Tag: ukraine
-
GIFTEDCROOK: Russischer Infostealer spioniert Ukraine-Gespräche aus
Ein russisches Hackerteam hat seinen Schadcode massiv weiterentwickelt. Die Malware GIFTEDCROOK kann inzwischen weit mehr als nur Browserdaten abgreifen und wurde offenbar gezielt rund um die Friedensverhandlungen in der Ukraine eingesetzt. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/giftedcrook-infostealer
-
Ukraine subjected to novel APT28 malware attacks
First seen on scworld.com Jump to article: www.scworld.com/brief/ukraine-subjected-to-novel-apt28-malware-attacks
-
Russia-linked APT28 use Signal chats to target Ukraine official with malware
Russia-linked group APT28 uses Signal chats as an attack vector to phish Ukrainian officials with new malware strains. Russia-linked cyberespionage group APT28 is targeting Ukrainian government officials using Signal chats to deliver two new types of malware, tracked as BeardShell and SlimAgent. While Signal itself remains secure, attackers are exploiting its growing popularity in official…
-
APT28 Uses Signal Chat to Deploy BEARDSHELL Malware and COVENANT in Ukraine
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new cyber attack campaign by the Russia-linked APT28 (aka UAC-0001) threat actors using Signal chat messages to deliver two new malware families dubbed BEARDSHELL and COVENANT.BEARDSHELL, per CERT-UA, is written in C++ and offers the ability to download and execute PowerShell scripts, as…
-
Successful Military Attacks are Driving Nation States to Cyber Options
Tags: attack, china, communications, computing, cyber, cyberattack, cybersecurity, data, defense, exploit, extortion, finance, fraud, government, healthcare, infrastructure, iran, korea, middle-east, military, north-korea, russia, service, tactics, technology, tool, ukraine, vulnerability, warfareWith daring military attacks, kinetic warfare is shifting the balance of power in regions across the globe, upending the perception of power projection. Powerful nations are reeling from the impacts of bold assaults and seeking additional methods to drive foreign policy”Š”, “Šcyber may look as an appealing asymmetric warfare capability that is worth doubling-down on.…
-
APT28 hackers use Signal chats to launch new malware attacks on Ukraine
The Russian state-sponsored threat group APT28 is using Signal chats to target government targets in Ukraine with two previously undocumented malware families named BeardShell and SlimAgent. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apt28-hackers-use-signal-chats-to-launch-new-malware-attacks-on-ukraine/
-
Israeli officials say Iran exploiting security cameras to guide missile strikes
Similarly to reports from the war in Ukraine, Israel wants owners of surveillance cameras to be aware that Iran is trying to hack the devices to aid in missile targeting. First seen on therecord.media Jump to article: therecord.media/iran-espionage-israeli-security-cameras-missile-attacks
-
Israel Says Iran Is Hacking Security Cameras for Spying
Plus: Ukrainian hackers reportedly knock out a key Russian internet provider, China’s Salt Typhoon hackers claim another victim, and the UK hits 23andMe with a hefty fine over its 2023 data breach. First seen on wired.com Jump to article: www.wired.com/story/israel-says-iran-is-hack-security-cameras-for-spying/
-
Ukraine Extradites Suspected Ransomware Group Member to US
33-Year-Old Foreign National Accused of Spreading Ryuk and Other Ransomware. A suspected initial access specialist for a ransomware-wielding group is being extradited from Ukraine to the United States to stand trial. The group has been accused of earning over $100 million in ransom by using malware such as Ryuk, Dharma and Hive against more than…
-
Alleged Ryuk ransomware gang member arrested in Ukraine and extradited to US
A 33-year-old man arrested in Ukraine will face charges in the U.S. of working for the Ryuk cybercrime operation, known for high-profile targets and large ransom demands. First seen on therecord.media Jump to article: therecord.media/alleged-ryuk-member-arrest-ukraine-extradited-us
-
North Korean APT Hackers Target Ukrainian Government Agencies to Steal Login Credentials
Tags: apt, attack, credentials, cyber, government, group, hacker, login, north-korea, phishing, threat, ukraineNorth Korean Advanced Persistent Threat (APT) hackers, specifically the Konni group, have shifted their focus to Ukrainian government agencies in a targeted phishing campaign aimed at stealing login credentials and distributing malware. This attack, observed in February 2025, marks a notable divergence from the group’s traditional targets and raises questions about potential strategic alliances with…
-
RFK Jr. Orders HHS to Give Undocumented Migrants’ Medicaid Data to DHS
Plus: Spyware is found on two Italian journalists’ phones, Ukraine claims to have hacked a Russian aircraft maker, police take down major infostealer infrastructure, and more. First seen on wired.com Jump to article: www.wired.com/story/rfk-jr-orders-hhs-to-give-undocumented-migrants-medicaid-data-to-dhs/
-
Russia-linked PathWiper malware hits Ukrainian infrastructure
