Tag: russia
-
Bulgarians plead guilty to spying for Russia using ‘advanced technology’
First seen on therecord.media Jump to article: therecord.media/bulgarians-plead-guilty-uk-spying-russia
-
‘Operation Undercut’ Adds to Russia Malign Influence Campaigns
Just like Russia’s Doppelgänger effort, the goal is to spread misinformation about Ukraine and Western efforts to help Ukraine in its war with Russia. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/operation-undercut-russia-malign-influence-campaigns
-
Cyber-Attacks Could Impact Romanian Presidential Race, Officials Claim
Romania’s national security council suggested that Russia is behind these attacks, amid a court order for a recount of votes in the first round of the country’s presidential election First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cyber-attacks-romanian-presidential/
-
AI-based tools designed for criminal activity are in high demand
Multiple regional conflicts, such as Russia’s continued invasion of Ukraine and the Israel-Hamas conflict, have resulted in a surge in cyberattacks and hacktivist activities, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/29/ai-tools-ransomware/
-
Russia’s sabotage of western targets ‘could trigger Nato defence clause’
German intelligence chief warns continued hybrid warfare by Moscow increases risk of alliance invoking Article 5Russia’s acts of sabotage against western targets may eventually prompt Nato to consider invoking the alliance’s Article 5 mutual defence clause, the head of Germany’s foreign intelligence service has warned.Speaking at an event of the German Council of Foreign Relations…
-
Russia’s sabotage of west may prompt Nato defence clause
German intelligence chief warns of Russian ‘direct military confrontation’ with Nato if the Kremlin steps up warfareRussia’s acts of sabotage against Western targets may eventually prompt Nato to consider invoking the alliance’s Article 5 mutual defence clause, the head of Germany’s foreign intelligence service has warned.Speaking at an event of the German Council of Foreign…
-
Script Kiddie ‘Matrix’ Builds Massive Botnet
Likely Russian Hacker Exploits IoT Vulnerabilities, Many Known for Years. An apparent Russian script kiddie is converting widespread security gaps into powerful botnets capable of launching global-scale distributed denial-of-service attacks. A threat actor with the online moniker Matrix is exploiting IoT vulnerabilities such as default credentials and outdated software. First seen on govinfosecurity.com Jump to…
-
Russian APT RomCom combines Firefox and Windows zero-day flaws in drive-by exploit
Tags: access, antivirus, apt, attack, backdoor, browser, business, computer, cve, cybercrime, cyberespionage, defense, endpoint, exploit, flaw, germany, government, group, insurance, intelligence, malicious, microsoft, msp, password, powershell, russia, software, threat, ukraine, vulnerability, windows, zero-dayA Russia-aligned group that engages in both cybercrime and cyberespionage operations used a zero-click exploit chain last month that combined previously unknown and unpatched vulnerabilities in Firefox and Windows.The campaign, whose goal was to deploy the group’s RomCom backdoor on computers, targeted users from Europe and North America. The APT group, also known as Storm-0978,…
-
Russian Hackers Exploit Firefox and Windows 0-Days to Deploy Backdoor
Watch out for the Russian hackers from the infamous RomRom group, also known as Storm-0978, Tropical Scorpius, or UNC2596, and their use of a custom backdoor. First seen on hackread.com Jump to article: hackread.com/russian-hackers-firefox-windows-0-days-backdoor/
-
Russian Script Kiddie Assembles Massive DDoS Botnet
Over the past year, Matrix has used publicly available malware tools and exploit scripts to target weakly secured IoT devices, and enterprise servers. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/russian-script-kiddie-assembles-massive-ddos-botnet
-
Pro-Russian Hacktivists Launch Branded Ransomware Operations
A pro-Russian hacktivist collective, CyberVolk, has launched its own ransomware-as-a-service operations, SentinelLabs has found First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/russian-hacktivists-branded/
-
Hackers Exploit Firefox and Windows Flaws: RomCom’s Advanced Attack Unveiled
A Russia-aligned hacking group, known as RomCom (also identified as Storm-0978, Tropical Scorpius, or UNC2596), has successfully exploited two zero-day vulnerabilities”, one in Mozilla Firefox and another in Microsoft Windows Task Scheduler. These vulnerabilities, identified as CVE-2024-9680 and CVE-2024-49039, were chained together to allow the group to execute arbitrary code and install malicious backdoors on…
-
Russian RomCom APT Group Leverages Zero-Day Flaws in Firefox and Windows
Russia-backed hackers, known as RomCom, have exploited critical zero-day vulnerabilities in Mozilla Firefox and Windows to launch targeted attacks First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/romcom-apt-zeroday-flaws-firefox/
-
Russian APT Chained Firefox and Windows Zero-Days Against US and European Targets
The Russia-linked RomCom APT has been observed chaining two zero-days in Firefox and Windows for backdoor delivery. The post Russian APT Chained Firefox and Windows Zero-Days Against US and European Targets appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/russian-apt-chained-firefox-and-windows-zero-days-against-us-and-european-targets/
-
Russian group RomCom exploited Firefox and Tor Browser zero-days to target attacks Europe and North America
