Security Affairs

DECEMBER 12, 2019

The Microsoft Threat Intelligence Center (MSTIC) warns of GALLIUM threat group targeting global telecommunication providers worldwide. The Microsoft Threat Intelligence Center (MSTIC) warns of GALLIUM threat group targeting global telecommunication providers worldwide. ” reads the warning published by Microsoft.

Telecommunications 97

Telecommunications DNS Malware Advertising 97

Security Affairs

JANUARY 14, 2022

The gang was also providing VPN-like services used by other cybercriminal organizations to carry out malicious activities used to deliver malware to the target organization. Source SSU. The law enforcement arrested the leader of the group, a 36-year-old man that lives in Kyiv, along with his wife and three other acquaintances.

Ransomware 137

Ransomware DDOS Telecommunications Malware 137

Krebs on Security

FEBRUARY 18, 2019

Talos reported that these DNS hijacks also paved the way for the attackers to obtain SSL encryption certificates for the targeted domains (e.g. webmail.finance.gov.lb), which allowed them to decrypt the intercepted email and VPN credentials and view them in plain text. adpvpn.adpolice.gov.ae: VPN service for the Abu Dhabi Police.

DNS 279

DNS Internet Internet Government 279

Security Boulevard

MARCH 15, 2022

Other targets include Brazil’s Ministry of Health (MoH) and Brazilian telecommunications operator Claro. Since they appear to be succeeding, Lapsus$ announced that they are looking to recruit insiders employed at telecommunications, software and gaming companies, among other technology businesses.

Ransomware 128

Ransomware Telecommunications Firmware Media 128

Security Affairs

FEBRUARY 2, 2020

Russia’s telecommunications watchdog Roskomnadzor has instituted administrative proceedings against Facebook and Twitter after they refused to store data of Russian users on servers located in the country. This week the Russian government has blocked the ProtonMail end-to-end encrypted email service and ProtonVPN VPN service.

Telecommunications 71

Telecommunications VPN Advertising Government 71

SecureList

MARCH 30, 2021

The actor leveraged vulnerabilities in Pulse Connect Secure in order to hijack VPN sessions, or took advantage of system credentials that were stolen in previous operations. Log of the hijacking VPN session from DESKTOP-A41UVJV. Encrypted Ecipekac Layer II loader (shellcode). Encrypted Ecipekac Layer IV loader (shellcode).

Malware 145

Malware Encryption VPN Technology 145

Digital Shadows

OCTOBER 23, 2024

Within six hours, the attacker began encrypting the organization’s systems. This concealed their attack until the environment was encrypted and backups were sabotaged. Scattered Spider previously targeted telecommunications firms, likely to support its SIM-swapping activities that facilitate account takeovers.

Social Engineering 122

Social Engineering Engineering Accountability Backups 122

SecureWorld News

SEPTEMBER 30, 2022

Check Point has also observed the sharing of open VPN servers for the purpose of bypassing censorship, as Iran has limited the use of internet and social media. The actors used their access to move laterally within the network, encrypt network devices with BitLocker, and hold the decryption keys for ransom.". "In police department.

Government 98

Government Telecommunications Encryption Internet 98

SecureList

JUNE 2, 2022

It primarily goes after targets located in China, such as foreign diplomatic organizations established in the country, members of the academic community, or companies from the defense, logistics and telecommunications sectors. Layout of the encrypted data. x33x44”). Description. Sample value (in hex). Unknown static value.

Malware 137

Malware Encryption Social Engineering Telecommunications 137

SecureList

DECEMBER 12, 2023

To find out, in 2022 we created a list of 700 companies worldwide from different industries: industrial, telecommunication, financial, retail, and others. But are we really conscious of the true scale of the threat? Then we searched through Darknet trying to answer the question of “How likely these companies have suffered a breach?”

Data breaches 127

Data breaches Accountability Telecommunications Malware 127

SecureList

MAY 12, 2021

To ensure that their ability to restore encrypted files would never be questioned, they cultivated an online presence, wrote press releases and generally made sure their name would be known to all potential victims. The malware sample has an encrypted configuration block with many fields, which allow attackers to fine-tune the payload.

Ransomware 145

Ransomware Encryption Malware Cybercrime 145

SecureList

MAY 10, 2021

To prevent attacks via RDP, it is recommended to hide RDP servers behind a VPN or disable UDP port 3389. That said, a VPN is no panacea if it too is vulnerable to amplification attacks. In Q1 2021, for instance, attackers went after Powerhouse VPN servers.

DDOS 138

DDOS Cryptocurrency Media Marketing 138

Digital Shadows

OCTOBER 23, 2024

Within six hours, the attacker began encrypting the organization’s systems. This concealed their attack until the environment was encrypted and backups were sabotaged. Scattered Spider previously targeted telecommunications firms, likely to support its SIM-swapping activities that facilitate account takeovers.

Social Engineering 52

Social Engineering Engineering Accountability Backups 52

eSecurity Planet

APRIL 26, 2022

Company Sector Year Status Perimeter81 VPN and zero trust 2020 Private Wiz Cloud security 2020 Private OneTrust Privacy management 2019 Private Darktrace AI network security 2017 Private Recorded Future Threat intelligence 2017 Acquired: Insight Thycotic Access management 2015 Private Checkmarx Application security 2015 Acquired: P.E.

Cybersecurity 130

Cybersecurity Technology Marketing Healthcare 130

Security Affairs

DECEMBER 4, 2024

China-linked APT group Salt Typhoon has breached telecommunications companies in dozens of countries, US govt warns. President Biden’s deputy national security adviser Anne Neuberger said that China-linked APT group Salt Typhoon has breached telecommunications companies in dozens of countries. reads the joint advisory.

Telecommunications 123

Telecommunications Government Mobile Cyber threats 123

Security Affairs

NOVEMBER 25, 2020

Group-IB’s report Hi-Tech Crime Trends 2020/2021 examines various aspects of cybercrime industry operations and predicts changes to the threat landscape for various sectors, namely the financial industry, telecommunications, retail, manufacturing, and the energy sector. Ransomware operators buy access and then encrypt devices on the network.

Banking 143

Banking Ransomware Phishing Marketing 143

SecureList

APRIL 27, 2021

The attackers used vulnerabilities in an SSL-VPN product to deploy a multi-layered loader we dubbed Ecipekac (aka DESLoader, SigLoader and HEAVYHAND). The victims we observed were all high-profile Tunisian organizations, such as telecommunications or aviation companies. We attribute this activity to APT10 with high confidence.

Malware 145

Malware Government Spyware Social Engineering 145

SecureList

APRIL 23, 2021

In addition, attackers appear to be more focused on exfiltrating data as well as encrypting it, i.e., siphoning off confidential information and threatening to make it public if the victims refuse to pay. These include crypto-ransomware (malware that encrypts your files), screen lockers, browser lockers, and boot lockers. Conclusion.

Ransomware 140

Ransomware Mobile Malware Encryption 140