Collaborate Disseminate
The threat group, first identified in June, focuses solely on data exfiltration and subsequent extortion, and has already targeted 40 victims since September. Continue reading ‘Karakurt’ Extortion Threat Emerges, But Says No to Ransomware
Underground arbitration system settles disputes between cybercriminals. Continue reading When Scammers Get Scammed, They Take It to Cybercrime Court
One year after the disruptive supply-chain attacks, researchers have observed two new clusters of activity from the Russia-based actors that signal a significant threat may be brewing.
Continue reading SolarWinds Attackers Spotted Using New Tactics, Malware
BitMart confirmed it had been drained of ~$150 million in cryptocurrency assets, but a blockchain security firm said it’s closer to $200 million.
Continue reading Crypto-Exchange BitMart to Pay Users for $200M Theft
It’s unknown who’s behind the cyberattacks against at least nine employees’ iPhones, who are all involved in Ugandan diplomacy.
Continue reading Pegasus Spyware Infects U.S. State Department iPhones
Kaspersky researchers suspect that the cyberattackers may be a subgroup of the politically motivated, Palestine-focused Gaza Cybergang.
Continue reading Stealthy ‘WIRTE’ Gang Targets Middle Eastern Governments
The insurer won’t pay for ‘acts of cyber-war’ or nation-state retaliation attacks. Continue reading Lloyd’s Carves Out Cyber-Insurance Exclusions for State-Sponsored Attacks
Cyberattackers had unfettered access to the technology giant’s file server for four months. Continue reading Panasonic’s Data Breach Leaves Open Questions
Customers of several brands that resell GoDaddy Managed WordPress have also been caught up in the big breach, in which millions of emails, passwords and more were stolen. Continue reading GoDaddy Breach Widens to Include Reseller Subsidiaries
Threat actors are targeting Middle-East-based employees of major corporations in a scam that uses a specific ‘ephemeral’ aspect of the project-management tool to link to SharePoint phishing pages.
Continue reading Spear-Phishing Campaign Exploits Glitch Platform to Steal Credentials