Ransomware and Telecommunications - Cyber Security Informer

Black Basta ransomware gang hit BT Group

Security Affairs

DECEMBER 4, 2024

BT Group (formerly British Telecom)’s Conferencing division shut down some of its servers following a Black Basta ransomware attack. British multinational telecommunications holding company BT Group (formerly British Telecom) announced it has shut down some of its servers following a Black Basta ransomware attack.

Ransomware

Ransomware Telecommunications Healthcare Insurance

African multinational telco giant MTN Group disclosed a data breach

Security Affairs

APRIL 26, 2025

African multinational telecommunications company MTN Group disclosed a data breach that exposed subscribers’ personal information. MTN Group Limited is a South African multinational telecommunications company headquartered in Johannesburg. At this time, no ransomware groups have claimed responsibility for an attack.

Data breaches

Data breaches Telecommunications Financial Services Mobile

Scattered Spider Strikes Again: U.K. Attacks Spark U.S. Retailer Alarm

SecureWorld News

MAY 16, 2025

Google's report confirms that UNC3944 continues to "demonstrate persistence and adaptability in targeting organizations, particularly those in the retail, hospitality, and telecommunications sectors." campaigns, especially as the group looks to maximize profit via extortion and ransomware. What makes the U.K.

Retail

Retail Social Engineering Engineering Telecommunications

Russia-linked APT Seashell Blizzard is behind the long running global access operation BadPilot campaign

Security Affairs

FEBRUARY 13, 2025

The group also created the NotPetya ransomware that hit hundreds of companies worldwide in June 2017. On September 2022, the Sandworm group was observed impersonating telecommunication providers to target Ukrainian entities with malware.

Telecommunications

Telecommunications DNS Hacking Passwords

Arkana Security group claims the hack of US telco provider WideOpenWest (WOW!)

Security Affairs

MARCH 27, 2025

Arkana Security, a new ransomware group, claims to have breached the telecommunications provider WideOpenWest (WOW!). The new ransomware group Arkana Security claims to have hacked US telecom provider WOW!, is a US-based telecommunications company that provides broadband internet, cable TV, and phone services.

Hacking

Hacking Telecommunications Data breaches Surveillance

Security Affairs newsletter Round 498 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

NOVEMBER 17, 2024

that reboots locked devices Ymir ransomware, a new stealthy ransomware grow in the wild Amazon discloses employee data breach after May 2023 MOVEit attacks A new fileless variant of Remcos RAT observed in the wild A surge in Pro-Russia cyberattacks after decision to monitor North Korean Troops in Ukraine U.S.

Cryptocurrency

Cryptocurrency Hacking Malware Telecommunications

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

Digital Shadows

MARCH 17, 2025

This bypasses security barriers entirely, giving adversaries a direct path to infiltrate networks, steal data, and deploy ransomware undetected. Notably, 64% of VPN vulnerabilities are directly linked to ransomware campaigns, demonstrating how cybercriminals quickly monetize stolen credentials for profit.

VPN

VPN Authentication Ransomware Risk

A cyber attack briefly disrupted South African Airways operations

Security Affairs

MAY 9, 2025

” In April 2025, the South African multinational telecommunications company MTN Group Limited disclosed a data breach that exposed subscribers personal information, it added that the incident did not impact the core network, billing systems and financial services infrastructure. .” The gang claimed the theft of 2 TB of data.

Cyber Attacks

Cyber Attacks Data breaches Telecommunications Financial Services

Security Affairs newsletter Round 530 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

JUNE 29, 2025

House banned WhatsApp on government devices due to security concerns Russia-linked APT28 use Signal chats to target Ukraine official with malware China-linked APT Salt Typhoon targets Canadian Telecom companies U.S.

Data breaches

Data breaches Ransomware Social Engineering Telecommunications

Canada Releases 2025 National Cyber Security Strategy

SecureWorld News

FEBRUARY 12, 2025

"Technology is an integral part of our lives that has become increasingly linked to critical infrastructure and the services we rely on daily like our hospitals, transit systems, energy suppliers, and telecommunications systems," said a press release from Public Safety Canada.

