10 Nov US Health Dept warns of Venus ransomware targeting healthcare orgs The U.S. Department of Health and Human Services (HHS) warned today that Venus ransomware attacks are also targeting the country’s healthcare organizations. […]
10 Nov Russian military hackers linked to ransomware attacks in Ukraine A series of attacks targeting transportation and logistics organizations in Ukraine and Poland with Prestige ransomware since October have been linked to an elite Russian military cyberespionage group. […]
10 Nov Worok hackers hide new malware in PNGs using steganography A threat group tracked as ‘Worok’ hides malware within PNG images to infect victims’ machines with information-stealing malware without raising alarms. […]
09 Nov Couple sentenced to prison for trying to sell nuclear warship secrets A Navy nuclear engineer and his wife were sentenced to over 19 years and more than 21 years in prison for attempting to sell nuclear warship design secrets to what they believed was a foreign power agent. […]
09 Nov New hacking group uses custom ‘Symatic’ Cobalt Strike loaders A previously unknown Chinese APT (advanced persistent threat) hacking group dubbed ‘Earth Longzhi’ targets organizations in East Asia, Southeast Asia, and Ukraine. […]
09 Nov 15,000 sites hacked for massive Google SEO poisoning campaign Hackers are conducting a massive black hat search engine optimization (SEO) campaign by compromising almost 15,000 websites to redirect visitors to fake Q&A discussion forums. […]
09 Nov Medibank warns customers their data was leaked by ransomware gang Australian health insurance giant Medibank has warned customers that the ransomware group behind last month’s breach has started to leak data stolen from its systems. […]
09 Nov Lenovo fixes flaws that can be used to disable UEFI Secure Boot Lenovo has fixed two high-severity vulnerabilities impacting various ThinkBook, IdeaPad, and Yoga laptop models that could allow an attacker to deactivate UEFI Secure Boot. […]
08 Nov LockBit affiliate uses Amadey Bot malware to deploy ransomware A LockBit 3.0 ransomware affiliate is using phishing emails that install the Amadey Bot to take control of a device and encrypt devices. […]
08 Nov Malicious extension lets attackers control Google Chrome remotely A new Chrome browser botnet named ‘Cloud9’ has been discovered in the wild using malicious extensions to steal online accounts, log keystrokes, inject ads and malicious JS code, and enlist the victim’s browser in DDoS attacks. […]