Security Affairs

AUGUST 31, 2021

Recently emerged LockFile ransomware family LockFile leverages a novel technique called intermittent encryption to speed up encryption. Sophos researchers discovered that the group is now leveraging a new technique called “intermittent encryption” to speed up the encryption process.

Encryption 112

Encryption Ransomware Financial Services Antivirus 112

Security Affairs

MARCH 25, 2024

The threat actors sent out spam emails with attachments that eventually launched the StrelaStealer malware. The malware StrelaStealer is an email credential stealer that DCSO_CyTec first documented in November 2022. “The JScript file then drops a Base64-encrypted file and a batch file. . ” concludes the report.

Malware 108

Malware Encryption Manufacturing Phishing 108

Krebs on Security

OCTOBER 28, 2020

Linus Larsson , the journalist who broke the story, says the hacked material was uploaded to a public server during the second half of September, and it is not known how many people may have gained access to it. In some cases, this allows the intruders to profit even if their malware somehow fails to do its job.

Hacking 344

Hacking Ransomware Banking Accountability 344

Security Affairs

NOVEMBER 19, 2023

Phobos variants are usually distributed by the SmokeLoader , but in 8Base campaigns, it has the ransomware component embedded in its encrypted payloads. The group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT.

Ransomware 129

Ransomware Encryption Backups Manufacturing 129

Security Affairs

NOVEMBER 1, 2021

Researchers demonstrated how crooks could hack Diebold Nixdorf’s Wincor Cineo ATMs to bypass black-box attack protections and withdraw cash. The ATM black box attacks are quite popular in the cybercrime underground and several threat actors offer the hardware equipment and malware that could be used to compromise the ATMs.

Hacking 121

Hacking Firmware Encryption Manufacturing 121

Security Affairs

JANUARY 6, 2024

billion claim arising from the NotPetya malware incident. It is one of the largest pharmaceutical companies globally, engaged in the research, development, manufacturing, and marketing of a wide range of healthcare products. Merck has resolved a dispute with insurers regarding a $1.4 Merck and its insurers have agreed with a $1.4

Insurance 116

Insurance Manufacturing Ransomware Healthcare 116

Security Affairs

NOVEMBER 24, 2022

The operators of the RansomExx ransomware (aka Defray777 and Ransom X) have developed a new variant of their malware, tracked as RansomExx2, that was ported into the Rust programming language. The main reason to rewrite malware in Rust is to have lower AV detection rates, compared to malware written in more common languages.

Ransomware 99

Ransomware Encryption Malware Manufacturing 99

Security Affairs

DECEMBER 19, 2022

The main reasons to rewrite malware in Rust is to have lower AV detection rates, compared to malware written in most common languages, and to target multiple architectures. The Qilin ransomware-as-a-service (RaaS) group uses a double-extortion model, with most of the victims in the manufacturing and IT industries.

Ransomware 130

Ransomware Encryption Healthcare Education 130

CyberSecurity Insiders

OCTOBER 27, 2022

Meaning the said malware is acting as an access point to hackers spreading the said version of file encrypting malware. According to Sophos researchers, the companies operating in the said two sectors were paying appx $2 million on an average to free up data from encryption.

Ransomware 109

Ransomware Manufacturing Retail Encryption 109

Security Affairs

JULY 28, 2020

US and UK cybersecurity agencies issued a joint advisory about the spread of QSnatch Data-Stealing Malware that already infected over 62,000 QNAP NAS devices. The malicious code specifically targets QNAP NAS devices manufactured by Taiwanese company QNAP, it already infected over 62,000 QNAP NAS devices.

Malware 110

Malware Firmware Advertising Manufacturing 110

Security Affairs

APRIL 7, 2020

xHelper , a new strain of Android malware is able to re-install itself on infected devices even after victims delete it or force a factory reset. xHelper , a new strain of Android malware is able to re-install itself on infected devices even after victims delete it or force a factory reset. and Russia. ” continues the report.

Malware 127

Malware Firmware Manufacturing Mobile 127

Security Affairs

JULY 2, 2023

Illicit Telegram Communities Dismantling of an encrypted network sends shockwaves through organised crime groups across Europe TSMC Says Supplier Hacked After Ransomware Group Claims Attack on Chip Giant Malware Trojanized Super Mario Game Installer Spreads SupremeBot Malware Initial research exposing JOKERSPY Who is 8BASE?

Cybercrime 92

Cybercrime Hacking Ransomware Malware 92

Security Affairs

JULY 5, 2023

The malware allows operators to steal information from various browsers, it also supports ransomware capabilities. Once inside the system, this malicious variant stealthily extracts sensitive information and proceeds to encrypt the compromised files.” The malware communicates with the command and control servers through HTTPS.

