April 10, 2021

The Week In Ransomware – April 9th 2021 – Massive Ransom Demands Ransomware attacks continue over the past two weeks with a continuation of the massive initial ransom demands we have seen recently. Over the past two weeks, we have learned of attacks against Asteelflash, the Broward County Public Schools, Applus Technologies, Pierre Fabre, Read more…

FBI Arrests Man For Plan To Kill “70% Of Internet” In AWS Bomb Attack The FBI arrested a Texas man on Thursday for allegedly planning to “kill of about 70% of the internet” in a bomb attack targeting an Amazon Web Services (AWS) data center on Smith Switch Road in Read more…

Leading Cosmetics Group Pierre Fabre Hit With $25 Million Ransomware Attack Leading French pharmaceutical group Pierre Fabre suffered a REvil ransomware attack where the threat actors initially demanded a $25 million ransom, BleepingComputer learned today. Pierre Fabre is the second largest pharmaceutical group in France and the second largest dermo-cosmetics Read more…

Attackers Deliver Legal Threats, IcedID Malware Via Contact Forms Threat actors are using legitimate corporate contact forms to send phishing emails that threaten enterprise targets with lawsuits and attempt to infect them with the IcedID info-stealing malware. IcedID is a modular banking trojan first spotted in 2017 and updated to also deploy second-stage malware payloads, Read more…

World’s Largest Pathologists Association Discloses Credit Card Incident The American Society for Clinical Pathology (ASCP) disclosed a payment card incident that impacted customers who entered payment info on its e-commerce website. The Chicago-based association for medical professionals is the world’s largest such organization for pathologists and laboratory professionals. Its member list includes over 100,000 Read more…

Zerodium Triples WordPress Remote Code Execution Exploit Payout Zerodium has announced today an increased interest in exploits for the WordPress content management system that achieve remote code execution. The exploit acquisition platform is now enticing exploit developers and sellers with a $300,000 payout, three times more than the regular price. Read more…

Researchers Earn $1,2 million For Exploits Demoed At Pwn2Own 2021 Pwn2Own 2021 ended with contestants earning a record $1,210,000 for exploits and exploits chains demoed over the course of three days. During this year’s hacking competition, 23 teams and researchers and security researchers targeted multiple products in the web browsers, virtualization, Read more…

CISA Releases Tool To Review Microsoft 365 Post-Compromise Activity The Cybersecurity and Infrastructure Security Agency (CISA) has released a companion Splunk-based dashboard that helps review post-compromise activity in Microsoft Azure Active Directory (AD), Office 365 (O365), and Microsoft 365 (M365) environments. CISA’s new tool, dubbed Aviary, helps security teams visualize and analyze Read more…