image copyright Getty Images. About sharing Microsoft has blamed a Chinese cyber-espionage group for attacks on its mail server software.
The tech giant said the hackers belonged to a state-backed group, which was a “highly skilled and sophisticated actor”.
History Shows Threats Ramp Up When Businesses Shut Down Labor Day weekend is upon us. Unfortunately, history has shown that, rather than resting, hackers and other threat actors take advantage of holidays to attack closed or understaffed businesses when they least expect it. To remind businesses not to let their guard down over the holiday…
9 Android Apps On Google Play Caught Distributing AlienBot Banker and MRAT Malware | IT Security News 9. March 2021 Cybersecurity researchers have discovered a new malware dropper contained in as many as 9 Android apps distributed via Google Play Store that deploys a second stage malware capable of gaining intrusive access to the financial…
Operation Dianxun Overview In a recent report the McAfee Advanced Threat Research (ATR) Strategic Intelligence team disclosed an espionage campaign, targeting telecommunication companies, named Operation Diànxùn. The tactics, techniques and procedures (TTPs) used in the attack are like those observed in earlier campaigns publicly attributed to the threat actors RedDelta and Mustang Panda. Most probably…
The Russian criminal gang known as DarkSide that is behind the attack that shut down Colonial Pipeline have claimed their only goal is to ‘make money’ and not cause chaos – as experts warn gas prices could surge past $3 a gallon if America’s largest fuel pipeline remains down. The FBI confirmed on Monday that…
Cybersecurity firm Rapid7 revealed that an unauthorized party accessed some of its source code in a security incident linked to the Codecov supply-chain attack. Last month, Codecov disclosed a security incident involving its Bash Uploader script, a tool that provides a framework and language-agnostic method for sending coverage reports to Codecov. The company…
TSA tightens cyber rules for pipelines By Adam Mazmanian Jul 21, 2021 A new directive issued by the Transportation Security Administration requires fuel pipeline operators to institute mitigation and recovery measures to protect against ransomware attacks and other known cybersecurity threats. This is the second directive issued by TSA in the wake of…
