BleepingComputer.com
"This Week in Ransomware."
Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents. Accessed on 11 February 2023, 1533 UTC. Content provided by "BleepingComputer.com."
Source: https://www.bleepingcomputer.com/
Please click link or scroll down to read your selections.
Russ Roberts (https://www.hawaiicybersecurityjournal.net and https://paper.li/RussellRoberts).
The Week in Ransomware - February 10th 2023 - Clop's Back
From ongoing attacks targeting ESXi servers to sanctions on Conti/TrickBot members, it has been quite a busy week regarding ransomware.
- FEBRUARY 10, 2023
- 06:24 PM
0
City of Oakland systems offline after ransomware attack
The City of Oakland was hit by a ransomware attack on Wednesday night that forced it to take all systems offline until the network is secured and affected services are brought back online.
- FEBRUARY 10, 2023
- 05:04 PM
- 0
A10 Networks confirms data breach after Play ransomware attack
The California-based networking hardware manufacturer 'A10 Networks' has confirmed to BleepingComputer that the Play ransomware gang briefly gained access to its IT infrastructure and compromised data.
- FEBRUARY 10, 2023
- 03:30 PM
- 0
Clop ransomware claims it breached 130 orgs using GoAnywhere zero-day
The Clop ransomware gang claims to be behind recent attacks that exploited a zero-day vulnerability in the GoAnywhere MFT secure file transfer tool, saying they stole data from over 130 organizations.
- FEBRUARY 10, 2023
- 03:15 PM
- 0
Microsoft to retire its Support Diagnostic Tool (MSDT) in 2025
Microsoft announced that it will retire Microsoft Support Diagnostic Tool (MSDT) troubleshooters in future versions of Windows, with MSDT ultimately being removed in 2025.
- FEBRUARY 10, 2023
- 01:05 PM
- 0
California medical group data breach impacts 3.3 million patients
Multiple medical groups in the Heritage Provider Network in California have suffered a ransomware attack, exposing sensitive patient information to cybercriminals.
- FEBRUARY 10, 2023
- 12:36 PM
- 0
Microsoft says Intel driver bug crashes apps on Windows PCs
Microsoft says apps using DirectX are crashing on Windows systems with outdated Intel drivers after installing November 2022 cumulative updates.
- FEBRUARY 10, 2023
- 11:37 AM
- 1
North Korean ransomware attacks on healthcare fund govt operations
A new cybersecurity advisory from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) describes recently observed tactics, techniques, and procedures (TTPs) observed with North Korean ransomware operations against public health and other critical infrastructure sectors.
- FEBRUARY 10, 2023
- 09:35 AM
- 0
Hackers breach Reddit to steal source code and internal data
Reddit suffered a cyberattack Sunday evening, allowing hackers to access internal business systems and steal internal documents and source code.
- FEBRUARY 09, 2023
- 05:04 PM
- 3
Hackers use fake crypto job offers to push info-stealing malware
A campaign operated by Russian threat actors uses fake job offers to target Eastern Europeans working in the cryptocurrency industry, aiming to infect them with a modified version of the Stealerium malware named 'Enigma.'
- FEBRUARY 09, 2023
- 04:34 PM
- 0
Largest Canadian bookstore Indigo shuts down site after cyberattack
Indigo Books & Music, the largest bookstore chain in Canada, has been struck by a cyberattack yesterday, causing the company to make the website unavailable to customers and to only accept cash payments.
- FEBRUARY 09, 2023
- 03:28 PM
- 1
Malicious Google ads sneak AWS phishing sites into search results
A new phishing campaign targeting Amazon Web Services (AWS) logins is abusing Google ads to sneak phishing sites into Google Search to steal your login credentials.
- FEBRUARY 09, 2023
- 01:37 PM
- 1
Hacker develops new 'Screenshotter' malware to find high-value targets
A new threat actor tracked as TA886 targets organizations in the United States and Germany with new custom malware to perform surveillance and data theft on infected systems.
- FEBRUARY 09, 2023
- 12:39 PM
- 2
U.S. and U.K. sanction TrickBot and Conti ransomware operation members
The United States and the United Kingdom have sanctioned seven Russian individuals for their involvement in the TrickBot cybercrime group, whose malware was used to support attacks by the Conti and Ryuk ransomware operation.
- FEBRUARY 09, 2023
- 10:21 AM
- 6
PayPal and Twitter abused in Turkey relief donation scams
Scammers are now exploiting the ongoing humanitarian crisis in Turkey and Syria: this time stealing donations by abusing legitimate platforms like PayPal and Twitter.
- FEBRUARY 09, 2023
- 06:00 AM
- 0
New ESXiArgs ransomware version prevents VMware ESXi recovery
New ESXiArgs ransomware attacks are now encrypting more extensive amounts of data, making it much harder, if not impossible, to recover encrypted VMware ESXi virtual machines.
- FEBRUARY 08, 2023
- 10:45 PM
- 0
Comments
Post a Comment
Please leave a comment about our recent post.