Tag: russia
-
The source code of Banshee Stealer leaked online
Banshee Stealer, a MacOS Malware-as-a-Service, shut down after its source code leaked online. The code is now available on GitHub. In August 2024, Russian hackers promoted BANSHEE Stealer, a macOS malware targeting x86_64 and ARM64, capable of stealing browser data, crypto wallets, and more. BANSHEE Stealer supports basic evasion techniques, relies on the sysctl API…
-
RomCom hackers chained Firefox and Windows zero-days to deliver backdoor
Russia-aligned APT group RomCom was behind attacks that leveraged CVE-2024-9680, a remote code execution flaw in Firefox, and CVE-2024-49039, an elevation of privilege … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/26/romcom-backdoor-cve-2024-9680-cve-2024-49039/
-
Researchers Detailed Tools Used By Hacktivists Fueling Ransomware Attacks
CyberVolk, a politically motivated hacktivist group, has leveraged readily available ransomware builders like AzzaSec, Diamond, LockBit, and Chaos to launch DDoS and ransomware attacks against targets opposing Russian interests. The highly skilled members of the group modify and improve these tools, which results in an increase in their level of sophistication and makes it more…
-
Unveiling the >>Nearest Neighbor Attack<<: A Russian APT's Covert Tactic to Weaponize Wi-Fi
Volexity, a leading cybersecurity firm, has revealed a novel attack technique employed by the Russian APT group GruesomeLarch (also known as APT28, Fancy Bear, etc.). Dubbed the >>Nearest Neighbor Attack,
-
Britain Putin up stronger AI defences to counter growing cyber threats
‘Be in no doubt: the UK and others in this room are watching Russia’ First seen on theregister.com Jump to article: www.theregister.com/2024/11/26/uk_ai_security/
-
Experts Urge Sober Assessment of Russian Hacking
Speech by UK Minister Pat McFadden Sparks Backlash. A warning from a British government official over Russian cyberwar sparked backlash from cybersecurity specialists who urged a measured approach. Russian attacks could turn the lights off for millions of people, said Pat McFadden, minister for intergovernmental First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/experts-urge-sober-assessment-russian-hacking-a-26903
-
Russian spies use remote desktop protocol files in unusual mass phishing drive
First seen on theregister.com Jump to article: www.theregister.com/2024/10/30/russia_wrangles_rdp_files_in/
-
Russian Hackers Exploit WiFi in Sophisticated New Attack
‘Nearest Neighbor Attack’ Bypasses Cyber Defenses by Breaching WiFi Networks. A Russian cyberespionage group hacked a Washington, D.C.-based organization focused on Ukraine by deploying a new attack technique that exploits Wi-Fi connectivity, according to new research. The nearest neighbor attack: methodology could lead to a significant broadening of targeting and attacks. First seen on govinfosecurity.com…
-
BlackBasta Ransomware Brand Picks Up Where Conti Left Off
New analysis says law enforcement efforts against Russian-language ransomware-as-a-service (RaaS) infrastructure helped consolidate influence behind BlackBasta, but some experts aren’t so sure the brand means that much. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/blackbasta-ransomware-group-conti
-
Fancy Bear ‘Nearest Neighbor’ Attack Uses Nearby Wi-Fi Network
In a new class of attack, the Russian APT breached a target in Washington, DC, by credential-stuffing wireless networks in close proximity to it and daisy-chaining a vector together in a resourceful and creative way, according to researchers. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/fancy-bear-nearest-neighbor-attack-wi-fi
-
Asia, Europe subjected to Russian cyberespionage campaign
First seen on scworld.com Jump to article: www.scworld.com/brief/asia-europe-subjected-to-russian-cyberespionage-campaign
-
UK minister criticized over ‘hyperbolic’ speech on Russia’s cyber capabilities
First seen on therecord.media Jump to article: therecord.media/uk-minister-criticized-hyperbolic-russia
-
Spies hack Wi-Fi networks in far-off land to launch attack on target next door
“Nearest Neighbor Attack” finally lets Russia’s Fancy Bear into target’s Wi-Fi network. First seen on arstechnica.com Jump to article: arstechnica.com/security/2024/11/spies-hack-wi-fi-networks-in-far-off-land-to-launch-attack-on-target-next-door/
-
Microsoft president asks Trump to “push harder” against Russian hacks
Brad Smith wants US to take a tougher approach to state-sponsored cyberattacks. First seen on arstechnica.com Jump to article: arstechnica.com/security/2024/11/microsoft-president-asks-trump-to-push-harder-against-russian-hacks/
-
As North Korean troops march toward Ukraine, does a Russian quid pro quo reach space?
