Malware Targeting Pulse Secure Devices
As part of CISA’s ongoing response to Pulse Secure compromises, CISA has analyzed 13 malware samples related to exploited Pulse Secure devices. Keep Reading
Study Reveals Bring Your Own Device Security Gaps as Remote and Hybrid Work Increases
A report from cloud security specialist, Bitglass, reveals the rapid adoption of unmanaged personal devices connecting to work-related resources (aka BYOD) and says organizations are ill-equipped to deal with growing security threats such as malware and data theft. Keep Reading
Latvian National Charged for Alleged Role in Transnational Cybercrime Organization
A Latvian national was arraigned in federal court in Cleveland, Ohio, on June 4, on multiple charges stemming from her alleged role in a transnational cybercrime organization responsible for creating and deploying a computer banking trojan and ransomware suite of malware known as “Trickbot.” Keep Reading
Ransomware Prevention, Recovery and Reporting Requirements for MTSA Regulated Facilities
Even if the ransom is paid, there are no guarantees that the data will be decrypted or released to the public, putting affected parties in extremely difficult situations in determining how to respond. Keep Reading
INTERPOL Launches Project to Tackle Digital Piracy
With reports of digital piracy increasing by more than 60 per cent in some countries during the past 12 months, INTERPOL is launching a new project to tackle this fast growing crime area. Keep Reading
U.K. Launches Cybersecurity Action Tool
The U.K.’s National Cyber Security Center (NCSC) has launched a new digital tool for individuals to receive advice on improving their cybersecurity as part of the British government’s Cyber Aware campaign. Keep Reading
Foreign Nationals Sentenced for Roles in Transnational Cybercrime Enterprise
Two foreign nationals — one Russian, the other North Macedonian national — have been sentenced for their role in the Infraud Organization, a transnational cybercrime enterprise engaged in the mass acquisition and sale of fraud-related goods and services, including stolen identities, compromised credit card data, computer malware, and other contraband. Keep Reading
Russian National Pleads Guilty to Conspiracy to Introduce Malware into a U.S. Company’s Computer Network
Once the malware was installed, Kriuchkov and his co-conspirators would use it to exfiltrate data from the company’s computer network and then extort the company by threatening to disclose the data. Keep Reading
Phishing Scheme Used to Download TrickBot Malware
The Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) have observed continued targeting through spearphishing campaigns using TrickBot malware in North America. Keep Reading
DHS Announces Two R&D Projects to Enhance Mobile Network Traffic Security
These two newest SRMNI project awards are focused on developing solutions that will improve the government’s visibility into mobile device network traffic to identify malware, attacks or attempts to extract data from or through mobile devices. Keep Reading
CISA, FBI, and Treasury Expose Latest Tool in North Korea’s Cryptocurrency Theft Scheme: AppleJeus
In most instances, the malicious application—seen on both Windows and Mac operating systems—appears to be from a legitimate cryptocurrency trading company, thus fooling individuals into downloading it. Keep Reading
ISIS IT Group Warns of Vulnerability of Google Play Store Messaging App
Group that warned of “nightmare” Microsoft Windows collecting user data from geolocation to browsing history now says spies uploaded a custom app on Play that "collects identifiable information of android phones." Keep Reading
CISA Malware Analysis on Supernova
CISA has released a malware analysis report on Supernova malware affecting unpatched SolarWinds Orion software. The report contains indicators of compromise (IOCs) and analyzes several malicious artifacts. Keep Reading
World’s Most Dangerous Malware EMOTET Disrupted Through Global Action
EMOTET has been one of the most professional and long-lasting cybercrime services around. First discovered as a banking Trojan in 2014, the malware evolved into the go-to solution for cybercriminals over the years. Keep Reading
U.K. Issues Cybersecurity Guidance for Farmers
The U.K.’s National Cyber Security Centre (NCSC) and National Farmers’ Union (NFU) have issued guidance to help the agricultural sector stay secure in cyberspace. It is the first time farmers have been given tailor-made cybersecurity advice. Keep Reading
Protecting Government’s Encrypted Data to Stay One Step Ahead of Threats
As federal agencies continue to evolve cloud infrastructures, they are likewise evolving security approaches. Keep Reading
Advice for Incident Responders on Recovery from Systemic Identity Compromises
Re-establishing trust in the organization’s on-premises and cloud environments with minimal business impact requires in-depth investigation and an understanding of potential methods of persistence. Keep Reading
New Technical Details About SUNBURST Backdoor Malware
SUNBURST is a trojanized version of a digitally signed SolarWinds Orion plugin called SolarWinds.Orion.Core.BusinessLayer.dll. The plugin contains a backdoor that communicates via HTTP to third party servers. Keep Reading
NIST Cybersecurity Practice Guides for Securing Data Integrity Against Ransomware Attacks
NIST's National Cybersecurity Center of Excellence (NCCoE)—in collaboration with members of the business community and vendors of cybersecurity solutions—has built example solutions to address the data integrity challenges posed by ransomware and other destructive events. Keep Reading
Heightened Awareness for Iranian Cyber Activity
They continue to engage in more conventional offensive cyber activities ranging from website defacement, distributed denial of service (DDoS) attacks, and theft of personally identifiable information, says CISA. Keep Reading