Collaborate Disseminate
[Ringway Manchester] has an interest in numbers stations. These mysterious stations send presumably coded numbers or other coded information. However, it is rare that anyone claims credit for these stations. …read more Continue reading Number Stations Gone Wild
Iranian hackers utilized a flaw in the ubiquitous open-source software library Log4j to breach a U.S. federal agency.
The post Iranian hackers use Log4Shell to mine crypto on federal computer system appeared first on CyberScoop.
Continue reading Iranian hackers use Log4Shell to mine crypto on federal computer system
An ex-NSA employee has been charged with trying to sell classified data to the Russians (but instead actually talking to an undercover FBI agent).
It’s a weird story, and the FBI affidavit raises more questions than it answers. The employee only worked for the NSA for three weeks—which is weird in itself. I can’t figure out how he linked up with the undercover FBI agent. It’s not clear how much of this was the employee’s idea, and whether he was goaded by the FBI agent. Still, hooray for not leaking NSA secrets to the Russians. (And, almost ten years after Snowden, do we still have this much trouble vetting people before giving them security clearances?)…
Back in 2018, we learned that covert system of websites that the CIA used for communications was compromised by—at least—China and Iran, and that the blunder caused a bunch of arrests, imprisonments, and executions. We’re now learning that the CIA is still “using an irresponsibly secured system for asset communication.”
Citizen Lab did the research:
Using only a single website, as well as publicly available material such as historical internet scanning results and the Internet Archive’s Wayback Machine, we identified a network of 885 websites and have high confidence that the United States (US) Central Intelligence Agency (CIA) used these sites for covert communication…
Continue reading Security Vulnerabilities in Covert CIA Websites
Found documents in Poland detail US spying operations against the former Soviet Union.
The file details a number of bugs found at Soviet diplomatic facilities in Washington, D.C., New York, and San Francisco, as well as in a Russian government-owned vacation compound, apartments used by Russia personnel, and even Russian diplomats’ cars. And the bugs were everywhere: encased in plaster in an apartment closet; behind electrical and television outlets; bored into concrete bricks and threaded into window frames; inside wooden beams and baseboards and stashed within a building’s foundation itself; surreptitiously attached to security cameras; wired into ceiling panels and walls; and secretly implanted into the backseat of cars and in their window panels, instrument panels, and dashboards. It’s an impressive— and impressively thorough— effort by U.S. counterspies…
The group has targeted telecommunications, internet service providers and universities in the Middle East and Africa, researchers said.
The post Researchers unearth hacking group that’s been active, yet undetected for years appeared first on CyberScoop.
Continue reading Researchers unearth hacking group that’s been active, yet undetected for years
The Iranian cyberespionage group known as APT 42 is characterized by targeted spear phishing campaigns and extensive surveillance operations.
The post Sprawling, multi-year Iranian cyberespionage and surveillance group exposed in new report appeared first on CyberScoop.
The bill tasks the Department of Commerce with creating new export rules.
The post Lawmakers want to restrict user data sales to nations like China, Russia appeared first on CyberScoop.
Continue reading Lawmakers want to restrict user data sales to nations like China, Russia
The long-running operation involved hijacked email accounts, phony login pages and a legitimate ID verification service.
The post Iranian hacking campaign that included former U.S. ambassador exposed appeared first on CyberScoop.
Continue reading Iranian hacking campaign that included former U.S. ambassador exposed
The new remote access trojan mimics legitimate computer activity to make it harder to detect, the researchers said.
The post Researchers ID new RAT developed by Chinese hacking group with growing target list appeared first on CyberScoop.
Continue reading Researchers ID new RAT developed by Chinese hacking group with growing target list