Security Boulevard

MARCH 24, 2025

Surveillance Tech in the News This section covers surveillance technology and methods in the news. but given the Salt Typhoon breach and the apparent lackluster security practices and culture at just about every American telecommunications company, this was too interesting to ignore. They also have appeared to partner with Proton.

Surveillance 75

Surveillance Telecommunications Malware Data breaches 75

Malwarebytes

AUGUST 13, 2021

In an extensive report about a phishing campaign , the Microsoft 365 Defender Threat Intelligence Team describes a number of encoding techniques that were deployed by the phishers. While Morse code may seem like ancient communication technology to some, it does have a few practical uses in the modern world. The campaign.

Phishing 110

Phishing Passwords Computers and Electronics Telecommunications 110

Security Affairs

MAY 28, 2021

NOBELIUM focuses on government organizations, non-government organizations (NGOs), think tanks, military, IT service providers, health technology and research, and telecommunications providers. The phishing campaign detected by MSTIC leveraged the Google Firebase platform to provide an ISO file containing the malicious code.

Phishing 110

Phishing Threat Detection Telecommunications Malware 110

Malwarebytes

MARCH 29, 2022

The spear phishing emails are warning people that use websites, social networks, instant messengers and VPN services that have been banned by the Russian Government and that criminal charges will be laid. Spear phishing as the main initial infection vector. Spear phishing as the main initial infection vector. Victimology.

Phishing 89

Phishing Education Telecommunications Technology 89

Security Affairs

DECEMBER 1, 2024

Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Cybercrime 70

Cybercrime Firewall Social Engineering Ransomware 70

SecureList

MARCH 10, 2025

Infection flow The attacker sends spear-phishing emails with a DOCX file attached. The following industries were also affected: telecommunication, consulting, IT service companies, real estate agencies, and hotels. Furthermore, we observed attacks against entities associated with nuclear energy.

Energy and Utilities 112

Energy and Utilities Malware Government Phishing 112

The Last Watchdog

APRIL 13, 2022

The Russian government, military, and intelligence service may wish to achieve some operational effect, for example, disrupting the power grid or interfering with telecommunications infrastructure, which may be part of a larger war plan. Educate your employees on threats and risks such as phishing and malware.

Cybersecurity 214

Cybersecurity Cybercrime Education Government 214

Security Affairs

OCTOBER 25, 2021

NOBELIUM focuses on government organizations, non-government organizations (NGOs), think tanks, military, IT service providers, health technology and research, and telecommunications providers. ” states Microsoft.

Telecommunications 128

Telecommunications Technology Hacking Malware 128

Security Affairs

FEBRUARY 15, 2025

custody in exchange for Marc Fogel North Korea-linked APT Emerald Sleet is using a new tactic U.S.

Spyware 68

Spyware Firewall Artificial Intelligence Malware 68

Security Affairs

SEPTEMBER 21, 2022

Russia-linked APT group Sandworm has been observed impersonating telecommunication providers to target Ukrainian entities with malware. Russia-linked cyberespionage group Sandworm has been observed impersonating telecommunication providers to target Ukrainian entities with malware. ” reads the report published by Recorded Future.

Malware 103

Malware Telecommunications DNS Hacking 103

Security Affairs

OCTOBER 18, 2020

Since August, FIN11 started targeting organizations in many industries, including defense, energy, finance, healthcare, legal, pharmaceutical, telecommunications, technology, and transportation. Researchers from FireEye’s Mandiant observed FIN11 hackers using spear-phishing messages distributing a malware downloader dubbed FRIENDSPEAK.

Ransomware 140

Ransomware Malware Telecommunications Advertising 140

Security Affairs

DECEMBER 6, 2021

NOBELIUM focuses on government organizations, non-government organizations (NGOs), think tanks, military, IT service providers, health technology and research, and telecommunications providers. “ANSSI has observed a number of phishing campaigns directed against French entities since February 2021.

Phishing 112

Phishing Telecommunications Government Accountability 112

SecureList

OCTOBER 15, 2024

SideWinder’s most recent campaign schema Infection vectors The SideWinder attack chain typically starts with a spear-phishing email with an attachment, usually a Microsoft OOXML document (DOCX or XLSX) or a ZIP archive, which in turn contains a malicious LNK file. javascript:eval("v=ActiveXObject;x=new v("WinHttp.WinHttpRequest.5.1");x.open("GET",

Malware 143

Malware Encryption Architecture Phishing 143

Krebs on Security

DECEMBER 29, 2022

Faced with an increasing brain drain of smart people fleeing the country, Russia floats a new strategy to address a worsening shortage of qualified information technology experts: Forcing tech-savvy people within the nation’s prison population to perform low-cost IT work for domestic companies. Uber blames LAPSUS$ for the intrusion.

