Year: 2019

Bayern Holds Out Against Winnti Malware

Delaware, USA ā€“ April 5, 2019 ā€“ German chemical giant Bayer stood a cyber attack that was meant to steal the companyā€™s sensitive data, Reuters informed. The malware that was further identified as typical of the Chinese Winnti group had infiltrated the system early last year and was closely monitored by Bayerā€™s Cyber Defence Center […]

Read More
Arizona Beverages Revives After iEnscrypt Attack

One of the largest drinks suppliers Arizona Beverages is restoring their operations caused by a massive ransomware attack that shut down operations of the Sales department, Tech Crunch informs.Ā The companyā€™s IT specialists and hired experts are still working at the recovery of the companyā€™s back-end servers that were victimized by iEnscrypt ransomware and there is […]

Read More
APT32 Adopts Steganography to Drop Backdoors

Delaware, USA ā€“ April 3, 2019 ā€“ APT32 continue to improve their techniques for conducting cyber espionage campaigns. Researchers suggest that this group is behind the compromise of Toyota and Lexus sales subsidiaries and the likely theft of personal data of more than 3 million customers. The group returned to business after a relatively long […]

Read More
Ransomware Takes a Swing at the City of Albany, New York

Delaware, USA ā€“ April 2, 2019 ā€“ Last weekend, a ransomware attack wreaked havoc on the City of Albany, New York. According to Mayor Kathy Sheehan, there is no evidence that any personal info has been stolen, but City employees will be provided with credit monitoring. The attack occurred on Saturday, March 30, and by […]

Read More
Chinese ELF Prepares New DDoS Attacks

Delaware, USA ā€“ April 1, 2019 ā€“ Even though researchers have documented a significant decline in the popularity of DDoS attacks, which is also caused by recent lawsuits over botnet operators and ‘stresser’ services, the adversaries continue to improve DDoS’er malware threats. A recently published article by the MalwareMustDie team reviews ELF malware that is […]

Read More
Critical SQL Injection Vulnerability in Magento Exposes Sites to Skimming Attacks

Delaware, USA ā€“ March 29, 2019 ā€“ Magento has released the update this week patching a critical vulnerability in the platform. It is not known whether it was used for attacks in the wild, but cybercriminal groups who compromise commercial sites to install skimmers will not leave SQL injection vulnerability unheeded. Magento CMS is used […]

Read More
Elfin Group is Spying on the Middle East and the US Organizations

Delaware, USA ā€“ March 28, 2019 ā€“Ā Elfin group (aka APT33) conducts cyber espionage campaigns primarily focusing on organizations in Saudi Arabia and the United States. State-sponsored actors are interested not only in government organizations, but also in companies in the chemical, engineering, telecommunications, finance, and IT sectors. In addition to cyber espionage, the researchers suspect […]

Read More
Threat Detection Marketplace 3.5.2 is Released

Delaware, USA ā€“ March 27, 2019 ā€“ With more than a month into making, this was the longest sprint we had to the date to make sure it is well worth your time. Today, weā€™re glad to bring you the cutting-edge capabilities for threat hunting and detection as a code. We all love Sigma rules […]

Read More
Operation ShadowHammer Hits Asus Users

Delaware, USA ā€“ March 26, 2019 ā€“ The new supply chain attack targets ASUS users who downloaded the Live Update software from the official website. The investigation is currently ongoing, but researchers from Kaspersky Lab have published an interim report detailing this campaign dubbed Operation ShadowHammer. Unidentified APT group modified the legitimate version of the […]

Read More
Mysterious LockerGoga Attacks on US Industry

Delaware, USA ā€“ March 25, 2019 ā€“ It became known about two victims of the LockerGoga ransomware that caused a great stir last week. According to Motherboard, this month, in addition to Norsk Hydro, two American chemical companies became victims of large-scale cyber attacks: Hexion and Momentive. The incidents occurred on March 12, but the […]

Read More