CSO Magazine

MAY 13, 2022

The alert is the result of a collaborative effort among the United Kingdom (NCSC-UK), Australia (ACSC), Canada (CCCS), New Zealand (NCSC-NZ), and the United States (CISA, NSA, FBI).

Cybersecurity 101

Cybersecurity 101

Security Affairs

OCTOBER 2, 2021

Researchers at New Zealand’s computer emergency response team (CERT NZ) spotted the fake security warnings used to deceive the Android users: “Your device is infected with the FluBot® malware. link] — CERT NZ (@CERTNZ) September 30, 2021.

Banking 126

Banking Malware Spyware Passwords 126

Security Affairs

DECEMBER 22, 2021

The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), National Security Agency (NSA), Australian Cyber Security Centre (ACSC), Canadian Centre for Cyber Security (CCCS), the Computer Emergency Response Team New Zealand (CERT NZ), the New Zealand National Cyber Security Centre (NZ NCSC), and the United (..)

DNS 114

DNS Firewall Cybersecurity Cyber threats 114

Security Affairs

JUNE 15, 2023

& international partners, we published a joint advisory on LockBit Ransomware: [link] The advisory includes the common tools, exploitations, & TTPs used by LockBit affiliates.

Ransomware 95

Ransomware Cybersecurity Education Government 95

SecureWorld News

JUNE 22, 2020

CISA can thank another acronym, The New Zealand Computer Emergency Response Team (CERT NZ), for this alert. CERT NZ recently uncovered a ransomware campaign aimed directly toward remote work. And it has everything to do with remote work. Ransomware campaign targets remote access. Ransomware alert mitigation practices.

Ransomware 52

Ransomware Cybersecurity eCommerce Backups 52

CSO Magazine

APRIL 28, 2022

Federal Bureau of Investigation (FBI), Australian Cyber Security Centre (ACSC), Canadian Centre for Cyber Security (CCCS), New Zealand National Cyber Security Centre (NZ NCSC), and United Kingdom’s National Cyber Security Centre (NCSC-UK). National Security Agency (NSA), U.S.

Software 74

Software Cybersecurity 74

CyberSecurity Insiders

NOVEMBER 18, 2021

New Zealand’s Computer Emergency Response Team (CERT-NZ) has also issued a warning that Flubot Malware Android is found spreading through fake android security updates and has mostly targeted over 60,000 phones operating in Spain, France, and Japan.

Malware 129

Malware Banking Cybersecurity 129

Security Affairs

JUNE 22, 2020

New Zealand police had frozen NZ$140 million (US$90 million) in assets linked to a Russian cyber criminal. New Zealand police announced that they had frozen NZ$140 million (US$90 million) in assets linked to the Russian nation Alexander Vinnik.

Cybercrime 122

Cybercrime Advertising Cryptocurrency Hacking 122

Security Affairs

APRIL 28, 2022

This advisory also includes other frequently exploited vulnerabilities. “Globally, in 2021, malicious cyber actors targeted internet-facing systems, such as email servers and virtual private network (VPN) servers, with exploits of newly disclosed vulnerabilities.

Software 144

Software VPN Cybersecurity Internet 144

SecureWorld News

JUNE 15, 2023

Rob Pope of New Zealand's Computer Emergency Response Team (CERT-NZ) said that businesses in New Zealand need to be aware of this and take action: "Ransomware is one the most devastating things that can happen to an organisation and we need to ensure that our countries are resilient to these attacks."

Ransomware 66

Ransomware Cybersecurity Cyber threats Government 66

Security Affairs

MARCH 25, 2022

The group shared two links to the cloud storage and file hosting service Mega NZ: [link] [link]. JUST IN: The Central Bank of Russian Federation leak (28 GB) has been published by #Anonymous hackers ( @Thblckrbbtworld ). Ukraine #OpRussia [link] — Anonymous TV (@YourAnonTV) March 25, 2022.

Banking 129

Banking Government Hacking Authentication 129

Security Affairs

FEBRUARY 28, 2021

firm Stakenet, was alerted that about NZ$62,000 (US$45,000) in the XSN cryptocurrency had been transferred out of its cold wallet on Feb. Currently in the exchange is in liquidation, but the bad news is not ended here, because it was hacked again. According to the local news site Stuff , a creditor, U.S.

Cryptocurrency 110

Cryptocurrency Hacking Cyber Attacks Accountability 110

Malwarebytes

JUNE 14, 2023

The US Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Multi-State Information Sharing and Analysis Center ( MS-ISAC ), and the cybersecurity authorities of Australia , Canada , United Kingdom , Germany , France , and New Zealand ( CERT NZ , NCSC-NZ ) have all published a joint Cybersecurity Advisory (..)

