Cyber attack Archives

Russian Hackers Linked to ‘Largest Ever Cyber Attack’ on Danish Critical Infrastructure

16Nov

By RBNo Comments

News

Russian Hackers Linked to ‘Largest Ever Cyber Attack’ on Danish Critical Infrastructure

What has been called the "largest cyber attack against Danish critical infrastructure," which targeted 22 companies involved in the nation's energy sector in May 2023, may have been orchestrated by Russian threat actors. Denmark's SektorCERT stated [PDF] that "22 simultaneous, successful cyberattacks against Danish critical infrastructure are not commonplace." "The assailants were always on target because they planned ahead and knew who to target. Never once did a shot go wide." The Russian military intelligence organization GRU, which is also known by the code name Sandworm and has a history of planning disruptive cyberattacks on industrial control systems, was linked to one or more of the attacks, the agency claimed read more Russian Hackers Linked to 'Largest Ever Cyber Attack' o...

New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal

5Jun

By RBNo Comments

News

New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal

An examination of the Linux version of the new ransomware strain BlackSuit revealed striking parallels to the Royal ransomware family. The x64 VMware ESXi version targeted for Linux PCs was investigated by Trend Micro, which found a "extremely high degree of similarity" between Royal and BlackSuit. According to BinDiff, a binary file comparison tool, "in fact, they are nearly identical, with 98% similarities in functions, 99.5% similarities in blocks, and 98.9% similarities in jumps." Based on BinDiff, a study of the Windows artefacts revealed 93.2% similarity in functions read more New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal. Stay one step ahead of cyber threats with ReconBee.com. Explore our comprehensive coverage of recent cyber attacks, cyber...

Notorious Cyber Gang FIN7 Returns With Cl0p Ransomware in New Wave of Attacks

22May

By RBNo Comments

News

Notorious Cyber Gang FIN7 Returns With Cl0p Ransomware in New Wave of Attacks

Cl0p (also known as Clop) ransomware has been seen being used by the prominent cybercrime group FIN7, marking the threat actor's first ransomware campaign since late 2021. Microsoft is tracking the financially motivated player under their new taxonomy Sangria Tempest after noticing the behavior in April 2023. The Lizar post-exploitation tool is loaded by Sangria Tempest in these new attacks in order to gain access to a target network, according to the threat intelligence team of the business read more Notorious Cyber Gang FIN7 Returns With Cl0p Ransomware in New Wave of Attacks. With ReconBee.com Stay ahead of the latest threats with in-depth coverage of cyber attacks and cybersecurity trends, and the latest cybersecurity news.

Lacroix Shuts Three Factories For a Week After Cyber Attack

17May

By RBNo Comments

News

Lacroix Shuts Three Factories For a Week After Cyber Attack

According to reports, the German, French, and Tunisian activity sites for the global electronics firm Lacroix were the targets of a focused cyberattack. The business reported that it briefly shut down a number of online systems to analyse the damage brought on by the attack. Investigations are being conducted to make sure that the assault is entirely controlled before the systems of these sites are restarted, according to a statement from Lacroix. However, some local infrastructures have been encrypted, and a search for exfiltrated data is also underway. The three sites will be closed for the week as a result of these activities, which will take a few days, as well as the requirement to use backups to restore systems read more Lacroix Shuts Three Factories For a Week After Cyber ...

Five Takeaways From the Russian Cyber-Attack on Viasat’s Satellites

10May

By RBNo Comments

News

Five Takeaways From the Russian Cyber-Attack on Viasat’s Satellites

On February 24, 2022, a cyberattack on the KA-SAT satellites of the US company Viasat in Ukraine led to one of the greatest formal attributions of a cyberattack to a nation-state in history. Nearly 20 nations, including 12 EU member states and the Five Eyes nations (the US, UK, Australia, New Zealand, and Canada), blamed Russia for the incident. This cyberattack, which occurred just a few hours before Russia invaded its neighbour, was extensively covered during the third CYSAT conference, which focused on cybersecurity in the space industry and was held in Paris, France, on April 26–27, 2023. Since Viasat's satellites were solely utilised as a backup system, AcidRain, as the cyberattack is generally known, had little effect on Ukraine's military operations read more Five Takeaways F...

