Business Services and Malware - Cyber Security Informer

Orange Business Services hit by Nefilim ransomware operators

Security Affairs

JULY 17, 2020

According to Cyble, the hackers claim to have compromised the Orange Business Solutions , a subsidiary of Orange S.A, Orange confirmed to BleepingComputer that the Orange Business Services division was victim of a ransomware attack on the night of Saturday, July 4th, 2020, into July 5th. Pierluigi Paganini.

Business Services

Business Services Ransomware Mobile Telecommunications

Government contractor Conduent disclosed a data breach

Security Affairs

APRIL 16, 2025

The business services provider Conduent told the SEC a January cyberattack exposed personal data, including names and Social Security numbers. The business services provider Conduent revealed that personal information, including names and Social Security numbers, was stolen in a January cyberattack.

Data breaches

Data breaches Government Cyber Insurance Business Services

TinyNuke banking malware targets French organizations

Security Affairs

DECEMBER 13, 2021

The TinyNuke malware is back and now was used in attacks aimed at French users working in manufacturing, technology, construction, and business services. Proofpoint researchers uncovered a campaign exclusively targeting French entities and organizations with operations in France with the banking malware TinyNuke.

Banking

Banking Malware Manufacturing Business Services

RSAC insights: Malware is now spreading via weaponized files circulating in data lakes, file shares

The Last Watchdog

JUNE 3, 2022

Bad actors are constantly evolving their techniques to compromise the organization’s business services,” Srinivasan says. At a fundamental level, this attacker was able to exploit gaps in the convoluted matrix of interconnected resources the bank and law firm now rely on to conduct a routine online transaction.

Unstructured Data

Unstructured Data Malware Digital transformation Authentication

UNC2529, a new sophisticated cybercrime gang that targets U.S. orgs with 3 malware

Security Affairs

MAY 5, 2021

A new cybercrime gang, tracked as UNC2529 , has targeted many organizations in the US and other countries using new sophisticated malware. A new financially motivated threat actor, tracked by FireEye Experts as UNC2529, has targeted many organizations in the United States and other countries using several new pieces of malware.

Cybercrime

Cybercrime Malware Manufacturing Retail

Business Services industry targeted across the country for backdoor access

Malwarebytes

AUGUST 18, 2022

The presence of so many hacking tools in the detections for the Business Services industry tells a story about these organizations being targeted for not only infection, but to establish backdoors and likely gain access to customers of the organizations through the victim’s network.

Business Services

Business Services Insurance Hacking Ransomware

WorkersDevBackdoor Malware: The Hidden Threat in Online Ads

Penetration Testing

JANUARY 11, 2024

Detected by eSentire’s Threat Response Unit (TRU) in November 2023, WorkersDevBackdoor malware has been impacting the business services industry with its cunning distribution and destructive capabilities.

Malware

Malware Penetration Testing Business Services Advertising

French Users and Orgs Targeted by TinyNuke Info-Stealing Malware

Heimadal Security

DECEMBER 14, 2021

According to security researchers, the TinyNuke banking malware (also known as Nukebot) has resurfaced in a new operation exclusively targeting French users and organizations with invoice-themed email lures. The targets are working in manufacturing, technology, construction, and business services. What Is TinyNuke?

Malware

Malware Banking Manufacturing Business Services

AkiraBot: AI-Powered spam bot evades CAPTCHA to target 80,000+ websites

Security Affairs

APRIL 10, 2025

. “These technologies are primarily used by small- to medium-sized businesses for their ease in enabling website development with integrations for eCommerce, website content management, and business service offerings.”

eCommerce

eCommerce Technology DNS Business Services

Operation Phobos Aetor: Police dismantled 8Base ransomware gang

Security Affairs

FEBRUARY 11, 2025

“They allegedly used the Phobos malware to encrypt information on the networks, blocking the companies from accessing the data unless a ransom was paid and a decryption key was provided by the gang. ” reported the website Nation Thailand.

Ransomware

Ransomware Encryption Backups Malware

TinyNuke info-stealing malware is again attacking French users

Bleeping Computer

DECEMBER 13, 2021

The info-stealing malware TinyNuke has re-emerged in a new campaign targeting French users with invoice-themed lures in emails sent to corporate addresses and individuals working in manufacturing, technology, construction, and business services. [.].

Malware

Malware Manufacturing Business Services Technology

NetSupport RAT Infections on the Rise - Targeting Government and Business Sectors

The Hacker News

NOVEMBER 20, 2023

Threat actors are targeting the education, government and business services sectors with a remote access trojan called NetSupport RAT.

Government

Government Business Services Education Phishing

Experts warn of a surge in NetSupport RAT attacks against education and government sectors

Security Affairs

NOVEMBER 21, 2023

Experts warn of a surge in NetSupport RAT attacks against education, government, and business services sectors. The most impacted sectors are education, government, and business services. The software was delivered through fraudulent updates, drive-by downloads, malware loaders (i.e.