Cyber threats

Cyber threats Cybercrime Cybersecurity Government

Security Affairs newsletter Round 511 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

FEBRUARY 15, 2025

custody in exchange for Marc Fogel North Korea-linked APT Emerald Sleet is using a new tactic U.S.

Spyware

Spyware Firewall Artificial Intelligence Malware

Security Affairs newsletter Round 500 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

DECEMBER 1, 2024

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cybercrime

Cybercrime Firewall Phishing Social Engineering

Security Affairs newsletter Round 522 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

MAY 4, 2025

Rhysida Ransomware gang claims the hack of the Government of Peru DragonForce group claims the theft of data after Co-op cyberattack U.S. Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cybercrime

Cybercrime Cyber Attacks Phishing Malware

Security Affairs newsletter Round 495 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

OCTOBER 27, 2024

CISA adds ScienceLogic SL1 flaw to its Known Exploited Vulnerabilities catalog VMware failed to fully address vCenter Server RCE flaw CVE-2024-38812 Cisco states that data published on cybercrime forum was taken from public-facing DevHub environment Internet Archive was breached twice in a month Unknown threat actors exploit Roundcube Webmail flaw (..)

Data breaches

Data breaches Healthcare Cybercrime Hacking

Analysis of Cyber Anarchy Squad attacks targeting Russian and Belarusian organizations

SecureList

DECEMBER 18, 2024

As we’ve noted before in similar hacktivist attacks, the threat actors’ arsenal consists of leaked LockBit ransomware builders for Windows systems and Babuk for Linux systems. One of the group’s ransomware samples is named 3119.exe. In the majority of C.A.S This number often crops up in C.A.S Victims C.A.S

Encryption

Encryption Passwords Accountability Ransomware

Securing Critical Infrastructure Against Cyberattacks

SecureWorld News

JULY 1, 2025

officials revealed that the Chinese group Volt Typhoon had maintained undetected access to power grids, ports, and telecommunications providers for as long as five years—long enough to map every breaker, valve, and switch they might someday wish to sabotage. In February, U.S.

Social Engineering

Social Engineering Engineering Phishing Healthcare

The Seabed: A New Digital Frontier to Protect from Threats

SecureWorld News

JULY 22, 2025

Disrupting a single subsea telecommunications cable can incur "more than 24 million euros per day" in costs, while damages to oil and gas pipelines can easily reach "tens of billions of euros" for repairs alone. The stakes are astronomically high. GPS spoofing and jamming are also significant concerns for navigation systems.

Surveillance

Surveillance Artificial Intelligence Technology Digital transformation

Denmark warns of increased state-sponsored campaigns targeting the European telcos

Security Affairs

MARCH 16, 2025

The Danish Social Security Agency published a new threat assessment for the cyber threat to the telecommunications sector that highlights the risks for the telecom companies in Europe. This is because the extent of cyber espionage against the telecommunications sector in Europe has likely increased.” telecommunication providers.

Telecommunications

Telecommunications Cyber threats Hacking Mobile

Frequently Asked Questions About Iranian Cyber Operations

Security Boulevard

JUNE 27, 2025

Threat actor Activity HomeLand Justice Carried out destructive attacks against the Government of Albania in 2022, utilizing ransomware and disk wiping malware. Pioneer Kitten Fox Kitten UNC757 Parisite RUBIDIUM Lemon Sandstorm Br0k3r xplfinder Collaborates with ransomware groups in order to monetize access to victim networks.

Accountability

Accountability Passwords Authentication Energy and Utilities

Hacker in Snowflake Extortions May Be a U.S. Soldier

Krebs on Security

NOVEMBER 26, 2024

However, Vars_Secc would be banned from XSS after attempting to sell access to the Russian telecommunications giant Rostelecom. [In .” For several months in 2023, Vars_Secc also was an active member of the Russian-language crime forum XSS , where they sold access to a U.S. government server for $2,000.

DDOS

DDOS Cybercrime Accountability Government

3 Percent ($30B) of U.S. Military Funding Dedicated to Cybersecurity

SecureWorld News

JANUARY 9, 2025

Key cybersecurity provisions Securing communications networks Five billion dollars is allocated to help local telecommunications providers replace potentially insecure Chinese technology (e.g., Nation-states harboring ransomware actors are now classified as hostile foreign cyber actors. Huawei and ZTE equipment ).

