Security Affairs

JUNE 15, 2021

The source code for the Paradise Ransomware has been released on a hacking forum allowing threat actors to develop their customized variant. The source code for the Paradise Ransomware has been released on the hacking forum XSS allowing threat actors to develop their own customized ransomware operation. Pierluigi Paganini.

Ransomware 144

Ransomware Hacking Encryption Malware 144

Security Affairs

MARCH 20, 2021

Acer is the world’s 6th-largest PC vendor by unit sales as of January 2021, it has more than 7,000 employees (2019) and in 2019 declared 234.29 financial spreadsheets, bank documents and communications) as proof of the hack. Acer is currently investigating the security breach. SecurityAffairs – hacking, ransoware).

Ransomware 145

Ransomware Hacking Computers and Electronics Malware 145

Security Affairs

OCTOBER 31, 2022

The Snatch ransomware group claims to have hacked HENSOLDT France, a company specializing in military and defense electronics. The Snatch ransomware group claims to have hacked the French company HENSOLDT France. The group has published a sample of the stolen data (94 MB) as proof of the hack. Pierluigi Paganini.

Computers and Electronics 127

Computers and Electronics Hacking Ransomware Data breaches 127

Security Affairs

AUGUST 19, 2021

The flaw was disclosed by Citrix in December 2019, the experts explained that it could be exploited by attackers to access company networks. The CVE-2019-19781 vulnerability was discovered by Mikhail Klyuchnikov from Positive Technologies. SecurityAffairs – hacking, Citrix). Follow me on Twitter: @securityaffairs and Facebook.

Hacking 136

Hacking Firewall Accountability Technology 136

Krebs on Security

FEBRUARY 22, 2024

A new data leak that appears to have come from one of China’s top private cybersecurity firms provides a rare glimpse into the commercial side of China’s many state-sponsored hacking groups. In 2021, the Sichuan provincial government named i-SOON as one of “the top 30 information security companies.”

Government 302

Government Hacking Cyber threats Mobile 302

Security Affairs

DECEMBER 15, 2023

The Snatch ransomware group announced it had hacked the food giant Kraft Heinz, the company is investigating the claims. The Snatch ransomware group claims to have hacked Kraft Heinz in August and on December 14, it added the company to the list of victims on its leak site.

Hacking 139

Hacking Ransomware Computers and Electronics Marketing 139

Security Affairs

MAY 27, 2021

In April, the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) previously warned of attacks carried out by APT groups targeting Fortinet FortiOS servers using multiple exploits. The threat actors are actively exploiting the following vulnerabilities in Fortinet FortiOS: CVE-2018-13379 ; CVE-2020-12812 ; CVE-2019-5591.

VPN 140

VPN Government Hacking Accountability 140

Krebs on Security

JUNE 22, 2022

last week said they dismantled the “ RSOCKS ” botnet, a collection of millions of hacked devices that were sold as “proxies” to cybercriminals looking for ways to route their malicious traffic through someone else’s computer. A copy of the passport for Denis Kloster, as posted to his Vkontakte page in 2019.

Advertising 308

Advertising Cybercrime System Administration Hacking 308

Security Affairs

SEPTEMBER 2, 2022

Researchers discovered that the infrastructure used in Cisco hack was the same used to target a Workforce Management Solution firm. Researchers from cybersecurity firm eSentire discovered that the attack infrastructure used in recent Cisco hack was also used to attack a top Workforce Management corporation in in April 2022.

Hacking 117

Hacking VPN Ransomware Authentication 117

Security Affairs

MARCH 2, 2024

In October 2019, WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users. The legal action alleges that the Israeli surveillance firm tried to compromise approximately 1,400 individuals through WhatsApp hacking attempts. from April 29, 2018, to May 10, 2020).

Spyware 145

Spyware Surveillance Architecture Software 145

Security Affairs

AUGUST 22, 2023

Snatch gang claims the hack of the Department of Defence South Africa and added the military organization to its leak site. In October 2022, the Snatch ransomware group claimed to have hacked the French company HENSOLDT France. The Snatch ransomware group added the Department of Defence South Africa to its data leak site.

Hacking 98

Hacking Computers and Electronics Ransomware Risk 98

Krebs on Security

JANUARY 24, 2023

The plea comes just months after Emelyantsev was extradited from Bulgaria, where he told investigators, “America is looking for me because I have enormous information and they need it.” Denis Kloster, as posted to his Vkontakte page in 2019. “Thanks to you, we are now developing in the field of information security and anonymity!,”

Cybercrime 259

Cybercrime Advertising IoT Malware 259

Security Affairs

JANUARY 12, 2022

Some of the hacking campaigns that were publicly attributed to Russian state-sponsored APT actors by U.S. SecurityAffairs – hacking, Russia-linked threat actors). The post Russia-linked threat actors targets critical infrastructure, US authorities warn appeared first on Security Affairs. Pierluigi Paganini.

