Page 6 - Voodoo Bear News Today

Cyclops Blink circulating since 2019.

Ukraine has been hit by a wave of cyberattacks, while the UK and US have a found new malware they link to Russia’s Sandworm group.

Following the 2018 public exposure of the VPNFilter malware, the Russia-linked Sandworm threat group has developed a replacement malware framework, which has mainly targeted firewall appliances

UK NCSC and US CISA issue joint warning

Joint NCSC CISA advisory attributes a dangerous malware, dubbed Cyclops Blink, to Russia’s Sandworm APT, likely a GRU unit, with WatchGuard users at particular risk

Ep 1270 | 2.16.21 France’s ANSII warns of a longrunning Sandworm campaign. DPRK tried to steal COVID-19 vaccine data. Supermicro is exasperated. Static Kitten phishes in the UAE Subscribe France finds Sandworm’s trail in a software supply chain. Microsoft is impressed by the amount of effort Russian intelligence services put into the SolarWinds campaign. Pyongyang is reported to have attempted to steal COVID-19 vaccine information. Supermicro reiterates objections to Bloombergs report on al...

Hackers Exploit IT Monitoring Tool Centreon to Target Several French Entities Centreon. The intrusion campaign — which breached "several French entities" — is said to have started in late 2017 and lasted until 2020, with the attacks particularly impacting web-hosting providers, said the French information security agency ANSSI in an advisory. "On compromised systems, ANSSI discovered the presence of a backdoor in the form of a webshell dropped on several Centreon servers exposed to the inte...

Alert from CERT-FR, which is the French governments computer emergency readiness team French cybersecurity authorities are warning that widely used, open-source IT monitoring software called Centreon appears to have been targeted by Russian hackers. But unlike the SolarWinds supply chain attack, in this campaign, attackers appear to have hacked outdated, unpatched versions of the software. The Centreon open-source IT network monitoring tool is developed by the Paris-based company of the same na...

Which hacker group is most like your astrological sign? New Atlanticist by Safa Shahwan Edwards and June Lee REUTERS/Samantha Sais Sometimes you just have to ask the question no one else is asking: Which cyber Advanced Persistent Threat (APT) is most like your astrological sign? Whether you believe in astrology or think it’s bogus, astrological signs and the placement of planets and stars have been us...

"We have identified a global campaign that introduces a compromise into the networks of public and private organizations through the software supply chain," FireEye CEO Kevin Mandia announced in a Sunday blog post. "This compromise is delivered through updates to a widely used IT infrastructure management software - the Orion network monitoring product from SolarWinds. The campaign demonstrates top-tier operational tradecraft and resourcing consistent with state-sponsored threat actors." Left u...