 A Russian-backed hacker group launched two new hacking campaigns against Ukraine. The cyberattacks came through fake emails that contained malware-infected files. More: - This cyberattack campaign is believed to have come from UAC-0098 and APT-28. The group, linked with the Russian military, is famously known for having attacked multiple government institutions that are aligned with the West. The group's previous targets include The White House, France, Germany, Norway, and recently, in what has been a very focused campaign, Ukraine.
- Ukraine's national cybersecurity task force CERT-UA was the one who caught the attacks.APT-28 launched two different attacks.
- The first attack was noticed on Monday when different organizations in Ukraine received emails from what was supposed to be the State Tax authority of Ukraine. Hackers sent an email that made the victims think they were being hit with tax penalties. Once clicked, the file would infect the device with malware.
- The malware of choice for Russian-backed hackers, in this case, was Cobalt Strike, which is a Trojan that is installed on the victim's device and then utilized to gain access to a network.
- The second cyberattack noticed by Ukraine came through a document that was titled Nuclear threat is a real threat. Once the file is opened by the target, it infects them with malware known as CredoMap.This malware was patched by Microsoft in an update, with the bug being tracked as CVE-2022-30190 and having a CVSS score of 7.8
Zoom Out: - Russia has launched several cyber attacks against Ukraine. In 2015, Russia hacked Ukraine's power grid, leaving over 200,000 people without electricity.
- During the months before the invasion of Ukraine, Russia launched cyberattacks against 70 different Ukrainian government institutions and private companies.
- A Russian radio station was the target of a cyber attack a few weeks ago. As a result of this attack, hackers managed to play the Ukrainian national anthem.
| |
 Europol arrested a criminal group that used phishing and scamming to steal millions of dollars and launder money. The premier European law authority stated that all of the individuals were located in the Netherlands. More: - While the group's moniker is unknown, the methods through which this group of individuals managed to steal money include phishing, identity theft, social engineering, etc. The group contacted its victims by email and text and then led them to a fake banking website on which victims would put their personal banking information. The group managed to steal several millions of dollars in the process.
- The group is believed to hold Belgian citizenships while they were located in Holland, prompting the two courts to cooperate. The police authorities searched 24 different addresses, resulting in multiple arrests. The arrested suspects ranged from 25 up to 36 years old.
- These hackers allegedly also use cryptocurrency to hide some of their transactions. The police seized all of the cryptocurrency the group used, in addition to cash, clothes, electronic devices, etc.
Zoom Out: - This arrest comes as similar operations have been happening more frequently recently. A few days ago, Interpol seized $50M and arrested over 2,000 hackers who are suspected of having conducted cyberhacking. One month ago, Interpol also arrested the head of the BEC gang, an organization that was scamming users worldwide.
| |
 A message from SECURITY COMPASS Current approaches to Threat Modeling simply don’t work. - They are manual and inconsistent
- They take too long
- They don’t scale
- They don’t give developers what they need
Here you can find a series of posts breaking down how you can anticipate threats earlier in the software development life cycle to create more secure software. Learn more about current threat modeling challenges. See how a new, developer-centric approach to threat modeling can help your organization deliver secure software faster. Read Series on Threat Modeling And, yes, we understand that threat modeling is a time-consuming process that requires the expertise of security professionals and figuring out the best approach to mature application security programs can be difficult, especially with increasing internal demands for a faster time to market. According to this Total Economic Impact™study, SD Elements enabled its users to decrease the time needed to develop security requirements for products by 90%. See how
| |
 Microsoft explained the reason that Microsoft 365 went down in Europe yesterday for more than eight hours. The company claims that a power outage made its infrastructure unable to handle the traffic, causing the system to go down and leaving users unable to use several of its products. More: - The company confirmed that the outage affected mainly users located in Western Europe, while the main products that were out of function were Microsoft Teams, Exchange Online, SharePoint Online, and Graph API. These apps are used for things such as video communication, email, storing data, etc.
- This outage started on Monday at 11 p.m. UTC and ended on Tuesday at 3:27 p.m. UTC. Microsoft will publish a report with details on the incident in a time span of five days, while it was also made known that the breach affected North America, EMEA, and the Asia-Pacific region, but to a much lesser degree than Western Europe.
- Microsoft has had different outages in the past. A few weeks ago, Standard Bank in South Africa suffered a problem with its ATMs due to an issue related to Microsoft Azure. In February, Microsoft's 365 admin portal fell after an update the company made. Even Excel has had its share of problems, as users were unable to use the application last year due to an outage.
| |
 U.K. delivery company Yodel was cyber attacked, which caused it to have problems with deliveries. The attack caused a days-long outage, leaving customers without information on whether their packages were being delivered or where they were located. More: - Yodel is a delivery company that transports products for companies such as Argos, Aldo, and M&S. Combined, these companies sell products to millions of people on a daily basis, meaning that the late deliveries will result in a significant financial loss for all parties involved. The breach has also made U.K. citizens go to social media to protest the lack of information they had on the breach.
