CyberSecurity Insiders

OCTOBER 22, 2021

CrowdStrike security researchers have discovered that a hacking group dubbed LightBasin aka UNC1945 has been hiding in the networks of renowned telecom networks from the past 5 years, monitoring all their business operations and sending censorious data to remote servers.

Cyber Attacks 139

Cyber Attacks Telecommunications DNS Government 139

Malwarebytes

MARCH 19, 2024

However, if you have a telecoms manager on your payroll then there’s no need for social engineering—they can just do the SIM swap for you. In May 2021, Jonathan Katz, aka “Luna” was employed as a manager at a telecoms store.

Social Engineering 136

Social Engineering Computers and Electronics Mobile Identity Theft 136

Security Affairs

DECEMBER 29, 2023

Cyber attacks hit the Assembly of the Republic of Albania and telecom company One Albania, a government agency reported. Albania’s National Authority for Electronic Certification and Cyber Security (AKCESK) revealed that cyber attacks hit the Assembly of the Republic of Albania and telecom company One Albania.

Cyber Attacks 124

Cyber Attacks Computers and Electronics Government Hacking 124

CyberSecurity Insiders

DECEMBER 28, 2021

T Mobile that suffered a massive data breach in August this year has again fallen prey to a similar hack in December 2021 that saw information leak of a small set of the telecom company customers. T-Mobile is yet to acknowledge the data breach on an official note.

Data breaches 131

Data breaches Mobile Accountability Cyber Attacks 131

Security Affairs

FEBRUARY 2, 2024

“INSTAT assures the public that the 2023 Census data are not the subject of this attack. INSTAT’s technical team immediately activated emergency protocols to protect the data and prevent further damage. The Record Media reported that the Iran-linked hacking group Homeland Justice claimed responsibility for the attack.

Cyber Attacks 122

Cyber Attacks Computers and Electronics Government Hacking 122

SecureList

JANUARY 23, 2023

The first part of this report is devoted to the most current threats any SOC is likely to face in 2023. Based on our extensive Managed Detection and Response (MDR) experience and the dynamics we have seen over the years, we provide insights into the trends set to shape the threat landscape for enterprises this year.

Government 99

Government Media Social Engineering Ransomware 99

The Last Watchdog

JULY 13, 2023

London, July 13, 2023 — Beazley, the leading specialist insurer, today published its latest Risk & Resilience report: Spotlight on: Cyber & Technology Risks 2023. The perceived threat of cyber risk to global business leaders peaked in 2021 (34%) and over the past two years, the risk perception has dropped (27%).

Cyber Risk 189

Cyber Risk Risk Insurance Energy and Utilities 189

CyberSecurity Insiders

DECEMBER 20, 2021

According to a media update released by the Department of Justice at the end of last week, tech giants Google and Facebook Meta have agreed to protect data traveling to the Pacific Light Cable Network (PLCN) system. The post Google and Facebook Meta to protect data on undersea cable appeared first on Cybersecurity Insiders.

Telecommunications 103

Telecommunications Media Risk Cybersecurity 103

Security Affairs

JULY 5, 2023

RedEnergy is a sophisticated stealer-as-a-ransomware that was employed in attacks targeting energy utilities, oil, gas, telecom, and machinery sectors. Zscaler ThreatLabz researchers discovered a new Stealer-as-a-Ransomware named RedEnergy used in attacks against energy utilities, oil, gas, telecom, and machinery sectors. igrejaatos2[.]org/assets/programs/setupbrowser.exe

Energy and Utilities 84

Energy and Utilities Ransomware Backups Malware 84

Security Affairs

MARCH 17, 2021

Chinese APT groups are targeting telecom companies in cyberespionage campaigns collectively tracked as Operation Diànxùn, to steal 5G secrets. Hackers behind these campaigns are targering people working in the telecom industry. In some attacks, threat actors set up a fake website designed to mimic telco-giant’s Huawei career page.

Malware 98

Malware Data collection Technology Phishing 98

eSecurity Planet

JUNE 27, 2023

Security information and event management (SIEM) systems only have detections for 24 percent of the 196 techniques in MITRE ATT&CK v13, according to a new report. “This implies that adversaries can execute around 150 different techniques that will be undetected by the SIEM,” says the CardinalOps report.

Financial Services 107

Financial Services Engineering Insurance Manufacturing 107

Security Affairs

MARCH 5, 2020

According to the CrowdStrike 2020 Global Threat Report, the telecommunications and government sectors were the most targeted by the threat actors. ” reads the report published by CrowdStrike. ” reads the report. . ” reads the report. ” continues the report.

