Crypt Ghouls Targets Russian Firms with LockBit 3.0 and Babuk Ransomware Attacks – OfficialSarkar

Crypt Ghouls Targets Russian Firms with LockBit 3.0 and Babuk Ransomware Attacks – OfficialSarkar

Oct 19, 2024Ravie LakshmananNetwork Security / Data Breach A nascent threat actor known as Crypt Ghouls has been linked to a set of cyber attacks targeting Russian businesses and government agencies with ransomware with the twin goals of disrupting business operations and financial gain. “The group under review has a toolkit that includes utilities such…

North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data – OfficialSarkar

North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data – OfficialSarkar

Oct 18, 2024Ravie LakshmananInsider Threat / Cyber Espionage North Korean information technology (IT) workers who obtain employment under false identities in Western companies are not only stealing intellectual property, but are also stepping up by demanding ransoms in order to not leak it, marking a new twist to their financially motivated attacks. “In some instances,…

U.S. and Allies Warn of Iranian Cyberattacks on Critical Infrastructure in Year-Long Campaign – OfficialSarkar

U.S. and Allies Warn of Iranian Cyberattacks on Critical Infrastructure in Year-Long Campaign – OfficialSarkar

Oct 18, 2024Ravie LakshmananCyber Intelligence / Critical Infrastructure Cybersecurity and intelligence agencies from Australia, Canada, and the U.S. have warned about a year-long campaign undertaken by Iranian cyber actors to infiltrate critical infrastructure organizations via brute-force attacks. “Since October 2023, Iranian actors have used brute force and password spraying to compromise user accounts and obtain…

Webinar on Building a Strong Data Security Posture – OfficialSarkar

Webinar on Building a Strong Data Security Posture – OfficialSarkar

Oct 18, 2024The Hacker NewsWebinar / Data Protection Picture your company’s data as a vast, complex jigsaw puzzle—scattered across clouds, devices, and networks. Some pieces are hidden, some misplaced, and others might even be missing entirely. Keeping your data secure in today’s fast-evolving landscape can feel like an impossible challenge. But there’s a game-changing solution:…

Fake Google Meet Pages Deliver Infostealers in Ongoing ClickFix Campaign – OfficialSarkar

Fake Google Meet Pages Deliver Infostealers in Ongoing ClickFix Campaign – OfficialSarkar

Oct 18, 2024Ravie LakshmananThreat Intelligence / Phishing Attack Threat actors are leveraging fake Google Meet web pages as part of an ongoing malware campaign dubbed ClickFix to deliver infostealers targeting Windows and macOS systems. “This tactic involves displaying fake error messages in web browsers to deceive users into copying and executing a given malicious PowerShell…

Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser – OfficialSarkar

Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser – OfficialSarkar

Oct 18, 2024Ravie LakshmananThreat Intelligence / Browser Security Microsoft has disclosed details about a now-patched security flaw in Apple’s Transparency, Consent, and Control (TCC) framework in macOS that has likely come under exploitation to get around a user’s privacy preferences and access data. The shortcoming, codenamed HM Surf by the tech giant, is tracked as…

Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant – OfficialSarkar

Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant – OfficialSarkar

Oct 17, 2024Ravie LakshmananThreat Intelligence / Malware The Russian threat actor known as RomCom has been linked to a new wave of cyber attacks aimed at Ukrainian government agencies and unknown Polish entities since at least late 2023. The intrusions are characterized by the use of a variant of the RomCom RAT dubbed SingleCamper (aka…

Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program – OfficialSarkar

Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program – OfficialSarkar

Oct 17, 2024Ravie LakshmananRansomware / Network Security Cybersecurity researchers have gleaned additional insights into a nascent ransomware-as-a-service (RaaS) called Cicada3301 after successfully gaining access to the group’s affiliate panel on the dark web. Singapore-headquartered Group-IB said it contacted the threat actor behind the Cicada3301 persona on the RAMP cybercrime forum via the Tox messaging service…

SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack – OfficialSarkar

SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack – OfficialSarkar

An advanced persistent threat (APT) actor with suspected ties to India has sprung forth with a flurry of attacks against high-profile entities and strategic infrastructures in the Middle East and Africa. The activity has been attributed to a group tracked as SideWinder, which is also known as APT-C-17, Baby Elephant, Hardcore Nationalist, Leafperforator, Rattlesnake, Razor…

5 Ways to Reduce SaaS Security Risks – OfficialSarkar

5 Ways to Reduce SaaS Security Risks – OfficialSarkar

As technology adoption has shifted to be employee-led, just in time, and from any location or device, IT and security teams have found themselves contending with an ever-sprawling SaaS attack surface, much of which is often unknown or unmanaged. This greatly increases the risk of identity-based threats, and according to a recent report from CrowdStrike,…