Scattered Spider weaves web of social-engineered destruction

The cybercrime ring has infiltrated more than 100 businesses since 2022, including more than a dozen since it regrouped earlier this year.

The post Scattered Spider weaves web of social-engineered destruction appeared first on CyberScoop.

Continue reading Scattered Spider weaves web of social-engineered destruction

China-linked attacker hit France’s critical infrastructure via trio of Ivanti zero-days last year

French authorities said government agencies and businesses spanning telecom, media, finance and transportation were impacted by the widely exploited Ivanti vulnerabilities.

The post China-linked attacker hit France’s critical infrastructure via trio of Ivanti zero-days last year appeared first on CyberScoop.

Continue reading China-linked attacker hit France’s critical infrastructure via trio of Ivanti zero-days last year

US sanctions bulletproof hosting provider for supporting ransomware, infostealer operations

Russia-based Aeza Group allegedly provided infrastructure to BianLian ransomware and the Meduza, RedLine and Lumma infostealer operators.

The post US sanctions bulletproof hosting provider for supporting ransomware, infostealer operations appeared first on CyberScoop.

Continue reading US sanctions bulletproof hosting provider for supporting ransomware, infostealer operations

Notorious cybercriminal ‘IntelBroker’ arrested in France, awaits extradition to US

Kai West, a 25-year-old British national, is accused of stealing data from more than 40 organizations during a two-year spree.

The post Notorious cybercriminal ‘IntelBroker’ arrested in France, awaits extradition to US appeared first on CyberScoop.

Continue reading Notorious cybercriminal ‘IntelBroker’ arrested in France, awaits extradition to US

Citrix users hit by actively exploited zero-day vulnerability

The vendor disclosed the critical zero-day in NetScaler ADC and NetScaler Gateway nine days after it warned of a pair of defects in the same products.

The post Citrix users hit by actively exploited zero-day vulnerability appeared first on CyberScoop.

Continue reading Citrix users hit by actively exploited zero-day vulnerability

Stealth China-linked ORB network gaining footholds in US, East Asia

The number of devices infected by LapDogs is smaller than other ORBs, but that is likely by design, according to SecurityScorecard researchers.

The post Stealth China-linked ORB network gaining footholds in US, East Asia appeared first on CyberScoop.

Continue reading Stealth China-linked ORB network gaining footholds in US, East Asia

The ‘16 billion password breach’ story is a farce

Experts told CyberScoop the research ‘doesn’t pass a sniff test’ and detracts from needed conversations around credential abuse and information stealers.

The post The ‘16 billion password breach’ story is a farce appeared first on CyberScoop.

Continue reading The ‘16 billion password breach’ story is a farce

Aflac duped by social-engineering attack, marking another hit on insurance industry

Three insurance companies have publicly disclosed cyberattacks in the past week. Scattered Spider, an amorphous band of cybercriminals, has been actively targeting the sector.

The post Aflac duped by social-engineering attack, marking another hit on insurance industry appeared first on CyberScoop.

Continue reading Aflac duped by social-engineering attack, marking another hit on insurance industry

Iran’s financial sector takes another hit as largest crypto exchange is targeted

A $90 million crypto theft from Nobitex marks the second cyberattack on Iran’s financial systems in as many days. Predatory Sparrow claimed responsibility for both attacks.

The post Iran’s financial sector takes another hit as largest crypto exchange is targeted appeared first on CyberScoop.

Continue reading Iran’s financial sector takes another hit as largest crypto exchange is targeted

Iran’s Bank Sepah disrupted by cyberattack claimed by pro-Israel hacktivist group

The attack introduces a clear cyber element with immediate consequences for the country’s critical infrastructure amid a growing conflict between Israel and Iran.

The post Iran’s Bank Sepah disrupted by cyberattack claimed by pro-Israel hacktivist group appeared first on CyberScoop.

Continue reading Iran’s Bank Sepah disrupted by cyberattack claimed by pro-Israel hacktivist group