LockBit Affiliate Deploys New 3AM Ransomware in Recent Attack 14/09/2023 at 16:18 By Ionut Arghire A LockBit affiliate has deployed the new 3AM ransomware family on a victim’s network, after LockBit’s execution was blocked. The post LockBit Affiliate Deploys New 3AM Ransomware in Recent Attack appeared first on SecurityWeek. This article is an excerpt from […]
LockBit Affiliate Deploys New 3AM Ransomware in Recent Attack Read More »
Ransomware Gang Takes Credit for Disruptive MGM Resorts Cyberattack 14/09/2023 at 14:17 By Eduard Kovacs A known ransomware gang has taken credit for the highly disruptive cyberattack on MGM Resorts, and the company has yet to restore impacted systems. The post Ransomware Gang Takes Credit for Disruptive MGM Resorts Cyberattack appeared first on SecurityWeek. This
Ransomware Gang Takes Credit for Disruptive MGM Resorts Cyberattack Read More »
Attackers use fallback ransomware if LockBit gets blocked 14/09/2023 at 13:15 By Zeljka Zorz Your security solutions might stave off a LockBit infection, but you might still end up with encrypted files: according to Symantec’s threat researchers, some affiliates are using the 3AM ransomware as a fallback option in case LockBit gets flagged and blocked.
Attackers use fallback ransomware if LockBit gets blocked Read More »
Microsoft Teams phishing: Enterprises targeted by ransomware access broker 13/09/2023 at 12:16 By Zeljka Zorz A threat actor known for providing ransomware gangs with initial access to enterprise systems has began phishing employees via Microsoft Teams. “For this activity, Storm-0324 most likely relies on a publicly available tool called TeamsPhisher,” Microsoft threat researchers noted. About
Microsoft Teams phishing: Enterprises targeted by ransomware access broker Read More »
Latest fraud schemes targeting the payments ecosystem 13/09/2023 at 06:33 By Help Net Security Threat actors continued to exploit technical misconfigurations through various fraud schemes, according to a new report from Visa. These include the use of malvertising and search engine optimization (SEO) techniques to cultivate compelling and effective phishing and social engineering campaigns, the
Latest fraud schemes targeting the payments ecosystem Read More »
MGM Resorts Confirms ‘Cybersecurity Issue’, Shuts Down Systems 11/09/2023 at 23:48 By Ryan Naraine MGM Resorts confirms “cybersecurity incident” led to the shutdown of web sites and IT systems of hotels throughout the United States. The post MGM Resorts Confirms ‘Cybersecurity Issue’, Shuts Down Systems appeared first on SecurityWeek. This article is an excerpt from
MGM Resorts Confirms ‘Cybersecurity Issue’, Shuts Down Systems Read More »
CISOs and board members work more closely than ever before 11/09/2023 at 08:31 By Help Net Security 73% of board members believe they face the risk of a major cyber attack in the next 12 months, a notable increase from 65% in 2022, according to Proofpoint. Likewise, 53% feel unprepared to cope with a targeted
CISOs and board members work more closely than ever before Read More »
Best practices for implementing a proper backup strategy 08/09/2023 at 07:01 By Help Net Security Implementing a robust backup strategy for safeguarding crucial business data is more essential than ever. Without such a plan, organizations risk paying ransoms and incurring expenses related to investigations and lost productivity. In this Help Net Security video, David Boland,
Best practices for implementing a proper backup strategy Read More »
75% of education sector attacks linked to compromised accounts 08/09/2023 at 06:31 By Help Net Security 69% of organizations in the education sector suffered a cyberattack within the last 12 months, according to Netwrix. Phishing and account compromise threaten the education sector Phishing and user account compromise were the most common attack paths for these
75% of education sector attacks linked to compromised accounts Read More »
Old vulnerabilities are still a big problem 06/09/2023 at 17:01 By Zeljka Zorz A recently flagged phishing campaign aimed at delivering the Agent Tesla RAT to unsuspecting users takes advantage of old vulnerabilities in Microsoft Office that allow remote code execution. “Despite fixes for CVE-2017-11882/CVE-2018-0802 being released by Microsoft in November, 2017 and January, 2018,
Old vulnerabilities are still a big problem Read More »
