Tag: russia
-
Russian Hackers Exploit Rival Attackers’ Infrastructure for Espionage
Tags: apt, blizzard, cyber, cybercrime, espionage, exploit, hacker, infrastructure, microsoft, russiaMicrosoft has found that Russian APT Secret Blizzard piggybacks on other cybercriminals’ infr4asytructure to conduct cyber espionage First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/russia-hackers-exploit-rival/
-
How a Russian man’s harrowing tale shows the physical dangers of spyware
Citizen Lab and a Russian exile-led human rights group investigated spyware implanted on his phone after he was detained, beaten up and released. First seen on cyberscoop.com Jump to article: cyberscoop.com/russian-surveillance-spyware-threat-citizen-lab/
-
Russian programmer says FSB agents planted spyware on his Android phone
Security researchers confirmed the programmer’s phone had spyware, likely during a spell in Russian detention. The programmer told his story to TechCrunch. First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/05/russian-programmer-says-fsb-agents-planted-spyware-on-his-android-phone/
-
Russia-linked APT Secret Blizzard spotted using infrastructure of other threat actors
Russia-linked APT group Secret Blizzard has used the tools and infrastructure of at least 6 other threat actors during the past 7 years. Researchers from Microsoft Threat Intelligence collected evidence that the Russia-linked ATP group Secret Blizzard (aka Turla,Snake,Uroburos,Waterbug,Venomous BearandKRYPTON) has used the tools and infrastructure of at least 6 other threat actors during the…
-
UK’s NCA Disrupts Multibillion-Dollar Russian Money Launderers
The National Crime Agency has made scores of arrests in a bid to bring down two major Russian money laundering networks First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/nca-multibilliondollar-russian/
-
Pro-Russian Hacktivist Group Claims 6600 Attacks Targeting Europe
Orange Cyberdefense found that hacktivist gang Noname has almost exclusively targeted European countries since March 2022, with no attacks impacting the US First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/pro-russian-hacktivist-attacks/
-
NCA Busts Russian Crypto Networks Laundering Funds and Evading Sanctions
The U.K. National Crime Agency (NCA) on Wednesday announced that it led an international investigation to disrupt Russian money laundering networks that were found to facilitate serious and organized crime across the U.K., the Middle East, Russia, and South America.The effort, codenamed Operation Destabilise, has resulted in the arrest of 84 suspects linked to two…
-
NCA’s Operation Destabilise: Dismantling a Global Money Laundering Network
The National Crime Agency (NCA) has concluded Operation Destabilise, a complex international investigation that successfully disrupted a sophisticated Russian-led money laundering network operating on an unprecedented scale. This operation exposed... First seen on securityonline.info Jump to article: securityonline.info/ncas-operation-destabilise-dismantling-a-global-money-laundering-network/
-
Russian Money Laundering Services Busted in UK-Led Operation
French Police Reportedly Detain Accused Ryuk Money Launder Ekaterina Zhdanova. An international investigation led by the United Kingdom busted Russian money cash-for-crypto laundering networks in an operation that’s led to the arrest of 84 individuals and U.S. sanctions against others. One of the network allegedly laundered extortion money paid to the Ryuk ransomware group. First…
-
NCA takes out network that laundered ransomware payments
NCA-led Operation Destabilise disrupts Russian crime networks who funded the drugs and firearms trade in the UK, helped Russian oligarchs duck sanctions, and laundered money stolen from the NHS and others by ransomware gangs First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366616657/NCA-takes-out-network-that-laundered-ransomware-payments
-
Russian FSB Hackers Breach Pakistan’s APT Storm-0156
Parasitic advanced persistent threat Secret Blizzard accesses another APT’s infrastructure and steals what it has stolen from South Asian government and military targets. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/russian-fsb-hackers-breach-pakistan-storm-0156
-
New Kimsuky credential theft attacks involve Russian email addresses
First seen on scworld.com Jump to article: www.scworld.com/brief/new-kimsuky-credential-theft-attacks-involve-russian-email-addresses
-
UK disrupts Russian money laundering networks used by ransomware
A law enforcement operation led by the United Kingdom’s National Crime Agency (NCA) has disrupted two Russian money laundering networks working with criminals worldwide, including ransomware gangs. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/uk-disrupts-russian-money-laundering-networks-used-by-ransomware/
-
Russia-Linked Turla Exploits Pakistani Hackers’ Servers to Target Afghan and Indian Entities
The Russia-linked advanced persistent threat (APT) group known as Turla has been linked to a previously undocumented campaign that involved infiltrating the command-and-control (C2) servers of a Pakistan-based hacking group named Storm-0156 to conduct its own operations since 2022.The activity, first observed in December 2022, is the latest instance of the nation-state adversary “embedding First…
-