Cybersecurity

Cybersecurity Manufacturing Surveillance Ransomware

CIA Director Nominee Calls for Offensive Cyber in Deterrence Strategy

SecureWorld News

JANUARY 20, 2025

telecommunications infrastructure. They should start by serious, significant, and persistent interference with ransomware groups for starters." The strategic focus on China Ratcliffe's testimony also highlighted the growing importance of countering Chinese cyber threats. WannaCry ).

Cyber threats

Cyber threats Telecommunications Risk Cybersecurity

Security Affairs newsletter Round 516 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

MARCH 23, 2025

million Babuk2 Ransomware: Extortion Attempts Based on False Claims Western Alliance Bank notifies 21,899 customers of data breach Cybercriminals Exploit Checkpoints Driver in a BYOVD Attack! International Press Newsletter Cybercrime Blockchain gaming platform WEMIX hacked to steal $6.1

Spyware

Spyware Data breaches Cybercrime Banking

Security Affairs newsletter Round 533 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

JULY 20, 2025

Fortinet FortiWeb flaw CVE-2025-25257 exploited hours after PoC release Authorities released free decryptor for Phobos and 8base ransomware Anne Arundel Dermatology data breach impacts 1.9 Tbps assault U.S.

Data breaches

Data breaches DDOS Hacking Ransomware

Security Affairs newsletter Round 505 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs

JANUARY 5, 2025

in Major Breach, U.S. in Major Breach, U.S.

Spyware

Spyware Data breaches Hacking Telecommunications

Senate removes ban on state AI regulations from Trump's tax bill

Zero Day

JULY 1, 2025

" Previous proposals withheld internet funds Broadband Equity, Access, and Deployment (BEAD) is a $42-billion program run by the National Telecommunications and Information Administration (NTIA) that helps states build infrastructure to expand high-speed internet access.

Artificial Intelligence

Artificial Intelligence Password Management Energy and Utilities Internet

How the Senate's ban on state AI regulation imperils internet access

Zero Day

JUNE 27, 2025

How the moratorium works Broadband Equity, Access, and Deployment (BEAD) is a $42-billion program run by the National Telecommunications and Information Administration (NTIA) that helps states build infrastructure to expand high-speed internet access.

Internet

Internet Internet Artificial Intelligence Password Management

Every iPhone model that you supports iOS 26 (and which ones aren't compatible)

Zero Day

JUNE 12, 2025

You can check your iPhone's trade-in value at one of these retailers or at a telecommunications company's authorized dealer. Features like an intact screen and a working camera greatly influence resale or trade-in values. Show more Get the morning's top stories in your inbox each day with our Tech Today newsletter.

Password Management

Password Management Small Business Software Retail

Every iPhone model getting iOS 26 (and which ones don't support it)

Zero Day

JULY 12, 2025

You can check your iPhone's trade-in value at one of these retailers or at a telecommunications company's authorized dealer. Features like an intact screen and a working camera greatly influence resale or trade-in values. Show more Editor's note: This article was originally published in 2024.

Retail

Retail Artificial Intelligence Software Digital transformation

Every iPhone model that can be updated to Apple's iOS 26 (and which ones can't)

Zero Day

JUNE 10, 2025

You can check your iPhone's trade-in value at one of these retailers or at a telecommunications company's authorized dealer. Features like an intact screen and a working camera greatly influence resale or trade-in values. Show more Get the morning's top stories in your inbox each day with our Tech Today newsletter.

Password Management

Password Management Small Business Software Retail

Risks in Telecommunications IT

Trend Micro

JULY 29, 2021

We summarize the characteristics, threats, and recommendations to improve the security posture of enterprises' and telecommunications companies' IT infrastructure.

Telecommunications

Telecommunications Risk Cyber threats IoT

Russia-linked Sandworm APT compromised 11 Ukrainian telecommunications providers

Security Affairs

OCTOBER 17, 2023

Russia-linked APT group Sandworm has hacked eleven telecommunication service providers in Ukraine between since May 2023. The Russia-linked APT group Sandworm (UAC-0165) has compromised eleven telecommunication service providers in Ukraine between May and September 2023, reported the Ukraine’s Computer Emergency Response Team (CERT-UA).

