Security Affairs

FEBRUARY 8, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. Most of the impacted organizations are in the Communications, Energy, Transportation Systems, and Water and Wastewater Systems sectors.

Energy and Utilities 133

Energy and Utilities VPN Manufacturing Firewall 133

Security Affairs

DECEMBER 16, 2021

of all systems targeted by the PseudoManuscrypt malware are part of industrial control systems (ICS) used by organizations in multiple industries, including Engineering, Building Automation, Energy, Manufacturing, Construction, Utilities, and Water Management. The experts revealed that at least 7.2%

Spyware 136

Spyware Energy and Utilities Malware Engineering 136

Security Affairs

APRIL 19, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure.

Energy and Utilities 129

Energy and Utilities Telecommunications Technology Government 129

Security Affairs

SEPTEMBER 15, 2020

7 ] CVE-2019-19781 : Citrix Virtual Private Network (VPN) Appliances – CISA has observed the threat actors attempting to discover vulnerable Citrix VPN Appliances. CVE-2019-19781 enabled the actors to execute directory traversal attacks.[ CVE-2019-19781 enabled the actors to execute directory traversal attacks.[

Government 104

Government VPN Firmware Energy and Utilities 104

Security Affairs

JULY 1, 2021

The attacks took place between mid-2019 and early 2021, the Russia-linked threat actor used a Kubernetes cluster to conduct anonymized brute force access against hundreds of government organizations and businesses worldwide, including think tanks, defense contractors, energy firms. ” reads the joint report.

Energy and Utilities 100

Energy and Utilities VPN Government Passwords 100

Security Affairs

AUGUST 27, 2024

In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The APT group is using almost exclusively living-off-the-land techniques and hands-on-keyboard activity to evade detection.

Energy and Utilities 127

Energy and Utilities Firewall Technology Malware 127

Cisco Security

AUGUST 26, 2021

With the addition of Kenna Security into our program we now have over 250 technology partners and over 400 integrations for our mutual customers to utilize. CyberArk reduces VPN risk with MFA enforcement on any VPN client that supports RADIUS; including Cisco Secure Firewall. A new panel with VPN metrics has been added.

Technology 144

Technology Firewall VPN Authentication 144

eSecurity Planet

MARCH 16, 2023

Block TCP 445/SMB outbound from your network by using a perimeter firewall, a local firewall, and via your VPN settings. “An unauthenticated attacker can exploit this vulnerability by sending a specially crafted packet to a targeted server that utilizes the HTTP Protocol Stack (http.sys) to process packets,” Walters observed.

Energy and Utilities 98

Energy and Utilities Authentication Firewall Ransomware 98

Herjavec Group

SEPTEMBER 24, 2021

on “VPN and other time-consuming types of initial access”? [1] Solar BR Coca-Cola A partnership venture between The Coca-Cola Company and two other large domestic manufacturers and distributors of beer, soft drinks, juices, energy drinks and dairy products. has publicly?claimed?that that they do not spend much time?on suggesting?this

Ransomware 109

Ransomware Manufacturing Encryption Energy and Utilities 109

SecureList

NOVEMBER 23, 2021

Energy, transport and utilities — in an attempt to gain a foothold in the critical infrastructure of a “potential adversary” just in case, and to use it to develop other attacks (see examples above). Update firewalls and SSL VPN gateways in good time.

Spyware 139

Spyware Phishing Cybercrime Energy and Utilities 139

eSecurity Planet

APRIL 7, 2023

You may use a VPN or install utilities to capture and forward traffic to other subnets, or configure proxychains. Besides, attacking tools can send multiple probes or headers along with their requests (e.g., during scanning and discovery), which can be detected and blocked by security tools.

Penetration Testing 141

Penetration Testing Social Engineering Energy and Utilities Hacking 141

eSecurity Planet

APRIL 7, 2023

Hybrid, or mixed local/cloud networks require virtual private network (VPN) infrastructure between environments. Virtual Appliances are licensed based on the number of devices managed in five sizes: extra small (up to 100), small (up to 1,000), medium (up to 5,000), large (up to 10,000), and extra large (up to 20,000).

IoT 98

IoT Technology Energy and Utilities Wireless 98

SecureList

DECEMBER 14, 2022

Industroyer2 was discovered in the network of a Ukrainian energy provider, and it is very unlikely that the attacker would have been able to develop it without access to the same ICS equipment as used by the victim. Some of them were particularly sophisticated.

DDOS 145

DDOS Ransomware Government Energy and Utilities 145

SecureList

MAY 25, 2021

Energy and Utilities (10%), Finance (10%), Professional and Consumer Services (10%), Transportation (7%), and Healthcare (7%) were also at the top of their list. Make sure commercial VPN solutions and other server-side software are always up to date as exploitation of this type of software is a common infection vector for ransomware.

Ransomware 127

Ransomware Encryption Malware Energy and Utilities 127

Malwarebytes

FEBRUARY 25, 2022

Its operators seem to leverage vulnerabilities in external-facing servers while utilizing compromised account credentials to gain access and spread the malware further. Current analyses of HermeticWiper reveal that the malware is being delivered in highly-targeted attacks in Ukraine, Latvia, and Lithuania.

Cybersecurity 104

Cybersecurity Ransomware Malware Government 104