Security Affairs Newsletter

"Chinese StormBamboo AOT compromised ISP to deliver malware."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 05 August 2024, 1441 UTC.

Content and Source:  https://securityaffairs.com

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

 

Security Affairs

66K followers22 articles per week#security#tech

9

Most popular

Chinese StormBamboo APT compromised ISP to deliver malware

IoC > 1 IP

•

35by Pierluigi Paganini / 22h

•

19 TTPs

A China-linked APT, tracked as StormBamboo, compromised an internet service provider (ISP) to poison software update mechanisms with malware. Volexity researchers reported that a China-linked APT group, tracked as StormBamboo (aka Evasive Panda , Daggerfly , and StormCloud), successfully compromised an undisclosed internet service provider (ISP) in order to poison DNS responses for target organiz

Keytronic incurred approximately $17 million of expenses following ransomware attack

Keytronic suffers 17M$ ransomware loss

•

by Pierluigi Paganini / 1h

Printed circuit board assembly (PCBA) manufacturer Keytronic reported that a recent ransomware attack led to expenses and lost revenue exceeding $17 million. In June, Keytronic disclosed a data breach after a ransomware group leaked allegedly stolen personal information from its systems. The company did not provide any info on the ransomware operation that hit its network, however Black Basta ran

Hackers attempt to sell the personal data of 3 billion people resulting from an April data breach

26by Pierluigi Paganini / 1d

Jerico Pictures Inc., operating as National Public Data, exposed the personal information of nearly 3 billion individuals in an April data breach. A proposed class action claims that Jerico Pictures Inc., operating with the National Public Data, exposed the personal information of nearly 3 billion individuals in a data breach that occurred in April. On April 8, a threat actor that uses the monike

Today

A flaw in Rockwell Automation ControlLogix 1756 could expose critical control systems to unauthorized access

2 TTPs

•

by Pierluigi Paganini / 4h

•

CVE-2024-6242

A security bypass bug in Rockwell Automation ControlLogix 1756 devices could allow unauthorized access to vulnerable devices. A high-severity security bypass vulnerability, tracked as CVE-2024-6242 (CVSS Base Score v4.0 of 7.3), impacts Rockwell Automation ControlLogix 1756 devices. An attacker can exploit the vulnerability to execute common industrial protocol (CIP) programming and configuration

Yesterday

China-linked APT41 breached Taiwanese research institute

17 TTPs

•

by Pierluigi Paganini / 7h

China-linked group APT41 breached a Taiwanese government-affiliated research institute using ShadowPad and Cobalt Strike. Cisco Talos researchers reported that the China-linked group compromised a Taiwanese government-affiliated research institute. The experts attributed the attack with medium confidence to the APT41 group. The campaign started as early as July 2023 and threat actors delivered th

Aug 3, 2024

Security Affairs Malware Newsletter – Round 5

by Pierluigi Paganini / 1d

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Unplugging PlugX: Sinkholing the PlugX USB worm botnet Introducing Gh0stGambit: A Dropper for Deploying Gh0st RAT Mandrake spyware sneaks onto Google Play again, flying under the radar for two years A Survey of Malware Detection Using Deep Learning ThreatLabz 2024

Security Affairs newsletter Round 483 by Pierluigi Paganini – INTERNATIONAL EDITION

by Pierluigi Paganini / 1d

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. US sued TikTok and ByteDance for violating children’s privacy laws Russia-linked APT used a car for sale as a phishing lure to target diplomats with HeadL

US sued TikTok and ByteDance for violating children’s privacy laws

US sues TikTok for child privacy

•

by Pierluigi Paganini / 1d

The U.S. Department of Justice has sued TikTok and its parent company, ByteDance, for extensive violations of children’s privacy laws. The Justice Department and the Federal Trade Commission (FTC) filed a civil lawsuit in the U.S. District Court for the Central District of California against TikTok Inc., its parent company ByteDance Ltd., and their affiliates (together, TikTok) for extensive viol

Russia-linked APT used a car for sale as a phishing lure to target diplomats with HeadLace malware

IoC > 1 domain

•

by Pierluigi Paganini / 1d

•

15 TTPs

•

APT28 targets diplomats with malware

A Russia-linked APT used a car for sale as a phishing lure to deliver a modular Windows backdoor called HeadLace. Palo Alto researchers reported that a Russia-linked threat actor known as Fighting Ursa (also identified as APT28 , Fancy Bear , or Sofacy ) used a fake car advertisement to distribute HeadLace backdoor malware, targeting diplomats. The campaign began around March 2024, the attackers

End of feed