Bleeping Computer

SEPTEMBER 21, 2023

A previously unknown threat actor dubbed 'Sandman' targets telecommunication service providers in the Middle East, Western Europe, and South Asia, using a modular info-stealing malware named 'LuaDream.' [.]

Malware 124

Malware Telecommunications 124

SecureWorld News

OCTOBER 21, 2021

Since 2016, this cybercrime organization has been building customized tools to invade the world's telecommunications sector. According to the blog, at least 13 telecommunications companies have been breached by LightBasin since 2019. LightBasin also uses a long list of malware and other techniques to carry out their devious deeds. "If

Telecommunications 86

Telecommunications Energy and Utilities Passwords Hacking 86

Bleeping Computer

OCTOBER 12, 2023

A newly discovered campaign dubbed "Stayin' Alive" has been targeting government organizations and telecommunication service providers across Asia since 2021, using a wide variety of "disposable" malware to evade detection. [.]

Malware 101

Malware Telecommunications Government 101

Bleeping Computer

MAY 15, 2023

A new APT hacking group dubbed Lancefly uses a custom 'Merdoor' backdoor malware to target government, aviation, and telecommunication organizations in South and Southeast Asia. [.]

Malware 113

Malware Telecommunications Government Hacking 113

Bleeping Computer

DECEMBER 6, 2023

Security researchers discovered a remote access trojan they named Krasue that is targeting Linux systems of telecommunications companies and managed to remain undetected since 2021. [.]

Telecommunications 112

Telecommunications Malware 112

CSO Magazine

APRIL 27, 2023

Chinese state-sponsored threat actor Alloy Taurus has introduced a new variant of PingPull malware , designed to target Linux systems, Palo Alto Networks said in its research. The group is known to target telecommunication companies but in recent years has also been observed targeting financial and government institutions.

Malware 105

Malware Telecommunications Government 105

Security Boulevard

DECEMBER 20, 2023

This remote access trojan has been silently infiltrating Linux systems, primarily targeting telecommunications companies since 2021. Krasue RAT Attack Details […] The post Krasue RAT Malware: A New Threat to Linux Systems appeared first on TuxCare.

Malware 57

Malware Telecommunications Cybersecurity Cyber threats 57

Trend Micro

DECEMBER 19, 2022

We found samples of the Raspberry Robin malware spreading in telecommunications and government office systems beginning September. The main payload itself is packed with more than 10 layers for obfuscation and is capable of delivering a fake payload once it detects sandboxing and security analytics tools.

Government 84

Government Malware Telecommunications 84

Trend Micro

JANUARY 24, 2022

Trend Micro confirmed a new mobile malware infection chain targeting both Android and iPhone devices. The malware might have been designed to steal credentials associated with membership websites of major Japanese telecommunication services.

Malware 95

Malware Telecommunications Mobile 95

Penetration Testing

FEBRUARY 29, 2024

A new Linux-based malware, christened GTPDOOR, has emerged with a cunning strategy to infiltrate the heart of telecommunication networks – the GRX (GPRS Roaming Exchange).

Penetration Testing 108

Penetration Testing Telecommunications Malware 108

Security Affairs

SEPTEMBER 21, 2022

Russia-linked APT group Sandworm has been observed impersonating telecommunication providers to target Ukrainian entities with malware. Russia-linked cyberespionage group Sandworm has been observed impersonating telecommunication providers to target Ukrainian entities with malware. net” and “ett[.]hopto[.]org”

Malware 78

Malware Telecommunications DNS Hacking 78

Bleeping Computer

SEPTEMBER 19, 2022

The Russian state-sponsored hacking group known as Sandworm has been observed masquerading as telecommunication providers to target Ukrainian entities with malware. [.].

Malware 86

Malware Telecommunications Hacking 86

Bleeping Computer

SEPTEMBER 28, 2023

A Chinese cyber-espionage hacking group tracked as Budworm has been observed targeting a telecommunication firm in the Middle East and a government entity in Asia using a new variant of its custom 'SysUpdate' backdoor. [.]

