Tag: russia
-
Russia-linked APT28 use Signal chats to target Ukraine official with malware
Russia-linked group APT28 uses Signal chats as an attack vector to phish Ukrainian officials with new malware strains. Russia-linked cyberespionage group APT28 is targeting Ukrainian government officials using Signal chats to deliver two new types of malware, tracked as BeardShell and SlimAgent. While Signal itself remains secure, attackers are exploiting its growing popularity in official…
-
Four REvil ransomware crooks walk free, escape gulag fate, after admitting guilt
Russian judge lets off accused with time served but others who refused to plead guilty face years in penal colony First seen on theregister.com Jump to article: www.theregister.com/2025/06/24/four_revil_ransomware_suspects_time_served/
-
APT28 Uses Signal Chat to Deploy BEARDSHELL Malware and COVENANT in Ukraine
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new cyber attack campaign by the Russia-linked APT28 (aka UAC-0001) threat actors using Signal chat messages to deliver two new malware families dubbed BEARDSHELL and COVENANT.BEARDSHELL, per CERT-UA, is written in C++ and offers the ability to download and execute PowerShell scripts, as…
-
Successful Military Attacks are Driving Nation States to Cyber Options
Tags: attack, china, communications, computing, cyber, cyberattack, cybersecurity, data, defense, exploit, extortion, finance, fraud, government, healthcare, infrastructure, iran, korea, middle-east, military, north-korea, russia, service, tactics, technology, tool, ukraine, vulnerability, warfareWith daring military attacks, kinetic warfare is shifting the balance of power in regions across the globe, upending the perception of power projection. Powerful nations are reeling from the impacts of bold assaults and seeking additional methods to drive foreign policy”Š”, “Šcyber may look as an appealing asymmetric warfare capability that is worth doubling-down on.…
-
Russian court releases several REvil ransomware gang members
Despite being sentenced to five years in prison, the court released the four men on time served. First seen on cyberscoop.com Jump to article: cyberscoop.com/revil-ransomware-sentence-russia-time-served/
-
APT28 hackers use Signal chats to launch new malware attacks on Ukraine
The Russian state-sponsored threat group APT28 is using Signal chats to target government targets in Ukraine with two previously undocumented malware families named BeardShell and SlimAgent. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apt28-hackers-use-signal-chats-to-launch-new-malware-attacks-on-ukraine/
-
Animal certification system compromise impacts Russian dairy supply chain
First seen on scworld.com Jump to article: www.scworld.com/brief/animal-certification-system-compromise-impacts-russian-dairy-supply-chain
-
Revil ransomware members released after time served on carding charges
Four REvil ransomware members arrested in January 2022 were released by Russia on time served after they pleaded guilty to carding and malware distribution charges. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/revil-hackers-released-after-time-served-on-carding-charges/
-
Surge in XSS Cyberattacks Targets Popular Webmail Platforms, ESET Reports
A recent report from ESET has uncovered a sophisticated cyber espionage campaign by the Russia-aligned Sednit group, targeting high-value webmail platforms through cross-site scripting (XSS) attacks. Dubbed Operation RoundPress, this operation has compromised popular webmail services such as Roundcube, Horde, MDaemon, and Zimbra, with a primary focus on governmental entities and defense organizations in Eastern…
-
Israel Says Iran Is Hacking Security Cameras for Spying
Plus: Ukrainian hackers reportedly knock out a key Russian internet provider, China’s Salt Typhoon hackers claim another victim, and the UK hits 23andMe with a hefty fine over its 2023 data breach. First seen on wired.com Jump to article: www.wired.com/story/israel-says-iran-is-hack-security-cameras-for-spying/
-
Cyberattack Disrupts Russian Dairy Supply Chain by Targeting Animal Certification System
In a Russia’s dairy supply chain, a suspected cyberattack has targeted the Mercury component of the national veterinary certification system, forcing it into emergency operation mode. This critical system, integral to the processing of veterinary accompanying documents, ensures the traceability and safety compliance of animal-derived products, including dairy. The attack has temporarily halted normal operations,…
-
Beware the CyberAv3ngers