Russian hackers hijack Pakistani hackers’ servers for their own attacks
The notorious Russian cyber-espionage group Turla is hacking other hackers, hijacking the Pakistani threat actor Storm-0156’s infrastructure to launch their own covert attacks on already compromised networks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/russian-turla-hackers-hijack-pakistani-apt-servers-for-cyber-espionage-attacks/
-
Russian cyber company F.A.C.C.T. sells key assets to establish new firm
First seen on therecord.media Jump to article: therecord.media/russia-cyber-firm-facct-sells-assets-creating-new-firm
-
Russian-linked Turla caught using Pakistani APT infrastructure for espionage
Both Microsoft and Lumen’s BlackLotus Labs found Turla spying on Afghanistan and India via Pakistani infrastructure. First seen on cyberscoop.com Jump to article: cyberscoop.com/turla-infiltrates-pakistani-apt-networks-microsoft-lumen/
-
NHS Ransomware Attack: Russian INC Ransom Gang Steals Patient Data
INC Ransom, a Russian-leanguage ransomware group has claimed responsibility for the ransomware attack on two NHS, hospitals. First seen on hackread.com Jump to article: hackread.com/nhs-ransomware-attack-russia-inc-ransom-steal-patient-data/
-
Spy v Spy: Russian APT Turla Caught Stealing from Pakistani APT
Russia’s Turla hackers hijacked 33 command servers operated by Pakistani hackers who had themselves breached Afghanistan and Indian targets. The post Spy v Spy: Russian APT Turla Caught Stealing from Pakistani APT appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/spy-v-spy-russian-apt-turla-caught-stealing-from-pakistani-apt/
-
She Was a Russian Socialite and Influencer. Cops Say She’s a Crypto Laundering Kingpin
Western authorities say they’ve identified a network that found a new way to clean drug gangs’ dirty cash. WIRED gained exclusive access to the investigation. First seen on wired.com Jump to article: www.wired.com/story/operation-destabilise-money-laundering/
-
Russian money laundering networks uncovered linking narco traffickers, ransomware gangs and Kremlin spies
First seen on therecord.media Jump to article: therecord.media/russian-money-laundering-networks-trafficking-cybercrime-kremlin
-
Russian court sentences kingpin of Hydra drug marketplace to life in prison
The underground marketplace distributed more than a metric ton of narcotics. First seen on arstechnica.com Jump to article: arstechnica.com/information-technology/2024/12/russian-court-sentences-kingpin-of-hydra-drug-marketplace-to-life-in-prison/
-
Vodka Giant Stoli Files for Bankruptcy After Ransomware Attack
Russian vodka-maker Stoli Group has filed for bankruptcy in the US after ransomware attack and alleged persecution by the Putin regime First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/vodka-stoli-bankruptcy-ransomware/
-
‘Horns&Hooves’ Malware Campaign Hits Over 1,000 Victims
Russian Threat Actor Delivers NetSupport RAT, BurnsRAT via Fake Requests. A malware campaign targeting Russian retailers and service businesses aims to deploy remote access tools and install infostealer malware. Kaspersky dubbed the campaign Horns&Hooves, after a fake organization set up by fraudsters in the 1931 Soviet satirical novel The Little Golden Calf. First seen on…
-
Vodka maker Stoli files for bankruptcy in US after ransomware attack
Stoli Group’s U.S. companies have filed for bankruptcy following an August ransomware attack and Russian authorities seizing the company’s remaining distilleries in the country. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/vodka-maker-stoli-files-for-bankruptcy-in-us-after-ransomware-attack/
-
Dark Web Hydra Market Mastermind Sentenced to Life by Russia
Stanislav Moiseyev, the organizer of the notorious Hydra Market, has been sentenced to life imprisonment by a Moscow court. Learn about the massive scale of this dark web marketplace and the international efforts to dismantle it. First seen on hackread.com Jump to article: hackread.com/dark-web-hydra-market-mastermind-life-prison-russia/
-
Kimsuky Group Adopts New Phishing Tactics to Target Victims
North Korean Kimsuky group has escalated their phishing campaigns, using Russian domains to steal credentials First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/kimsuky-adopts-new-phishing-tactics/
-
Video: Russia Fines Google for $2.5 Decillion
Russia’s lawsuit against Google has raised eyebrows as the country demands a staggering 2.5 decillion dollars”, a sum that seems almost beyond imagination. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/video/russia-sues-google-for-over-2-decillion-dollar-fine/
-
Russia delivers historic life sentence to suspected founder of darknet marketplace
First seen on therecord.media Jump to article: therecord.media/hyrda-darknet-drug-marketplace-kingpin-sentenced-life-russia
-
North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks
Tags: attack, credentials, cybersecurity, email, hacker, korea, north-korea, phishing, russia, service, theft, threatThe North Korea-aligned threat actor known as Kimsuky has been linked to a series of phishing attacks that involve sending email messages that originate from Russian sender addresses to ultimately conduct credential theft.”Phishing emails were sent mainly through email services in Japan and Korea until early September,” South Korean cybersecurity company Genians said. “Then, from…