Telecommunications 89

Telecommunications Mobile Spyware Advertising 89

Security Affairs

JANUARY 13, 2024

Akira ransomware targets Finnish organizations GitLab fixed a critical zero-click account hijacking flaw Juniper Networks fixed a critical RCE bug in its firewalls and switches Vast Voter Data Leaks Cast Shadow Over Indonesia ’s 2024 Presidential Election Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467 Team Liquid’s wiki leak exposes (..)

VPN 107

VPN Cybercrime Ransomware Hacking 107

CyberSecurity Insiders

MAY 30, 2023

Like ships that lose railings and experience instability, businesses are immediately faced with lost data, ransom payments, and revenue losses, depending on the nature of the attack. According to IBM’s Cost of a Data Breach Report 2022 , the average company sees a $1.42M drop in business as a result of a breach.

Data breaches 126

Data breaches Marketing Media Risk 126

Security Affairs

JANUARY 7, 2024

Experts spotted a new macOS Backdoor named SpectralBlur linked to North Korea Merck settles with insurers regarding a $1.4

Artificial Intelligence 92

Artificial Intelligence Data breaches Scams Insurance 92

The Last Watchdog

DECEMBER 13, 2020

Recently, the University of Illinois and the Harvard Business School conducted a study, and 16% of companies reported switching their employees to work at home from offices at least twice a week. Thus SASE combines advanced threat protection and secure access with enterprise-class data loss prevention. The makeup of SASE .

B2C 214

B2C IoT B2B VPN 214

Security Affairs

MAY 6, 2020

A threat actor is offering a database apparently belonging to Pakistan’s leading telecom service, it includes data of 44 Million Pakistani mobile users. The threat actor is leaking the database of Pakistan’s leading telecom service Mobilink’s (now @jazzpk ). Pierluigi Paganini.

Mobile 94

Mobile Telecommunications Data breaches Advertising 94

CyberSecurity Insiders

AUGUST 12, 2021

Like how the 2019 developed Corona Virus threat mutated into the latest Delta variant, a malware that was developed by hackers from Pakistan has reportedly mutated into a new nefarious variant, say experts.

Malware 145

Malware Government Banking Phishing 145

CyberSecurity Insiders

MARCH 25, 2022

And the funding will come from the available Aus$500 million financial help related to Digital Capability Fund meant to bolster the state’s current cyber capabilities of intelligence exchange, prevention, detection and response to cyber threats. It was built to protect federal firms from cyber threats, mainly state sponsored cyber attacks.

Cyber threats 94

Cyber threats Cyber Attacks Scams Government 94

Malwarebytes

AUGUST 7, 2023

Anyone taking the bait stands a good chance of losing control of their personal data or suffering from all manner of dubious payments leaving their bank account. In this case, the bait being used was the claim of auto warranties in return for the collection of personal data from call recipients.

Scams 73

Scams Mobile Consumer Protection Technology 73

Hot for Security

JANUARY 29, 2021

USCellular, a Chicago-based mobile network operator, has revealed a data breach incident affecting an undisclosed number of customers. The company believes the incident occurred on January 4, 2021, after threat actors managed to trick employees into accessing and downloading malicious software on some retail-store computers.

Data breaches 133

Data breaches Wireless Retail Malware 133

SecureList

SEPTEMBER 13, 2021

Download full report (PDF). The Incident response analyst report provides insights into incident investigation services conducted by Kaspersky in 2020. Although key trends in terms of threats have stayed the same, our service approach moved to a near-complete – 97% of all cases – remote delivery.

Social Engineering 111

Social Engineering Healthcare Ransomware Government 111

Security Affairs

AUGUST 3, 2021

Cybereason researchers identified three clusters of activity associated with China-linked threat actors that carried out a series of attacks against networks of at least five major telecommunications companies located in South Asia since 2017. all working together and reporting to the same Chinese threat actor.

Telecommunications 99

Telecommunications Hacking Technology Information Security 99

Krebs on Security

MARCH 14, 2023

Both are alleged to be part of a larger criminal organization that specializes in using fake emergency data requests from compromised police and government email accounts to publicly threaten and extort their victims. The data included the victim’s Social Security number, driver’s license number, cellphone number, and home address.

Hacking 251

Hacking Government Media Accountability 251

Security Affairs

SEPTEMBER 19, 2023

ShroudedSnooper threat actors are targeting telecommunication service providers in the Middle East with a backdoor called HTTPSnoop. The activity involving HTTPSnoop and PipeSnoop and associated tactics, techniques, and procedures (TTPs) of the threat actors behind it do not match a known threat group.

