Latest Cybersecurity News and Articles

---

Privacy-invasive and Clicker Android Adware found in popular apps in South Korea

Some apps were removed from Google Play while others were updated by the official developers. Users are encouraged to update the apps to the latest version to remove the identified threat from their devices.

---

Severe Android and Novi Survey Vulnerabilities Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.

---

12,000 Indian Government Websites on Alert for Indonesian Hacking Threat

CERT-In issued an ‘Urgent- High Alert’ warning to all Central and state agencies and departments to be alert of potential attacks by Indonesian hackers and report any such incidents to them immediately.

---

Cyber assets increased by 133% year-over-year

Cloud access for security leaders was analyzed in a recent report by JupiterOne and found that cyber assets increased by 133% year-over-year.

---

Nation-state actors are taking advantage of weak passwords to go after cloud customers, Google says

Weak passwords and other comprises of user identity continue to drive security incidents for Google Cloud customers, with weak passwords accounting for nearly half of the incidents affecting its clients, according to a report released by the company.

---

Biden administration announces plan to protect patient privacy

As abortion access is debated within the United States, concerns have risen over the ability to protect patient privacy, including on mobile devices.

---

47% organizations experienced ransomware attack in the past year

A recent study reveals that security teams are unprepared for ransomware and struggle with increasing regulatory complexity.

---

Bitrue Hot Wallet Exploit Results in $23M Cryptocurrency Theft

The exchange said it will suspend all withdrawals temporarily to conduct additional security checks, and withdrawals are expected to resume on April 18, 2023. The exchange explained that they will compensate all identified users affected in full.

---

Non-internet facing systems have significant risk density

Security leaders work hard to securing potential data vulnerabilities within their organizations using security assessments and penetration tests.

---

Former TSB chief information officer fined $101,000 over IT meltdown in 2018

UK regulators have imposed an £81,000 (~$101,000) fine on a former TSB information officer over the bank’s IT meltdown in 2018 that left millions of customers locked out of their accounts.

---

GuLoader Targets US Financial Firms With Tax-Themed Phishing Lures

“GuLoader, also known as CloudEyE, is a loader malware that is known to deliver additional malware, such as infostealers and Remote Access Trojans (RATs),” wrote eSentire’s Threat Response Unit (TRU).

---

Russia-Linked Hackers Launches Espionage Attacks on Foreign Diplomatic Entities

The Russia-linked APT29 (aka Cozy Bear) threat actor has been attributed to an ongoing cyber espionage campaign targeting foreign ministries and diplomatic entities located in NATO member states, the European Union, and Africa. According to Poland's Military Counterintelligence Service and the CERT Polska team, the observed activity shares tactical overlaps with a cluster tracked by Microsoft as

---

Five arrested after 33,000 victims lose $98M to online investment fraud

Europol and Eurojust announced today the arrest of five individuals believed to be part of a massive online investment fraud ring with at least 33,000 victims who lost an estimated €89 million (roughly $98 million).

---

Russian APT Hackers Actively Targeting European NATO Allies

The Russian cyberespionage campaign is targeting European government agencies and diplomats to steal Western government intelligence on the war in Ukraine, says the Polish CERT and Military Counterintelligence Service.

---

Beware of Juice Jacking and Impersonation Attacks - Warns FCC and FBI

The FCC warns against using free charging stations at airports, hotels, and shopping centers. It is also advisable to use an electrical outlet instead of USB charging ports to stay safe. Meanwhile, the FBI raises the alarm about adversaries impersonating Chinese officials to target Chinese users in the U.S. 

---

'RTM Locker' Cybercrime Group Now Targets Businesses via Ransomware Affiliates

"The business-like set up of the group, where affiliates are required to remain active or notify the gang of their leave, shows the organizational maturity of the group, as has also been observed in other groups, such as Conti," Trellix reported.

---

Countering the Problem of Credential Theft

While law enforcement action against Genesis resulted in the seizure of at least 10 clearnet domains, its Tor site is still running, and its administrators have indicated they will set up new infrastructure.

---

Linux kernel logic allowed Spectre attack on major cloud

On Thursday, Eduardo (sirdarckcat) Vela Nava, from Google's product security response team, disclosed a Spectre-related security vulnerability in version 6.2 of the Linux kernel.

---

Kodi Confirms Data Breach: 400K User Records and Private Messages Stolen

Open source media player software provider Kodi has confirmed a data breach after threat actors stole the company's MyBB forum database containing user data and private messages. What's more, the unknown threat actors attempted to sell the data dump comprising 400,635 Kodi users on the now-defunct BreachForums cybercrime marketplace. "MyBB admin logs show the account of a trusted but currently

---

Canada: Cyberattack at Ontario Town of St. Marys cost $1.3M, including $290K in Bitcoin ransom

The report comes around nine months after the town suffered the ransomware attack, which resulted in the town locking down its IT systems and restricting access to email.