Security Affairs

AUGUST 10, 2021

A new variant of the eCh0raix ransomware is able to target Network-Attached Storage (NAS) devices from both QNAP and Synology vendors. A newly variant of the eCh0raix ransomware is able to infect Network-Attached Storage (NAS) devices from Taiwanese vendors QNAP and Synology. ” reads the report published by Palo Alto Researchers.

Ransomware 138

Ransomware Encryption Firmware Passwords 138

Security Affairs

JANUARY 16, 2022

QNAP NAS devices are under attack, experts warn of a new Qlocker ransomware campaign that hit devices worldwide. A new wave of Qlocker ransomware it targeting QNAP NAS devices worldwide, the new campaign started on January 6 and it drops ransom notes named !!!READ_ME.txt Up to date apps and firmware seem not to help either.”

Ransomware 140

Ransomware Encryption Backups Firmware 140

Security Affairs

MARCH 26, 2021

The Federal Bureau of Investigation (FBI) issued an alert to warn that the Mamba ransomware is abusing the DiskCryptor open source tool to encrypt entire drives. Mamba ransomware is one of the first malware that encrypted hard drives rather than files that was detected in public attacks. ” reads the alert published by the FBI.

Ransomware 145

Ransomware Encryption Passwords Malware 145

Webroot

OCTOBER 31, 2024

This year has seen ransomware groups adapt and innovate, pushing the boundaries of their malicious capabilities and evasiveness from law enforcement. The ransomware sector, in particular, has witnessed the emergence of “business models,” with ransomware-as-a-service (RaaS) dominating the scene.

Malware 108

Malware Ransomware Passwords Healthcare 108

Malwarebytes

SEPTEMBER 3, 2021

The FBI has issued a Private Industry Notification (PIN) about cybercriminal actors targeting the food and agriculture sector with ransomware attacks. Ransomware attacks targeting the food and agriculture sector disrupt operations, cause financial loss, and negatively impact the food supply chain. ” Internet of Things.

Ransomware 143

Ransomware Manufacturing Passwords Internet 143

Malwarebytes

MAY 8, 2023

While the statement does not reveal a lot of tangible information, this snippet is important: “MSI urges users to obtain firmware/BIOS updates only from its official website, and not to use files from sources other than the official website.” Money Message is a new ransomware which targets both Windows and Linux systems.

Firmware 98

Firmware Ransomware Backups Malware 98

Security Affairs

MAY 13, 2021

FBI and DHS’s CISA have published a joint alert on DarkSide ransomware activity after the disruptive attack on Colonial Pipeline. FBI and DHS’s CISA have published a joint alert to warn of ransomware attacks conducted by the DarkSide group. The group provides Ransomware-as-a-Service (RaaS) to a network of affiliates.

Ransomware 142

Ransomware Healthcare Phishing Risk 142

Security Affairs

MARCH 19, 2022

The Federal Bureau of Investigation (FBI) reported that AvosLocker ransomware is being used in attacks targeting US critical infrastructure. The Federal Bureau of Investigation (FBI) published a joint cybersecurity advisory warning of AvosLocker ransomware attacks targeting multiple US critical infrastructure. Pierluigi Paganini.

Ransomware 120

Ransomware DDOS Passwords Backups 120

Security Affairs

DECEMBER 27, 2018

Since November, a new ransomware called JungleSec has been infecting servers through unsecured IPMI (Intelligent Platform Management Interface) cards. Security experts at BleepingComputer wrote about a new ransomware called JungleSec that is infecting victims through unsecured IPMI (Intelligent Platform Management Interface) cards.

Ransomware 112

Ransomware Passwords Advertising Firmware 112

Malwarebytes

JULY 13, 2022

Ransomware has given security professionals a headache for the better part of a decade. The supply chain, already stretched to a breaking point, suffered additional misfortunes across multiple industries, from agriculture and manufacturing to technology and utilities. Germany, the UK, and Italy also registered high ransomware tallies.

Ransomware 121

Ransomware Manufacturing Government Computers and Electronics 121

CyberSecurity Insiders

APRIL 9, 2023

A new ransomware gang is on the prowl in the wild and has claimed its first major victim by launching a cyber attack and demanding $4m as ransom. The post Ransomware gang attacks MSI and demands $4m for decryption appeared first on Cybersecurity Insiders.

Ransomware 108

Ransomware Firmware Manufacturing Cyber Attacks 108

Security Affairs

SEPTEMBER 3, 2021

FBI warns ransomware gangs are actively targeting organizations in the food and agriculture sector. Small farms, large producers, processors and manufacturers, and markets and restaurants are particularly exposed to ransomware attacks. ” reads the FBI’s PIN.

