Security Affairs

SEPTEMBER 9, 2020

K-Electric, the electricity provider for the city of Karachi, Pakistan, was hit by a Netwalker ransomware attack that blocked billing and online services. K-Electric, the electricity provider for Karachi (Pakistan) is another victim of the Netwalker ransomware gang, the infection disrupted billing and online services.

Ransomware 145

Ransomware Energy and Utilities VPN Advertising 145

SecureList

OCTOBER 18, 2024

Last December, we discovered a new group targeting Russian businesses and government agencies with ransomware. The group under review has a toolkit that includes utilities such as Mimikatz, XenAllPasswordPro, PingCastle, Localtonet, resocks, AnyDesk, PsExec, and others. Moreover, the infrastructure partially overlaps across attacks.

Energy and Utilities 126

Energy and Utilities VPN Encryption Ransomware 126

Herjavec Group

SEPTEMBER 24, 2021

Ransomware is a breakout ransomware group that became operational shortly after the shutdown of the REvil Ransomware and DarkSide Ransomware operations in late Summer 2021. Furthermore, they have openly claimed that BlackMatter is the product of reproducing the “best parts” of previous ransomware operations [1].

Ransomware 109

Ransomware Manufacturing Encryption Energy and Utilities 109

SecureList

MAY 25, 2021

Over the past few years, the ransomware threat landscape has been gradually changing. In some cases, this global trend is just a reflection of the continuous life cycle of threats: old ransomware families shut down and new ones appear and pursue new targets. We have been witness to a paradigm shift. Chronology. May 2019: JSWorm.

Ransomware 131

Ransomware Encryption Malware Energy and Utilities 131

SecureWorld News

DECEMBER 1, 2023

The utility's general manager, Robert J. The attack has been linked to CyberAv3ngers, an Iranian-backed group known for its focus on targeting Israeli water and energy sites. If remote access is necessary, implement a Firewall/VPN in front of the PLC to control network access to the remote PLC. We only serve 15,000 people.

Energy and Utilities 116

Energy and Utilities VPN Authentication Passwords 116

Security Affairs

SEPTEMBER 15, 2020

7 ] CVE-2019-19781 : Citrix Virtual Private Network (VPN) Appliances – CISA has observed the threat actors attempting to discover vulnerable Citrix VPN Appliances. CVE-2019-19781 enabled the actors to execute directory traversal attacks.[ CVE-2019-19781 enabled the actors to execute directory traversal attacks.[

Government 105

Government VPN Firmware Energy and Utilities 105

eSecurity Planet

MARCH 16, 2023

Block TCP 445/SMB outbound from your network by using a perimeter firewall, a local firewall, and via your VPN settings. ” Also read: Ransomware Protection: How to Prevent Ransomware Attacks SmartScreen Zero-Day The SmartScreen zero-day, CVE-2023-24880 , is also being actively exploited but has a much lower CVSS score of 5.4.

Energy and Utilities 98

Energy and Utilities Authentication Firewall Ransomware 98