Russia - Security Ticks

Russian APT Switches to New Backdoor After Malware Exposed by Researchers

APT, Callisto, Malware, Nation-State, Russia, Russian APT, Star Blizzard / SecurityTicks

Russian APT Switches to New Backdoor After Malware Exposed by Researchers 2025-10-22 at 15:03 By Ionut Arghire Star Blizzard started using the NoRobot (BaitSwitch) and MaybeRobot (SimpleFix) malware after public reporting on the LostKeys malware. The post Russian APT Switches to New Backdoor After Malware Exposed by Researchers appeared first on SecurityWeek. This article is […]

React to this headline:

Russian APT Switches to New Backdoor After Malware Exposed by Researchers Read More »

Dutch Teens Arrested for Allegedly Helping Russian Hackers

arrested, cybercrime, hacker, Netherlands, Russia, Wi-Fi / SecurityTicks

Dutch Teens Arrested for Allegedly Helping Russian Hackers 2025-09-29 at 13:12 By Ionut Arghire One of the two 17-year-old boys allegedly walked by law enforcement and embassy offices carrying a Wi-Fi sniffer. The post Dutch Teens Arrested for Allegedly Helping Russian Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

Dutch Teens Arrested for Allegedly Helping Russian Hackers Read More »

Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions

Gamaredon, Malware, Malware & Threats, Russia, Turla, Ukraine / SecurityTicks

Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions 2025-09-19 at 16:36 By Ionut Arghire Turla malware was deployed in February on select systems that Gamaredon had compromised in January. The post Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

Turla and Gamaredon Working Together in Fresh Ukrainian Intrusions Read More »

US Offers $10 Million for Three Russian Energy Firm Hackers

Government, hacker, reward, Russia / SecurityTicks

US Offers $10 Million for Three Russian Energy Firm Hackers 2025-09-04 at 15:41 By Ionut Arghire Marat Tyukov, Mikhail Gavrilov, and Pavel Akulov targeted US critical infrastructure and over 500 energy companies in 135 countries. The post US Offers $10 Million for Three Russian Energy Firm Hackers appeared first on SecurityWeek. This article is an

React to this headline:

US Offers $10 Million for Three Russian Energy Firm Hackers Read More »

Amazon Disrupts Russian Hacking Campaign Targeting Microsoft Users

APT29, cloud security, Cozy Bear, Identity & Access, Midnight Blizzard, Russia / SecurityTicks

Amazon Disrupts Russian Hacking Campaign Targeting Microsoft Users 2025-09-02 at 15:21 By Ionut Arghire The Midnight Blizzard cyberspies used compromised websites to trick users into authorizing devices they controlled. The post Amazon Disrupts Russian Hacking Campaign Targeting Microsoft Users appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

Amazon Disrupts Russian Hacking Campaign Targeting Microsoft Users Read More »

Russian APT Exploiting 7-Year-Old Cisco Vulnerability: FBI

APT, Cisco, Dragonfly, exploited, Nation-State, Russia, Static Tundra / SecurityTicks

Russian APT Exploiting 7-Year-Old Cisco Vulnerability: FBI 2025-08-21 at 14:16 By Ionut Arghire Russian state-sponsored hackers tracked as Static Tundra continue to target Cisco devices affected by CVE-2018-0171. The post Russian APT Exploiting 7-Year-Old Cisco Vulnerability: FBI appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Russian APT Exploiting 7-Year-Old Cisco Vulnerability: FBI Read More »

Norwegian Police Say Pro-Russian Hackers Were Likely Behind Suspected Sabotage at a Dam

ICS, ICS/OT, Norway, OT, Russia / SecurityTicks

Norwegian Police Say Pro-Russian Hackers Were Likely Behind Suspected Sabotage at a Dam 2025-08-14 at 05:03 By Associated Press During the April incident, hackers gained access to a digital system which remotely controls one of the dam’s valves and opened it to increase the water flow. The post Norwegian Police Say Pro-Russian Hackers Were Likely

