Data collection Energy and Utilities Ransomware 
SecureList
MARCH 13, 2025
Additionally, Head Mare attacks utilized command-and-control (C2) servers exclusively linked to Twelve prior to these incidents. Anti-detection techniques Head Mare continued to use the Masquerading technique (T1655), naming utility executables like standard operating system files.
SecureWorld News
AUGUST 23, 2024
The incident has raised concerns within the energy sector, as Halliburton plays a crucial role in global oilfield operations, and any disruption to its networks could have far-reaching implications. The potential cyberattack on Halliburton underscores the growing threat to critical infrastructure and companies within the energy sector.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
CyberSecurity Insiders
SEPTEMBER 21, 2021
Beyond traditional IT operations that utilize servers, routers, PCs and switches, these organizations also rely on OT, such as programmable logic controllers (PLCs), distributed control systems (DCSs) and human machine interfaces (HMIs) to run their physical plants and factories. whether done through the network or locally. Conclusion.
Thales Cloud Protection & Licensing
MAY 13, 2021
Operating the country’s largest refined products pipeline, Colonial Pipeline was brought to its knees over the weekend by a ransomware attack by cybercriminal gang, DarkSide. Data Manipulation. Many breaches are all about data collection, which appears to be what happened in the case of Colonial Pipeline.
Cisco Security
AUGUST 26, 2021
This year we saw the reemergence of old vectors: from ransomware & trojans, to supply chain attacks. With the addition of Kenna Security into our program we now have over 250 technology partners and over 400 integrations for our mutual customers to utilize. Read more here. Read more here.
SecureList
FEBRUARY 16, 2023
In addition to that, they might ask the victim to cover the “shipping costs” Growing utility rates and an increase in the price of natural resources have prompted several governments to start discussing compensations for the population. Payout notices could arrive by mail, email, or as a text message.
SecureList
NOVEMBER 29, 2024
CloudSorcerer is a sophisticated cyber-espionage tool used for stealth monitoring, data collection and exfiltration via Microsoft, Yandex and Dropbox cloud infrastructures. The malware utilizes cloud resources for its C2 (command and control) servers, which it accesses via APIs using authentication tokens.
Expert insights. Personalized for you.
75 
Let's personalize your content