Infosecurity News
New Typosquatting and Repojacking Tactics Uncovered on PyPI
ReversingLabs uncovered two suspicious packages on PyPI: NP6HelperHttptest and NP6HelperHttper
Linux Malware Campaign “Migo” Targets Redis For Cryptomining
Cado Security said this campaign introduces unique techniques to compromise the security of Redis servers
Top UK Universities Recovering Following Targeted DDoS Attack
The attack, which has been claimed by Anonymous Sudan, has been confirmed to have impacted IT services at the universities of Cambridge and Manchester
Initial Ransomware Demands Jump 20% to $600,000 in 2023
Arctic Wolf found that the median ransomware demand was $600,000 in 2023, a 20% rise on the previous year
Insider Steals 80,000 Email Addresses From District Councils
A former employee at Stratford-on-Avon District Council stole residents’ emails to promote his business
LockBit Infrastructure Disrupted by Global Law Enforcers
UK’s National Crime Agency has led an international operation to disrupt the LockBit ransomware group
Anatsa Banking Trojan Resurfaces, Targets European Banks
ThreatFabric said the campaign has evolved since last year, employing sophisticated methods and mainly targeting Samsung devices
Fake Tokens Exploit BRICS Investment Hype
Resecurity said bad actors exploited geopolitical narratives, spreading misinformation
EU Launches Investigation Into TikTok Over Child Protection and Privacy Concerns
TikTok is suspected of breaching the EU’s Digital Services Act requirements on transparency, privacy and obligations to protect minors
Ukrainian Faces Decades in Prison for Leading Prolific Malware Campaigns
The US DoJ said that the Ukrainian national has pleaded guilty to leading the Zeus and IcedID malware campaigns, which resulted in losses of tens of millions of dollars
Israeli Aircraft Survive “Cyber-Hijacking” Attempts
Hackers have attempted to divert two commercial Israeli aircraft in recent days, reports claim
Fifth of British Kids Have Broken the Law Online
A new National Crime Agency study reveals 20% of 10- to 16-year-olds have violated the Computer Misuse Act
New Ivanti Vulnerability Observed as Widespread Security Concerns Grow
After discovering a new vulnerability impacting its Connect Secure, Policy Secure, and ZTA gateways, Ivanti is under fire for poor security practices
Hackers Exploit EU Agenda in Spear Phishing Campaigns
Adversaries targeting EU-based victims increasingly leverage EU affairs in spear phishing attacks, CERT-EU found
PDF Malware on the Rise, Used to Spread WikiLoader, Ursnif and DarkGate
Cybercriminals are increasingly using PDFs to deliver malware, with a 7% rise in threats detected in Q4 2023 compared to Q1, according to a HP Wolf Security report
“TicTacToe Dropper” Malware Distribution Tactics Revealed
A new Fortinet analysis revealed a plethora of final-stage payloads delivered by a series of malware droppers
Prudential Financial Faces Cybersecurity Breach
The breach exposed administrative and user data from specific IT systems, but there is no evidence of customer or client data compromise
Crypto-Money Laundering Records 30% Annual Decline
Chainalysis data reveals a near-30% fall in the value of digital currency being laundered in 2023
Microsoft, OpenAI Confirm Nation-States are Weaponizing Generative AI in Cyber-Attacks
Microsoft and OpenAI found that nation-state groups are using generative AI tools to support cyber campaigns rather than developing novel attack techniques
