Latest Cybersecurity News and Articles

---

Blind Eagle Re-appears in a Phishing Campaign to Target Colombian Entities

BlackBerry researchers spotted the APT-C-36 threat group, aka Blind Eagle, masquerading as a Colombian government tax agency to target financial, health, immigration, and law enforcement sectors. Based on the infection vector and other tactics, researchers believed that the campaign targeted some organizations in Chile, Spain, and Ecuador.

---

Phishing is what type of attack? Definition, trends and best practices

By George Mack, Content Marketing Manager, Check Point. Phishing threats have been making waves in the threat landscape, as they are responsible for more than 80% of security incidents. However, with all the cyber terminology thrown around, such as malware, hacks, and data loss – how do we classify phishing threats? Phishing attacks are social […] The post Phishing is what type of attack? Definition, trends and best practices appeared first on CyberTalk.

---

Highlights from the New U.S. Cybersecurity Strategy

The Biden administration today issued its vision for beefing up the nation's collective cybersecurity posture, including calls for legislation establishing liability for software products and services that are sold with little regard for security. The White House's new national cybersecurity strategy also envisions a more active role by cloud providers and the U.S. military in disrupting cybercriminal infrastructure, and names China as the single biggest cyber threat to U.S. interests.

---

7 likely scenarios: How cyber security will change in 2023

 By Isla Sibanda, an ethical hacker and cyber security specialist based out of Pretoria. For over twelve years, she’s worked as a cyber security analyst and penetration testing specialist for several major companies – including Standard Bank Group, CipherWave, and Axxess. Social engineering scams target roughly one hundred million people annually, resulting in astronomical amounts […] The post 7 likely scenarios: How cyber security will change in 2023 appeared first on CyberTalk.

---

Major Phishing Campaign Targets Trezor Crypto Wallets

“The attackers contact the victims via phone call, SMS and/or email to say that there’s been a security breach or suspicious activity on their Trezor account,” the firm warned in a Twitter post.

---

BidenCash Market Leaks Two Million Credit Cards in Birthday Blitz

The one-year-old leaked dataset contains card information from all over the world, with a significant number of them issued in the United States, China, Mexico, India, Canada, and the UK.

---

Aruba Networks fixes six critical vulnerabilities in ArubaOS

The critical flaws addressed by Aruba this time can be separated into two categories: command injection flaws and stack-based buffer overflow problems in the PAPI protocol (Aruba Networks access point management protocol).

---

Record Number of Mobile Phishing Attacks in 2022

Lookout also investigated the evolution of mobile phishing on professional devices, and since 2021 mobile phishing encounter rates have increased by roughly 10% for enterprise phones.

---

Canadian book giant says employee data was stolen during ransomware attack

In an undated followup FAQ, Indigo now says employee data was involved in the attack. The Toronto-based company did not respond to requests for comment about how many people were affected.

---

Pierce Transit and City of Lakewood Investigating Potential Ransomware Attacks

A Pierce Transit spokesperson told KOMO News in a statement that on Feb. 14, the agency "experienced a ransomware incident that temporarily disrupted some agency systems.

---

Research finds UEFI bootkit capable of bypassing security measures

New research shows that a unified extensive firmware interface (UEFI) bootkit is capable of bypassing security features despite system updates. 

---

Blackfly: Espionage Group Targets Materials Technology

The Blackfly espionage group (aka APT41, Winnti Group, Bronze Atlas) has continued to mount attacks against targets in Asia and recently targeted two subsidiaries of an Asian conglomerate, likely attempting to steal intellectual property

---

Cambodia-Based "Sour Grapes" Pig Butchering Scam Targets Southeast Asia

The teams running these scams include a young man or woman acting as the face of the scam, keyboarders who keep the victim engaged, and a team generating and repurposing media content with fabricated proof of their backstory.

---

1 year of war: From weaponizing Ukraine to Russia's outsourced cyber war

In Episode 14 of the Cybersecurity & Geopolitical Podcast from Security magazine, hosts Ian Thornton-Trump and Philip Ingram assess the Russia-Ukraine conflict.

---

R3NIN Sniffer Malware Stealing Credit Card Data From E-Commerce Consumers

In the event of a website being hacked, attackers may implant an encoded malicious script into the web server, designed to activate when a target user accesses the corrupted web page.

---

Hackers Exploit Containerized Environments to Steals Proprietary Data and Software

A sophisticated attack campaign dubbed SCARLETEEL is targeting containerized environments to perpetrate theft of proprietary data and software. "The attacker exploited a containerized workload and then leveraged it to perform privilege escalation into an AWS account in order to steal proprietary software and credentials," Sysdig said in a new report. The advanced cloud attack also entailed the

---

Cisco to Acquire Valtix for Cloud Network Security Tech

Cisco is dipping into the acquisition pool to beef up its cybersecurity portfolio with plans to acquire Valtix, an early-stage Silicon Valley startup in the cloud network security business.

---

Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware

GootLoader, active since late 2020, is a first-stage downloader that's capable of delivering a wide range of secondary payloads such as Cobalt Strike and various ransomware.

---

New cyberattack tactics rise up as ransomware payouts increase

While phishing, business email compromise (BEC), and ransomware still rank among the most popular cyberattack techniques, a mix of new-breed attacks is gaining steam, according to a new report from cybersecurity and compliance company Proofpoint.

---

New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers

Misconfigured Redis database servers are the target of a novel cryptojacking campaign that leverages a legitimate and open source command-line file transfer service to implement its attack. "Underpinning this campaign was the use of transfer[.]sh," Cado Security said in a report shared with The Hacker News. "It's possible that it's an attempt at evading detections based on other common code