Tag: government
-
Malicious ‘mParivahan’ App Circulates on WhatsApp, Skimming Sensitive Mobile Data
A new variant of the fake NextGen mParivahan app has emerged, exploiting the trust users place in official government notifications to distribute malware. This malicious software is distributed through seemingly legitimate traffic violation alerts via WhatsApp, luring victims into installing what they believe is the official app. Infection Vector and Deceptive Tactics The malware spreads…
-
Companies House goes live with One Login ID verification
People can verify their identity with Companies House using Gov.uk One Login as the central government body becomes the 36th service to start using the digital identity system First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366622472/Companies-House-goes-live-with-One-Login-ID-verification
-
GOFFEE Deploys PowerModul in Coordinated Strikes on Government and Energy Networks
The threat actor known as GOFFEE has launched a series of targeted attacks against critical sectors within the Russian Federation, utilizing advanced malware and phishing techniques. The group’s latest campaign involves the deployment of PowerModul, a PowerShell-based implant, to escalate their intrusion capabilities and carry out coordinated strikes effectively. PowerModul and Initial Infection Vectors PowerModul…
-
Trump Retaliates Against Former Cybersecurity Chief
Chris Krebs and SentinelOne Targeted as Trump Still Trumpets 2020 Election Lies. The White House said President Trump has ordered a probe into former Cybersecurity and Infrastructure Security Agency Director Chris Krebs’ government service, revoked any security clearances he holds and suspended security clearances issued to his employer, SentinelOne. First seen on govinfosecurity.com Jump to…
-
Trump revokes security clearances for Chris Krebs, SentinelOne in problematic precedent for security vendors
Tags: access, business, ceo, cloud, cybersecurity, data, government, intelligence, law, service, zero-trustLike living ‘in Stalin’s Soviet Union’: At the same time Trump revoked security clearances from Krebs and SentinelOne, he issued another executive order revoking the security clearance of former Department of Homeland Security official Miles Taylor, as well as any entities associated with him, including the University of Pennsylvania.Taylor is a veteran of multiple Republican administrations…
-
TrendsWatch QA: The future of edge”, will decentralization ever be more than a talking point?
For decades, a handful of tech giants have shaped digital infrastructure”, and, with it, how businesses and governments manage data, security, and connectivity. Related: Practical uses for edge computing Now, the rise of distributed edge computing is being touted as a… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/trends-to-watch-qa-the-future-of-edge-will-decentralization-ever-be-more-than-a-talking-point/
-
Smashing Security podcast #412: Signalgate sucks, and the quandary of quishing
QR codes are being weaponised by scammers, so maybe think twice before scanning that parking meter. And in a blunder so dumb it makes autocorrect look smart, the White House explains how it leaked war plans on Signal because an iPhone mistook a journalist for a government insider. First seen on grahamcluley.com Jump to article:…
-
Russian APT Hackers Use Device Code Phishing Technique to Bypass MFA
Tags: apt, authentication, cyber, exploit, government, group, hacker, intelligence, mfa, microsoft, phishing, russia, threatRussian state-backed advanced persistent threat (APT) group Storm-2372 has exploited device code phishing to bypass multi-factor authentication (MFA) and infiltrate high-value targets across governments, NGOs, and critical industries. Since August 2024, this group has weaponized the OAuth device authorization flow”, a legitimate authentication mechanism”, to hijack user sessions and exfiltrate sensitive data. Microsoft Threat Intelligence…
-
National Social Security Fund of Morocco Suffers Data Breach
Threat actor ‘Jabaroot’ claims breach of National Social Security Fund of Morocco, aiming to steal large volumes of sensitive citizen data. Resecurity has identified a threat actor targeting government systems in Morocco with the goal of exfiltrating large volumes of sensitive data relating to citizens. The actor using the alias ‘Jabaroot’ released claims about the…
-
SideCopy APT Hackers Impersonate Government Officials to Deploy Open-Source XenoRAT Tool
The Pakistan-linked Advanced Persistent Threat (APT) group known as SideCopy has significantly expanded its targeting scope since late December 2024. Initially, the group focused on infiltrating India’s government, defense, maritime sectors, and university students. Recent developments indicate an inclusion of crucial sectors like railways, oil & gas, and external affairs ministries into their cyber activities.…
-
Rights group calls on Thai government to end alleged cyberattacks against civil society
Human rights non-profit Amnesty International urged Thai authorities this week to investigate claims of state-sponsored cyberattacks against human rights organizations and pro-democracy activists following the leak of internal government documents that detailed such an operation. First seen on therecord.media Jump to article: therecord.media/rights-group-calls-on-thai-government-to-stop-alleged-cyberattacks-on-civil-society
-
Rogue RDP: Abusing RDP for File Theft and Espionage