Ransomware 70

Ransomware Backups Internet Internet 70

Security Affairs

SEPTEMBER 5, 2021

“New Zealand’s third largest internet provider Vocus NZ said on Friday its response to a cyberattack temporary triggered a widespread internet outage.” .” The attack caused a widespread outage that had a significant impacted on the customers, most of which are working from home due to COVID-19 restrictions.

DDOS 109

DDOS Internet Internet Telecommunications 109

Krebs on Security

SEPTEMBER 1, 2023

” Marks said there are very few phishing domains ever registered in other ccTLDs that also restrict registrations to their citizens, such as.HU (Hungary),NZ (New Zealand), and.FI (Finland), where a connection to the country, a proof of identity, or evidence of incorporation are required. . “In my view, this situation with.US

Phishing 219

Phishing Telecommunications Government DNS 219

Notice Bored

APRIL 23, 2021

Here in NZ at the moment, we are being treated to a public safety campaign using the analogy of meerkats, encouraging Kiwis to be constantly on the alert for signs of danger, thinking ahead and hopefully avoiding accidents rather than taking silly chances.

Security Awareness 60

Security Awareness InfoSec Risk 60

Notice Bored

FEBRUARY 28, 2022

At 3:00am, NZ time. Along the way, I regret inadvertently upsetting the team of JTC 1/SC 27 editors working on ISO/IEC 27028 by sharing an incomplete draft with them in the hope it might become the basis of the initial draft of the new standard. During a Zoom meeting. I wasn't at my best.

Information Security 82

Information Security Government 82

Security Affairs

OCTOBER 19, 2020

In June, New Zealand police had frozen NZ$140 million (US$90 million) in assets linked to a Russian cyber criminal. . “Prosecutors identified 20 businesses in six cities across France among the victims and following the money trail through various bank accounts — as much as $8 million — identified one as belonging to Vinnik.”

Advertising 121

Advertising Cybercrime Hacking Cryptocurrency 121

Malwarebytes

JULY 23, 2021

As to how these were stolen, the threat actors “copied, compressed and staged unstructured data obtained from file shares found on three CNA virtual servers; and used MEGAsync, a legitimate tool, to copy some of the unstructured data (“Exported Data”) from the CNA environment directly into the threat actor’s cloud-based account (..)

Ransomware 90

Ransomware Unstructured Data Accountability Consumer Protection 90

Security Affairs

MARCH 26, 2021

nz cloud infrastructure, leveraging the MEGAsync utility.” . “Prior to deploying Hades ransomware, the unknown threat group has employed the 7zip utility to archive data that was then staged and exfiltrated to an attacker-controlled server hosted in Mega[.]nz ” concludes the report.

Ransomware 143

Ransomware Encryption Malware VPN 143

Security Affairs

SEPTEMBER 8, 2020

“CERT NZ is aware of increased Emotet activity affecting New Zealand organisations.” “Special attention should be paid to this because Emotet is now used to deploy other malicious code that may have a strong impact on the activity of victims.”. ” reads the alert published by the New Zealand CERT.

Malware 115

Malware Advertising Banking Hacking 115

Malwarebytes

JUNE 24, 2022

Cybersecurity authorities from the United States, New Zealand, and the United Kingdom have released a joint Cybersecurity Information Sheet (CIS) on PowerShell that attempts to answer that question. ” PowerShell.

Cybersecurity 138

Cybersecurity Malware Firewall System Administration 138

Security Affairs

DECEMBER 8, 2020

In June, New Zealand police had frozen NZ$140 million (US$90 million) in assets linked to a Russian cyber criminal. French prosecutors revealed that among the 188 victims of the Vinnik’s attacks, there were local authorities, businesses, and individuals across the world.

Cryptocurrency 101

Cryptocurrency Hacking Ransomware Cybercrime 101

Notice Bored

MAY 10, 2022

The disclosure prompted the acting NZ Privacy Commissioner to opine that companies 'need a review policy': "Acting Privacy Commisioner Liz Macpherson told Midday Report that if data was not needed it should be deleted.

Information Security 72

Information Security InfoSec Hacking 72

eSecurity Planet

APRIL 28, 2022

Cybersecurity and Infrastructure Security Agency (CISA), NSA and FBI joined their “Five Eyes” counterparts in issuing the alert: the Australian Cyber Security Centre (ACSC), the Canadian Centre for Cyber Security (CCCS), the New Zealand National Cyber Security Centre (NZ NCSC), and the UK’s National Cyber Security Centre (NCSC UK).

