Tag: russia
-
Russian national in US custody in Phobos ransomware investigation
First seen on therecord.media Jump to article: therecord.media/russian-national-in-custody-extradited
-
Accused Phobos Ransomware Hacker in US Custody
Russian National Evgenii Ptitsyn Faces a 13 Criminal Count Indictment. A Russian national accused of working for a ransomware gang made his first appearance in federal court earlier this month after extradition from South Korea, the U.S. Department of Justice disclosed Monday. Evgenii Ptitsyn, 42, faces a 13 criminal count indictment. First seen on govinfosecurity.com…
-
US charges Phobos ransomware admin after South Korea extradition
Evgenii Ptitsyn, a Russian national and suspected administrator of the Phobos ransomware operation, was extradited from South Korea and is facing cybercrime charges in the United States. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-charges-phobos-ransomware-admin-after-south-korea-extradition/
-
Analyzing JtR’s Tokenizer Attack (Round 1)
Introduction / Goals / Scope: This is a follow-up to my previous blog post looking at how to install/run the new John the Ripper Tokenizer attack [Link]. The focus of this post will be on performing a first pass analysis about how the Tokenizer attack actually performs. Before I dive into the tests, I want…
-
Chinese Hackers Target Trump Campaign via Verizon Breach
Plus: Apple offers $1 million to hack its AI cloud infrastructure, Iranian hackers successfully peddle stolen Trump campaign docs, Russia hacks the na… First seen on wired.com Jump to article: www.wired.com/story/trump-vance-phones-verizon-hack/
-
Nation-state activity blurring with cybercrime
Microsoft’s Digital Defense Report 2024 noted that Russia ‘outsourced some cyberespionage operations’ against Ukraine to otherwise independent cybercr… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366613660/Microsoft-Nation-state-activity-blurring-with-cybercrime
-
Windows Zero-Day Exploited by Russia Triggered With File Drag-and-Drop, Delete Actions
The exploit for a new zero-day vulnerability in Windows is executed by deleting files, drag-and-dropping them, or right clicking on them. The post Windows Zero-Day Exploited by Russia Triggered With File Drag-and-Drop, Delete Actions appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/windows-zero-day-exploited-by-russia-triggered-with-file-drag-and-drop-delete-actions/
-
Uncle Sam puts $10M bounty on Russian troll farm Rybar
Tags: russiaFirst seen on theregister.com Jump to article: www.theregister.com/2024/10/18/us_rybar_bounty/
-
Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails
A newly patched security flaw impacting Windows NT LAN Manager (NTLM) was exploited as a zero-day by a suspected Russia-linked actor as part of cyber attacks targeting Ukraine.The vulnerability in question, CVE-2024-43451 (CVSS score: 6.5), refers to an NTLM hash disclosure spoofing vulnerability that could be exploited to steal a user’s NTLMv2 hash. It was…
-
Microsoft patches Windows zero-day exploited in attacks on Ukraine
Suspected Russian hackers were caught exploiting a recently patched Windows vulnerability as a zero-day in ongoing attacks targeting Ukrainian entities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/microsoft-patches-windows-zero-day-exploited-in-attacks-on-ukraine/
-
On Election Day, Disinformation Worries Security Pros the Most
A Dark Reading poll reveals widespread concern over disinformation about election integrity and voter fraud, even as Russia steps up deepfake attacks … First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/election-day-disinformation-security-pros
-
US Still Backing UN Cybercrime Treaty Despite Criticism
US to Advocate for Human Rights Safeguards from Supporting Member Nations. The United States will support a controversial cybercrime convention initially proposed by Russia that is currently making its way through the United Nations, officials told reporters, while seeking out human rights assurances from supporting member nations. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/us-still-backing-un-cybercrime-treaty-despite-criticism-a-26796
-
“‹”‹Norway selected over Russia to host UN’s internet governance forum
First seen on therecord.media Jump to article: therecord.media/norway-selected-over-russia-un-internet-governance-forum
-
New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks
Tags: attack, corporate, cybersecurity, exploit, kaspersky, malware, network, ransomware, russia, tacticsCybersecurity researchers have flagged a new ransomware family called Ymir that was deployed in an attack two days after systems were compromised by a stealer malware called RustyStealer.”Ymir ransomware introduces a unique combination of technical features and tactics that enhance its effectiveness,” Russian cybersecurity vendor Kaspersky said.”Threat actors leveraged an unconventional blend First seen on…