Energy and Utilities 89

Energy and Utilities Ransomware Backups Malware 89

Security Affairs

AUGUST 2, 2020

The Taiwanese vendor QNAP urges its users to update the Malware Remover app following the alert on the QSnatch malware. The Taiwanese company QNAP is urging its users to update the Malware Remover app to prevent NAS devices from being infected by the QSnatch malware. Webshell functionality for remote access.

Malware 100

Malware Advertising Passwords Manufacturing 100

Security Affairs

DECEMBER 27, 2021

At this time, it is not clear how threat actors compromised the QNAP devices, some users claim that attackers exploited a flaw in the Photo Station software to hack them. The attackers first create a user in the administrator group, then use it to encrypt the content of the NAS. SecurityAffairs – hacking, ech0raix). and 1.0.6).”

Ransomware 129

Ransomware Encryption Manufacturing Hacking 129

Security Affairs

OCTOBER 18, 2022

The attacks detailed by Cybereason targeted technology and manufacturing companies primarily located in East Asia, Western Europe, and North America. Symantec observed the attackers deploying a custom malware called Spyder Loader on the target networks. exe for the execution of the malware loader. ” continues the report.

Malware 114

Malware Encryption Manufacturing Hacking 114

Security Affairs

MARCH 26, 2021

The Federal Bureau of Investigation (FBI) issued an alert to warn that the Mamba ransomware is abusing the DiskCryptor open source tool to encrypt entire drives. Mamba ransomware is one of the first malware that encrypted hard drives rather than files that was detected in public attacks.

Ransomware 145

Ransomware Encryption Passwords Malware 145

Security Affairs

MAY 11, 2021

The Federal Bureau of Investigation (FBI) and the Australian Cyber Security Centre (ACSC) are warning of an ongoing Avaddon ransomware campaign targeting organizations worldwide in multiple industries, including government, finance, energy, manufacturing, and healthcare. SecurityAffairs – hacking, Avaddon). Pierluigi Paganini.

Ransomware 129

Ransomware Backups Antivirus DDOS 129

Adam Levin

AUGUST 13, 2018

Security researchers at the recent Black Hat and Def Con security conferences in Las Vegas have placed malware on pacemakers as a proof-of-concept hack to highlight the potential for security vulnerabilities in IoT-enabled medical devices. Medtronic manufactures the targeted pacemakers. Read more here.

IoT 124

IoT Encryption Manufacturing Healthcare 124

Security Affairs

OCTOBER 27, 2022

DEV-0950 group used Clop ransomware to encrypt the network of organizations previously infected with the Raspberry Robin worm. The experts noticed that threat actors tracked as DEV-0950 used Clop ransomware to encrypt the network of organizations previously infected with the worm. The final-stage malware was the Clop ransomware.

Ransomware 100

Ransomware Malware Data collection Encryption 100

Security Affairs

MARCH 3, 2023

According to government experts, the Royal ransomware attacks targeted numerous critical infrastructure sectors including, manufacturing, communications, healthcare and public healthcare (HPH), and education. The Royal ransomware can either fully or partially encrypt a file depending on its size and the ‘-ep’ parameter.

Ransomware 94

Ransomware Healthcare Antivirus Encryption 94

Security Affairs

MAY 15, 2023

The researchers noticed that the path contains the same mutex name as the Babuk ransomware, a circumstance that suggests the malware borrows Babuk’s leaked source code. Compromised organizations operate in different business verticals, including manufacturing, wealth management, insurance providers, and pharmaceuticals.

Ransomware 90

Ransomware Encryption Cybercrime Insurance 90

Security Affairs

NOVEMBER 16, 2022

The backdoor unpacking process is composed of several stages, the second-stage malicious code is stored inside the malware PE file. The second stage payload is a heavily obfuscated shellcode, the APT group used an encryption method different for each sample. SecurityAffairs – hacking, APT). ” continues the analysis.

Telecommunications 129

Telecommunications Manufacturing Malware Education 129

Security Affairs

JANUARY 29, 2023

Copycat Criminals mimicking Lockbit gang in northern Europe Sandworm APT targets Ukraine with new SwiftSlicer wiper ISC fixed high-severity flaws in DNS software suite BIND Patch management is crucial to protect Exchange servers, Microsoft warns Hacker accused of having stolen personal data of all Austrians and more CVE-2023-23560 flaw exposes 100 (..)

DNS 91

DNS Data breaches Hacking Backups 91

Security Affairs

MARCH 26, 2021

Experts discovered that threat actors targeted a large US transportation & logistics organization, a large US consumer products organization, and a global manufacturing organization. The ransom note left by the malware points to Tor pages that are uniquely generated for each victim. . SecurityAffairs – hacking, Hades ransomware).

