Page 49 - Fraud Risk News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Supernova Attack Leveraged SolarWinds, Pulse Secure DougOlenick) • April 23, 2021     Secureworks says the Bronze Spiral APT group was involved in the attack described by CISA. An advanced persistent threat group gained long-term access to an unnamed entity's network through its Ivanti Pulse Secure VPN and SolarWinds' Orion server and then installed Supernova malware, according to the U.S. Cybersecurity and Infrastructure Security Agency. "The threat actor connected to the entity's network via a Pulse Secure virtu...

GovInfoSecurity Compliance DougOlenick) • April 21, 2021     The form Lazarus uses to lure in its victims (Source: Malwarebytes) Malwarebytes researchers report the North Korean advanced persistent threat group Lazarus rolled out a new weapon during a recent phishing campaign targeting South Korea in which the gang incorporated malicious BMP files in an image-laden document. The malware embedded in the images drops two payloads, and the actual attack takes place after the second has been downloaded. If the attack i...

Lazarus Group Hid Remote-Access Trojans in Bitmap Images DougOlenick) • April 21, 2021     The form Lazarus uses to lure in its victims (Source: Malwarebytes) The Lazarus group, an offensive hacking team with ties to North Korea, rolled out a new weapon during a recent phishing campaign targeting South Koreans: Image-laden documents containing malicious bitmap files, reports security firm Malwarebytes. The malware embedded in the images drops two payloads, and the actual attack takes place after the second has been...

White House 'Stands Down' SolarWinds, Exchange Response Groups Twitter Deputy National Security Adviser Anne Neuberger (Source: C-SPAN) The White House announced Monday that it is "standing down" two Unified Coordination Groups that were created to coordinate the federal response to the SolarWinds supply chain attack and attacks on vulnerable on-premises Microsoft Exchange email servers. Anne Neuberger, the deputy national security adviser for cyber and emerging technology who's overseeing the Biden administration's response to the attacks, says the two groups' work can be scaled back becaus...

Geico Says Driver's License Numbers Stolen From Website Compliance Twitter Geico's headquarters in Chevy Chase, Maryland U.S. insurance giant Geico says fraudsters stole driver's license numbers from its website after they supplied personal information that they had acquired elsewhere. The driver's license numbers are believed to have been used "to fraudulently apply for unemployment benefits," Geico says. Over the last year, there has been a staggering rise in U.S. unemployment benefit fraud. The Labor Department's Office of the Inspector General estimated that between April and September...