Collaborate Disseminate
MoustachedBouncer is a cyberespionage group that targets foreign diplomats in Belarus via ISP adversary-in-the-middle attacks.
The post MoustachedBouncer: Foreign Embassies in Belarus Likely Targeted via ISPs appeared first on SecurityWeek.
Continue reading MoustachedBouncer: Foreign Embassies in Belarus Likely Targeted via ISPs
The voter registries were accessed over a period of more than a year, the agency said.
The post U.K. election admin agency breach exposed personal information of tens of millions voters appeared first on CyberScoop.
Security deficiencies and business practices have researchers and officials furious at Microsoft for enabling an espionage operation.
The post Chinese hacking operation puts Microsoft in the crosshairs over security failures appeared first on CyberScoop.
Continue reading Chinese hacking operation puts Microsoft in the crosshairs over security failures
The Washington Post is reporting that the US is spying on the UN Secretary General.
The reports on Guterres appear to contain the secretary general’s personal conversations with aides regarding diplomatic encounters. They indicate that the United States relied on spying powers granted under the Foreign Intelligence Surveillance Act (FISA) to gather the intercepts.
Lots of details about different conversations in the article, which are based on classified documents leaked on Discord by Jack Teixeira.
There will probably a lot of faux outrage at this, but spying on foreign leaders is a perfectly legitimate use of the NSA’s capabilities and authorities. (If the NSA didn’t spy on the UN Secretary General, we should fire it and replace it with a more competent NSA.) It’s the bulk surveillance of whole populations that should outrage us…
Continue reading The US Is Spying on the UN Secretary General
By Waqas
The malware campaign has been attributed to the Chinese APT group Mustang Panda, also known as Camaro Dragon.
This is a post from HackRead.com Read the original post: Chinese Espionage Malware Targets European Healthcare via USB Drives
Continue reading Chinese Espionage Malware Targets European Healthcare via USB Drives
ESET has linked several cybercrime and espionage campaigns to a threat actor tracked as Asylum Ambuscade.
The post ‘Asylum Ambuscade’ Group Hit Thousands in Cybercrime, Espionage Campaigns appeared first on SecurityWeek.
Continue reading ‘Asylum Ambuscade’ Group Hit Thousands in Cybercrime, Espionage Campaigns
Everyone is writing about an interagency and international report on Chinese hacking of US critical infrastructure.
Lots of interesting details about how the group, called Volt Typhoon, accesses target networks and evades detection.
Continue reading Chinese Hacking of US Critical Infrastructure
A group that appears to support the Houthis in Yemen is targeting organizations working in the region with malicious Android-based apps.
The post Pro-Houthi hacking group linked to spyware operation on Arabian Peninsula appeared first on CyberScoop.
Continue reading Pro-Houthi hacking group linked to spyware operation on Arabian Peninsula
Reuters is reporting that the FBI “had identified and disabled malware wielded by Russia’s FSB security service against an undisclosed number of American computers, a move they hoped would deal a death blow to one of Russia’s leading cyber spying programs.”
The headline says that the FBI “sabotaged” the malware, which seems to be wrong.
Presumably we will learn more soon.
EDITED TO ADD: New York Times story.
EDITED TO ADD: Maybe “sabotaged” is the right word. The FBI hacked the malware so that it disabled itself.
Despite the bravado of its developers, Snake is among the most sophisticated pieces of malware ever found, the FBI said. The modular design, custom encryption layers, and high-caliber quality of the code base have made it hard if not impossible for antivirus software to detect. As FBI agents continued to monitor Snake, however, they slowly uncovered some surprising weaknesses. For one, there was a critical cryptographic key with a prime length of just 128 bits, making it vulnerable to factoring attacks that expose the secret key. This weak key was used in Diffie-Hellman key exchanges that allowed each infected machine to have a unique key when communicating with another machine…
The secretary of homeland security warned that China, AI, and cyber pose some of the biggest threats to the United States.
The post Homeland Security chief Mayorkas announces 90-day China sprint and AI task force appeared first on CyberScoop.
Continue reading Homeland Security chief Mayorkas announces 90-day China sprint and AI task force