December 4, 2021

The Week in Ransomware – December 3rd 2021 – Seizing Bitcoin For this week’s ‘Week in Ransomware’ article we have included the latest ransomware news over the past two weeks. The biggest news over the past two weeks is the unsealing of a United States’ Complaint for Forfeiture detailing how the FBI seized 39.89138522 Read more…

US State Dept Employees’ Phones Hacked Using NSO Spyware Apple has warned US Department of State employees that their iPhones have been hacked by unknown attackers using an iOS exploit dubbed ForcedEntry to deploy Pegasus spyware developed by Israeli surveillance firm NSO Group. The attacks hit US officials (at least 11 according to the Washington Post) Read more…

Fake Support Agents Call Victims to Install Android Banking Malware The BRATA Android remote access trojan (RAT) has been spotted in Italy, with threat actors calling victims of SMS attacks to steal their online banking credentials. The variant currently in circulation is new, and according to a report by researchers Read more…

FBI: Cuba Ransomware Breached 49 US Critical Infrastructure Orgs The Federal Bureau of Investigation (FBI) has revealed that the Cuba ransomware gang has compromised the networks of at least 49 organizations from US critical infrastructure sectors. “The FBI has identified, as of early November 2021 that Cuba ransomware actors have compromised at Read more…

Researchers Discover 14 New Data-Stealing Web Browser Attacks IT security researchers from Ruhr-Universität Bochum (RUB) and the Niederrhein University of Applied Sciences have discovered 14 new types of ‘XS-Leak’ cross-site leak attacks against modern web browsers, including Google Chrome, Microsoft Edge, Safari, and Mozilla Firefox. These types of side-channel attacks Read more…

Zoho: Patch New ManageEngine Bug Exploited in Attacks ASAP Business software provider Zoho urged customers today to update their Desktop Central and Desktop Central MSP installations to the latest available version. Zoho’s ManageEngine Desktop Central is a management platform that helps admins deploy patches and software automatically over the network Read more…

Phishing Actors Start Exploiting the Omicron COVID-19 Variant Phishing actors have quickly started to exploit the emergence of the Omicron COVID-19 variant and now use it as a lure in their malicious email campaigns. Threat actors are quick to adjust to the latest trends and hot topics, and increasing people’s fears is Read more…

Twitter Removes 3,400 Accounts Used in Govt Propaganda Campaigns Twitter today announced the permanent removal of more than 3,400 accounts linked to governments of six countries running manipulation or spam campaigns. The social networking company says that the accounts were used in eight distinct operations attributed to Mexico, the People’s Read more…