Ransomware 143

Ransomware Encryption Malware VPN 143

Security Affairs

JUNE 6, 2024

The FBI is inviting victims of LockBit ransomware to come forward because it has obtained over 7,000 LockBit decryption keys that could allow them to recover their encrypted data for free. The NCA reached out to victims based in the UK providing support to help them recover encrypted data. on January 5, 2020.

Energy and Utilities 112

Energy and Utilities Ransomware Encryption Financial Services 112

Security Affairs

MAY 16, 2023

French electronics manufacturer Lacroix Group shut down three plants after a cyber attack, experts believe it was the victim of a ransomware attack. The French electronics manufacturer Lacroix Group shut down three facilities in France, Germany, and Tunisia in response to a cyber attack. ” reported Yahoo Finance.

Manufacturing 90

Manufacturing Ransomware Cyber Attacks Backups 90

Security Affairs

JANUARY 28, 2022

Taiwanese electronics manufacturing company Delta Electronics was hit by the Conti ransomware that took place this week. The company did not reveal details about the attack or the malware family that infected its systems. Of the 65,000 computers in Delta’s network, about 1,500 servers and about 12,000 computers are encrypted.”

Computers and Electronics 95

Computers and Electronics Ransomware Manufacturing Malware 95

Thales Cloud Protection & Licensing

FEBRUARY 16, 2021

Mirai, Jeep Hack, etc.) Driven by the need to secure themselves against increasing threats, organizations (both manufacturers and IoT consumers) realize that they need better built-in security. IoT manufacturers may elect either using an on-premises HSM or (even better) using a managed, on-demand cloud-based HSM service.

IoT 96

IoT Manufacturing Energy and Utilities Data collection 96

Security Affairs

AUGUST 29, 2021

The name of the sportswear manufacturer Puma appeared on the dark web marketplace of stolen data Marketo, threat actors claim to have stolen 1 GB of data from the company. SecurityAffairs – hacking, FIN8). The ad on Marketo claims to have about 1GB of data stolen from the company that are now auctioned to the highest bidder. .

Manufacturing 125

Manufacturing Data breaches Encryption Hacking 125

Notice Bored

MAY 17, 2022

In its infinite wisdom, Microsoft designed data encryption into the Sculpt wireless keyboard set to protect against wireless eavesdropping and other attacks. The solution was to open up both keyboards and swap the coded transmitter from the old to the new keyboard - a simple 20 minute hardware hack. I could try brute force attacks.

Hacking 66

Hacking Wireless Encryption Manufacturing 66

Security Affairs

SEPTEMBER 20, 2020

manufacturer of high-performance fiber lasers for diverse applications and industries was hit by a ransomware attack that disrupted its operations. IPG Photonics manufactures high-performance fiber lasers, amplifiers, and laser systems for diverse applications and industries. SecurityAffairs – hacking, IPG Photonics).

Ransomware 120

Ransomware Manufacturing Advertising Encryption 120

CyberSecurity Insiders

AUGUST 23, 2021

And news is out that the said file encrypting malware has already targeted some well-known companies belonging to manufacturing, finance engineering and tourism sector operating in US and Asia on a specific note.

Ransomware 105

Ransomware Manufacturing Media Hacking 105

CyberSecurity Insiders

APRIL 26, 2022

However, the company that owns Sprite did not confirm the incident as a file-encrypting malware attack as its staff was still investigating the cyber incident. And Stormous gang might have received orders from Kremlin to digitally hack Coke as retaliation for its announcement of trade withdrawal. .

Ransomware 80

Ransomware Manufacturing Hacking Cyber Attacks 80

Security Affairs

SEPTEMBER 20, 2020

SecurityAffairs – hacking, newsletter). Every week the best security articles from Security Affairs free for you in your email box. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

DDOS 97

DDOS Ransomware Data breaches Advertising 97

Security Affairs

FEBRUARY 28, 2024

“These operations have targeted various industries, including Aerospace & Defense, Education, Energy & Utilities, Governments, Hospitality, Manufacturing, Oil & Gas, Retail, Technology, and Transportation. Communication to and from the EdgeRouters involved encryption using a randomly generated 16-character AES key.

Energy and Utilities 103

Energy and Utilities Government Firewall Malware 103

Security Affairs

NOVEMBER 15, 2019

A new threat actor tracked as TA2101 is conducting malware campaigns using email to impersonate government agencies in the United States, Germany, and Italy. SecurityAffairs – TA2101, hacking). The post New TA2101 threat actor poses as government agencies to distribute malware appeared first on Security Affairs.

Government 79

Government Malware Social Engineering Banking 79