U.S. Government Agencies Archives

FBI warns about Kimsuky hackers using QR codes to phish U.S. orgs

9Jan

By RBNo Comments

News

FBI warns about Kimsuky hackers using QR codes to phish U.S. orgs

The Federal Bureau of Investigation has issued a flash alert warning that the North Korean state-sponsored hacking group Kimsuki is utilizing malicious QR codes in spearphishing efforts that target American organizations. Non-governmental organizations, think tanks, academic institutions, strategic consultancy businesses, and U.S. government agencies are among the groups engaged in North Korea-related policy, research, and analysis that are the focus of the observed activities. The Although the FBI issued a warning regarding the use of QR codes in phishing, often referred to as "quishing," when cybercriminals utilized them to steal money, it is still a useful way to get over security measures. The state-backed North Korean threat group Kimsuky (APT43) has been connected to severa...

Hackers impersonate U.S. government agencies in BEC attacks

A group of hackers known only as TA4903, who specialize in business email compromise (BEC) assaults, has been pretending to be a number of US federal agencies in order to trick victims into opening infected files that contain links to phony bidding procedures. The threat actors pose as the U.S. Department of Transportation, the U.S. Department of Agriculture (USDA), and the U.S. Small Business Administration (SBA), according to Proofpoint, whose analysts have been monitoring the campaign. The threat actor has reportedly been active since at least 2019 but has stepped up its efforts since mid-2023 and until 2024, according to the email security business. The usage of QR codes in PDF document attachments is the most recent strategy noticed read more Hackers impersonate U.S. government...

U.S. Government Agencies Emails Compromised in China Backed Cyber Attack

Midway through June 2023, an unnamed Federal Civilian Executive Branch (FCEB) organization in the U.S. saw unusual email activity, which led Microsoft to learn about a fresh espionage operation related to China that was targeting two dozen organizations. The information comes from a joint cybersecurity advice issued by the Federal Bureau of Investigation (FBI) and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) on July 12, 2023. In its Microsoft 365 (M365) cloud environment, a Federal Civilian Executive Branch (FCEB) agency "identified suspicious activity in June 2023," according to the authorities. Advanced persistent threat (APT) attackers accessed and stole unclassified Exchange Online Outlook data read more U.S. Government Agencies Emails Compromised in China Ba...