- The company did confirm the hack eventually, but it did not let the clients know when the issue would be solved.
- Yodel is cooperating with the U.K. law enforcement authorities in order to solve the issue. The type of attack which the threat actor used to breach Yodel is not known, but it is thought that ransomware was used due to the convenience and the precedent set with previous similar cases.
- This breach has affected multiple aspects of Yodel's business process, including the ability of the drivers to scan the parcels, up to the general data held in servers, with the latter causing fear of a potential data leak.
- The threat actor behind the attack is currently unknown.
| |
 A message from ADOBE COMMERCE Flex your ecommerce muscles with our flexible ecosystem. To deliver industry-leading ecommerce experiences, you need more than a one-trick pony — you need a flexible stable of digital tools primed for rapid growth. Read Building the Future of Ecommerce to learn how Adobe partners are taking advantage of the Adobe ecommerce ecosystem to transform customer experience, unify sales channels, and achieve massive goals. Check out Building the Future of Ecommerce to learn the five elements of Adobe’s digital ecosystem that make it a great digital foundation for your business experience. Plus, learn how Adobe partners are taking advantage of its scope and flexibility to accelerate and grow their business. Read Now
| |
 84% of U.S. companies experienced an identity-related breach in 2021, according to new research. Most companies claim that the attacks had a direct effect on them and that lousy security practices were to blame for the breaches most of the time. More: - A total of 500 business executives were interviewed as a sample for the entire industry's cybersecurity hygiene and practices. The report was compiled to narrow down the specific issues that U.S. businesses face in terms of security and the risk of being hacked.
- Since most companies use at least some form of digital communication and apps, every single time an account is created, hackers see a new way of breaching the entire company.
- That is because one employee has access to all the rest of the staff's emails.
- With one malware-infected document sent to the entire company, even if the minority downloads the file, the whole company could be potentially at risk.
- This was backed by the 98% of executives who confirmed that new accounts are created on a daily basis within their companies.
- Surprisingly, only 26% of them said they revoke access for former employees within a day of them leaving the company. This practice goes against basic security protocols.
Zoom Out: - Two weeks ago, U.S. security agencies stated that China-backed hacker groups have breached U.S. telecom companies, showing that even larger and better-prepared conglomerates are susceptible to hackers.
- Russian-backed hackers breached a U.S. satellite company named Viasat the day the country launched its invasion campaign in Ukraine. The attack caused a spillover effect in multiple countries worldwide.
- President Joe Biden yesterday signed two bills related to improving cybersecurity among U.S. government institutions, as the risk posed in a post-Ukraine world continually grows.
| |
Quick Hits: - Learn why many SMEs are pivoting away from perimeter-based security to a Zero Trust model.*
- RevealSecurity raised a $23M Series A funding round led by SYN Ventures.
- A cybercrime group that consists of multiple sub-groups has been traced back to attacks that occurred in Nov. 2021.
- A recent report predicts that by 2025, 30% of the world's countries will adopt legislation that regulates ransomware payments. The legislation would serve as a guideline on how companies and organizations should react when they are asked for ransom and how insurance companies would proceed with paying for cases like that.
- Israeli-Based startup CyberInt raised a $40M funding round.
- Rig Exploit Kit has started using a financial trojan known as Dridex for its attacks, signaling a change in methodology.
- Adobe tools help you create, manage, and distribute personalized content. Take this self-assessment to test your brand's content velocity.*
*This is a sponsored post.
| |
Upcoming events at Inside: - June 22 - AMA with Daniel Stedman (Pressto) (Register Here)
- June 30 - HR Strategies to Retain Remote Employees (Register Here)
- July 20 - The Rise of Metaverse Gaming (Register Here)
- July 27 - Need To Know NoCoder - Yassine Tahi (Kinetix) (Register Here)
- August 17 - Build Your Diversified Portfolio: How To Invest in Bear Markets (Register Here)
- September 14 - Are Electric Cars Worth It? (Register Here)
| |
 |  | Arbër is an Inside writer who also has experience in entrepreneurship. He has experience covering Consumer Tech, Venture Capital, NFTs, Crypto, etc. Arbër holds a Bachelor's degree in Business from XAMK University in Finland. When he is not reading(and writing) business news, he chooses to watch sports or anime...and then read news about sports or anime. |   | | Editor | Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 Ford. | |
Security Compass is on a mission to accelerate software time-to-market while managing risk. | |
Adobe Commerce powers eCommerce experiences for brands of all sizes. | |
Comments
Post a Comment