Lazarus APT conceals malicious code within BMP image to drop its RAT

3rd Party Risk Management , Governance & Risk Management , Incident & Breach Response Avast: This Supply Chain Attack Used Cobalt Strike Prajeet Nair (@prajeetspeaks) • July 6, 2021     This bitmap image file was used for a steganography attack on MonPass. (Source: Avast) Researchers at Avast discovered a compromised server belonging to MonPass,…

Image: Pete Linforth, Pixabay Joint Cyber Unit could ensure coordinated international response to attacks Print Print Pro Read More: cyber security European Commission security The European Commission has proposed the setting up of a new Joint Cyber Unit to tackle the rising number of serious cyber incidents impacting public services, as well as the life of businesses…

Hackers Exploit Accellion Zero-Days in Recent Data Theft and Extortion Attacks | IT Security News 23. February 2021 Cybersecurity researchers on Monday tied a string of attacks targeting Accellion File Transfer Appliance (FTA) servers over the past two months to data theft and extortion campaign orchestrated by a cybercrime group called UNC2546.The attacks, which began in mid-December…

The threat actor who hacked Poly Network’s cross-chain interoperability protocol yesterday to steal over $600 million worth of cryptocurrency assets is now returning the stolen funds. As the Chinese decentralized finance (DeFi) platform Poly Network shared two hours ago, the hacker has already returned almost $260 million worth of stolen cryptocurrency. In total, the attacker…

Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime , Governance & Risk Management But Nation Won’t Pursue Legal Action in the Case Akshaya Asokan (asokan_akshaya) • April 14, 2021     The Russian state-sponsored group Fancy Bear was responsible for breaches from December 2017 to May 2018 at the Swedish Sports Confederation that resulted…

Endpoint Security , Fraud Management & Cybercrime , Ransomware Experts Say Ransomware Hasn’t Slowed Down Since Colonial Pipeline Jeremy Kirk (jeremy_kirk) • June 2, 2021     JBS’s facility in Greeley, Colorado. (Photo: Mizzou CAFNR via Flickr/CC) The White House says on Tuesday it has contacted Russia regarding the ransomware attack against JBS SA, the…