The Russian RomCom group exploited Firefox and Tor Browser zero-day vulnerabilities in attacks on users in Europe and North America. Russian-based cybercrime group RomCom (aka UAT-5647, Storm-0978, Tropical Scorpius, UAC-0180, UNC2596) exploited two Firefox and Tor Browser zero-day vulnerabilities in recent attacks on users across Europe and North America. The first zero-day exploited by the Russian group, is a use-after-free…
-
UK councils bat away DDoS barrage from pro-Russia keyboard warriors
First seen on theregister.com Jump to article: www.theregister.com/2024/11/01/uk_councils_russia_ddos/
-
RomCom Exploits Zero-Days in Firefox (CVE-2024-9680) Windows (CVE-2024-49039) with No User Interaction
Tags: attack, browser, cybersecurity, exploit, microsoft, russia, threat, vulnerability, windows, zero-dayIn a recent cybersecurity report, ESET researchers have unveiled a coordinated attack by the Russia-aligned threat actor RomCom, exploiting zero-day vulnerabilities in both Mozilla Firefox and Microsoft Windows. These vulnerabilities”, previously... First seen on securityonline.info Jump to article: securityonline.info/romcom-exploits-zero-days-in-firefox-cve-2024-9680-windows-cve-2024-49039-with-no-user-interaction/
-
CyberVolk: The Hacktivist Collective Blurring Lines Between Activism, Ransomware, and Geopolitics
The pro-Russian hacktivist collective CyberVolk, also known as GLORIAMIST, has emerged as a significant threat in a rapidly evolving cybercrime ecosystem. A recent report by SentinelOne delves into the group’s... First seen on securityonline.info Jump to article: securityonline.info/cybervolk-the-hacktivist-collective-blurring-lines-between-activism-ransomware-and-geopolitics/
-
Russian Hackers Target Mozilla, Windows in New Exploit Chain
ESET Discovers Two Major Vulnerabilities Exploited by Russian RomCom Hacking Group. Two vulnerabilities in Mozilla products and Windows are actively exploited by RomCom, a Kremlin-linked cybercriminal group known for targeting businesses and conducting espionage, warn security researchers from Eset. Exploiting the two flaws together enables attackers to execute arbitrary code. First seen on govinfosecurity.com Jump…
-
‘RomCom’ APT Mounts Zero-Day, Zero-Click Browser Escapes in Firefox, Tor
The innocuously named Russian-sponsored cyber threat actor has combined critical and serious vulnerabilities in Windows and Firefox products in a zero-click code execution exploit. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/romcom-apt-zero-day-zero-click-browser-escapes-firefox-tor
-
Russian hackers exploit Firefox, Windows zero-days in wild
RomCom threat actors chain two Firefox and Windows zero-day vulnerabilities together in order to execute arbitrary code in vulnerable Mozilla browsers. First seen on Jump to article: /www.techtarget.com/searchsecurity/news/366616460/Russian-hackers-exploit-Firefox-Windows-zero-days-in-wild
-
Russia-linked hackers exploited Firefox and Windows bugs in ‘widespread’ hacking campaign
The Russia-aligned RomCom gang exploited the vulnerabilities to target hundreds of Firefox users across Europe and North America. First seen on techcrunch.com Jump to article: techcrunch.com/2024/11/26/russia-linked-hackers-exploited-firefox-and-windows-zero-day-bugs-in-widespread-hacking-campaign/
-
RomCom Hackers Exploits Windows Firefox Zero-Day in Advanced Cyberattacks
In a new wave of cyberattacks, the Russia-aligned hacking group >>RomCom>The compromise chain is composed of a […] The post RomCom Hackers Exploits Windows & Firefox Zero-Day in Advanced Cyberattacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform. First seen on gbhackers.com Jump to article: gbhackers.com/romcom-hackers-exploits-windows-firefox-zero-day/
-
Russian-Speaking Ransomware Gangs on the Hunt for Pen Testers
In further proof of the professionalization of Russian cybercriminal groups, ransomware gangs have been posting job ads for security positions such as pen testers, looking to boost their ransomware deployment operations. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/russian-ransomware-gangs-hunt-pen-testers
-
‘CyberVolk’ hacktivists use ransomware in support of Russian interests
First seen on therecord.media Jump to article: therecord.media/cybervolk-india-hacktivists-russia-ransomware
-
Russian threat actors poised to cripple power grid, UK warns
UK government escalates cyber rhetoric in a speech at a Nato event, saying Russian advanced persistent threats stand ready to conduct cyber attacks that could ‘turn off the lights for millions’ First seen on Jump to article: /www.computerweekly.com/news/366616324/Russian-threat-actors-poised-to-cripple-power-grid-UK-warns
-
RomCom Exploits Zero-Day Firefox and Windows Flaws in Sophisticated Cyberattacks
The Russia-aligned threat actor known as RomCom has been linked to the zero-day exploitation of two security flaws, one in Mozilla Firefox and the other in Microsoft Windows, as part of attacks designed to deliver the eponymous backdoor on victim systems.”In a successful attack, if a victim browses a web page containing the exploit, an…
-
Here’s how simple it is for script kiddies to stand up DDoS services
How plug-and-play hacking tools and lax configs helped a Russian script kiddie start a scheme. First seen on cyberscoop.com Jump to article: cyberscoop.com/russian-hacker-script-matrix-ddos-aqua/
-
Firefox and Windows zero-days exploited by Russian RomCom hackers
Russian-based RomCom cybercrime group chained two zero-day vulnerabilities in recent attacks targeting Firefox and Tor Browser users across Europe and North America. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/firefox-and-windows-zero-days-exploited-by-russian-romcom-hackers/
-
Russia Is Going All Out on Election Day Interference
First seen on wired.com Jump to article: www.wired.com/story/russia-election-disinformation-2024-election-day/