Cybercriminals target MS SQL servers to deliver ransomware 06/09/2023 at 16:02 By Helga Labus A cyberattack campaign is targeting exposed Microsoft SQL (MS SQL) databases, aiming to deliver ransomware and Cobalt Strike payloads. The attack campaign The attackers target exposed MS SQL servers by brute-forcing access credentials. After having successfully authenticated, they start enumerating the
Cybercriminals target MS SQL servers to deliver ransomware Read More »
Ransomware Attack on Fencing Systems Maker Zaun Impacts UK Military Data 05/09/2023 at 13:17 By Ionut Arghire British mesh fencing systems maker Zaun discloses LockBit ransomware attack potentially impacting data related to UK military and intelligence sites. The post Ransomware Attack on Fencing Systems Maker Zaun Impacts UK Military Data appeared first on SecurityWeek. This
Ransomware Attack on Fencing Systems Maker Zaun Impacts UK Military Data Read More »
Ransomware attacks go beyond just data 04/09/2023 at 07:01 By Help Net Security 65% of organizations confirmed that ransomware is one of the top three threats to their viability, and for 13%, it is the biggest threat, according to a report by Enterprise Strategy Group (ESG) and Keepit. Organizations’ strategies against ransomware According to the
Ransomware attacks go beyond just data Read More »
Free Decryptor Available for ‘Key Group’ Ransomware 01/09/2023 at 15:47 By Ionut Arghire EclecticIQ has released a free decryption tool to help victims of the Key Group ransomware recover their data without paying a ransom. The post Free Decryptor Available for ‘Key Group’ Ransomware appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Free Decryptor Available for ‘Key Group’ Ransomware Read More »
Cisco VPNs with no MFA enabled hit by ransomware groups 31/08/2023 at 14:46 By Zeljka Zorz Since March 2023 (and possibly even earlier), affiliates of the Akira and LockBit ransomware operators have been breaching organizations via Cisco ASA SSL VPN appliances. “In some cases, adversaries have conducted credential stuffing attacks that leveraged weak or default
Cisco VPNs with no MFA enabled hit by ransomware groups Read More »
Rising cyber incidents challenge healthcare organizations 30/08/2023 at 06:01 By Help Net Security Healthcare organizations are facing many cybersecurity challenges that require them to increasingly prioritize cybersecurity and compliance, according to Claroty. Threat actors are not only targeting IT systems, but have now set their sights on cyber-physical systems – from IoMT devices, to building
Rising cyber incidents challenge healthcare organizations Read More »
Operation ‘Duck Hunt’: Qakbot Malware Disrupted, $8.6 Million in Cryptocurrency Seized 30/08/2023 at 00:03 By Ryan Naraine U.S. law enforcement announce the disruption of the notorious Qakbot cybercrime operation and the release of an auto-disinfection tool to 700,000 infected machines. The post Operation ‘Duck Hunt’: Qakbot Malware Disrupted, $8.6 Million in Cryptocurrency Seized appeared first
Operation ‘Duck Hunt’: Qakbot Malware Disrupted, $8.6 Million in Cryptocurrency Seized Read More »
Personal, Health Information of 1.2 Million Stolen in PurFoods Ransomware Attack 29/08/2023 at 15:01 By Ionut Arghire PurFoods says the personal and protected health information of over 1.2 million individuals was stolen in a February 2023 ransomware attack. The post Personal, Health Information of 1.2 Million Stolen in PurFoods Ransomware Attack appeared first on SecurityWeek.
Personal, Health Information of 1.2 Million Stolen in PurFoods Ransomware Attack Read More »
Ransomware group exploits Citrix NetScaler systems for initial access 29/08/2023 at 14:50 By Helga Labus A known threat actor specializing in ransomware attacks is believed to be behind a recent campaign that targeted unpatched internet-facing Citrix NetScaler systems to serve as an initial foothold into enterprise networks. “Our data indicates strong similarity between attacks using
Ransomware group exploits Citrix NetScaler systems for initial access Read More »
Ohio History Organization Says Personal Information Stolen in Ransomware Attack 28/08/2023 at 14:17 By Ionut Arghire Personal information stolen in ransomware attack at Ohio History Connection posted online after organization refuses to pay ransom. The post Ohio History Organization Says Personal Information Stolen in Ransomware Attack appeared first on SecurityWeek. This article is an excerpt
Ohio History Organization Says Personal Information Stolen in Ransomware Attack Read More »