Telecommunications 104

Telecommunications Malware Government Hacking 104

Security Affairs

DECEMBER 24, 2022

The Raspberry Robin worm attacks aimed at telecommunications and government office systems across Latin America, Australia, and Europe. Researchers from Trend Micro have uncovered a Raspberry Robin worm campaign targeting telecommunications and government office systems across Latin America, Australia, and Europe. exe, and rundll32.exe.

Government 88

Government Malware Telecommunications Cybercrime 88

Heimadal Security

APRIL 27, 2023

Across Southeast Asia, Europe and Africa, a new Linux variant of the PingPull malware used by Chinese APT group Alloy Taurus (Gallium) has been reported as an active threat to telecommunications, finance and government organizations.

Telecommunications 61

Telecommunications Malware Government Cybersecurity 61

CyberSecurity Insiders

SEPTEMBER 21, 2022

Coming to the third news related to malware, Vmware and Microsoft have jointly issued a warning against Chromeloader Malware that has evolved into a major threat in recent times. Hackers are seen using this malware to exploit browsers leading to advertising and affiliate frauds. Last is the news about the Russian-Ukraine war.

Malware 121

Malware Telecommunications Insurance Ransomware 121

The Hacker News

APRIL 13, 2022

The Chinese-backed Hafnium hacking group has been linked to a piece of a new malware that's used to maintain persistence on compromised Windows environments.

Malware 105

Malware Telecommunications Internet Internet 105

The Hacker News

APRIL 9, 2021

APKPure, one of the largest alternative app stores outside of the Google Play Store, was infected with malware this week, allowing threat actors to distribute Trojans to Android devices. In an incident that's similar to that of German telecommunications equipment manufacturer Gigaset, the APKPure client version 3.17.18

Malware 122

Malware Telecommunications Manufacturing 122

Bleeping Computer

OCTOBER 6, 2021

Threat researchers investigating malware used to target companies in the aerospace and telecommunications sectors discovered a new threat actor that has been running cyber espionage campaigns since at least 2018. [.].

Malware 95

Malware Telecommunications 95

CyberSecurity Insiders

JUNE 28, 2022

The anti-malware firm is linking the attackers to a Chinese group of Threat Actors and confirmed that the threat actors have interests in targeting SMBs from Asian countries as often such companies do not have enough resources to tackle such attacks.

Malware 111

Malware Telecommunications Surveillance Cyber threats 111

Security Affairs

OCTOBER 31, 2019

China-linked APT41 group is targeting telecommunications companies with a new piece of malware used to spy on text messages of highly targeted individuals. The experts found the MessageTap backdoor installed on a Linux-based Short Message Service Center (SMSC) server belonging to an unnamed telecommunications company.

Telecommunications 49

Telecommunications Malware Mobile Advertising 49

Heimadal Security

OCTOBER 7, 2021

Apparently, the malware was created in order to help with “highly targeted cyber espionage operations.” When looking closely at the malware used to target companies in the aerospace and telecommunications sectors, a few […].

Malware 76

Malware Telecommunications Cybersecurity 76

Security Affairs

APRIL 26, 2023

The Chinese APT is known to be focused on telecommunications companies operating across Asia, Europe and Africa. This circumstance suggests that the threat actor is reusing existing source code to create new malware. ” reads the analysis published by Unit 42. org over port 8443 for C2. While investigating the yrhsywu2009.zapto[.]org

Malware 93

Malware Telecommunications Government VPN 93

Security Affairs

JANUARY 31, 2024

Researchers from cybersecurity firm Synacktiv published a technical analysis of a Rust malware, named KrustyLoader, that was delivered by threat actors exploiting the above vulnerabilities. The flaw CVE-2023-46805 (CVSS score 8.2) is an Authentication Bypass issue that resides in the web component of Ivanti ICS 9.x,

VPN 83

VPN Malware Authentication Small Business 83

Security Affairs

AUGUST 25, 2022

Russia-linked APT group Nobelium is behind a new sophisticated post-exploitation malware tracked by Microsoft as MagicWeb. Microsoft security researchers discovered a post-compromise malware, tracked as MagicWeb, which is used by the Russia-linked NOBELIUM APT group to maintain persistent access to compromised environments.

