affairs

MAY 1, 2025

“The emails had the subject Documents from 04/29/2025 and were sent from an address disguised as corporate correspondence.” ” The phishing emails employed in the campaign spotted by F6 experts has the subject Documents from 04/29/2025 and were sent from addresses mimicking corporate senders.

Malware 87

Malware Phishing Telecommunications Antivirus 87

Security Affairs

MARCH 20, 2025

The RAR archive analyzed by the Ukrainian CERT-UA contains the document Algorithm_LegalAid.xlsm.Upon opening the document and enabling the macro, a PowerShell command will be executed. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,Ukraine)

Computers and Electronics 109

Computers and Electronics Telecommunications Malware Surveillance 109

Security Affairs

APRIL 16, 2025

These CNAs are authorized to assign CVE IDs to vulnerabilities discovered in their respective domains, ensuring timely and accurate documentation of security issues. ” Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,MITRE)

Government 133

Government Risk Cybersecurity Media 133

Security Affairs

DECEMBER 30, 2024

It provides a range of development resources, including SDKs (Software Development Kits), documentation, sample code, and learning materials for networking, security, and cloud infrastructure. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, data breach)

Data breaches 126

Data breaches Cybercrime Authentication Technology 126

Security Affairs

JUNE 7, 2025

Cybersecurity researcher Bob Dyachenko and the Cybernews team discovered a massive data leak in China that exposed billions of documents, including financial, WeChat, and Alipay data, likely affecting hundreds of millions. That would make this data leak the largest single-source leak of Chinese personal data ever identified.”

Surveillance 131

Surveillance Banking Phishing Passwords 131

Security Affairs

MAY 13, 2025

Such information will be of interest to foreign intelligence agencies, nation-state actors, and advanced espionage groups, especially during local conflicts and ongoing wars. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking,Interlock Ransomware)

Ransomware 114

Ransomware Cyber Attacks Risk Hacking 114

Security Affairs

FEBRUARY 6, 2025

. “Subsequently, and using up to three different pseudonyms, he attacked international bodies and government-type organisations by accessing databases with personal information of employees and clients, as well as internal documents that were subsequently sold or freely published on forums.” ” concludes the statement.

Cybercrime 82

Cybercrime Government Data breaches Information Security 82

Security Affairs

JANUARY 8, 2024

Documents belonging to the Swiss Air Force were leaked on the dark web as a result of cyberattack on a US security provider. Documents belonging to the Swiss Air Force were leaked on the dark web after the US security company Ultra Intelligence & Communications suffered a data breach.

Hacking 144

Hacking Ransomware Data breaches Manufacturing 144

Security Affairs

NOVEMBER 7, 2024

The initial attack vector is a phishing email containing a link to a malicious application disguised as a link to a PDF document relating to a cryptocurrency topic such as “Hidden Risk Behind New Surge of Bitcoin Price”, “Altcoin Season 2.0-The The Hidden Gems to Watch” and “New Era for Stablecoins and DeFi, CeFi”.

Malware 124

Malware Architecture Risk Cryptocurrency 124

Security Affairs

NOVEMBER 27, 2023

Ukraine’s intelligence service announced the hack of the Russian Federal Air Transport Agency, ‘Rosaviatsia.’ ’ Ukraine’s intelligence service announced they have hacked Russia’s Federal Air Transport Agency, ‘Rosaviatsia.’ ” reads the announcement. ” reads the announcement.

Hacking 141

Hacking Engineering Government Manufacturing 141

Security Affairs

NOVEMBER 17, 2023

Toyota Financial Services discloses unauthorized activity on systems after the Medusa ransomware gang claimed to have hacked the company. Medusa Toyota has set the deadline for November 26 and has published a sample of the stolen data as proof of the hack.

Financial Services 141

Financial Services Hacking Ransomware Data breaches 141

Security Affairs

OCTOBER 21, 2024

The Internet Archive was breached again, attackers hacked its Zendesk email support platform through stolen GitLab authentication tokens. The breach may have exposed personal identification documents uploaded by users for Wayback Machine page removal requests, depending on the attacker’s Zendesk API access.

Internet 130

Internet Internet Data breaches Authentication 130

Security Affairs

FEBRUARY 1, 2025

Stolen data include contracts, financial and business documents, engineering projects, and employees personally identifiable information (PII), including Aadhar card numbers. Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs hacking, ransomware attack)

Technology 119

Technology Ransomware Engineering Manufacturing 119

Security Affairs

FEBRUARY 12, 2025

Sarcoma ransomware operators claim to have stolen 377 GB of SQL files and documents. “The company will continue to enhance the security control of the network and information infrastructure to ensure information security.” However, it has yet to disclose a data breach. .

Computers and Electronics 79

Computers and Electronics Ransomware Manufacturing Data breaches 79