Security Boulevard

MAY 3, 2021

roundup of UK focused Cyber and Information Security News, Blog Posts, Reports and general Threat Intelligence from the previous calendar month, April 2021. The UK Security Service MI5 said 10,000 staff from every UK government department and from important UK industries have been lured by fake LinkedIn profiles.

Ransomware 124

Ransomware Passwords Scams Government 124

Security Affairs

OCTOBER 13, 2019

UK NCSC agency warns of APTs exploiting Enterprise VPN vulnerabilities. US will help Baltic states to secure baltic energy grid. Developer hacked back Muhstik ransomware crew and released keys. Multiple APT groups are exploiting VPN vulnerabilities, NSA warns. SAP October 2019 Security Patch Day fixes 2 critical flaws.

VPN 53

VPN Spyware Data breaches Advertising 53

Security Affairs

NOVEMBER 17, 2019

The best news of the week with Security Affairs. Boardriders and its subsidiarities QuikSilver and Billabong infected with ransomware. Major ASP.NET hosting provider SmarterASP hit by ransomware attack. Buran ransomware-as-a-service continues to improve. Mexican state-owned oil company Pemex hit by ransomware.

DDOS 50

DDOS Spyware Advertising Ransomware 50

Malwarebytes

JUNE 7, 2021

Malicious hackers might use tools like computer viruses, spyware, ransomware, Trojan horses, and more to further their goals. A degree in computer science or information security and a background in military intelligence can be useful but isn’t necessary.

Social Engineering 93

Social Engineering Hacking Spyware Antivirus 93

Security Affairs

OCTOBER 27, 2019

German firm Pilz still down a week after getting infected with ransomware. NordVPN, TorGuard, and VikingVPN VPN providers disclose security breaches. Swedish Government grants police the use of spyware against violent crime suspects. Ransomware attack hit the City of Johannesburg municipality.

Spyware 41

Spyware Advertising Hacking DDOS 41

Security Affairs

FEBRUARY 11, 2024

Gov imposes visa restrictions on individuals misusing Commercial Spyware HPE is investigating claims of a new security breach Experts warn of a surge of attacks targeting Ivanti SSRF flaw How to hack the Airbus NAVBLUE Flysmart+ Manager Crooks stole $25.5

Spyware 90

Spyware Surveillance Identity Theft DDOS 90

SecureList

NOVEMBER 23, 2021

For instance, we see a new trend emerging in the criminal ecosystem of spyware-based authentication data theft, with each individual attack being directed at a very small number of targets (from single digits to several dozen). Extortion and ransomwaring of those able and willing to pay up. Actions of various attacker categories.

Spyware 101

Spyware Phishing Cybercrime Energy and Utilities 101

Security Affairs

SEPTEMBER 10, 2023

US CISA added critical Apache RocketMQ flaw to its Known Exploited Vulnerabilities catalog Ragnar Locker gang leaks data stolen from the Israel’s Mayanei Hayeshua hospital North Korea-linked threat actors target cybersecurity experts with a zero-day Zero-day in Cisco ASA and FTD is actively exploited in ransomware attacks Nation-state actors (..)

DDOS 103

DDOS VPN Data breaches Cybercrime 103

Security Affairs

DECEMBER 5, 2021

Hundreds of vulnerabilities in common Wi-Fi routers affect millions of users German BSI agency warns of ransomware attacks over Christmas holidays Cuba ransomware gang hacked 49 US critical infrastructure organizations CISA warns of vulnerabilities in Hitachi Energy products NSO Group spyware used to compromise iPhones of 9 US State Dept officials (..)

Spyware 83

Spyware Ransomware Hacking VPN 83

Security Affairs

MAY 25, 2021

An Iran-linked threat actor tracked as Agrius employed data-wipers disguised as ransomware to destroy targeted IT infrastructure. Researchers from cyber-security firm SentinelOne discovered a new Iran-linked threat actor, tracked as Agrius, which relied on data-wiping malware disguised as ransomware to destroy the targeted systems.

Ransomware 104

Ransomware Malware VPN Hacking 104

Security Boulevard

JANUARY 25, 2022

Dancho Danchev’s “Astalavista Security Group – Investment Proposal” Presentation – A Photos Compilation. Dancho Danchev’s “Building and Implementing a Successful Information Security Policy” White Paper – [PDF]. Exposing a Currently Active Free Rogue VPN Domains Portfolio Courtesy of the NSA – WhoisXML API Analysis.

Cybercrime 96

Cybercrime Hacking Scams Ransomware 96

Security Affairs

MARCH 27, 2023

Lower.exe, a sample of “GCleaner” spyware, historically, this piece of malware was initially faking CCleaner to drop additional malware ( link ). Sqlcmd.exe, an interesting information stealer and dropper leveraging custom ECC cryptography to secure its communication (details below) KiffAppE2.exe,

Malware 82

Malware Social Engineering Encryption Marketing 82