Cybersecurity 106

Cybersecurity Software Firmware Internet 106

Notice Bored

JULY 4, 2022

To be honest, I'm barely familiar with the laws and regs in the UK/EU and NZ, having lived and worked here for long enough to absorb a little knowledge. That's a tough one to answer for two reasons. Firstly, I'm not a lawyer so I am unqualified and unable to offer legal advice. The best I can offer is layman's perspective.

Risk 72

Risk Accountability InfoSec CISO 72

Krebs on Security

JANUARY 8, 2024

net — advertised itself as a Hong Kong-based electronics firm that was looking for “honest, responsible and motivated people in UK, USA, AU and NZ to be Sales Representatives in your particular region and receive payments from our clients. One such site — sun-technology[.]net

Cybercrime 198

Cybercrime Banking Computers and Electronics DDOS 198

Security Boulevard

FEBRUARY 14, 2022

For example, Spark NZ, one of the top Asia-Pacific telecommunications companies, relies on ForgeRock to give secure access to 3.5 Passwordless authentication enables users to log in to all your systems without ever using a password or entering a username. ForgeRock also reduces risk with Zero Trust security.

Passwords 97

Passwords Retail Digital transformation Risk 97

Security Affairs

OCTOBER 12, 2018

“This report is a collaborative research effort by the cyber security authorities of five nations: Australia, Canada, New Zealand, the United Kingdom, and the United States. [1] 1] [2] [3] [4] [5] ” reads the report published by the experts.

Hacking 109

Hacking Advertising System Administration Engineering 109

Security Affairs

JULY 15, 2020

Declan Ingram, Deputy Director for CERT NZ , which monitors ongoing threats and actively publishes advisories related to cybersecurity incidents, provided some advice for businesses: “An unsecured database can be a huge risk to customers’ privacy and security. In either case, these victims are losing.

Identity Theft 101

Identity Theft Advertising Phishing Risk 101

Security Affairs

SEPTEMBER 6, 2018

nz credentials were not being exfiltrated.” Note that mega. ” Once installed, or after an auto-update, the malicious Mega Chrome extension asked for elevated permissions to steal the sensitive data and send it back a server controlled by the attackers that is located in Ukraine (megaopac[.]host).

Hacking 59

Hacking Cryptocurrency Advertising Accountability 59

Scary Beasts Security

DECEMBER 13, 2016

This is courtesy of the MOV X,SP and MOV SP,X instructions: case 0x9D: // MOV X,SP x = nz = GET_SP(); goto loop; case 0xBD: // MOV SP,X SET_SP( x ); goto loop; Exploitation impediments Ok, let’s proceed with exploitation of the MOV (X)+,A issue. Curiously, the 0xAF opcode appears to be the only place this is missed.

Media 86

Media Manufacturing Banking Government 86

Cisco Security

AUGUST 9, 2022

Payload Delivery. Payload Delivery. Payload Delivery. Payload Delivery. Payload Delivery. Payload Delivery. References. Raspberry Robin gets the worm early – [link]. QNAP worm: who benefits from crime? – [link]. UAC Bypass – Fodhelper – [link].

Accountability 98

Accountability Malware 98

Security Affairs

OCTOBER 2, 2019

NZ Sports Store Apologises Over Porn Played on Big Screens. Hackers broadcasted pornography content on large television screens located above the Asics central store in Auckland for several hours. The New Zealand branch of sports brand Asics apologized for an embarrassing incident that took place over the weekend.

Advertising 60

Advertising Data breaches Cybersecurity 60

Notice Bored

JULY 8, 2020

It appeared the problem wasn't in our "broad"band, as is so often the case down here in rural NZ. But at least we can opt out if we choose). Other websites carried on working, including Blogger (now a Google service), allowing me to start writing this piece. The outage appeared to be limited to Google's search engine.

Engineering 40

Engineering Cyber Attacks Internet Internet 40

Malwarebytes

APRIL 29, 2022

A joint Cybersecurity Advisory, coauthored by cybersecurity authorities of the United States (CISA, NSA, and FBI), Australia (ACSC), Canada (CCCS), New Zealand (NZ NCSC), and the United Kingdom (NCSC-UK) has detailed the top 15 Common Vulnerabilities and Exposures (CVEs) routinely exploited by malicious cyber actors in 2021, as well as other CVEs frequently (..)

Internet 121

Internet Internet Software Authentication 121

Notice Bored

JUNE 23, 2022

Time to get outside and enjoy the first matariki public holiday here in NZ. OK, that's enough for today. Topic discussed. Grey matter stimulated. Axes ground and honed to a razor's edge.

Risk 63

Risk Architecture Accountability InfoSec 63