Tags: apt, attack, backup, cisco, ciso, compliance, control, cyber, detection, endpoint, finance, fortinet, infrastructure, insurance, intelligence, malware, network, PurpleTeam, resilience, risk, russia, tactics, threat, tool, ukraine, vulnerability, zero-trustEchoes of past attacks: While PathWiper shares tactical similarities with HermeticWiper, its enhanced capabilities reveal a clear evolution in wiper malware sophistication. The new variant employs advanced techniques, such as querying registry keys to locate network drives and dismounting volumes to bypass protections, a stark contrast to HermeticWiper’s simpler approach of sequentially targeting drives numbered…
-
Ukraine’s critical infrastructure subjected to novel PathWiper compromise
First seen on scworld.com Jump to article: www.scworld.com/brief/ukraines-critical-infrastructure-subjected-to-novel-pathwiper-compromise
-
New Wiper Malware Targets Ukrainian Infrastructure
New PathWiper malware targeted Ukrainian critical infrastructure, using legitimate tools for cyber-attacks First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/pathwiper-malware-targets-ukraine/
-
New PathWiper Malware Strikes Ukraine’s Critical Infrastructure
Cisco Talos discovers PathWiper, a destructive new malware targeting critical infrastructure in Ukraine, highlighting ongoing cyber threats amidst the Russia-Ukraine conflict. First seen on hackread.com Jump to article: hackread.com/pathwiper-malware-hit-ukraines-critical-infrastructure/
-
Russia-linked threat actors targets Ukraine with PathWiper wiper
A Russia-linked threat actor targeted a critical infrastructure organization in Ukraine with a new destructive malware dubbed PathWiper. Russia-linked threat actor targeted Ukraine’s critical infrastructure with a new wiper named PathWiper. Cisco Talos researchers reported that attackers utilized a legitimate endpoint administration tool, indicating they had access to the administrative console, then used it to…
-
Fresh strain of pro-Russian wiper flushes Ukrainian critical infrastructure
Destructive malware has been a hallmark of Putin’s multi-modal war First seen on theregister.com Jump to article: www.theregister.com/2025/06/06/pro_russia_wiper_ukraine/
-
New PathWiper data wiper malware hits critical infrastructure in Ukraine
A new data wiper malware named ‘PathWiper’ is being used in targeted attacks against critical infrastructure in Ukraine, aimed at disrupting operations in the country. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-pathwiper-data-wiper-malware-hits-critical-infrastructure-in-ukraine/
-
Another data wiper found in Ukrainian critical infrastructure
The new PathWiper, spotted in an attack on Ukrainian critical infrastructure, has similarities to wiper malware previously deployed by the Russian group known as Sandworm. First seen on therecord.media Jump to article: therecord.media/pathwiper-malware-critical-infrastructure-ukraine
-
New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack
A critical infrastructure entity within Ukraine was targeted by a previously unseen data wiper malware named PathWiper, according to new findings from Cisco Talos.”The attack was instrumented via a legitimate endpoint administration framework, indicating that the attackers likely had access to the administrative console, that was then used to issue malicious commands and deploy PathWiper…
-
New pathWiper Malware Targets Critical Infrastructure to Deploy Admin Tools
Cisco Talos has uncovered a sophisticated and destructive cyberattack targeting a critical infrastructure entity in Ukraine, deploying a previously unknown wiper malware dubbed >>PathWiper.
-
‘PathWiper’ Attack Hits Critical Infrastructure In Ukraine
Cisco Talos researchers observed the new wiper malware in a destructive attack against an unnamed critical infrastructure organization. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/pathwiper-attack-critical-infrastructure-ukraine
-
Russian aerospace firm breach claimed by Ukraine
First seen on scworld.com Jump to article: www.scworld.com/brief/russian-aerospace-firm-breach-claimed-by-ukraine
-
Breach Roundup: Ukraine Hacks Russian Warplane Maker
Also, Crypter Takedown, Threat Intel Naming Accord and Regulators Ping CrowdStrike. This week, Ukraine hacked Tupelov, Russian hacking, crypter sites seized and the U.S. will seize North Korean IT worker crypto. Regulators probed CrowdStrike. A Rosetta Stone for intel. A Romanian man admitted to swatting, Lee Enterprises hack exposed data and an FBI vet joined…
-
Ukrainian police arrest hacker who used hosting firm’s servers to mine cryptocurrency
The suspect, a native of the central Ukrainian city of Poltava, had been conducting cyberattacks since at least 2018, police said. First seen on therecord.media Jump to article: therecord.media/ukrainian-police-arrest-hacker-cryptomining
-
Newly identified wiper malware “PathWiper” targets critical infrastructure in Ukraine
Cisco Talos observed a destructive attack on a critical infrastructure entity within Ukraine, using a previously unknown wiper we are calling “PathWiper.” First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/pathwiper-targets-ukraine/
-
PathWiper: Russia-Linked APT Deploys New Wiper Malware Against Ukrainian Infrastructure
The post PathWiper: Russia-Linked APT Deploys New Wiper Malware Against Ukrainian Infrastructure appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/pathwiper-russia-linked-apt-deploys-new-wiper-malware-against-ukrainian-infrastructure/