Collaborate Disseminate
German officials are blaming Russian-linked black-hat hackers for breaching several federal agencies and stealing sensitive information. On 28 February, sources told Deutsche Presse-Agentur (dpa) that the Russian digital espionage group APT28 used malw… Continue reading Germany Blames Russian Black-Hat Hackers for Breach of Federal Agencies
A new family of mobile malware called RedDrop exfiltrates victims’ sensitive data including ambient audio recordings and sends it to cloud storage services. Wandera, a mobile security firm which spotted weaknesses in the CBS Sports app and mobile… Continue reading RedDrop Malware Records Audio and Exfiltrates It to Cloud Storage Services
Government officials have revealed that WannaCry ransomware affected more than 100 computers at a dozen Connecticut state agencies. According to Connecticut’s Department of Administrative Services (DAS), state officials detected the digital attac… Continue reading A Dozen Connecticut State Agencies Targeted by WannaCry Ransomware
A relatively new ransomware-as-a-service (RaaS) platform keeps victims guessing by not using a special file extension with the files it encrypts. On 22 February, security researchers began seeing reports from users claiming that Data Keeper ransomware … Continue reading RaaS Keeps Victims Guessing by Not Using Special File Extension
A security researcher has released an updated list of 500 million breached passwords so that organizations can use it to protect their systems. On 22 February, Australian web security expert Troy Hunt published the second version of “Pwned Passwo… Continue reading 500 Million Breached Passwords Released by Researcher to Help Organizations Protect Their Systems
Colorado’s Department of Transportation (DOT) shut down more than 2,000 computers after its network suffered a ransomware attack. First thing in the morning on 21 February, the DOT discovered that ransomware had struck all employee computers runn… Continue reading Colorado Department of Transportation Shut Down 2K Computers after Ransomware Attack
Amazon Web Services (AWS) has made its Permissions Check feature freely available to help customers prevent an S3 bucket breach. On 20 February, Amazon made the announcement in a news update: AWS Trusted Advisor now helps all customers better secure th… Continue reading AWS Makes Permissions Check Feature Free to Prevent S3 Bucket Breaches
A company embedded password-stealing malware into an installer as part of its digital rights management (DRM) efforts to combat software pirates. On 18 Sunday, Reddit user crankyrecursion spotted the malware hiding within Flight Sim Labs’ install… Continue reading Company Embedded Password-Stealing Malware into Installer as Part of DRM Efforts
Digital attackers abused the SWIFT system of an Indian bank in an attempt to make off with approximately $2 million in stolen funds. On 18 February, City Union Bank disclosed the attempted heist in a statement (PDF): During our reconciliation process o… Continue reading Attackers Abused Indian Bank’s SWIFT System to Try to Steal $2M
Unknown criminals abused the SWIFT network to steal 339.5 million rubles ($6 million) from the Central Bank of Russia in 2017. The bank’s Financial Sector Computer Emergency Response Team (FinCERT) revealed the attack in its report on illegal tra… Continue reading Criminals Abused SWIFT to Steal $6M from Central Bank of Russia