article thumbnail

China-linked hackers target government agencies by exploiting flaws in Citrix, Pulse, and F5 systems, and MS Exchange

Security Affairs

Department of Justice indictment, MSS-affiliated actors have targeted various industries across the United States and other countries—including high-tech manufacturing; medical device, civil, and industrial engineering; business, educational, and gaming software; solar energy; pharmaceuticals; and defense—in a campaign that lasted over ten years.[

article thumbnail

Reassessing cyberwarfare. Lessons learned in 2022

SecureList

On the very first day of the conflict (February 24, 2022), a massive wave of indiscriminate pseudo-ransomware and wiper attacks hit Ukrainian entities. The volume of wiper and ransomware attacks quickly subsided after the initial wave, but a limited number of notable incidents were still reported.

DDOS 138
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

IT threat evolution Q3 2021

SecureList

We have seen targeted attacks exploiting the vulnerability to target companies in research and development, the energy sector and other major industries, banking, the medical technology sector, as well as telecoms and IT. That library was then loaded by the legitimate MsMpEng.exe by utilizing the DLL side-loading technique.

Malware 101
article thumbnail

The Hacker Mind Podcast: Reverse Engineering Smart Meters

ForAllSecure

For example, in 2009, the Obama administration provided financial incentives to utilities in the United States. And again, smart meters were positioned squarely as making the environment more friendly by knowing how and when energy is being used by individual customers. Environmental effects caused by pollution.

article thumbnail

Preparing for IT/OT convergence: Best practices

CyberSecurity Insiders

Beyond traditional IT operations that utilize servers, routers, PCs and switches, these organizations also rely on OT, such as programmable logic controllers (PLCs), distributed control systems (DCSs) and human machine interfaces (HMIs) to run their physical plants and factories. whether done through the network or locally. Conclusion.

article thumbnail

ICS and OT threat predictions for 2024

SecureList

Ransomware Ransomware will remain the No. In 2023, ransomware attacks consolidated their hold on the top of the ranking of information security threats to industrial enterprises. The ransomware market is heading for a peak, which may be followed by a decline or stagnation. 1 scourge of industrial enterprises in 2024.

article thumbnail

The Hacker Mind Podcast: Hacking Industrial Control Systems

ForAllSecure

This is ransomware, starting with a phishing attack. The updates are done through firmware, firmware updates that we get from the vendor. It's individual pieces of it that fall apart and become a nightmare for that company or that utility or whatever. So this power grid attack is sounding more credible.

Hacking 52