Constant Contact Email Service Used in Phishing Attack

ByPR 24
Softpedia News / Security

This article has been indexed from Softpedia News / Security

Nobelium, the Russian hacking group responsible for last year’s big SolarWinds hack, has struck again. This time, it used cloud email marketing firm Constant Contact in a phishing attempt that compromised 3,000 email accounts across 150 companies, according to CRN. 

According to Tom Burt, Microsoft’s corporate vice president of customer security and trust, “Nobelium launched this week’s attacks by gaining access to the Constant Contact account of the United States Agency for International Development”. 

In a blog post dubbed Another Nobelium Cyberattack, Microsoft highlighted the newest intrusion from the state-sponsored hackers, warning that part of Nobelium’s playbook is to get access to trusted technology suppliers and infect their clients. 

According to Microsoft, Nobelium initiated the attack this week not by…

Similar Posts

Malspam Campaign Used Hancitor to Download Cuba Ransomware

Malspam Campaign Used Hancitor to Download Cuba Ransomware

ByPR 24

Cybercrime , Cybercrime as-a-service , Email Security & Protection Attackers Co-Opted Malware for Data Exfiltration and Ransom, Group-IB Finds Akshaya Asokan (asokan_akshaya) • May 8, 2021     Attackers co-opted the Hancitor malware downloader and recently used it to deliver Cuba ransomware as part of an email spam campaign for data exfiltration and ransom extortion,…

Insurer AXA hit by ransomware after dropping support for ransom payments

Insurer AXA hit by ransomware after dropping support for ransom payments

ByPR 24

Branches of insurance giant AXA based in Thailand, Malaysia, Hong Kong, and the Philippines have been struck by a ransomware cyber attack. As seen by BleepingComputer yesterday, the Avaddon ransomware group claimed on their leak site that they had stolen 3 TB of sensitive data from AXA’s Asian operations. Additionally, BleepingComputer observed an ongoing Distributed Denial of Service (DDoS)…

Airline passenger data breached following “highly sophisticated attack” • Graham Cluley

Airline passenger data breached following “highly sophisticated attack” • Graham Cluley

ByPR 24

Many of us have probably never heard of SITA, but that doesn’t mean they don’t know anything about you. Because SITA provides IT services to about 90% of the global aviation industry, which means if you’re a frequent flier (or were before this ruddy pandemic hit the world) it probably stores data about you on…

Russian Convicted of Aiding Kelihos Botnet Operator

Russian Convicted of Aiding Kelihos Botnet Operator

ByPR 24

Cybercrime , Fraud Management & Cybercrime Prosecutors: Crypting Provider Helped Infect 50,000 Computers Akshaya Asokan (asokan_akshaya) • June 18, 2021     A Russian national has been convicted of aiding a botnet scheme that infected victims’ devices with malicious Kelihos malware and ransomware, according to the U.S. Justice Department. See Also: Live Webinar: Seeking Success…

Kaseya did not pay ransom for decryptor, refused to ‘negotiate’ with REvil – Security

Kaseya did not pay ransom for decryptor, refused to ‘negotiate’ with REvil – Security

ByPR 24

Kaseya did not negotiate with cyber criminals and pay a ransom following the REvil ransomware attack on July 2 which compromised about 60 MSPs and 1,500 end users. On Monday, the vendor confirmed on its website that it “did not pay a ransom – either directly or indirectly through a third party – to obtain…

State Department Is Reportedly the Victim of a Cyber Attack

State Department Is Reportedly the Victim of a Cyber Attack

ByPR 24

Photo: Win McNamee (Getty Images) The U.S. State Department was purportedly the victim of a serious cyber attack in recent weeks, according to a Fox News report published on Saturday. The extent of breach and when it was discovered are currently unknown. Citing an unnamed source, the outlet stated that the Department of Defense’s Cyber…