Colonial Pipeline Denies Breach by RANSOMEDVC Ransomware Group

By Waqas
Third-Party Data Breach Suspected in Online Files Linked to Colonial Pipeline.
This is a post from HackRead.com Read the original post: Colonial Pipeline Denies Breach by RANSOMEDVC Ransomware Group
Continue reading Colonial Pipeline Denies Breach by RANSOMEDVC Ransomware Group

Section 702 data helped take down Colonial Pipeline hacker, Biden administration says

The White House is declassifying material about how a controversial surveillance law is used in hopes of building support for its renewal.

The post Section 702 data helped take down Colonial Pipeline hacker, Biden administration says appeared first on CyberScoop.

Continue reading Section 702 data helped take down Colonial Pipeline hacker, Biden administration says

Costa Rican president begins tenure with ransomware national emergency declaration

A Conti affiliate claimed responsibility and has posted more than 672 GB of data so far.

The post Costa Rican president begins tenure with ransomware national emergency declaration appeared first on CyberScoop.

Continue reading Costa Rican president begins tenure with ransomware national emergency declaration

Notorious hacking group FIN7 adds ransomware to its repertoire

Ransomware strains such as Maze, Ryuk and BlackCat have increasingly been part of FIN7’s playbook in recent years, Mandiant says.

The post Notorious hacking group FIN7 adds ransomware to its repertoire appeared first on CyberScoop.

Continue reading Notorious hacking group FIN7 adds ransomware to its repertoire

Cybercrime statistics legislation is ready for president’s signature

It’s the second time this month Congress has finalized a bill that’s intended to help the feds track cybercrime data.

The post Cybercrime statistics legislation is ready for president’s signature appeared first on CyberScoop.

Continue reading Cybercrime statistics legislation is ready for president’s signature

Major German fuel storage provider hit with cyberattack, working under limited operations

A cyberattack struck major German oil storage company Oiltanking GmbH Group on Sunday, the company confirmed to CyberScoop in a statement. The cyberattack affected the IT systems of Oiltanking as well as the mineral oil trade company Mabanaft, German news outlet Handelsblatt first reported. Both companies belong to the Hamburg-based Marquard & Bahls group, one of the world’s largest energy supply companies. The attack shut down the oil tank company’s IT systems, according to a statement by the company’s head of corporate communications, Claudia Wagner. Oiltanking’s German subsidiary which operates all terminals in Germany is operating at limited capacity. Oiltanking’s global operations were not affected. “We are working to solve this issue according to our contingency plans, as well as to understand the full scope of the incident,” Wagner wrote to CyberScoop in an email. “We are undertaking a thorough investigation, together with external specialists and are collaborating closely with […]

The post Major German fuel storage provider hit with cyberattack, working under limited operations appeared first on CyberScoop.

Continue reading Major German fuel storage provider hit with cyberattack, working under limited operations

At Request of U.S., Russia Rounds Up 14 REvil Ransomware Affiliates

The Russian government said today it arrested 14 people accused of working for “REvil,” a particularly aggressive ransomware group that has extorted hundreds of millions of dollars from victim organizations. The Russian Federal Security Service (FSB) said the actions were taken in response to a request from U.S. officials, but many experts believe the crackdown is part of an effort to reduce tensions over Russian President Vladimir Putin’s decision to station 100,000 troops along the nation’s border with Ukraine. Continue reading At Request of U.S., Russia Rounds Up 14 REvil Ransomware Affiliates

Cyber Command boss acknowledges US military actions against ransomware groups

The U.S. military has taken offensive measures against ransomware groups, U.S. Cyber Command leader General Paul M. Nakasone confirmed Saturday. “Before, during and since, with a number of elements of our government, we have taken actions and we have imposed costs,” Nakasone told The New York Times in an interview Saturday. “That’s an important piece that we should always be mindful of.” CNN confirmed the offensive cyber operations to disrupt foreign ransomware groups with a U.S. Cyber Command spokesperson. U.S. Cyber Command, the military’s top hacking unit, has reportedly been going after criminal hacking groups dating back to before the 2020 election, when it attempted to knock out TrickBot, a network of infected computers used to deliver malware. More recently, U.S. Cyber Command had role in shutting down ransomware group REvil’s operations, working with foreign governments to redirect traffic from the group’s website, The Washington Post first reported in November. Both […]

The post Cyber Command boss acknowledges US military actions against ransomware groups appeared first on CyberScoop.

Continue reading Cyber Command boss acknowledges US military actions against ransomware groups

Rail industry gets new cyber directives from TSA

U.S. rail companies must commit more attention and resources to cybersecurity under Transportation Security Administration directives announced Thursday by the Department of Homeland Security. The new requirements include that surface rail owner and operators designate a cybersecurity coordinator; report a cybersecurity incident to DHS’s cybersecurity agency within 24 hours; complete a vulnerability assessment; and create a plan to respond to cybersecurity incidents. The directives will cover approximately 80 percent of freight rail and 90 percent of passenger rail, according to a DHS official. DHS Secretary Alejandro Mayorkas announced that TSA would be  rolling out directives for surface transportation in an October speech at the Billington cybersecurity summit. Early plans for the directives, which would have required companies to report incidents within 12 hours, received criticism from industry and Republicans. In October, Republicans led by Sen. Rob Portman of Ohio called for DHS’s OIG to investigate the directives, citing industry complaints that […]

The post Rail industry gets new cyber directives from TSA appeared first on CyberScoop.

Continue reading Rail industry gets new cyber directives from TSA