React to this headline:

Norwegian Police Say Pro-Russian Hackers Were Likely Behind Suspected Sabotage at a Dam Read More »

Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada

cyberespionage, exploited, Nation-State, RomCom, Russia, WinRAR, Zero-Day / SecurityTicks

Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada 2025-08-11 at 12:55 By Eduard Kovacs WinRAR has patched CVE-2025-8088, a zero-day exploited by Russia’s RomCom in attacks on financial, defense, manufacturing and logistics companies. The post Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada appeared first on SecurityWeek. This article is an

React to this headline:

Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada Read More »

Cyberattack On Russian Airline Aeroflot Causes the Cancellation of More Than 100 Flights

Aeroflot, Belarus, cybercrime, Russia / SecurityTicks

Cyberattack On Russian Airline Aeroflot Causes the Cancellation of More Than 100 Flights 2025-07-29 at 04:48 By Associated Press Ukrainian and Belarusian hacker groups, which oppose the rule of Belarusian President Alexander Lukashenko, claimed responsibility for the cyberattack. The post Cyberattack On Russian Airline Aeroflot Causes the Cancellation of More Than 100 Flights appeared first

React to this headline:

Cyberattack On Russian Airline Aeroflot Causes the Cancellation of More Than 100 Flights Read More »

UK Sanctions Russian Hackers Tied to Assassination Attempts

APT, Government, Russia, Sanctions, UK / SecurityTicks

UK Sanctions Russian Hackers Tied to Assassination Attempts 2025-07-22 at 13:34 By Ionut Arghire The UK government has sanctioned three Russian APTs and 18 individuals for their involvement in cyber operations against Ukraine, NATO allies, and EU. The post UK Sanctions Russian Hackers Tied to Assassination Attempts appeared first on SecurityWeek. This article is an

React to this headline:

UK Sanctions Russian Hackers Tied to Assassination Attempts Read More »

Europol-Coordinated Global Operation Takes Down Pro-Russian Cybercrime Network

cybercrime, DDoS, NATO, Russia / SecurityTicks

Europol-Coordinated Global Operation Takes Down Pro-Russian Cybercrime Network 2025-07-16 at 20:54 By Associated Press Codenamed Eastwood, the operation targeted the so-called NoName057(16) group, which was identified as being behind a series of DDoS attacks on municipalities and organizations linked to a NATO summit. The post Europol-Coordinated Global Operation Takes Down Pro-Russian Cybercrime Network appeared first

React to this headline:

Europol-Coordinated Global Operation Takes Down Pro-Russian Cybercrime Network Read More »

Russian APT Hits Ukrainian Government With New Malware via Signal

APT28, Malware, Malware & Threats, Nation-State, Russia, Signal, Ukraine / SecurityTicks

Russian APT Hits Ukrainian Government With New Malware via Signal 2025-06-25 at 10:17 By Ionut Arghire Russia-linked APT28 deployed new malware against Ukrainian government targets through malicious documents sent via Signal chats. The post Russian APT Hits Ukrainian Government With New Malware via Signal appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Russian APT Hits Ukrainian Government With New Malware via Signal Read More »

Russian Hackers Bypass Gmail MFA with App Specific Password Ruse

app-specific passwords, APT29, Citizen Lab, email security, Gmail, Google, Identity & Access, Nation-State, Russia / SecurityTicks

Russian Hackers Bypass Gmail MFA with App Specific Password Ruse 2025-06-18 at 22:01 By Ryan Naraine Russian hackers posed as US State Department staff and convinced targets to generate and give up Google app-specific passwords. The post Russian Hackers Bypass Gmail MFA with App Specific Password Ruse appeared first on SecurityWeek. This article is an

React to this headline:

Russian Hackers Bypass Gmail MFA with App Specific Password Ruse Read More »