A recent report by Google Threat Intelligence Group (GTIG) has shed light on a sophisticated phishing campaign targeting European government and military organizations. This campaign, attributed to a suspected Russia-nexus espionage actor tracked as UNC5837, employed a novel technique leveraging the Remote Desktop Protocol (RDP) for malicious purposes. Unlike typical RDP attacks that focus on…
-
Hellcat Ransomware Upgrades Arsenal to Target Government, Education, and Energy Sectors
Tags: attack, cyber, cybersecurity, exploit, government, group, phishing, ransomware, service, spear-phishing, tactics, vulnerability, zero-dayThe cybersecurity community has raised alarms over the rapid evolution of the Hellcat ransomware group, which has escalated its tactics to target critical sectors. Hellcat, which emerged in mid-2024, now employs a sophisticated blend of psychological manipulation, zero-day vulnerabilities, and Ransomware-as-a-Service (RaaS) to expand its influence. Spear Phishing and Zero-day Exploits Hellcat operators initiate attacks…
-
Accenture Federal Services and Google Public Sector Launch MxDR for Government to Strengthen Cyber Defenses
First seen on scworld.com Jump to article: www.scworld.com/news/accenture-federal-services-and-google-public-sector-launch-mxdr-for-government-to-strengthen-cyber-defenses
-
UK Loses Bid for Complete Secrecy Over Apple Backdoor Demand
Independent Tribunal Rules That at Least ‘Bare Details’ of Case Can Be Made Public. The British government has lost its bid to maintain absolute secrecy over its attempt to compel Apple to provide backdoor access to users’ encrypted data, ruled Britain’s independent Investigatory Powers Tribunal. Whether any further details will get released publicly remains unclear.…
-
New GIFTEDCROOK Stealer Targets Government Organizations to Exfiltrate Sensitive Data
Cybersecurity experts have uncovered an alarming escalation in cyber-espionage operations targeting Ukrainian critical sectors, as outlined in CERT-UA’s latest alert, CERT-UA#14303. The campaign, attributed to the UAC-0226 hacking group, leverages a sophisticated C/C++-based stealer called GIFTEDCROOK to infiltrate systems, steal sensitive data, and exfiltrate it via covert channels. The operation has been active since February…
-
Convenience Over Security: The Inside Story of How Signalgate Happened
In the cybersecurity world, the most sophisticated threats often take a backseat to simple human error. The recent >>Signalgate
-
21 Countries Sign Onto Voluntary Pact to Stem the Proliferation of Spyware
Twenty-one countries signed onto the Pall Mall Process, an effort a year in the making that was created to develop a framework nations could adopt to address the proliferation and malicious use of spyware by governments that want it to track human rights workers, activists, journalists, and other such targets. First seen on securityboulevard.com Jump…
-
To tackle espionage, Dutch government plans to screen university students and researchers
The Dutch government is working on a plan to screen researchers and students to avoid exposing “sensitive technology” to espionage. First seen on therecord.media Jump to article: therecord.media/netherlands-plan-vetting-researchers-students-espionage
-
Government punts cyber governance code of practice for UK businesses
The Department for Science, Innovation and Technology’s cyber security minister Feryal Clark announces a cyber security code of governance for UK businesses to follow First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366622018/Government-punts-cyber-governance-code-of-practice-for-UK-businesses
-
UAC-0226 Deploys GIFTEDCROOK Stealer via Malicious Excel Files Targeting Ukraine
The Computer Emergency Response Team of Ukraine (CERT-UA) has revealed a new set of cyber attacks targeting Ukrainian institutions with information-stealing malware.The activity is aimed at military formations, law enforcement agencies, and local self-government bodies, particularly those located near Ukraine’s eastern border, the agency said.The attacks involve distributing phishing emails First seen on thehackernews.com Jump…
-
Boards Urged to Follow New Cyber Code of Practice
The British government has launched a new code of practice designed to boost corporate cyber governance First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/bords-urged-follow-new-cyber-code/
-
Global Telecommunications Company Secures Critical Networks
A leading global telecommunications company with large integrated satellite and terrestrial networks provides diverse services to telecommunications operators, enterprises, media companies, and government entities. They chose Eclypsium to provide better visibility and vulnerability management on thousands of Cisco and Juniper network devices critical to their global operations. Within 1-2 months, Eclypsium was able to deliver……
-
Fintech body calls on government for national anti-fraud centre
Industry body says a national anti-fraud centre could be the vehicle required to effectively fight fraud through data sharing First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366622194/Fintech-body-calls-on-government-for-national-anti-fraud-centre
-
Auto-Color Linux Backdoor: TTPs and Internal Architecture Exposed
A newly identified Linux backdoor named >>Auto-Color,
-
Hackers are pretending to be drone companies and state agencies to spy on Ukrainian victims
The hackers have targeted Ukraine’s armed forces, law enforcement agencies and local government bodies, especially those near the country’s eastern border, which is close to Russia. First seen on therecord.media Jump to article: therecord.media/hackers-impersonate-drone-companies-state-agencies-spy-ukraine