The budding partnership between Russia and North Korea may now be blossoming into space. First seen on arstechnica.com Jump to article: arstechnica.com/space/2024/11/in-exchange-for-troops-in-ukraine-russian-aid-to-north-korea-may-extend-to-space/
-
Act fast to snuff out employee curiosity over ‘free’ AI apps
The word “free” has always tempted employees who are looking for an app or template to make their work easier. These days, combine “free” with “AI” and the lure is almost irresistible.Since the release of ChatGPT in late 2022, free AI-themed apps have exploded. Unfortunately, some are created by threat actors. One of the latest…
-
North Korea Deploying Fake IT Workers in China, Russia, Other Countries
The North Korean fake IT workers have infiltrated businesses in China, Russia, and other countries aside from the US. The post North Korea Deploying Fake IT Workers in China, Russia, Other Countries appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/north-korea-deploying-fake-it-workers-in-china-russia-other-countries/
-
Russian Cyberspies Hacked Building Across Street From Target For W-Fi Attack
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36640/Russian-Cyberspies-Hacked-Building-Across-Street-From-Target-For-W-Fi-Attack.html
-
Faraway Russian hackers breached US organization via Wi-Fi
Forest Blizzard, a threat group associated with Russia’s GRU military intelligence service, repeatedly breached a US-based organization via compromised computer systems … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/11/25/enterprise-wi-fi-compromised/
-
UK seeks collaboration for security research lab to counter Russia and ‘new AI arms race’
The U.K. is seeking collaboration for a new AI security research lab that’s designed to counter Russia and other hostile states in what it dubs the >>new AI arms race.
-
UK Launches AI Security Lab to Combat Russian Cyber Threats
UK Minister Pat McFadden will say in a speech at a NATO conference that adversaries are looking at using AI on the physical and cyber battlefield First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/uk-ai-security-lab-russia/
-
Uncle Sam outs a Russian accused of developing Redline infostealing malware
First seen on theregister.com Jump to article: www.theregister.com/2024/10/29/russian_redline_malware/
-
Can AI Save the UK from a Cyber Catastrophe? The Fight Against Russian Hackers
Russia is intensifying its efforts to leverage artificial intelligence (AI) to enhance cyberattacks against the United Kingdom, with concerns that it could even target the UK’s electricity grid. These cyber warfare warnings were issued by Cabinet Minister Pat McFadden, who will address NATO experts at the Cyber Defence Conference in London on Monday. First seen…
-
Russian Cyberspies Hacked Building Across Street From Target for Wi-Fi Attack
Russian cyberspy group APT28 conducted a Nearest Neighbor Attack, where it hacked into the building across the street from the victim for a Wi-Fi attack. The post Russian Cyberspies Hacked Building Across Street From Target for Wi-Fi Attack appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/russian-cyberspies-hacked-building-across-street-from-target-for-wi-fi-attack/
-
Russia-linked APT TAG-110 uses targets Europe and Asia
Russia-linked threat actors TAG-110 employed custom malware HATVIBE and CHERRYSPY to target organizations in Asia and Europe. Insikt Group researchers uncovered an ongoing cyber-espionage campaign by Russia-linked threat actor TAG-110 that employed custom malware tools HATVIBE and CHERRYSPY. The campaign primarily targeted government entities, human rights groups, and educational institutions in Central Asia, East Asia,…
-
Russia-linked threat actors threaten the UK and its allies, minister to say
A senior UK minister will warn that Russia is preparing cyberattacks against the UK and its allies to undermine support for Ukraine. Russia may launch cyberattacks against the UK and its allies in retaliation for their support of Ukraine, Chancellor of the Duchy of Lancaster Pat McFadden is expected to state during a NATO meeting.…
-
Russia plotting to use AI to enhance cyber-attacks against UK, minister will warn
Pat McFadden will tell a Nato conference on Monday that Russia could knock out the UK’s electricity gridRussia and other adversaries of the UK are trying to use artificial intelligence to enhance cyber-attacks against the nation’s infrastructure, the cabinet minister Pat McFadden will warn at a Nato conference in London on Monday.The chancellor of the…
-
Russia-Linked TAG-110 Launches Cyberespionage Campaign Across Asia and Europe
Insikt Group, the threat research division of Recorded Future, has uncovered a cyberespionage campaign attributed to TAG-110, a Russia-aligned threat activity group. This campaign, active since at least July 2024,... First seen on securityonline.info Jump to article: securityonline.info/russia-linked-tag-110-launches-cyberespionage-campaign-across-asia-and-europe/
-
PROSPERO Proton66: Unmasking the Bulletproof Hosting Connection
In a comprehensive report by Intrinsec, the cybersecurity community is presented with detailed insights into the connection between two Russian autonomous systems (ASNs), PROSPERO (AS200593) and Proton66 (AS198953). These networks... First seen on securityonline.info Jump to article: securityonline.info/prospero-proton66-unmasking-the-bulletproof-hosting-connection/