Malware 113

Malware Authentication Telecommunications Government 113

Security Affairs

SEPTEMBER 19, 2023

China-linked threat actor Earth Lusca used a new Linux malware dubbed SprySOCKS in a recent cyber espionage campaign. The experts noticed that the threat actors have rewritten many functions of the malware to run on Linux systems. Additional analysis led to the discovery of a previously unknown Linux backdoor tracked as SprySOCKS.

Malware 95

Malware Encryption Telecommunications Authentication 95

The Hacker News

JULY 18, 2023

Targets included a Pakistan government entity, a public sector bank, and a telecommunications provider, according to Trend Micro. An unidentified threat actor compromised an application used by multiple entities in Pakistan to deliver ShadowPad, a successor to the PlugX backdoor that's commonly associated with Chinese hacking crews.

Telecommunications 82

Telecommunications Malware Banking Government 82

Security Affairs

MAY 3, 2022

A China-linked APT group, tracked as Moshen Dragon, has been observed targeting the telecommunication sector in Central Asia with ShadowPad and PlugX malware, SentinelOne warns. Both PlugX and ShadowPad malware are very common among China-linked cyberespionage groups. ” concludes the report.”Once Pierluigi Paganini.

Software 96

Software Malware Telecommunications Antivirus 96

Security Affairs

DECEMBER 24, 2022

The Raspberry Robin worm attacks aimed at telecommunications and government office systems across Latin America, Australia, and Europe. Researchers from Trend Micro have uncovered a Raspberry Robin worm campaign targeting telecommunications and government office systems across Latin America, Australia, and Europe. exe, and rundll32.exe.

Government 52

Government Malware Telecommunications Cybercrime 52

Bleeping Computer

MARCH 16, 2023

An advanced hacking group named 'Winter Vivern' targets European government organizations and telecommunication service providers to conduct espionage. [.]

Antivirus 82

Antivirus Telecommunications Malware Government 82

Bleeping Computer

OCTOBER 18, 2021

A previously unknown state-sponsored actor is deploying a novel toolset in attacks targeting telecommunication providers and IT firms in South Asia. [.].

Telecommunications 105

Telecommunications Malware 105

Bleeping Computer

NOVEMBER 9, 2021

The Iranian state-supported APT known as 'Lyceum' (Hexane, Spilrin) targeted ISPs and telecommunication service providers in the Middle East and Africa between July and October 2021. [.].

Telecommunications 114

Telecommunications Malware 114

Security Affairs

JUNE 3, 2022

An “extremely sophisticated” China-linked APT tracked as LuoYu was delivering malware called WinDealer via man-on-the-side attacks. The activity of the group was first documented by TeamT5 researchers that also reported the use of three malware families: SpyDealer, Demsty and WinDealer. To nominate, please visit:?.

Malware 125

Malware Telecommunications Internet Internet 125

The Hacker News

SEPTEMBER 28, 2023

Government and telecom entities have been subjected to a new wave of attacks by a China-linked threat actor tracked as Budworm using an updated malware toolset.

Government 94

Government Telecommunications Malware 94

Security Affairs

OCTOBER 20, 2021

A China-linked hacking group, tracked as LightBasin (aka UNC1945 ), hacked mobile telephone networks around the globe and used specialized tools to access calling records and text messages from telecommunications companies. CrowdStrike researchers reported that at least 13 telecommunication companies were compromised by since 2019.

Telecommunications 106

Telecommunications Mobile Hacking Architecture 106

Security Affairs

NOVEMBER 25, 2020

Researchers spotted a new mobile malware dubbed WAPDropper that subscribes users to legitimate premium-rate services. Security researchers from Check Point have spotted a new malware family dubbed WAPDropper that targets mobile phone users to subscribe them to legitimate premium-rate services. ” continues the analysis.

Malware 84

Malware Telecommunications Mobile Marketing 84

Krebs on Security

OCTOBER 31, 2023

The top-level domain for the United States — US — is home to thousands of newly-registered domains tied to a malicious link shortening service that facilitates malware and phishing scams, new research suggests. The findings come close on the heels of a report that identified.US domains registered daily.US Department of Commerce.

Phishing 252

Phishing Telecommunications Malware Scams 252