Ransomware 120

Ransomware Passwords Backups Firmware 120

Digital Shadows

JANUARY 14, 2025

Key Findings The last quarter of 2024 proved to be a pivotal period for ransomware activity, marked by emerging threats and unexpected shifts among established groups. Ransomware Activity Hits All-Time High in December Ransomware attacks have been climbing steadily over the past few years, despite some temporary dips along the way.

Ransomware 126

Ransomware Social Engineering Phishing VPN 126

Security Affairs

APRIL 7, 2023

Multinational IT corporation MSI (Micro-Star International) confirms security breach after Money Message ransomware gang claimed the hack. This week the ransomware gang Money Message announced to have hacked the Taiwanese multinational IT corporation MSI (Micro-Star International). MSI is headquartered in Taipei, Taiwan.

Ransomware 98

Ransomware Firmware Hacking Manufacturing 98

Security Affairs

DECEMBER 3, 2020

The infamous TrickBot gets a new improvement, authors added a new feature dubbed “ TrickBoot ” designed to exploit well-known vulnerabilities in the UEFI/BIOS firmware and inject malicious code, such as bootkits. TrickBot, one of the most active botnets, in the world, gets a new improvement by adding a UEFI/BIOS Bootkit Feature.

Firmware 120

Firmware Malware Hacking Manufacturing 120

Security Affairs

AUGUST 13, 2022

The US Cybersecurity and Infrastructure Security Agency (CISA) and the FBI are warning of Zeppelin ransomware attacks. The US Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have published a joint advisory to warn of Zeppelin ransomware attacks. The ransomware can be deployed as a

Ransomware 98

Ransomware Encryption Firmware Backups 98

Security Affairs

OCTOBER 1, 2023

ALPHV/BlackCat ransomware gang hacked the hotel chain Motel One FBI warns of dual ransomware attacks Progress Software fixed two critical severity flaws in WS_FTP Server Child abuse site taken down, organized child exploitation crime suspected – exclusive A still unpatched zero-day RCE impacts more than 3.5M

Artificial Intelligence 128

Artificial Intelligence Firmware Data breaches Hacking 128

Malwarebytes

AUGUST 16, 2022

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have released a joint Cybersecurity Advisory (CSA) about Zeppelin ransomware. Zeppelin, aka Buran, is a ransomware-as-a-service (RaaS) written in Delphi and built upon the foundation of VegaLocker. Mitigation.

Ransomware 95

Ransomware Backups Passwords Authentication 95

Malwarebytes

APRIL 28, 2022

The Federal Bureau of Investigation (FBI) recently released a Private Industry Notification warning agriculture cooperatives (also known as “farmers’ co-ops”) of the looming danger of well-timed ransomware attacks. After-effects of ransomware attacks against the FA sector. And corn is a commodity. It fluctuates daily.

Ransomware 97

Ransomware Technology Firmware Internet 97

Security Affairs

NOVEMBER 10, 2022

Flow computers are used to calculate volume and flow rates for oil and gas that are critical to electric power manufacturing and distribution. The industrial automation giant ABB addressed the flaw with the release of firmware updates on July 14, 2022. The critical systems are widely used by oil and gas organizations worldwide.

Firmware 145

Firmware Passwords Authentication Manufacturing 145

Security Affairs

AUGUST 2, 2021

The flaw affects the Translogic PTS system manufactured by Swisslog Healthcare, which is installed in about 80% of all major hospitals in North America and thousands of hospitals worldwide. An attacker could also push an insecure firmware upgrade to fully compromise the devices. Swisslog has released Nexus Control Panel version 7.2.5.7

Healthcare 115

Healthcare Firmware Manufacturing Ransomware 115

Security Affairs

AUGUST 20, 2021

Microsoft researchers reported that the Mozi botnet was improved by implementing news capabilities to target network gateways manufactured by Netgear, Huawei, and ZTE. Organizations using Netgear, Huawei, and ZTE network devices are recommended to keep their firmware up to date and use strong passwords. Pierluigi Paganini.

IoT 108

IoT DNS Manufacturing Firmware 108

Security Affairs

AUGUST 20, 2021

This reinforces the need for phishing and spam prevention, as well as awareness techniques that would help stem the tide of ransomware and other potentially devastating attacks.” Of the vulnerabilities with no, or partial, remediation, 61.96% were found in firmware. ” continues the report.

Firmware 111

Firmware Ransomware Manufacturing Software 111

SecureWorld News

FEBRUARY 17, 2024

A 2021 Cynerio report revealed a staggering 123% increase in ransomware attacks on healthcare facilities, resulting in more than 500 incidents and costs exceeding $21 billion. In response, manufacturers are intensifying their cybersecurity efforts, incorporating advanced CI/CD workflows to safeguard medical devices from escalating attacks.

