Security Affairs

SEPTEMBER 22, 2021

CISA, FBI, and the NSA warned today of an escalation of the attacks of the Conti ransomware gang targeting US organizations. CISA, the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) are warning of an increased number of Conti ransomware attacks against US organizations.

Ransomware 97

Ransomware Cybercrime Authentication Healthcare 97

Malwarebytes

FEBRUARY 9, 2024

The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau of Investigation (FBI), and other authoring agencies have released a joint guidance about common living off the land (LOTL) techniques and common gaps in cyber defense capabilities.

Software 143

Software Ransomware Backups Manufacturing 143

Security Affairs

FEBRUARY 10, 2023

North Korea-linked APT groups conduct ransomware attacks against healthcare and critical infrastructure facilities to fund its activities. Ransomware attacks on critical infrastructure conducted by North Korea-linked hacker groups are used by the government of Pyongyang to fund its malicious cyber operations, U.S. Obfuscate Identity.

Ransomware 80

Ransomware Healthcare Cryptocurrency Government 80

Malwarebytes

FEBRUARY 25, 2022

Cybersecurity agencies in the US and UK have issued a joint cybersecurity advisory (CSA) on MuddyWater, a government-sponsored Iranian advanced persistent threat (APT) actor. ” The full advisory can be read in this CISA web page. Use multifactor authentication (MFA) wherever you can.

Government 87

Government Telecommunications Antivirus Phishing 87

NopSec

JUNE 28, 2022

A new advisory from top federal security and law enforcement agencies warns that state-sponsored cyber actors from the People’s Republic of China (PRC) are exploiting vulnerabilities in commonly used network devices to data from major telecommunications providers.

Telecommunications 52

Telecommunications Authentication Small Business Passwords 52

Security Affairs

APRIL 19, 2023

UK and US agencies are warning of Russia-linked APT28 group exploiting vulnerabilities in Cisco networking equipment. The joint advisory provides detailed info on tactics, techniques, and procedures (TTPs) associated with APT28’s attacks conducted in 2021 that exploited the flaw in Cisco routers. ” continues the advisory.

Malware 85

Malware Firmware Government Education 85

Security Affairs

JULY 1, 2021

US and UK cybersecurity agencies said the Russia-linked APT28 group is behind a series of large-scale brute-force attacks. The attackers remained under the radar by routing brute force attacks through the TOR network and commercial VPN services, including CactusVPN, IPVanish, NordVPN, ProtonVPN, Surfshark, and WorldVPN.

Energy and Utilities 88

Energy and Utilities VPN Government Passwords 88