Telecommunications

Telecommunications Authentication Data collection Passwords

RansomHub gang claims the hack of the telecommunications giant Frontier Communications

Security Affairs

JUNE 4, 2024

The RansomHub ransomware group added the American telecommunications company Frontier Comunications to the list of victims on its Tor leak site. The RansomHub ransomware group claimed to have stolen the information of over 2 million customers from the American telecommunications company Frontier Communications.

Telecommunications

Telecommunications Hacking Data breaches Cybercrime

Telecommunications: A Case Study

Approachable Cyber Threats

MARCH 9, 2023

Category Awareness, News, Case Study As one of the world’s fastest-growing industries, telecommunication has become a highly vulnerable target for cybersecurity threats. In short, telecommunications (telecom) is a fundamental and critical component of our global infrastructure. Read more of the ACT

Telecommunications

Telecommunications IoT Firewall Encryption

Microsoft Uses Trademark Law to Disrupt Trickbot Botnet

Krebs on Security

OCTOBER 12, 2020

has executed a coordinated legal sneak attack in a bid to disrupt the malware-as-a-service botnet Trickbot , a global menace that has infected millions of computers and is used to spread ransomware. Microsoft Corp. ” Microsoft’s action comes just days after the U.S.

Healthcare

Healthcare Ransomware Internet Malware

US Cyber Command and Microsoft Are Both Disrupting TrickBot

Schneier on Security

OCTOBER 15, 2020

Over the past 10 days, someone has been launching a series of coordinated attacks designed to disrupt Trickbot, an enormous collection of more than two million malware-infected Windows PCs that are constantly being harvested for financial data and are often used as the entry point for deploying ransomware within compromised organizations.

Telecommunications

Telecommunications Internet Internet Malware

Lapsus$ ransomware gang hits Impresa, Portugal’s largest media conglomerate

Security Affairs

JANUARY 2, 2022

The Lapsus$ ransomware hit Impresa, the largest media conglomerate in Portugal and the owner of SIC and Expresso. The Lapsus$ ransomware gang has compromised the infrastructure of Impresa, the largest media conglomerate in Portugal. The gang also targeted the South American telecommunication providers Claro and Embratel.

Media

Media Ransomware Telecommunications Accountability

Hive Ransomware Group Hits Bell Canada Subsidiary

Heimadal Security

SEPTEMBER 16, 2022

Ransomware-as-a-Service (RaaS) group Hive claimed to be behind a cyberattack that hit Bell Technical Solutions (BTS), an independent subsidiary of Bell Canada with 4.500 employees, that specializes in Bell services across Ontario and Québec. The post Hive Ransomware Group Hits Bell Canada Subsidiary appeared first on Heimdal Security Blog.

Ransomware

Ransomware Telecommunications Cybersecurity

Telecom Company Intrado Hit by Royal Ransomware Cyberattack

Heimadal Security

DECEMBER 29, 2022

On Tuesday, a cyberattack targeting telecommunication company Intrado was claimed by Royal Ransomware group. The post Telecom Company Intrado Hit by Royal Ransomware Cyberattack appeared first on Heimdal Security Blog. The attack started on December 1st.

Ransomware

Ransomware Telecommunications Cybersecurity

At least 31 US Businesses targeted with WastedLocker Ransomware

Security Affairs

JUNE 29, 2020

Tens of organizations in the United States have been targeted with the recently discovered WastedLocker ransomware. Security experts from Symantec reported that at least 31 organizations in the United States have been targeted with the recently discovered WastedLocker ransomware. SecurityAffairs – hacking, WastedLocker ransomware).

Ransomware

Ransomware Telecommunications Manufacturing Malware

A Ransomware infected the network of the cybersecurity firm Prosegur

Security Affairs

NOVEMBER 28, 2019

A piece of the Ryuk Ransomware infected the network of the multinational cybersecurity firm Prosegur, forcing the company to shut down it. The Spanish multinational security company Prosegur announced that it was of a ransomware attack that disrupted its telecommunication platform. SecurityAffairs – hacking, ransomware).

