Sergiu Gatlan reports: A Chinese-speaking threat actor has deployed a new backdoor in multiple cyber-espionage operations spanning roughly two years and targeting military organizations from Southeast Asia. For at least a decade, the hacking group known as Naikon has actively spied on organizations in countries around the South China Sea, including the Philippines, Malaysia, Indonesia, Singapore, and Thailand,…
Category: Of Note
Codecov starts notifying customers affected by supply-chain attack
Ax Sharma reports: As of a few hours ago, Codecov has started notifying the maintainers of software repositories affected by the recent supply-chain attack. These notifications, delivered via both email and the Codecov application interface, state that the company believes the affected repositories were downloaded by threat actors. The original security advisory posted by Codecov lacked any…
Hackers are attacking the COVID-19 vaccine supply chain
Dan Patterson reports: Hackers have targeted companies that distribute the COVID-19 vaccine to a degree previously unreported, according to research from IBM Security. Starting last year, attackers attempted to access sensitive information about the vaccine’s “cold chain” distribution system. IBM Security said the phishing attack targeted 44 companies in 14 countries across Europe, North America, South America…
FBI teams up with ‘Have I Been Pwned’ to alert Emotet victims
Amer Owaida reports: The United States’ Federal Bureau of Investigation (FBI) has shared more than 4.3 million email addresses, harvested by the Emotet botnet, with data breach tracking website Have I Been Pwned (HBIP) in an effort to help alert victims of the notorious botnet. “In all, 4,324,770 email addresses were provided which span a wide range…
RTF Report: Combatting Ransomware A Comprehensive Framework for Action: Key Recommendations from the Ransomware Task Force
From the Institute for Security & Technology: A Comprehensive Framework for Action Ransomware is no longer just a financial crime; it is an urgent national security risk that threatens schools, hospitals, businesses, and governments across the globe. This is not a problem that any one entity can solve. Over 60 experts from industry, government, law…
White House Urged to Address Surge in Ransomware Attacks
Kartikay Mehrota reports: Cybersecurity experts, law enforcement agencies and governments urged the White House to root out safe havens for criminals engaging in ransomware and step up regulation of cryptocurrencies, the lifeblood of hackers, in the hopes of controlling a growing wave of attacks. These are two of 48 recommendations made by a task force…