Cryptocurrency 292

Cryptocurrency Cybercrime Computers and Electronics Scams 292

eSecurity Planet

JULY 29, 2021

Social engineering can manifest itself across a wide range of cybersecurity attacks: Phishing Smishing Vishing Whaling Pharming Baiting Pretexting Scareware Deepfakes. Phishing is a broad category of social engineering attacks that specifically target most businesses’ primary mode of communication: email. Pretexting.

Social Engineering 128

Social Engineering Engineering Phishing DNS 128

SecureWorld News

FEBRUARY 12, 2025

Technology is an integral part of our lives that has become increasingly linked to critical infrastructure and the services we rely on daily like our hospitals, transit systems, energy suppliers, and telecommunications systems," said a press release from Public Safety Canada.

Cyber threats 64

Cyber threats Cybercrime Cybersecurity Government 64

Security Boulevard

MARCH 17, 2025

Cybersecurity and Infrastructure Security Agency reveals that 90% of initial access to critical infrastructure comes via identity compromise like phishing, compromised passwords, identity systems and misconfigurations. As new technologies are regularly adopted, they come accompanied by new threats. A report from the U.S.

Risk 64

Risk Mobile Technology IoT 64

SecureWorld News

JULY 1, 2020

Phishing emails are increasingly attempting to launch ransomware attacks against organizations. These verticals include education and manufacturing followed by transportation, entertainment, technology, healthcare, and telecommunications.". This includes a newly discovered family, or strain of ransomware, called Avaddon.

Ransomware 119

Ransomware Manufacturing Telecommunications Healthcare 119

Krebs on Security

DECEMBER 12, 2018

Mike Lloyd , chief technology officer at RedSeal , was quoted as saying a score “taken from the outside looking in is similar to rating the fire risk to a building based on a photograph from across the street.” The October analysis by the Chamber and FICO gives U.S. businesses an overall score of 687 on a scale of 300-850.

Cyber Risk 243

Cyber Risk Energy and Utilities Risk Marketing 243

Security Affairs

JULY 6, 2021

According to Group-IB’s Threat Intelligence team, the suspect, dubbed Dr HeX by Group-IB based on one of the nicknames that he used, has been active since at least 2009 and is responsible for a number of cybercrimes, including phishing, defacing, malware development, fraud, and carding that resulted in thousands of unsuspecting victims.

Cybercrime 103

Cybercrime Phishing Banking Telecommunications 103

Security Affairs

APRIL 20, 2023

The researchers from Google TAG are warning of Russia-linked threat actors targeting Ukraine with phishing campaigns. Russia-linked threat actors launched large-volume phishing campaigns against hundreds of users in Ukraine to gather intelligence and aimed at spreading disinformation, states Google’s Threat Analysis Group (TAG).

Phishing 98

Phishing Education Accountability Malware 98

SecureWorld News

MARCH 24, 2022

Answer: The decision to pursue a career in cybersecurity came easy to me, as I was tenured as a technology and telecommunications professional for 15 years. As a military veteran of the United States Navy, I had a foundational background working in telecommunications. I enjoyed troubleshooting systems and solving problems.

Cybersecurity 98

Cybersecurity Telecommunications Mobile IoT 98

Digital Shadows

MARCH 17, 2025

The ransomware targets unpatched internet-facing servers, impacting systems across 70+ countries in sectors like critical infrastructure, health care, governments, education, technology, manufacturing, and small- to medium-sized businesses. 3 Whats Behind its Enduring Popularity? What makes CVE-2018-13379 so dangerous is its stickiness.

VPN 133

VPN Authentication Ransomware Risk 133

Security Affairs

NOVEMBER 29, 2019

The group’s distinctive features are the high quality of their phishing attacks and the use of legitimate services, which makes it very difficult to detect its malicious activity in companies’ infrastructures. The most common objective of such attacks is cyberespionage and disruption of major telecommunications companies’ work.

Banking 123

Banking Telecommunications Marketing Internet 123

eSecurity Planet

SEPTEMBER 21, 2024

Recent updates to HIPAA regulations may address new technologies and evolving threats in the healthcare industry. Recent amendments to the CFAA may include updates to address new cybercrime techniques and technological advancements. This includes administrative, physical, and technical safeguards like encryption and access controls.

