Cybersecurity (General)

FBI Shares Technical Details On Iran’s Fake Proud Boys Emails The Federal Bureau of Investigation (FBI) shared indicators of compromise (IOCs) associated with the Iranian state-sponsored threat group behind last week’s Proud Boys voter intimidation emails that targeted Democratic voters. The threatening spoofed emails used the “Vote for Trump or Read more…

The Week in Ransomware – October 30th 2020 – Hospitals Under Siege This week we have seen a concerted attack against the healthcare industry by hacking groups utilizing the Ryuk ransomware. Also, we saw some large well-known companies suffer ransomware attacks that impacted their business operations. The biggest news this Read more…

UHS Restores Hospital Systems After Ryuk Ransomware Attack Universal Health Services (UHS), a Fortune 500 hospital and healthcare services provider, says that it has managed to restore systems after a September Ryuk ransomware attack. UHS has over 90,000 employees who provide healthcare services to roughly 3.5 million patients every year through Read more…

Brooklyn & Vermont Hospitals Are Latest Ryuk Ransomware Victims Wyckoff Heights Medical Center in Brooklyn and the University of Vermont Health Network are the latest victims of the Ryuk ransomware attack spree covering the healthcare industry across the U.S. Yesterday, the U.S. government hosted an emergency call with stakeholders in Read more…

US Shares Info On Russian Malware Used To Target Parliaments, Embassies US Cyber Command today shared information on malware implants used by Russian hacking groups in attacks targeting multiple ministries of foreign affairs, national parliaments, and embassies. The malware samples were identified by US Cyber Command’s Cyber National Mission Force Read more…

Critical Oracle WebLogic Flaw Actively Targeted In Attacks Threat actors have started to hunt for servers running Oracle WebLogic instances vulnerable to a critical flaw that allows taking control of the system with little effort and no authentication. The vulnerability leveraged in the attacks is CVE-2020-14882 with a severity rating Read more…

Maze Ransomware Is Shutting Down Its Cybercrime Operation The Maze cybercrime gang is shutting down its operations after rising to become one of the most prominent players performing ransomware attacks. The Maze ransomware began operating in May 2019 but became more active in November. That’s when the media-savvy operation revolutionized Read more…

Russian Turla Hackers Breach European Government Organization Russian-speaking hacking group Turla has hacked into the systems of an undisclosed European government organization according to a new Accenture Cyber Threat Intelligence (ACTI) report. This attack perfectly lines up with Turla’s information theft and espionage motivation and its persistent targeting of government-related entities from a Read more…