Malware 144

Malware Cyber threats Government Hacking 144

Security Affairs

NOVEMBER 18, 2023

The man was arrested in September 2019 while traveling to the U. Azari orchestrated the international hacking-for-hire spearphishing campaign from his home in Israel. “From approximately November 2014 to September 2019, AZARI engaged in an extensive spearphishing campaign that targeted individuals and companies in the U.

Identity Theft 141

Identity Theft Phishing Hacking Accountability 141

Security Affairs

JULY 31, 2021

Microsoft Office 365 email accounts of employees at 27 US Attorneys’ offices were breached by the Russia-linked SVR group as part of the SolarWinds hack, DoJ warns. The vulnerabilities listed in the advisory are: CVE-2018-13379 Fortinet CVE-2019-9670 Zimbra CVE-2019-11510 Pulse Secure CVE-2019-19781 Citrix CVE-2020-4006 VMware.

Accountability 135

Accountability Hacking Information Security Government 135

Security Affairs

MARCH 30, 2024

The German Federal Office for Information Security (BSI) warned of thousands of Microsoft Exchange servers in the country vulnerable to critical flaws. According to current findings from the BSI , around twelve percent of them are so outdated that security updates are no longer offered for them.

Information Security 142

Information Security Internet Internet Healthcare 142

Security Affairs

MAY 7, 2021

SecurityAffairs – hacking, APT29). The post Russia-linked APT29 group changes TTPs following April advisories appeared first on Security Affairs. US CISA also published details about Russian SVR activities related to SolarWinds compromise which include mitigation strategies. Follow me on Twitter: @securityaffairs and Facebook.

Cybersecurity 143

Cybersecurity Hacking Government Malware 143

Security Affairs

APRIL 8, 2024

In 2019 the company made the headlines for its 10M USD bug bounty program along with its unique “ Vulnerability Research Hub ” (VRH) online platform. The buyers claim to use the exploits to develop hacking tools used for this investigations. ” reads the announcement published by the company.

Hacking 139

Hacking Software Government Information Security 139

Security Affairs

SEPTEMBER 19, 2021

The trio has worked as hackers-for-hire for the United Arab Emirates cybersecurity company DarkMatter between January 2016 and November 2019. ExpressVPN published an official response that confirmed the accusation of the DoJ but that pointed out that the experts took part to the Project Raven before he joined to the company in 2019.

Surveillance 145

Surveillance VPN Hacking Cybersecurity 145

Security Affairs

NOVEMBER 15, 2021

These issues impacts Windows Server 2019 and lower versions, including Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2. SecurityAffairs – hacking, Operation Cyclone). Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Authentication 141

Authentication Hacking Information Security 141

Security Affairs

DECEMBER 27, 2021

At this time, it is not clear how threat actors compromised the QNAP devices, some users claim that attackers exploited a flaw in the Photo Station software to hack them. “It is important to note that there is a free decryptor for files locked with an older version (before July 17th, 2019) of eCh0raix ransomware. TXTT” extension.

Ransomware 144

Ransomware Encryption Manufacturing Hacking 144

Security Affairs

OCTOBER 1, 2024

CVE-2019-0344 is a deserialization of untrusted data vulnerability. Pierluigi Paganini Follow me on Twitter: @securityaffairs and Facebook and Mastodon ( SecurityAffairs – hacking, CISA ) CVE-2020-15415 is an OS command injection vulnerability in DrayTek Multiple Vigor Routers.

IoT 134

IoT Hacking Cybersecurity Risk 134

Security Affairs

MARCH 27, 2024

The Star Labs team demonstrated the vulnerability at the Pwn2Own Vancouver 2023 hacking competition. Microsoft addressed the remote code execution flaw in SharePoint Server, tracked as CVE-2023-24955 (CVSS Score 7.2), in May 2023. ” reads the advisory published by Microsoft.

Hacking 137

Hacking Authentication Cybersecurity Risk 137

Security Affairs

DECEMBER 6, 2024

Atrium Health launched an investigation into the security breach and discovered that from January 2015 to July 2019, certain online tracking technologies were active on its MyAtriumHealth (formerly MyCarolinas) Patient Portal, accessible via web and mobile. The company notified the US Department of Health and Human Services (HHS).

Data breaches 117

Data breaches Identity Theft Accountability Healthcare 117

Security Affairs

OCTOBER 27, 2021

Grief ransomware operators announced to have hacked US National Rifle Association (NRA) and threaten to leak the stolen data. The NRA was added to the list of compromised organizations on the leak site of the group, that gang also published a set of documents as proof of the hack. In 2019, the U.S. Pierluigi Paganini.