Ransomware

Ransomware Cybersecurity Telecommunications Advertising

Orange Business Services hit by Nefilim ransomware operators

Security Affairs

JULY 17, 2020

Security researchers at Cyble reported that Nefilim ransomware operators allegedly targeted the mobile network operator Orange. Researchers from Cyble came across a post of Nefilim ransomware operators which were claiming to have stolen sensitive data of Orange S.A., SecurityAffairs – hacking, Nefilim ransomware). Orange S.A.

Business Services

Business Services Ransomware Mobile Telecommunications

Ransomware and wiper signed with stolen certificates

SecureList

DECEMBER 22, 2022

Around the same time, we identified ransomware and wiper malware samples resembling those used in the first wave, though with a few interesting modifications that likely allowed evasion of security controls and better attack speeds. Wiper and ransomware, comparing wave 1 and wave 2. So, what’s new in this blogpost?

Ransomware

Ransomware Telecommunications Malware Encryption

FIN11 gang started deploying ransomware to monetize its operations

Security Affairs

OCTOBER 18, 2020

The financially-motivated hacker group FIN11 has started spreading ransomware to monetize its cyber criminal activities. The financially-motivated hacker group FIN11 has switched tactics starting using ransomware as the main monetization method. ” reads the analysis published by FireEye.

Ransomware

Ransomware Malware Telecommunications Advertising

Black Basta ransomware gang hit BT Group

African multinational telco giant MTN Group disclosed a data breach

Trending Sources

Scattered Spider Strikes Again: U.K. Attacks Spark U.S. Retailer Alarm

Russia-linked APT Seashell Blizzard is behind the long running global access operation BadPilot campaign

Arkana Security group claims the hack of US telco provider WideOpenWest (WOW!)

Security Affairs newsletter Round 498 by Pierluigi Paganini – INTERNATIONAL EDITION

Threat Spotlight: Credential Theft vs. Admin Control—Two Devastating Paths to VPN Exploitation

A cyber attack briefly disrupted South African Airways operations

Security Affairs newsletter Round 530 by Pierluigi Paganini – INTERNATIONAL EDITION

Canada Releases 2025 National Cyber Security Strategy

Security Affairs newsletter Round 511 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 500 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 522 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 495 by Pierluigi Paganini – INTERNATIONAL EDITION

Analysis of Cyber Anarchy Squad attacks targeting Russian and Belarusian organizations

Securing Critical Infrastructure Against Cyberattacks

The Seabed: A New Digital Frontier to Protect from Threats

Denmark warns of increased state-sponsored campaigns targeting the European telcos

Frequently Asked Questions About Iranian Cyber Operations

Hacker in Snowflake Extortions May Be a U.S. Soldier

3 Percent ($30B) of U.S. Military Funding Dedicated to Cybersecurity

CIA Director Nominee Calls for Offensive Cyber in Deterrence Strategy

Security Affairs newsletter Round 516 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 533 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 505 by Pierluigi Paganini – INTERNATIONAL EDITION

Senate removes ban on state AI regulations from Trump's tax bill

How the Senate's ban on state AI regulation imperils internet access

Every iPhone model that you supports iOS 26 (and which ones aren't compatible)

Every iPhone model getting iOS 26 (and which ones don't support it)

Every iPhone model that can be updated to Apple's iOS 26 (and which ones can't)

Risks in Telecommunications IT

Russia-linked Sandworm APT compromised 11 Ukrainian telecommunications providers

RansomHub gang claims the hack of the telecommunications giant Frontier Communications

Telecommunications: A Case Study

Microsoft Uses Trademark Law to Disrupt Trickbot Botnet

US Cyber Command and Microsoft Are Both Disrupting TrickBot

Lapsus$ ransomware gang hits Impresa, Portugal’s largest media conglomerate

Hive Ransomware Group Hits Bell Canada Subsidiary

Telecom Company Intrado Hit by Royal Ransomware Cyberattack

At least 31 US Businesses targeted with WastedLocker Ransomware

A Ransomware infected the network of the cybersecurity firm Prosegur

Orange Business Services hit by Nefilim ransomware operators

Ransomware and wiper signed with stolen certificates

FIN11 gang started deploying ransomware to monetize its operations

Stay Connected