Telecommunications 103

Telecommunications Internet Internet Malware 103

CyberSecurity Insiders

JUNE 14, 2021

Chinese intelligence-backed hacking group APT41 has given a hint that its hackers were behind the cyberattacks launched on Air India and SITA-the IT and Telecom solutions provider to the air travel industry. In both incidents, vital data belonging to passengers was accessed and stolen by hackers last month.

Cyber Attacks 139

Cyber Attacks Computers and Electronics Healthcare Threat Detection 139

CyberSecurity Insiders

MARCH 2, 2021

However, the data security incident is said to have taken place at the server farm of a third party IT service provider and so the airliner cannot be blamed directly on this note.

Cyber Attacks 112

Cyber Attacks Retail Passwords Accountability 112

CyberSecurity Insiders

MARCH 11, 2022

After striking Samsung and Nvidia, Lapsus$ Ransomware Group has this time targeted British Telecom firm Vodafone and Buenos Aires online marketplace MercadoLibre. Sources state that the hackers accessed a portion of the data from the company servers, respectively, and are demanding a large amount as ransom for the decryption key.

Cyber Attacks 119

Cyber Attacks Data breaches Backups Accountability 119

Security Affairs

JULY 31, 2022

increased rewards for info on North Korea-linked threat actors to $10 million Threat actors leverages DLL-SideLoading to spread Qakbot malware Zero Day attacks target online stores using PrestaShop? Security Affairs newsletter Round 375 by Pierluigi Paganini A database containing data of 5.4 and Blackmatter ransomware U.S.

Firmware 73

Firmware Surveillance Malware DDOS 73

CyberSecurity Insiders

OCTOBER 23, 2022

After Optus, Medibank and SingTel data breach, the government of Australia seems to have taken information leaks seriously, as it is soon going to introduce a proposal that aims to increase the penalties on companies that experience data breaches from now on. Penalty for critical and repetitive data leaks is at ASD $2.12

Data breaches 72

Data breaches Small Business Government Cyber Attacks 72

Security Affairs

AUGUST 10, 2020

Researchers from threat intelligence firm Cyble reported that Nefilim ransomware operators allegedly hacked The SPIE Group , an independent European leader in multi-technical services. The ransomware gang also revealed to have stolen the company’s sensitive data. ” reported Cyble.

Ransomware 107

Ransomware Hacking Advertising Backups 107

Security Affairs

JULY 22, 2019

New problems for Huawei, t he Czech unit of telecoms giant secretly collected personal data customers, officials and business partners. Huawei made the headlines again, according to the Czech public radio the Czech unit of Chinese telecoms giant secretly collected personal data of customers, officials, and business partners.

Manufacturing 80

Manufacturing Internet Internet Advertising 80

Security Affairs

SEPTEMBER 7, 2020

The bank launched an investigation into the incident and reported it to Chilean police. According to ZDNet that cited a source close to the investigation, the Chilean bank was attacked by the REvil ransomware operators , but at the time of writing the BancoEstado’s data have yet to be published on the gang’s leak site.

Banking 111

Banking Ransomware Advertising VPN 111

Security Affairs

MAY 12, 2021

Representatives from the information technology, communications, and Defense Industrial Base sectors also contributed to the report titled “ Potential Threat Vectors to 5G Infrastructure.” ” reads the report. Supply Chain Sub-Threat Vectors. 5G Systems Architecture Sub-Threat Vectors.

Risk 78

Risk Architecture Technology Manufacturing 78

CyberSecurity Insiders

MARCH 2, 2022

Dubbed as Bvp47 and linked to Equation Group-an NSA funded threat actor was first detected by anti-virus firm Virus Total in 2013. Pangu Lab released a detailed report on this note and stated that it was surprised that America based security agency was also hosting sophisticated tools to spy on other nations and their critical infrastructure.

Education 84

Education Malware Engineering Internet 84

Security Affairs

JULY 24, 2020

The hackers claimed to have stolen 800GB of data including correspondence and contracts. The incident was confirmed by Spanish media and security firms, including threat intelligence company Cyble. As proof of the attack, REVil ransomware operators have posted a sample of data files exfiltrated from the company. million ransom.

Ransomware 111

Ransomware Advertising Media Internet 111

Security Affairs

APRIL 6, 2023

Data leak affected QBANK, Defence Bank, Bloom Money, Admiral Money, MA Money, and Reed. Using leaked data, threat actors could potentially breach banks’ backend infrastructure and consequently the infrastructure of their clients. Among the leaked data, researchers found Google and Liveness API keys.

Banking 86

Banking Financial Services Identity Theft Accountability 86