Education

Education Government Business Services Software

LinkedIn Phishing Ramps Up With More-Targeted Attacks

Dark Reading

APRIL 5, 2021

Seeking to take advantage of out-of-work users, malware groups continue to use LinkedIn and business services to offer fictional jobs and deliver infections instead.

Phishing

Phishing Business Services Malware

Balikbayan Foxes group spoofs Philippine gov to spread RATs

Security Affairs

NOVEMBER 1, 2021

Experts uncovered a new threat actor, tracked as Balikbayan Foxes, that is impersonating the Philippine government to spread malware. . The group focuses on Shipping/Logistics, Manufacturing, Business Services, Pharmaceutical, and Energy entities, among others. ” reads the analysis published by the experts.

Malware

Malware Government Surveillance Phishing

8Base ransomware operators use a new variant of the Phobos ransomware

Security Affairs

NOVEMBER 19, 2023

The group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT. The experts observed a massive spike in activity associated with this threat actor between May and June 2023. and Brazil.

Ransomware

Ransomware Encryption Backups Malware

Over 3.1 million cyber attacks on cloud user accounts

CyberSecurity Insiders

APRIL 13, 2021

And most of them were malware related followed by account hijackings and targeted attacks against vulnerabilities. Legal, Real Estate and transportation and business service accounts remain in the second place on the list.

Cyber Attacks

Cyber Attacks Accountability Retail Antivirus

A week in security (August 15 - August 21)

Malwarebytes

AUGUST 22, 2022

Introducing Malwarebytes Cloud Storage Scanning: How to scan for malware in cloud file storage repositories. Business Services industry targeted across the country for backdoor access. Last week on Malwarebytes Labs: Donut breach: Lessons from pen-tester Mike Miller: Lock and Code S03E17. JSSLoader: the shellcode edition.

DNS

DNS Business Services Phishing Government

New Insurance Product Adds Coverage for Cryptomining Malware Losses

Dark Reading

AUGUST 22, 2018

Product also covers all forms of illicit use of business services, including toll fraud and unauthorized use of cloud services.

Insurance

Insurance Business Services Malware

These Two Identity Juggernauts Identified Zscaler as a Leader in Zero Trust for Remote Work

Security Boulevard

FEBRUARY 10, 2021

For years, we have talked about the importance of zero trust for access to apps and its two key foundational elements: identity, and the use of business policies (that can adapt as needed) when it comes to securing user access to critical business services. For example, this is where our investment in SCIM 2.0

VPN

VPN Business Services Marketing Malware

Ransomware infected systems at Xchanging, a DXC subsidiary

Security Affairs

JULY 6, 2020

Global IT services and solutions provider DXC Technology disclosed a ransomware attack that infected systems at its Xchanging subsidiary. Xchanging is a business process and technology services provider and integrator, which provides technology-enabled business services to the commercial insurance industry.

Ransomware

Ransomware Insurance Financial Services Advertising

LockFile Ransomware uses a new intermittent encryption technique

Security Affairs

AUGUST 31, 2021

ransomware: The victims of the Lockfile ransomware gang are in the manufacturing, financial services, engineering, legal, business services, and travel and tourism sectors. The HTA ransom note used by LockFile closely resembles the one used by LockBit 2.0

Encryption

Encryption Ransomware Financial Services Antivirus

New LockFile ransomware gang uses ProxyShell and PetitPotam exploits

Security Affairs

AUGUST 21, 2021

” The victims of the Lockfile ransomware gang are in the manufacturing, financial services, engineering, legal, business services, and travel and tourism sectors. It is not clear how the attackers gain initial access to the Microsoft Exchange Servers.”

Ransomware

Ransomware Hacking Financial Services Encryption

Weakness at the Network Edge: Mandiant Examines 2022’s Zero-Day Exploits

eSecurity Planet

MARCH 27, 2023

” The three activity sets included a campaign against the Philippine government between March and May 2022; a campaign against telecommunications and business service providers in South Asia in April 2022; and a campaign against organizations in Belarus and Russia in May 2022.

Firewall

Firewall Internet Internet Ransomware

Port of San Diego hit by a cyber attack a few days after the attack on the Port of Barcelona

Security Affairs

SEPTEMBER 28, 2018

Port employees are currently at work but have limited functionality, which may have temporary impacts on service to the public, especially in the areas of park permits, public records requests, and business services.

Cyber Attacks

Cyber Attacks Advertising Ransomware Business Services

Experts warn of a spike in May and June of 8Base ransomware attacks

Security Affairs

JUNE 28, 2023

The group has been active since March 2022, it focused on small and medium-size businesses in multiple industries, including finance, manufacturing, business services, and IT. The experts observed a massive spike in activity associated with this threat actor between May and June 2023. and Brazil.

Ransomware

Ransomware Encryption Manufacturing Business Services

Top IT Asset Management Tools for Security

eSecurity Planet

DECEMBER 1, 2021

Additionally, they often provide an accurate account of technology asset lifecycle costs and risks as well as built-in cybersecurity features to combat ransomware and malware. ITAM has a role, too, in guiding management in its efforts to enhance productivity by implementing hardware upgrades or business software. Freshservice.