Healthcare 112

Healthcare Manufacturing Internet Internet 112

Security Affairs

MARCH 13, 2022

Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here.

Data breaches 98

Data breaches Firmware Hacking Ransomware 98

Security Affairs

SEPTEMBER 14, 2024

CISA adds SonicWall SonicOS, ImageMagick and Linux Kernel bugs to its Known Exploited Vulnerabilities catalog Electronic payment gateway Slim CD disclosed a data breach impacting 1.7M

Data breaches 123

Data breaches Computers and Electronics Spyware Cybercrime 123

SecureWorld News

OCTOBER 29, 2020

With COVID-19 cases surging and hospitalizations increasing, the operators of the Ryuk ransomware smell opportunity. Security researchers say the Ryuk gang is unleashing an unprecedented wave of ransomware attacks against U.S. If Ryuk ransomware knocks a hospital's network offline, would it pay a ransom? October 29, 2020.

Ransomware 79

Ransomware Healthcare Backups Passwords 79

Security Affairs

MAY 8, 2023

The ransomware gang behind the attack on Taiwanese PC maker MSI leaked the company’s private code signing keys on their darkweb leak site. In early April, the ransomware gang Money Message announced to have hacked the Taiwanese multinational IT corporation MSI (Micro-Star International). MSI is headquartered in Taipei, Taiwan.

Data breaches 98

Data breaches Ransomware Firmware Manufacturing 98

eSecurity Planet

SEPTEMBER 9, 2024

Industrial control systems (ICS) are the backbone of critical infrastructure, powering essential operations in the energy, manufacturing, water treatment, and transportation sectors. These systems are integral to the smooth operation of industries such as manufacturing, power generation, oil and gas, water management, and more.

Firmware 109

Firmware Encryption Manufacturing Risk 109

SecureWorld News

DECEMBER 18, 2020

Now an unusually large number of students and teachers must add another difficulty to the list: a ransomware attack. K-12 schools ransomware attacks at record pace. And the MS-ISAC says K-12 school districts are now the most likely to suffer from and report a successful ransomware attack. Now, let's look at some specifics.

Ransomware 89

Ransomware Education Backups Malware 89

Security Affairs

NOVEMBER 4, 2019

A new piece of malware dubbed QSnatch is infecting thousands of NAS devices manufactured by the Taiwanese vendor QNAP. “The original infection method remains unknown, but during that phase malicious code is injected to the firmware of the target system, and the code is then run as part of normal operations within the device.

Malware 77

Malware Firmware Advertising Ransomware 77

Security Affairs

SEPTEMBER 15, 2020

Department of Justice indictment, MSS-affiliated actors have targeted various industries across the United States and other countries—including high-tech manufacturing; medical device, civil, and industrial engineering; business, educational, and gaming software; solar energy; pharmaceuticals; and defense—in a campaign that lasted over ten years.[

Government 105

Government VPN Firmware Energy and Utilities 105

SecureList

MARCH 1, 2021

In 2020, Kaspersky mobile products and technologies detected: 5,683,694 malicious installation packages, 156,710 new mobile banking Trojans, 20,708 new mobile ransomware Trojans. The manufacturer of the mobile device preloads an adware application or a component with the firmware. Mobile ransomware Trojans. Statistics.

Mobile 145

Mobile Malware Adware Banking 145

CyberSecurity Insiders

DECEMBER 6, 2022

This analysis from Dirk Schrader, Vice President of Security Research, and Michael Paye, Vice President of Research and Development, is based on Netwrix’s global experience across a wide range of verticals, including technology, finance, manufacturing, government and healthcare. Understaffing will increase the role of channel partners.

Cybersecurity 116

Cybersecurity Cybercrime Social Engineering Risk 116

SecureList

SEPTEMBER 21, 2023

As if that were not enough, many IoT devices have unalterable main passwords set by manufacturers. Ransomware Unlike DDoS malicious programs, ransomware largely targets IoT devices that contain user data: NAS boxes. DeadBolt, which affected thousands of QNAP NAS devices in 2022, is a prominent example of IoT ransomware.

IoT 135

IoT DDOS Passwords Malware 135

SecureList

JANUARY 31, 2024

Ransomware Ransomware will remain the No. In 2023, ransomware attacks consolidated their hold on the top of the ranking of information security threats to industrial enterprises. The ransomware market is heading for a peak, which may be followed by a decline or stagnation. 1 scourge of industrial enterprises in 2024.

Ransomware 109

Ransomware Energy and Utilities Marketing Backups 109

SC Magazine

MAY 24, 2021

According to the company, every device is both tracked in real time and users are provided information on the make, model and manufacturer, operating system, firmware, serial number and MAC address, and even outline known vulnerabilities that affect it.

IoT 65

IoT Healthcare Manufacturing Firmware 65