Infosecurity News

MOVEit Gang Targets SysAid Customers With Zero-Day Attacks
Lace Tempest looks to spread Clop malware to victims

ICBC and Allen & Overy Hit By Ransomware
Multinationals believed to have been targeted by LockBit

Signature Techniques of Asian APT Groups Revealed
Kaspersky said the primary focus of these actors is cyber-espionage and information gathering

New Kamran Spyware Targets Urdu-Speaking Users in Pakistan
ESET said the attack affects Android users accessing the Urdu version of the Hunza News website

Iran-Affiliated Group Targets Israeli Firms Amid Israel-Hamas Conflict
CrowdStrike has attributed recent attacks on Israeli organizations in the transportation, logistics, and technology sectors to Iran-affiliated threat actor Imperial Kitten

Quishing Campaigns Spike 50% in September
QR code phishing is becoming increasingly popular

OpenAI Reveals ChatGPT Is Being DDoS-ed
Periodic outages began on November 8

UK Shoppers Lost Nearly £11m to Fraud Last Festive Season
NCSC warns of AI-generated scams in run-up to Christmas

Russian APT Sandworm Disrupted Power in Ukraine Using Novel OT Techniques
This previously undocumented attack suggests a growing maturity of Russia’s offensive OT arsenal

Microsoft Warns of Election Threats in 2024
To address these challenges, Microsoft is introducing several initiatives

Predator AI ChatGPT Integration Poses Risk to Cloud Services
This integration reduces reliance on OpenAI’s API while streamlining the tool’s functionality

FBI Warns of Emerging Ransomware Initial Access Techniques
The FBI notification advises how to protect against the growing targeting of third-party vendors and services

EU Rules for Digital Identities and Trust Services Face Backlash
A proposed amendment of eIDAS could “weaken the security of the Internet as a whole”, said a letter signed by over 500 individuals and organizations

US Urges Critical Infrastructure Firms to Get “Shields Ready”
Government campaign aims to promote cyber-resilience

Three-Quarters of Retail Ransomware Attacks End in Encryption
Sophos claims more victims are taking longer to recover

Threat Actor Farnetwork Linked to Five Ransomware Schemes
Group-IB lifts the lid on prolific cyber-criminal

Data Breach at Singapore's Marina Bay Sands Affects 665,000 Customers
The leaked data include personally identifiable information, such as customers’ names, email addresses, phone numbers and membership numbers

GootBot Implant Heightens Risk of Post-Infection Ransomware
IBM found Gootloader group opting for GootBot over off-the-shelf tools for lateral movement

New BlueNoroff Malware Variant Targets Cryptocurrency Exchanges
Jamf Threat Labs found a Mach-O universal binary communicating with an identified malicious domain

Veeam Patches Two Critical Bugs in Veeam ONE
Two flaws have near-maximum CVSS scores