Cybersecurity 120

Cybersecurity Computers and Electronics Cyber threats Healthcare 120

Security Affairs

DECEMBER 7, 2023

Most of the APT28s’ campaigns leveraged spear-phishing and malware-based attacks. The group operates out of military unity 26165 of the Russian General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center (GTsSS). The vulnerability is a Microsoft Outlook spoofing vulnerability that can lead to an authentication bypass.

Government 133

Government Telecommunications Accountability Phishing 133

SecureWorld News

OCTOBER 6, 2022

Utilize phishing-resistant multi-factor authentication whenever possible. PRC state-sponsored cyber actors continue to exploit known vulnerabilities and use publicly available tools to target networks of interest. The advisory provides six mitigations: "Update and patch systems as soon as possible.

Passwords 98

Passwords Telecommunications Government Risk 98

The Last Watchdog

OCTOBER 20, 2023

“Enterprises in the finance, banking, and telecommunications sectors are the most susceptible to online fraud, but it can happen to any company,” said Vaidotas Sedys , Head of Risk Management at Oxylabs. Cloud technologies also play an important role in the latest anti-fraud developments. and bypass flagging or bans.

Artificial Intelligence 100

Artificial Intelligence Identity Theft Telecommunications Big data 100

SecureWorld News

FEBRUARY 18, 2021

billion from banks in Vietnam, Bangladesh, Taiwan, Mexico, Malta, and Africa by hacking the banks' computer networks and sending fraudulent Society for Worldwide Interbank Financial Telecommunication (SWIFT) messages. The hackers employed false and fraudulent personas when they sent spear-phishing messages to victims. D'Ambrosio.

Hacking 108

Hacking Cryptocurrency Computers and Electronics Banking 108

Malwarebytes

OCTOBER 27, 2023

” Since then the group has expanded its range of activities to include targeting organizations providing cable telecommunications, email, and tech services, and partnering with the ALPHV/BlackCat ransomware group. The group includes members with extensive technical knowledge and multiple hand-on-keyboard operators.

Social Engineering 116

Social Engineering Engineering Ransomware Backups 116

Thales Cloud Protection & Licensing

OCTOBER 3, 2019

Several months later, I learned about how Dragos had spotted a new threat group called “HEXANE” targeting oil and gas companies in the Middle East as well as telecommunications providers in the Middle East, Central Asia and Africa. Not all employees are familiar with phishing and other digital threats, for instance.

Telecommunications 92

Telecommunications Encryption Software Cyber Attacks 92

IT Security Guru

DECEMBER 1, 2022

Phishing attacks can be minimized by knowing the key indicators of a phishing attempt and how to address them. Furthermore, as AI and ML technology evolves and used by bad actors, these awareness campaigns can help people spot deepfake signs and address them adequately. He is also a writer for Bora.

Cyber threats 128

Cyber threats Cybersecurity Education Risk 128

Krebs on Security

FEBRUARY 18, 2019

mail.cyta.com.cy: Cyta telecommunications and Internet provider, Cyprus. Woodcock said domain records for the targeted Middle East TLDs it managed were altered after the DNSpionage hackers phished credentials that Key-Systems uses to make domain changes for their clients. webmail.finance.gov.lb: email for Lebanon Ministry of Finance.

DNS 279

DNS Internet Internet Government 279

Security Affairs

MAY 5, 2024

Most of the APT28s’ campaigns leveraged spear-phishing and malware-based attacks. The group operates out of military unity 26165 of the Russian General Staff Main Intelligence Directorate (GRU) 85th Main Special Service Center (GTsSS).

Government 134

Government Accountability Cyber Attacks Telecommunications 134

The Last Watchdog

OCTOBER 16, 2023

Orange and Infobip/Anam therefore took advantage of their joint expertise in telecommunications security to develop a robust A2P SMS protect solution, which identifies current and emerging risks, and proactively safeguards telcos, businesses, and end-users on most channels.”

Mobile 100

Mobile Firewall Telecommunications Marketing 100

Security Affairs

AUGUST 7, 2019

The group has targeted a variety of industries, including financial, government, energy, chemical, and telecommunications, and has largely focused its operations within the Middle East. Indeed during the group_a, the main observed delivery techniques where about Phishing (rif.T1193) and Valid Accounts (rif.T1078).

Computers and Electronics 104

Computers and Electronics Penetration Testing DNS Phishing 104

eSecurity Planet

FEBRUARY 9, 2022

According to Jay McBain, an analyst at Forrester Research, spending on IT and telecommunications will be worth about $7 trillion by 2030. 54% of ESG respondents stated that the primary drivers behind technology spending were strengthening of cybersecurity and improving resiliency against attacks. Competition is fierce.

Backups 140

Backups Firewall DDOS Antivirus 140