NZZ has to shut down the newspaper production system after a cyber attack

11Apr

By RBNo Comments

News

NZZ has to shut down the newspaper production system after a cyber attack

A smaller print edition is additionally connected to the "extraordinary situation." The perpetrators are reportedly demanding a ransom for the stopped system. Two weeks after a cyberattack on its computers, The "Neue Zürcher Zeitung" is still having issues. The publisher had to pre-produce the Saturday edition on Thursday after shutting down the newspaper's central production systems. The business said on Saturday that this "extraordinary scenario" was also connected to a scope decrease. Certain systems and services are still unavailable as a result of the cyberattack. According to the statement, the NZZ's IT is collaborating with outside experts on corrective steps read more NZZ has to shut down the newspaper production system after a cyber attack. With ReconBee.com Stay ahead o...

University of Hawaii Maui College Announces Recent Data Breach

10Apr

By RBNo Comments

News

University of Hawaii Maui College Announces Recent Data Breach

Following a cyberattack in February, the University of Hawaii Maui College ("UH Hawaii College") published notice of a data breach on their website on April 6, 2023. The type of the compromised data, however, has not yet been disclosed by UH Maui College. UH Maui College started issuing data breach notification letters to everyone who was affected by the recent data security issue after establishing that student data was compromised and who it belonged to. It's critical that you comprehend what is at risk and what you can do about it if the University of Hawaii Maui read more University of Hawaii Maui College Announces Recent Data Breach. With ReconBee.com Stay ahead of the latest threats with in-depth coverage of cyber attacks and cybersecurity trends, and the latest cybersecur...

Experts Spot Half a Million Novel Malware Variants in 2022

1Mar

By RBNo Comments

Risk, Security

Experts Spot Half a Million Novel Malware Variants in 2022

According to SonicWall, there were 5.5 billion malware detections worldwide in 2022, up 2% YoY, with never-before-seen varieties seeing a 5% increase. In order to create its 2023 SonicWall Cyber Threat Report, the security provider gathered threat intelligence from its global SonicWall Capture Threat network, which includes one million security sensors. A total of 465,501 new malware strains were discovered, showing that the cybercrime underground is still evolving. These findings "often closely correlate with zero-day attack patterns," according to SonicWall. The firm also noted an 87% spike in IoT malware to reach 112 million devices and a 43% increase in crypto-jacking malware read more Experts Spot Half a Million Novel Malware Variants in 2022. Stay informed with the best ...

Ransomware Attack Hits US Marshals Service

1Mar

By RBNo Comments

Risk, Security

Ransomware Attack Hits US Marshals Service

A computer system containing "law enforcement sensitive information" has apparently been impacted by a ransomware attack directed at the US Marshals Service (USMS). The intrusion also compromised the personal information of the targets of the inquiry, according to Drew Wade, chief of the Marshals Service public affairs office, who made the statement Monday night. Wade explained, "The impacted system contains law enforcement sensitive material, including returns from legal process, administrative information, and personally identifiable information belonging to subjects of USMS investigations, third parties, and some USMS personnel." The officer stated that the breach was found on February 17 by the US Marshals Service read more Ransomware Attack Hits US Marshals Service. Stay ...

US hospital attacked by BlackCat denies hackers

23Feb

By RBNo Comments

Resources, Risk, Security

US hospital attacked by BlackCat denies hackers

A US-based healthcare organization that manages more than a dozen hospitals have refused to pay ransom to hackers with ties to Russia. Healthcare provider Lehigh Valley Health Network (LVHN), situated in Pennsylvania, said that the BlackCat gang attacked the institution with a ransomware attack. The malware ALPHV/BlackCat was first discovered in 2021. The group, like many others in the criminal underground, runs a ransomware-as-a-service (RaaS) company that offers software subscriptions to other criminals. On February 6, LVHN discovered unauthorized activity on its IT systems read more US hospitals attacked by BlackCat denies hackers. With ReconBee.com Stay ahead of the latest threats with in-depth coverage of cyber attacks and cybersecurity trends, and the latest cybersecurit...