Chrome 137 Update Patches High-Severity Vulnerabilities

Chrome, exploited, Russia, Vulnerabilities, vulnerability / SecurityTicks

Chrome 137 Update Patches High-Severity Vulnerabilities 2025-06-18 at 12:52 By Ionut Arghire Google has released a Chrome 137 update to resolve two memory bugs in the browser’s V8 and Profiler components. The post Chrome 137 Update Patches High-Severity Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

Chrome 137 Update Patches High-Severity Vulnerabilities Read More »

Destructive ‘PathWiper’ Targeting Ukraine’s Critical Infrastructure

Featured, Malware, Malware & Threats, PathWiper, Russia, Ukraine, wiper / SecurityTicks

Destructive ‘PathWiper’ Targeting Ukraine’s Critical Infrastructure 2025-06-06 at 13:21 By Ionut Arghire A Russia-linked threat actor has used the destructive malware dubbed PathWiper against a critical infrastructure organization in Ukraine. The post Destructive ‘PathWiper’ Targeting Ukraine’s Critical Infrastructure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this

React to this headline:

Destructive ‘PathWiper’ Targeting Ukraine’s Critical Infrastructure Read More »

Russian Government Hackers Caught Buying Passwords from Cybercriminals

Data Breaches, Microsoft, Nation-State, NATO, phishing, Russia, Ukraine, Void Blizzard / SecurityTicks

Russian Government Hackers Caught Buying Passwords from Cybercriminals 2025-05-27 at 18:01 By Ryan Naraine Microsoft flags a new Kremlin hacking team buying stolen usernames and passwords from infostealer markets for use in cyberespionage attacks. The post Russian Government Hackers Caught Buying Passwords from Cybercriminals appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Russian Government Hackers Caught Buying Passwords from Cybercriminals Read More »

Dutch Intelligence Agencies Say Russian Hackers Stole Police Data in Cyberattack

Nation-State, Netherlands, Russia / SecurityTicks

Dutch Intelligence Agencies Say Russian Hackers Stole Police Data in Cyberattack 2025-05-27 at 16:48 By Associated Press The agencies said that the group, which they called Laundry Bear, is actively trying to steal sensitive data from EU and NATO countries and is “extremely likely Russian state supported.” The post Dutch Intelligence Agencies Say Russian Hackers

React to this headline:

Dutch Intelligence Agencies Say Russian Hackers Stole Police Data in Cyberattack Read More »

Russian Qakbot Gang Leader Indicted in US

charged, cybercrime, Qakbot, Qbot, Russia, Rustam Gallyamov / SecurityTicks

Russian Qakbot Gang Leader Indicted in US 2025-05-23 at 14:17 By Ionut Arghire Russian national Rustam Gallyamov was indicted in the US for his leading role in the development and distribution of Qakbot malware. The post Russian Qakbot Gang Leader Indicted in US appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

Russian Qakbot Gang Leader Indicted in US Read More »

CISA Says Russian Hackers Targeting Western Supply-Lines to Ukraine

APT28, CISA, Malware & Threats, Nation-State, Russia, Ukraine, Unit 26165, Vulnerabilities / SecurityTicks

CISA Says Russian Hackers Targeting Western Supply-Lines to Ukraine 2025-05-21 at 23:47 By Ryan Naraine Russian military intelligence hackers intensify targeting of Western logistics and technology companies moving supplies into Ukraine. The post CISA Says Russian Hackers Targeting Western Supply-Lines to Ukraine appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

CISA Says Russian Hackers Targeting Western Supply-Lines to Ukraine Read More »

Russian APT Exploiting Mail Servers Against Government, Defense Organizations

APT28, email security, MDaemon, Russia, Zero-Day / SecurityTicks

Russian APT Exploiting Mail Servers Against Government, Defense Organizations 2025-05-16 at 13:15 By Ionut Arghire Russia-linked APT28 has been exploiting mail server vulnerabilities against government and defense entities since September 2023. The post Russian APT Exploiting Mail Servers Against Government, Defense Organizations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

Russian APT Exploiting Mail Servers Against Government, Defense Organizations Read More »