article thumbnail

China-linked APT BlackTech was spotted hiding in Cisco router firmware

Security Affairs

US and Japanese authorities warn that a China-linked APT BlackTech planted backdoor in Cisco router firmware to hack the businesses in both countries. The group targeted organizations in multiple sectors, including defense, government, electronics, telecommunication, technology, media, telecommunication industries.

Firmware 121
article thumbnail

MI5 chief warns of Chinese cyber espionage reached an unprecedented scale

Security Affairs

.” Recently, US and Japanese intelligence, law enforcement and cybersecurity agencies warned of a China-linked APT, tracked as BlackTech (aka Palmerworm, Temp.Overboard, Circuit Panda, and Radio Panda), that planted backdoor in Cisco router firmware to access multinational companies’ networks.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Lapsus$: The New Name in Ransomware Gangs

Security Boulevard

Other targets include Brazil’s Ministry of Health (MoH) and Brazilian telecommunications operator Claro. Since they appear to be succeeding, Lapsus$ announced that they are looking to recruit insiders employed at telecommunications, software and gaming companies, among other technology businesses. But first things first.

article thumbnail

Vulnerability Recap 6/10/24 – RCE Attacks in Major Platforms

eSecurity Planet

The fix: Zyxel issued firmware patches 5.21(AAZF.17)C0 June 5, 2024 DarkGate MaaS Switches to AutoHotkey for Stealthier Malware Delivery Type of vulnerability: Malware delivery mechanism. This update, seen from March 2024, improves the malware’s evasion techniques, making detection more difficult.

Malware 79
article thumbnail

Maze ransomware operators claim to have breached LG Electronics

Security Affairs

Just after the WorldNet Telecommunications, the LG electronics fall as a victim of the Maze ransomware operators.” “One of the screenshots seems to consist of LG Electronics official firmware or software update releases that assist their hardware products to work more efficiently.” ” continues Cyble.

article thumbnail

For nearly a year, Brazilian users have been targeted with router attacks

Security Affairs

Malware then guesses routers’ passwords , which new research from Avast shows are often weak. million times in February alone, the experts observed at least three campaigns spreading the malware. ” reads a blog post published by Avast. ” states the analysis published by Avast. concludes Avast.

DNS 81
article thumbnail

Sunburst: connecting the dots in the DNS requests

SecureList

For instance, before making the first internet connection to its C2s, the Sunburst malware lies dormant for a long period, of up to two weeks, which prevents an easy detection of this behavior in sandboxes. In the initial phases, the Sunburst malware talks to the C&C server by sending encoded DNS requests. Low-level details.

DNS 75