Ukraine targeted with DDoS attacks / Microsoft Edge is getting a built-in VPN feature / Hackers using new "Bumblebee" malware

Plus: An unknown hacker group is impersonating a Russian agency in a phishing campaign

Inside.com Part of   Network April 29, 2022

Presented by

Ukraine is being targeted with DDoS attacks from an unknown hacker group. The attackers are targeting government websites. More: Ukraine's computer emergency response team has released a warning of ongoing DDoS attacks. Their targets so far have been pro-Ukraine news websites and Ukraine's government websites. These hackers are injecting Javascript code into the HTML file of these websites, causing them to crash due to the high number of requests. The threat actors are unknown at the current moment. Zoom Out: Microsoft recently reported that Ukraine has been the target of over 237 cyberattacks during 2022. Russia has attacked Ukraine consistently, using multiple state-backed hacker groups to target the government and businesses.

Microsoft Edge is getting a built-in VPN feature as an update. The feature is not a full-fledged VPN. More: The feature is called Microsoft Edge Secure Network. It is powered by Cloudflare, and it aims to protect the user's sensitive data as they browse. This feature is in the early stage of development available to select users in Edge Canary, and it's not a full-fledged VPN service offered in browsers like Opera. Edge Secure Network hides traffic through an encrypted tunnel to create a secure connection, which means even HTTP URLs are accessed securely, but it does not let you choose your location the way VPNs do. Zoom Out: Microsoft has played an increasingly larger role in privacy and cybersecurity, using its research team to highlight the cybersecurity situation in Ukraine through different reports.

A message from CROWDBOTICS Go from ideas to code ridiculously fast. Crowdbotics is a new way to build software – 3x faster, 3x cheaper, fully transparent and with predictable outcomes. Automatically convert Figma design files into code, get started fast with on-demand developer talent, and manage your app’s build progress from a single dashboard.  With Crowdbotics, you can: Move Faster With Modules: Crowdbotics has an ever-growing library of app modules that allow you to build faster and focus more time and energy on unique features.  Retain Full Ownership of Code: Crowdbotics allows you to audit, customize, and stay compliant long after you’ve launched your app.  Access Top Developer Talent: Crowdbotics connects you to a network of managed developer talent to help you build faster. Reduce Development Costs: The Crowdbotics platform is more transparent and cost-effective than traditional software development options. Get an Estimate

Hackers are using a new kind of malware called "Bumblebee." The Bumblebee downloader is being used in ongoing email attacks. More: Bumblebee is a backdoor malware that infects a target before loading follow-on binaries. Unlike most other malware that uses process hollowing or DLL injection, Bumblebee utilizes an asynchronous procedure call-injection to start the shellcode. The malware is suspected to be tied with BazarLoader, malware commonly used a few years ago. Attackers who were using BazarLoader seem to have replaced it with Bumblebee.

A previously unknown hacker group is impersonating a Russian agency in a phishing campaign. European companies are being targeted. More: This threat group has been identified by IBM as Hive0117. The main targets of Hive0117 are owners of companies and high-ranking employees. They targeted their victims with phishing links they sent while pretending to be a Russian tax agency. The group is not believed to be related to the Russian government at the moment. Zoom Out: Russian-backed hacker groups have played a key role for Russia in its attempt to de-stabilize the West and invade Ukraine, attacking consistently since the beginning of 2022.  Recently, they've also started to attack other European countries, such as Finland, which had its government website shut down after hosting Ukrainian President Volodymyr Zelenskyy in a virtual speech.

A message from AXONIUS Complexity is everywhere. So focus on what you can control. At least that's what Simone Biles says. When the noise and chaos of life creep in, she breathes deep, embraces the quiet, and remembers what really matters.  “I've figured out how to push away the distractions and the doubt, and treat everything I do the same as I would in a practice session at the gym. Like I'm doing it just for me.” Complexity is everywhere, including cybersecurity asset management. Control it with Axonius. Axonius correlates asset data from existing solutions to provide an always up-to-date inventory, uncover policy gaps, and automate response actions — giving security and IT teams the confidence to control complexity. Want to learn more about how one of the greatest gymnasts of all time controls complexity? Watch the full video now. Presented by Axonius. Watch Now

Two Microsoft Azure vulnerabilities in database storage have been reported. The flaws are related to PostgreSQL Flexible Server. More: The two flaws could've enabled hackers to have unauthorized cross-account database access in a region. Hackers could have created a database within a server and stolen information from there. The vulnerabilities were called ExtraReplica and were found by Wiz. Microsoft said it mitigated the bug within 48 hours of disclosure on Jan. 13, 2022.

Quick Hits Over 5,000 global customers trust Outreach as their Sales Execution Platform. Find out why it’s the right solution for your team.* Intellectual property protection company Strider has raised $45M in a Series B round of funding. There has been an 87% increase in cybersecurity mentions in the railway industry since Q4 of 2020. ARMO has raised a $30M Series A financing round. Doppler has landed a $20M Series A round to help companies manage their app secrets. To deliver real-time analytics on massive datasets, developers must balance latency, throughput, concurrency, and data freshness. Watch Molecula's Webinar..* *This is a sponsored post.

Upcoming events at Inside: May 03 - Venturing in VC - Episode #17 with Ryan Holmes (LOI Venture) (Register Here) May 05 - [Live Webinar] Women in Sales: How to Build Your Personal Brand to Drive More Sales presented by Introhive (Register Here) * May 12 - Making Metaverse Dating a Reality (Register Here) May 18 - Need To Know NoCoder: Jatin Arora (Utilize) (Register Here) May 19 - Understanding Fractionalization (Register Here) May 24 - Meet Our Fund 3 (Register Here) May 31 - Ethereum Merge with Anthony Donofrio (Ethereum) (Register Here) June 01 - Selling Consumer Goods in Web3 (Register Here) June 09 - Empowering Content Creators with No Code (Register Here) June 22 - The Future of Open-Source Software Security (Register Here) *This is a sponsored listing.

Arbër is an Inside writer who also has experience in entrepreneurship. He has experience covering Consumer Tech, Venture Capital, NFTs, Crypto, etc. Arbër holds a Bachelor's degree in Business from XAMK University in Finland. When he is not reading(and writing) business news, he chooses to watch sports or anime...and then read news about sports or anime. Editor Aaron Crutchfield is based in the high desert of California. Over the last two decades, he has spent time writing and editing at various local newspapers and defense contractors in California. When he's not working, he can often be found looking at the latest memes with his kids or working on his 1962 Ford.

Go from ideas to code ridiculously fast with Crowdbotics.

Controlling Complexity: a video featuring Simone Biles. Presented by Axonius. Watch now.

767 Bryant St. #203, San Francisco, CA 94107 Copyright © 2022 Inside.com

Did someone forward this email to you? Head over to inside.com to get your very own free subscription! You received this email because you subscribed to Inside Security. Click here to unsubscribe from Inside Security list or manage your subscriptions.