Software

Software Risk Mobile Business Services

Cyber security guidance for small fleet operators

Pen Test Partners

JANUARY 23, 2025

Attackers use phishing, malware, ransomware, and scams like BEC to gain access to systems and cause disruption. They may be motivated by financial gain, getting hold of sensitive data, or just disrupting to your business. Four common of cyber-attacks are: Malware attack malicious software is installed on your machines.

Passwords

Passwords Phishing Cyber Attacks Media

How to Enhance IAM by Adding Layers of Zero Trust

eSecurity Planet

JULY 11, 2023

Image credit: Kolide Kolide specifically focuses on the devices attempting to access business services. Kolide doesn’t automatically trust devices until they demonstrate compliance with its policies, which users can configure in accordance with their business’s security strategy.

Architecture

Architecture Firewall Authentication Financial Services

Migrating from On Premise to Microsoft Office 365

Spinone

DECEMBER 26, 2018

Microsoft Office 365 – Powerful and Familiar Business Services Microsoft Office 365 public cloud offering provides a powerful suite of services for organizations looking to move services and infrastructure to the public cloud.

Mobile

Mobile Cloud Migration Software Artificial Intelligence

Cloud Security Checklist

Spinone

DECEMBER 28, 2018

The cloud has certainly matured as a platform and solution for today’s business-critical applications. Organizations have chosen to run not only production virtual machines on top of cloud infrastructure but also business services such as email and file storage.

Backups

Backups Technology Computers and Electronics Accountability

G Suite Admin Tasks Every Google Administrator Should Do

Spinone

DECEMBER 19, 2018

However, by utilizing Google’s powerful infrastructure and software stack, businesses today are able to quickly have access to the same powerful infrastructure running Google’s services, as well as plug into Google’s business services such as Gmail , Google Team Drives , Google Calendar, and many other Google services.

Backups

Backups Authentication Accountability Encryption

Migrating from On Premise to Google G Suite

Spinone

DECEMBER 27, 2018

Obtaining the Google G Suite Skills Needed for Migration The really nice thing about Google G Suite is there are a wealth of resources for organization’s on-premise IT Teams to leverage to quickly get up to speed with Google G Suite before migrating business services and data to the G Suite public cloud.

Cloud Migration

Cloud Migration Backups Ransomware Education

Spam and phishing in 2024

SecureList

FEBRUARY 19, 2025

Some fake social media and messenger pages were designed not to steal login credentials but to install malware on victims’ devices. However, instead of an upgraded app, users downloaded malware onto their devices. We assume that these messages were sent from compromised email accounts of the recipients’ business partners.

Phishing

Phishing Scams Cryptocurrency Computers and Electronics

Security Affairs newsletter Round 273

Security Affairs

JULY 19, 2020

Every week the best security articles from Security Affairs free for you in your email box. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

DNS

DNS Advertising Surveillance Malware

Cyber Security Informer

Orange Business Services hit by Nefilim ransomware operators

Government contractor Conduent disclosed a data breach

Trending Sources

TinyNuke banking malware targets French organizations

RSAC insights: Malware is now spreading via weaponized files circulating in data lakes, file shares

UNC2529, a new sophisticated cybercrime gang that targets U.S. orgs with 3 malware

Business Services industry targeted across the country for backdoor access

WorkersDevBackdoor Malware: The Hidden Threat in Online Ads

French Users and Orgs Targeted by TinyNuke Info-Stealing Malware

AkiraBot: AI-Powered spam bot evades CAPTCHA to target 80,000+ websites

Operation Phobos Aetor: Police dismantled 8Base ransomware gang

TinyNuke info-stealing malware is again attacking French users

NetSupport RAT Infections on the Rise - Targeting Government and Business Sectors

Experts warn of a surge in NetSupport RAT attacks against education and government sectors

LinkedIn Phishing Ramps Up With More-Targeted Attacks

Balikbayan Foxes group spoofs Philippine gov to spread RATs

8Base ransomware operators use a new variant of the Phobos ransomware

Over 3.1 million cyber attacks on cloud user accounts

A week in security (August 15 - August 21)

New Insurance Product Adds Coverage for Cryptomining Malware Losses

These Two Identity Juggernauts Identified Zscaler as a Leader in Zero Trust for Remote Work

Ransomware infected systems at Xchanging, a DXC subsidiary

LockFile Ransomware uses a new intermittent encryption technique

New LockFile ransomware gang uses ProxyShell and PetitPotam exploits

Weakness at the Network Edge: Mandiant Examines 2022’s Zero-Day Exploits

Port of San Diego hit by a cyber attack a few days after the attack on the Port of Barcelona

Experts warn of a spike in May and June of 8Base ransomware attacks

Top IT Asset Management Tools for Security

Cyber security guidance for small fleet operators

How to Enhance IAM by Adding Layers of Zero Trust

Migrating from On Premise to Microsoft Office 365

Cloud Security Checklist

G Suite Admin Tasks Every Google Administrator Should Do

Migrating from On Premise to Google G Suite

Spam and phishing in 2024

Security Affairs newsletter Round 273

Stay Connected