Internet threat news
![ICBC Hack Raises Questions As To US Treasury Cyber Readiness](/images/thumbnails/th-28335-icbc-hack-raises-questions-as-to-us-treasury-cyber-readiness.jpg)
On November 10, 2023, news emerged that the Industrial and Commercial Bank of China (ICBC) had suffered a cyber incident. One of the results of the hack was that the bank was on the line for 9 billion USD in unsettled trades.
The immediate ramifications of the attack meant that BNY Mellon was owed 9 billion USD just so that normal business could resume. It was later discovered that the cyber incident was a ransomware attack.
![Threat Intelligence Work Reveals Threat Actor Farnetwork Operations](/images/thumbnails/th-28280-threat-intelligence-work-reveals-threat-actor-farnetwork-operations.jpg)
Recently published research by Group IB’s threat intelligence team uncovered a threat actor related to five ransomware strains. It gave researchers insider knowledge of ransomware-as-a-service (RaaS) operations.
Security researchers looked to infiltrate the RaaS network by applying to be an affiliate. This required the researchers to be interviewed as one would be for a job.
![Ragnar Locker's Extortion Website Seized](/images/thumbnails/th-28168-ragnar-lockers-extortion-website-seized.jpg)
On October 20, 2023, Europol announced that authorities had seized Ragnar Locker's extortion and data leak website as part of an international law enforcement operation.
A day earlier, Bleeping Computer broke the news and confirmed the law enforcement operation did indeed occur, according to a Europol spokesperson. It was only the following day that Europol released an official statement.
![Magecart Card Skimmers Strike Again](/images/thumbnails/th-28077-magecart-card-skimmers-strike-again.jpg)
Almost yearly, a major card skimming attack occurs that deserves media attention. Often simply referred to as Magecart attacks, central to these attacks is modifying JavaScript code on the end user side to steal the card data entered by the unsuspecting victim.
To carry out this primary function, hackers have developed several techniques, including, according to newly published research by Akamai, threat actors are hijacking the 404 error pages of online retailers' websites, hiding malicious code to steal customers' credit card information.
![New Threat Actor AtlasCross Emerges](/images/thumbnails/th-27956-new-threat-actor-atlascross-emerges.jpg)
In a recent report by security firm NSFOCUS, details of a new threat actor emerged. Named AtlasCross by researchers, the attack campaign was discovered when researchers discovered suspicious documents that formed part of a phishing campaign.
Upon further investigation, researchers believed they stumbled on a new advanced persistent threat actor who is both skilled and cautious in their attack approach.
Along with discovering a new threat actor, two new trojans, DangerAds and AtlasAgent, have also been discovered.
![BlackCat Shows Its Claws](/images/thumbnails/th-27883-blackcat-shows-its-claws.jpg)
On September 11, news reports began emerging stating that MGM Resorts International had suffered a cyber incident and had shut down several critical IT systems. This was soon followed by MGM posting to their Twitter account acknowledging they had suffered a cyber incident.
Still, the statement was light on details despite the company's main website, online reservations, and in-casino services, like ATMs, slot machines, and credit card machines being taken offline.
![MetaStealer Targets Intel-Based Macs](/images/thumbnails/th-27777-metastealer-targets-intel-based-macs.jpg)
Following the publication of new research by security firm Sentinel One, a new infostealer has been seen in the wild. Titled MetaStealer, not to be confused with another info-stealer, META, targets Intel-based MacOS systems.
![Flax Typhoon Adopts Living-of-the-Land Binaries](/images/thumbnails/th-27636-flax-typhoon-adopts-living-of-the-land-binaries.jpg)
According to a recent report published by Microsoft, a series of attack campaigns targeting organizations in Taiwan.
Security researchers at the Redmond tech giant have attributed the attacks to an advanced persistent threat actor tracked by Microsoft as Flax Typhoon.
![BlackCat Ransomware Seen Dropping Impacket and RemCom](/images/thumbnails/th-27596-blackcat-ransomware-seen-dropping-impacket-and-remcom.jpg)
According to Microsoft’s Threat Intelligence Team, a new version of the BlackCat ransomware, also tracked as ALPHV, has been seen dropping the Impacket networking framework and the Remcom hacking tool during the infection process.
Both the framework and the hacking tool can be used by threat actors to better spread laterally across a compromised network.
![Raccoon Stealer Returns With Even Stealthier Version](/images/thumbnails/th-27527-raccoon-stealer-returns-with-even-stealthier-version.jpg)
At PCRisk, we have closely followed the trials and tribulations associated with the Raccoon Stealer spyware, also often referred to as an info stealer. The last time we covered the topic was when Raccoon Stealer 2.0 emerged.
![Russian Missile Manufacturer Breached By North Korean Hackers](/images/thumbnails/th-27514-russian-missile-manufacturer-breached-by-north-korean-hackers.jpg)
Based on a recent report published by Sentinel Labs, it seems North Korean state-sponsored hackers are fine with targeting critical infrastructure within an ally's borders.
The report shows that the North Korean government is prepared to target allies supporting its contentious missile program, including a Russian missile manufacturer.
![Threat Actor Bahamut Uses Fake Android Chat App To Steal Signal, WhatsApp Data](/images/thumbnails/th-27423-threat-actor-bahamut-uses-fake-android-chat-app-to-steal-signal-whatsapp-data.jpg)
According to a new report by security firm CYFIRMA, a known Indian threat group tracked as Bahamut is distributing a fake Android app called "Safe Chat" to infect devices with spyware malware that steals call logs, texts, and GPS locations from phones.
Further, the malware is capable of stealing data from other messaging apps, including WhatsApp, Telegram, Facebook Messenger, Signal and Viber.
More Articles...
Page 3 of 53
<< Start < Prev 1 2 3 4 5 6 7 8 9 10 Next > End >>