Collaborate Disseminate
Evidence ties people behind massive malware attack to mysterious Shadow Brokers group. Continue reading No evidence NotPetya developers obtained NSA exploits weeks before their public leak
A new strain of ransomware dubbed “Petya” is worming its way around the world with alarming speed. The malware appears to be spreading using a vulnerability in Microsoft Windows that the software giant patched in March 2017 — the same bug that was exploited by the recent and prolific WannaCry ransomware strain. Continue reading ‘Petya’ Ransomware Outbreak Goes Global
Your daily round-up of some of the other stories in the news Continue reading News in brief: WannaCry knocks out Honda plant; Skype hit by global outage; NSA shares tools on GitHub
The NSA’s post-Snowden ‘Secure the Net’ initiative has done nothing of the sort, says the Department of Defense’s highly critical review Continue reading NSA failed to implement security measures, says damning report
Company warns of “destructive cyberattacks” as it tries to prevent another WCry. Continue reading Win XP patched to avert new outbreaks spawned by NSA-leaking Shadow Brokers
Chipotle and OneLogin suffer breaches, Windows XP Too Unstable To Spread WannaCry, Patches Available for Linux Sudo Vulnerability, Cisco, Netgear Readying Patches For Samba Vulnerability, oAuth nightmares, Attack and Defense, Jay Beale style, Decoding … Continue reading OneLogin Woes, Shadow Brokers Identity, oAuth Nightmares – Paul’s Security Weekly #516
What made WannaCry different from other ransomware attacks? We explain how it happened – and look at what lessons we’ve learned Continue reading InfoSec 2017: how to protect yourself against the next WannaCry
A hacker group with suspected ties to the Vietnamese government appears to be researching a leaked National Security Agency tool codenamed ODDJOB, based on documents uploaded to the repository VirusTotal and tied to a source already identified as OceanLotus group, otherwise known as APT32. A classified user manual for ODDJOB was originally published on April 14 by a mysterious group, known for sharing NSA documents, named the Shadow Brokers. A copy of this same document was then uploaded April 17 to VirusTotal along with other malicious email attachments by OceanLotus. Multiple U.S. cybersecurity firms say OceanLotus is aligned with the interests of the Vietnamese government. The specific version of the manual uploaded by OceanLotus was not weaponized, meaning it didn’t carry malware that could be used to convert the harmless PDF to a phishing lure. ODDJOB is a high-quality, masterfully engineered digital weapon believed to have been once used to help […]
The post Vietnamese hackers appear to be researching an NSA backdoor tool appeared first on Cyberscoop.
Continue reading Vietnamese hackers appear to be researching an NSA backdoor tool
The Shadow Brokers say they will be accepting Zcash for subscriptions to their monthly dumps of leaked NSA files — a decision intended to needle the U.S. government over its role in the cryptocurrency’s creation. But the company that oversees Zcash says that federal agencies have no ties to the cryptocurrency beyond some general connections to its academic roots. In announcing the subscription service, the Shadow Brokers insinuated that Zcash has links to the Defense Advanced Research Projects Agency, other U.S. military agencies and Israel. “Maybe USG is needing to be sending money outside from banking systems? If USG is hacking and watching banking systems (SWIFT) then adversaries is also hacking and watching banking systems. Maybe is for sending money to deep cover foreign assets? Maybe is being trojan horse with cryptographic flaw or weakness only NSA can exploit? Maybe is not being for money?” the blog post written in broken English reads. Though the hacking group has claimed Zcash’s privacy […]
The post Cryptocurrency company pushes back against Shadow Brokers’ latest claims appeared first on Cyberscoop.
Continue reading Cryptocurrency company pushes back against Shadow Brokers’ latest claims
‘Legal reasons’ cited for decision to drop the plan to crowdfund a security community subscription to a promised monthly dump of exploits Continue reading Hackers shelve crowdfunding drive for Shadow Brokers exploits