German Archives - Recon Bee

German Police Disrupt DDoS-for-Hire Platform dstat[.]cc; Suspects Arrested

5Nov

By RBNo Comments

News

German Police Disrupt DDoS-for-Hire Platform dstat[.]cc; Suspects Arrested

According to German law enforcement officials, a criminal service known as dstat[.]cc was disrupted, allowing other threat actors to launch distributed denial-of-service (DDoS) attacks with ease. "The platform made such DDoS attacks accessible to a wide range of users, even those without any in-depth technical skills of their own," according to the Federal Criminal Police Office, also known as the Bundeskriminalamt or BKA. In the context of police investigations, the usage of stresser services to launch DDoS assaults has recently gained more attention. To perform DDoS assaults on websites of interest and make them inoperable read more about German Police Disrupt DDoS-for-Hire Platform dstat[.]cc; Suspects Arrested. Get up to date on the latest cybersecurity news and enhance yo...

Microsoft Outlook Flaw Exploited by Russia’s APT28 to Hack Czech, German Entities

The European Union (EU), NATO, the United Kingdom, and the United States denounced Czechia and Germany's disclosure on Friday that they were the subject of a protracted cyber espionage campaign by the nation-state actor known as APT28, which has ties to Russia. A security hole in Microsoft Outlook that was discovered early last year was used to attack certain unidentified businesses in the Czech Republic, according to a statement from the Ministry of Foreign Affairs (MFA) of the Czech Republic. According to the MFA, cyberattacks that target state institutions, political organizations, and vital infrastructure not only endanger national security but also sabotage the democratic processes that underpin our free society read more Microsoft Outlook Flaw Exploited by Russia's APT28 to Ha...

TA547 Phishing Attack Hits German Firms with Rhadamanthys Stealer

As part of a phishing campaign with an invoice theme, a threat actor identified as TA547 has used an information stealer known as Rhadamanthys to target numerous German firms. According to Proofpoint, this is the first time that researchers have seen TA547 use Rhadamanthys, an information stealer employed by a number of cybercriminal threat actors. Furthermore, it seems that the actor used a PowerShell script that was produced, presumably, by a large language model (LLM). A well-known and financially driven threat actor, TA547 has been active since at least November 2017. He distributes a wide range of malware for Windows and Android, including the ransomware Adhubllka, ZLoader, Gootkit, and Ursnif, via email phishing lures. The organization has developed into an initial access b...