Infosecurity News

US Dismantles IPStorm Botnet Proxy Service
Russian-Moldovan national faces maximum 30-year jail stretch

Python Package Index Faces Security Crisis With Validated Leaks
2922 projects contained at least one unique secret, including from AWS, Redis and Google

82% of Attacks Show Cyber-Criminals Targeting Telemetry Data
Sophos report based on 232 IR cases across 25 sectors from January 1 2022 to June 30 2023

Pro-Palestine APT Group Uses Novel Downloader in New Campaign
TA402 launches new targeted phishing campaigns

Royal Ransomware Gang Demands $275m in a Year
CISA highlights links to newer Blacksuit variant

NCSC: UK Facing “Enduring and Significant” Cyber-Threat
Critical infrastructure providers under pressure from state-backed groups

Information-Stealing Malware Escalates in Online Gaming
A report by Sekoia.io shed light on a targeted campaign using Discord and fake download websites

Python Malware Poses DDoS Threat Via Docker API Misconfiguration
Cado Security Labs said the bot agent exhibited various methods for conducting DDoS attacks

EU Formalizes Cybersecurity Support For Ukraine
Bloc signs working arrangement with war-torn country

Malaysian Police Dismantle “BulletProftLink” Phishing Operation
Several arrested and servers seized

Cyber-Attack Could Have “Devastating” Impact on Aussie Exports
Port operator struggles to recover from serious incident

MPs Dangerously Uninformed About Facial Recognition – Report
Privacy International warns UK is “sleepwalking into public mass surveillance”

MOVEit Gang Targets SysAid Customers With Zero-Day Attacks
Lace Tempest looks to spread Clop malware to victims

ICBC and Allen & Overy Hit By Ransomware
Multinationals believed to have been targeted by LockBit

Signature Techniques of Asian APT Groups Revealed
Kaspersky said the primary focus of these actors is cyber-espionage and information gathering

New Kamran Spyware Targets Urdu-Speaking Users in Pakistan
ESET said the attack affects Android users accessing the Urdu version of the Hunza News website

Iran-Affiliated Group Targets Israeli Firms Amid Israel-Hamas Conflict
CrowdStrike has attributed recent attacks on Israeli organizations in the transportation, logistics, and technology sectors to Iran-affiliated threat actor Imperial Kitten

Quishing Campaigns Spike 50% in September
QR code phishing is becoming increasingly popular

OpenAI Reveals ChatGPT Is Being DDoS-ed
Periodic outages began on November 8

UK Shoppers Lost Nearly £11m to Fraud Last Festive Season
NCSC warns of AI-generated scams in run-up to Christmas



