Security Affairs

MARCH 26, 2021

The Federal Bureau of Investigation (FBI) issued an alert to warn that the Mamba ransomware is abusing the DiskCryptor open source tool to encrypt entire drives. Mamba ransomware is one of the first malware that encrypted hard drives rather than files that was detected in public attacks. ” reads the alert published by the FBI.

Ransomware 144

Ransomware Encryption Passwords Malware 144

Security Affairs

AUGUST 13, 2022

The US Cybersecurity and Infrastructure Security Agency (CISA) and the FBI are warning of Zeppelin ransomware attacks. The US Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have published a joint advisory to warn of Zeppelin ransomware attacks.

Ransomware 85

Ransomware Encryption Firmware Backups 85

Security Affairs

OCTOBER 1, 2023

Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Artificial Intelligence 100

Artificial Intelligence Firmware Data breaches Hacking 100

Security Affairs

MAY 13, 2021

FBI and DHS’s CISA have published a joint alert on DarkSide ransomware activity after the disruptive attack on Colonial Pipeline. FBI and DHS’s CISA have published a joint alert to warn of ransomware attacks conducted by the DarkSide group. The group provides Ransomware-as-a-Service (RaaS) to a network of affiliates.

Ransomware 109

Ransomware Healthcare Phishing Risk 109

Security Affairs

NOVEMBER 10, 2022

Researchers from industrial security firm Claroty disclosed details of a vulnerability affecting ABB Totalflow flow computers and remote controllers. Flow computers are used to calculate volume and flow rates for oil and gas that are critical to electric power manufacturing and distribution. Pierluigi Paganini.

Firmware 129

Firmware Authentication Passwords Manufacturing 129

Security Affairs

AUGUST 2, 2021

The flaw affects the Translogic PTS system manufactured by Swisslog Healthcare, which is installed in about 80% of all major hospitals in North America and thousands of hospitals worldwide. An attacker could also push an insecure firmware upgrade to fully compromise the devices. Swisslog has released Nexus Control Panel version 7.2.5.7

Healthcare 108

Healthcare Firmware Manufacturing Ransomware 108

Security Affairs

DECEMBER 3, 2020

The infamous TrickBot gets a new improvement, authors added a new feature dubbed “ TrickBoot ” designed to exploit well-known vulnerabilities in the UEFI/BIOS firmware and inject malicious code, such as bootkits. TrickBot, one of the most active botnets, in the world, gets a new improvement by adding a UEFI/BIOS Bootkit Feature.

Firmware 90

Firmware Malware Manufacturing Hacking 90

Security Affairs

MARCH 13, 2022

Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here.

Data breaches 84

Data breaches Firmware Hacking Ransomware 84

Security Affairs

AUGUST 20, 2021

Microsoft researchers reported that the Mozi botnet was improved by implementing news capabilities to target network gateways manufactured by Netgear, Huawei, and ZTE. ” state researchers at Microsoft Security Threat Intelligence Center and Section 52 at Azure Defender for IoT. Follow me on Twitter: @securityaffairs and Facebook.

IoT 103

IoT DNS Manufacturing Firmware 103

Security Affairs

AUGUST 20, 2021

This reinforces the need for phishing and spam prevention, as well as awareness techniques that would help stem the tide of ransomware and other potentially devastating attacks.” Of the vulnerabilities with no, or partial, remediation, 61.96% were found in firmware. ” continues the report.

Firmware 105

Firmware Ransomware Manufacturing Software 105

Security Affairs

MAY 8, 2023

The ransomware gang behind the attack on Taiwanese PC maker MSI leaked the company’s private code signing keys on their darkweb leak site. In early April, the ransomware gang Money Message announced to have hacked the Taiwanese multinational IT corporation MSI (Micro-Star International). MSI is headquartered in Taipei, Taiwan.

Data breaches 78

Data breaches Ransomware Firmware Manufacturing 78

Security Affairs

SEPTEMBER 15, 2020

Department of Justice indictment, MSS-affiliated actors have targeted various industries across the United States and other countries—including high-tech manufacturing; medical device, civil, and industrial engineering; business, educational, and gaming software; solar energy; pharmaceuticals; and defense—in a campaign that lasted over ten years.[

Government 72

Government VPN Firmware Energy and Utilities 72

NopSec

DECEMBER 7, 2016

Ransomware Ransomware is a type of virus that impairs the use of a computer or damages the files stored on it unless a ransom is paid. Modern variants of ransomware, called crypto ransomware, entomb the files stored on a hard drive using strong encryption. This was then used to develop their own indigenous designs.

Cyber threats 40

Cyber threats Cyber Attacks Ransomware Manufacturing 40

SecureList

JANUARY 31, 2024

Ransomware Ransomware will remain the No. In 2023, ransomware attacks consolidated their hold on the top of the ranking of information security threats to industrial enterprises. The ransomware market is heading for a peak, which may be followed by a decline or stagnation.

Ransomware 68

Ransomware Energy and Utilities Marketing Backups 68

McAfee

AUGUST 24, 2021

From the 1960’s to 2000 infusion pumps were mostly electromechanical devices with some embedded electronics, but the turn of the century delivered “smarter” devices with better safety mechanisms and the possibility to program them, which slowly opened the door to information security challenges.

Computers and Electronics 145

Computers and Electronics Authentication Software Risk 145

ForAllSecure

APRIL 26, 2022

This is ransomware, starting with a phishing attack. So there’s a need, a definite need, for information security professionals to have access to industrial control systems -- not virtual, but actual hands on systems -- so they can learn. The updates are done through firmware, firmware updates that we get from the vendor.

Hacking 52

Hacking Energy and Utilities Manufacturing Firmware 52

ForAllSecure

MAY 13, 2022

And I remember asking questions, who were the manufacturers? And were these things even vetted by a security community? Hash: So it wasn't to analyze the security of smart meters. There's been a few different ones that have been on eBay for different manufacturers and I bought a few of them. Turns out they weren't.

Engineering 52

Engineering Energy and Utilities Computers and Electronics Firmware 52