Ransomware 143

Ransomware Banking Cybercrime Hacking 143

Security Affairs

DECEMBER 3, 2024

The news of the hack was reported by the Gazeta Wyborcza daily, and unfortunately, it isn’t the first time that the Pegasus spyware was used in the country. In 2021, the University of Toronto-based Citizen Lab Internet reported that a Polish opposition duo was hacked with NSO spyware.

Spyware 125

Spyware Government Surveillance Hacking 125

Security Affairs

JANUARY 2, 2022

In this post, I present an abstract from the original analysis that I suggest reading, below the annual increase in the number of breaches: Year Number of Scams Year Increase In Number of Breaches (%) 2021 76 2020 – 2021 145% 2020 31 2019 – 2020 19% 2019 26 2018 – 2019 73%. SecurityAffairs – hacking, crypto security breaches).

Cryptocurrency 125

Cryptocurrency Scams Marketing Hacking 125

Security Affairs

JUNE 7, 2024

Akamai observed a Chinese-speaking group exploiting two flaws, tracked as CVE-2018-20062 and CVE-2019-9082, in ThinkPHP applications. Akamai researchers observed a Chinese threat actor exploiting two old remote code execution vulnerabilities, tracked as CVE-2018-20062 and CVE-2019-9082 , in ThinkPHP.

Passwords 141

Passwords Hacking Information Security 141

Security Affairs

NOVEMBER 6, 2022

This week LockBit ransomware group claimed to have hacked other major organizations, the multinational automotive group Continental and the defense giant Thales. The gang has been active since at least 2019 and today it is one of the most active ransomware gangs. SecurityAffairs – hacking, Kearney & Company).

Ransomware 144

Ransomware Government Hacking Information Security 144

Security Affairs

JULY 22, 2021

The CVE-2019-2729 flaw is a remote code execution vulnerability that could be exploited by an unauthenticated attacker. “This Security Alert addresses CVE-2019-2729, a deserialization vulnerability via XMLDecoder in Oracle WebLogic Server Web Services. Oracle urges customers to install security updates immediately.

Authentication 142

Authentication Passwords Hacking Technology 142

Security Affairs

SEPTEMBER 28, 2024

In 2019, Meta disclosed that it had inadvertently stored some users’ passwords in plaintext on its internal systems, without encrypting them. “As part of a routine security review in January, we found that some user passwords were being stored in a readable format within our internal data storage systems.

Passwords 138

Passwords Media Encryption Internet 138

Security Affairs

NOVEMBER 22, 2021

” said Demetrius Comes, GoDaddy’s Chief Information Security Officer. The hosting provider submitted a data breach notice with the California Attorney General and revealed that the intrusion took place in October 2019. SecurityAffairs – hacking, data breach). Pierluigi Paganini.

Data breaches 143

Data breaches Passwords Accountability Information Security 143

Security Affairs

SEPTEMBER 22, 2022

The gang has been active since at least 2019 and today it is one of the most active ransomware gangs. Unknown person @ali_qushji said his team has hacked the LockBit servers and found the possible builder of LockBit Black (3.0) Ali Qushji claims to have hacked the servers of the ransomware gang and stolen the ransomware encryptor.

Ransomware 142

Ransomware Hacking Passwords Accountability 142

Security Affairs

NOVEMBER 18, 2024

T-Mobile confirmed being a victim of recent hacking campaigns linked to China-based threat actors targeting telecom companies. T-Mobile confirms it was hacked as part of a long-running cyber espionage campaign targeting Telco companies. Salt Typhoon is a China-linked APT group active since at least 2019.

Mobile 120

Mobile Telecommunications Data breaches Hacking 120

Security Affairs

NOVEMBER 7, 2024

CVE-2019-16278 – is a directory traversal issue in the function http_verify in nostromo nhttpd through 1.9.6 Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini ( SecurityAffairs – hacking, CISA ) Versions up to 2.3.6 and unpatched 2.3.7

Firewall 132

Firewall Authentication Accountability Risk 132

Security Affairs

NOVEMBER 16, 2024

.” NSO Group continued using WhatsApp exploits, including spyware called “Erised,” even after being sued for violating anti-hacking laws. In October 2019, WhatsApp sued the Israeli surveillance firm NSO Group accusing it of carrying out malicious attacks against its users.

Spyware 125

Spyware Surveillance Malware Hacking 125

Security Affairs

AUGUST 17, 2022

Recorded Future identified a link between RedAlpha and a Chinese information security company, whose name appears in the registration of multiple RedAlpha domains. The company called “Nanjing Qinglan Information Technology Co., ” is now known as “Jiangsu Cimer Information Security Technology Co.

Phishing 141

Phishing Government Information Security Technology 141