Page 77 - Ansomware Malware News Today

Researchers Uncover Bugs in VSCode Extensions That Could Lead to Supply Chain Attacks

Agrius hackers deployed a set of destructive wiper attacks against Israeli targets, masquerading the activity as ransomware attacks.

Researchers Link CryptoCore Attacks On Cryptocurrency Exchanges to North Korea State-sponsored hackers affiliated with North Korea have been behind a slew of attacks on cryptocurrency exchanges over the past three years, new evidence has revealed. Attributing the attack with "medium-high" likelihood to the Lazarus Group (aka APT38 or Hidden Cobra), researchers from Israeli cybersecurity firm ClearSky said the campaign, dubbed " CryptoCore," targeted crypto exchanges in Israel, Japan, Europe, an...

23 Android Apps Expose Over 100,000,000 Users Personal Data Misconfigurations in multiple Android apps leaked sensitive data of more than 100 million users, potentially making them a lucrative target for malicious actors. "By not following best-practices when configuring and integrating third-party cloud-services into applications, millions of users private data was exposed," Check Point researchers said in an analysis published today and shared with The Hacker News. "In some cases, this type o...

Watering Hole Attack Was Used to Target Florida Water Utilities An investigation undertaken in the aftermath of the Oldsmar water plant hack earlier this year has revealed that an infrastructure contractor in the U.S. state of Florida hosted malicious code on its website in whats known as a watering hole attack. "This malicious code seemingly targeted water utilities, particularly in Florida, and more importantly, was visited by a browser from the city of Oldsmar on the same day of the poisonin...

U.S. Pipeline Ransomware Attackers Go Dark After Servers and Bitcoin Are Seized Just as Colonial Pipeline restored all of its systems to operational status in the wake of a crippling ransomware incident a week ago, DarkSide, the cybercrime syndicate behind the attack, claimed it lost control of its infrastructure, citing a law enforcement seizure. All the dark websites operated by the gang, including its DarkSide Leaks blog, ransom collection site, and breach data content delivery network (CDN)...

Why Password Hygiene Needs a Reboot In todays digital world, password security is more important than ever. While biometrics, one-time passwords (OTP), and other emerging forms of authentication are often touted as replacements to the traditional password, today, this concept is more marketing hype than anything else. But just because passwords arent going anywhere anytime soon doesnt mean that organizations dont need to modernize their approach to password hygiene right now. The Compromised C...

Dark Web Getting Loaded With Bogus Covid-19 Vaccines and Forged Cards

Is it still a good idea to require users to change their passwords? For as long as corporate IT has been in existence, users have been required to change their passwords periodically. In fact, the need for scheduled password changes may be one of the most long-standing of all IT best practices. Recently, however, things have started to change. Microsoft has reversed course on the best practices that it has had in place for decades and no longer recommends that organizations require users to cha...

New Chinese Malware Targeted Russias Largest Nuclear Submarine Designer A threat actor believed to be working on behalf of Chinese state-sponsored interests was recently observed targeting a Russia-based defense contractor involved in designing nuclear submarines for the naval arm of the Russian Armed Forces. The phishing attack, which singled out a general director working at the Rubin Design Bureau, leveraged the infamous "Royal Road" Rich Text Format (RTF) weaponizer to deliver a previously ...