-
White House Slams Russia Over Ransomware’s Healthcare Hits
UN Members Urge Better Critical Infrastructure Resilience to Counter Threats. With ransomware attacks on the rise and healthcare getting pummeled more than ever, a coalition of UN members urged countries to focus on collective critical infrastructure defense, while a senior White House official slammed Russia for continuing to harbor the criminals involved. First seen on…
-
Man Gets 12.5 Years for Running Bitcoin Fog Crypto Mixer
Swedish-Russian national Roman Sterlingov has been jailed for 12 years and six months for operating notorious cryptocurrency mixer Bitcoin Fog First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/man-12-years-running-crypto-mixer/
-
A surge in Pro-Russia cyberattacks after decision to monitor North Korean Troops in Ukraine
South Korea claims Pro-Russia actors intensified cyberattacks on national sites after it decided to monitor North Korean troops in Ukraine. South Korea’s government blames pro-Russia threat actors for an intensification of cyberattacks on national sites after it decided to monitor North Korean troops in Ukraine. South Korea reports that over 10,000 North Korean troops are…
-
Bitcoin Fog Founder Sentenced to 12 Years for Cryptocurrency Money Laundering
The 36-year-old founder of the Bitcoin Fog cryptocurrency mixer has been sentenced to 12 years and six months in prison for facilitating money laundering activities between 2011 and 2021.Roman Sterlingov, a dual Russian-Swedish national, pleaded guilty to charges of money laundering and operating an unlicensed money-transmitting business earlier this March.The U.S. Department of Justice (DoJ)…
-
Pro-Russian Hacktivists Target South Korea as North Korea Joins Ukraine War
South Korea warned that pro-Russian groups have attacked government and private sector websites following the deployment of North Korean soldiers in Ukraine First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/russian-hacktivits-south-korea/
-
Russia’s internet watchdog blocks thousands of websites that use Cloudflare’s privacy service
First seen on therecord.media Jump to article: therecord.media/russia-blocks-thousands-of-websites-that-use-cloudflare-service
-
FBI flags false videos impersonating agency, claiming Democratic ballot fraud
The bureau said the videos and their underlying claims were not genuine, while a disinformation researcher linked the activity to the Russian group Do… First seen on cyberscoop.com Jump to article: cyberscoop.com/fbi-fake-videos-ballot-fraud-democrats-doppelganger/
-
Georgia Secretary of State: Haitian immigrant voting video is likely Russian disinformation
First seen on cyberscoop.com Jump to article: cyberscoop.com/haitian-immigrant-voting-georgia-disinformation-brad-raffensperger/
-
US warns of last-minute Iranian and Russian election influence ops
The U.S. Cybersecurity & Infrastructure Security Agency is warning about last-minute influence operations conducted by Iranian and Russian actors to u… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-warns-of-last-minute-iranian-and-russian-election-influence-ops/
-
‘Midnight Blizzard’ Targets Networks With Signed RDP Files
The Russian-backed group is using a novel access vector to harvest victim data and compromise devices in a large-scale intelligence-gathering operatio… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/midnight-blizzard-targets-networks-signed-rdp-files
-
Russian Espionage Group Targets Ukrainian Military with Malware via Telegram
A suspected Russian hybrid espionage and influence operation has been observed delivering a mix of Windows and Android malware to target the Ukrainian… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/russian-espionage-group-targets.html
-
US Says Russia Behind Fake Haitian Voters Video
US government agencies said the video, widely shared on social media, is part of Russia’s broader strategy of undermining the integrity of the Preside… First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/us-russia-fake-haitian-voters-video/
-
UK Council Sites Recover Following Russian DDoS Blitz
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/uk-council-sites-recover-russian/
-
Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions
Four members of the now-defunct REvil ransomware operation have been sentenced to several years in prison in Russia, marking one of the rare instances… First seen on thehackernews.com Jump to article: thehackernews.com/2024/10/four-revil-ransomware-members-sentenced.html
-
Officials warn of Russia’s techtroops deal with North Korea amid Ukraine conflict
10,000 of Kim Jong Un’s soldiers believed to be headed for front line First seen on theregister.com Jump to article: www.theregister.com/2024/11/07/russia_tech_transfer_north_korea/