Iranian OT Hacking Team Has Gone Quiet “¦ Too Quiet. Armed exchanges between Iran and Israel and the prospect of U.S. armed intervention against Tehran has cyber defenders warning about hacking risks to critical infrastructure. Iran’s CyberAv3ngers doesn’t possess the sophistication of Chinese or Russian actors but it’s still a persistent threat. First seen on…
-
Russian dairy supply disrupted by cyberattack on animal certification system
The digital certification system used by Russia’s producers and suppliers of meat, dairy, eggs and other animal products was taken offline after a cyberattack. First seen on therecord.media Jump to article: therecord.media/russia-dairy-supply-disrupted-cyberattack
-
Russia Expert Falls Prey to Elite Hackers Disguised as US Officials
A prominent expert on Russian information operations was targeted by a sophisticated spear phishing attack likely coming from Russian hackers First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/russia-expert-elite-hackers-us/
-
Russian APT UNC6293 Exploits Google Application-Specific Passwords to Hack Critics
The post Russian APT UNC6293 Exploits Google Application-Specific Passwords to Hack Critics appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/russian-apt-unc6293-exploits-google-application-specific-passwords-to-hack-critics/
-
Argentina uncovers suspected Russian spy ring behind disinformation campaigns
Argentina’s government told local media that authorities had detected an operation led by Russians that was spreading propaganda and disinformation. First seen on therecord.media Jump to article: therecord.media/argentina-russia-spies-disinformation-project-lakhta
-
Finland could charge Russia-linked ship’s officers over cable breaks by ‘August at the latest’
Tags: russiaFinland’s prosecution authority could bring charges soon against three Georgian nationals who were the most senior officers aboard a Russia-linked ship that dragged its anchor through Baltic Sea cables last year. First seen on therecord.media Jump to article: therecord.media/finland-could-charge-eagle-s-ship-officers-cable-breaks
-
Sophisticated Phishing Attack Uses ASP Pages to Target Prominent Russia Critics Google
Google Threat Intelligence Group (GTIG), in collaboration with external partners, has uncovered a sophisticated phishing campaign orchestrated by a Russia state-sponsored cyber threat actor, tracked as UNC6293. Active from at least April through early June 2025, this campaign specifically targeted prominent academics and critics of Russia. GTIG assesses with low confidence that UNC6293 is associated…
-
Account takeover attacks spoofing US State Department impact Russia researcher
First seen on scworld.com Jump to article: www.scworld.com/brief/account-takeover-attacks-spoofing-us-state-department-impact-russia-researcher
-
Russia detects first SuperCard malware attacks skimming bank data via NFC
Malware detected previously in Italy has popped up in Russia, researchers said. Attackers use it to access devices’ near field communications (NFC) and steal payment card data. First seen on therecord.media Jump to article: therecord.media/supercard-nfc-banking-malware-russia
-
Hackers impersonating US government compromise email account of prominent Russia researcher
Keir Giles, the author of “Russia’s War on Everybody” and a consulting fellow at the Chatham House think tank, said attackers impersonated the U.S. State Department to hack into his email accounts. First seen on therecord.media Jump to article: therecord.media/keir-giles-russia-researcher-email-hacked
-
RFK Jr. Orders HHS to Give Undocumented Migrants’ Medicaid Data to DHS
Plus: Spyware is found on two Italian journalists’ phones, Ukraine claims to have hacked a Russian aircraft maker, police take down major infostealer infrastructure, and more. First seen on wired.com Jump to article: www.wired.com/story/rfk-jr-orders-hhs-to-give-undocumented-migrants-medicaid-data-to-dhs/
-
Belarusian hackers taunt Kaspersky over report detailing their attacks
A recent Kaspersky report offers a rare glimpse into the alleged arsenal of politically motivated hackers waging a digital war against authoritarian regimes in Russia and Belarus. First seen on therecord.media Jump to article: therecord.media/belarusian-hackers-taunt-kaspersky-ver-report
-
Is attacker laziness enabled by genAI shortcuts making them easier to catch?
Tactics of attackers: The OpenAI report, published in June, detailed a variety of defenses the company has deployed against fraudsters. One, for example, involved bogus job applications.”We identified and banned ChatGPT accounts associated with what appeared to be multiple suspected deceptive employment campaigns. These threat actors used OpenAI’s models to develop materials supporting what may…