Iranian Hackers Targeting Turkey and Arabian Peninsula in New Malware Campaign

Iranian Hackers Targeting Turkey and Arabian Peninsula in New Malware Campaign,

The Iranian state-sponsored threat actor known as MuddyWater has been attributed to a new swarm of attacks targeting Turkey and the Arabian Peninsula with the goal of deploying remote access trojans (RATs) on compromised systems.
« The MuddyWater supergroup is highly motivated and can use unauthorized access to conduct espionage, intellectual property theft, and deploy ransomware and destructive

,

The Iranian state-sponsored threat actor known as MuddyWater has been attributed to a new swarm of attacks targeting Turkey and the Arabian Peninsula with the goal of deploying remote access trojans (RATs) on compromised systems.
« The MuddyWater supergroup is highly motivated and can use unauthorized access to conduct espionage, intellectual property theft, and deploy ransomware and destructive

, ,
https://thehackernews.com/2022/03/iranian-hackers-targeting-turkey-and.html

New Exploit Bypasses Existing Spectre-v2 Mitigations in Intel, AMD, Arm CPUs

New Exploit Bypasses Existing Spectre-v2 Mitigations in Intel, AMD, Arm CPUs,

Researchers have disclosed a new technique that could be used to circumvent existing hardware mitigations in modern processors from Intel, AMD, and Arm and stage speculative execution attacks such as Spectre to leak sensitive information from host memory.
Attacks like Spectre are designed to break the isolation between different applications by taking advantage of an optimization technique 

,

Researchers have disclosed a new technique that could be used to circumvent existing hardware mitigations in modern processors from Intel, AMD, and Arm and stage speculative execution attacks such as Spectre to leak sensitive information from host memory.
Attacks like Spectre are designed to break the isolation between different applications by taking advantage of an optimization technique 

, ,
https://thehackernews.com/2022/03/new-exploit-bypasses-existing-spectre.html

Ukrainian Hacker Linked to REvil Ransomware Attacks Extradited to United States

Ukrainian Hacker Linked to REvil Ransomware Attacks Extradited to United States,

Yaroslav Vasinskyi, a Ukrainian national, linked to the Russia-based REvil ransomware group has been extradited to the U.S. to face charges for his role in carrying out the file-encrypting malware attacks against several companies, including Kaseya last July.
The 22-year-old had been previously arrested in Poland in October 2021, prompting the U.S. Justice Department (DoJ) to file charges of

,

Yaroslav Vasinskyi, a Ukrainian national, linked to the Russia-based REvil ransomware group has been extradited to the U.S. to face charges for his role in carrying out the file-encrypting malware attacks against several companies, including Kaseya last July.
The 22-year-old had been previously arrested in Poland in October 2021, prompting the U.S. Justice Department (DoJ) to file charges of

, ,
https://thehackernews.com/2022/03/ukrainian-hacker-linked-to-revil.html

Emotet Botnet’s Latest Resurgence Spreads to Over 100,000 Computers

Emotet Botnet’s Latest Resurgence Spreads to Over 100,000 Computers

,

The insidious Emotet botnet, which staged a return in November 2021 after a 10-month-long hiatus, is once again exhibiting signs of steady growth, amassing a swarm of over 100,000 infected hosts for perpetrating its malicious activities.
« While Emotet has not yet attained the same scale it once had, the botnet is showing a strong resurgence with a total of approximately 130,000 unique bots

,

The insidious Emotet botnet, which staged a return in November 2021 after a 10-month-long hiatus, is once again exhibiting signs of steady growth, amassing a swarm of over 100,000 infected hosts for perpetrating its malicious activities.
« While Emotet has not yet attained the same scale it once had, the botnet is showing a strong resurgence with a total of approximately 130,000 unique bots

, ,
https://thehackernews.com/2022/03/emotet-botnets-latest-resurgence.html

Voici les principales cybermenaces auxquelles les Français sont confrontés au quotidien

Voici les principales cybermenaces auxquelles les Français sont confrontés au quotidien,

L’hameçonnage figure, sans surprise, en tête des malveillances rencontrées par les internautes français. Parmi les scénarios les plus fréquents figurent la fausse infraction pédopornographique et le support technique bidon.

,

L’hameçonnage figure, sans surprise, en tête des malveillances rencontrées par les internautes français. Parmi les scénarios les plus fréquents figurent la fausse infraction pédopornographique et le support technique bidon.

, ,
https://www.01net.com/actualites/voici-les-principales-cybermenaces-auxquelles-les-francais-sont-confrontes-au-quotidien-2055460.html

Hackers Abuse Mitel Devices to Amplify DDoS Attacks by 4 Billion Times

Hackers Abuse Mitel Devices to Amplify DDoS Attacks by 4 Billion Times,

Threat actors have been observed abusing a high-impact reflection/amplification method to stage sustained distributed denial-of-service (DDoS) attacks for up to 14 hours with a record-breaking amplification ratio of 4,294,967,296 to 1.
The attack vector – dubbed TP240PhoneHome (CVE-2022-26143) – has been weaponized to launch significant DDoS attacks targeting broadband access ISPs, financial

,

Threat actors have been observed abusing a high-impact reflection/amplification method to stage sustained distributed denial-of-service (DDoS) attacks for up to 14 hours with a record-breaking amplification ratio of 4,294,967,296 to 1.
The attack vector – dubbed TP240PhoneHome (CVE-2022-26143) – has been weaponized to launch significant DDoS attacks targeting broadband access ISPs, financial

, ,
https://thehackernews.com/2022/03/hackers-abuse-mitel-devices-to-amplify.html

Critical Bugs Could Let Attackers Remotely Hack, Damage APC Smart UPS Devices

Critical Bugs Could Let Attackers Remotely Hack, Damage APC Smart UPS Devices,

Three high-impact security vulnerabilities have been disclosed in APC Smart-UPS devices that could be abused by remote adversaries as a physical weapon to access and control them in an unauthorized manner.
Collectively dubbed TLStorm, the flaws « allow for complete remote takeover of Smart-UPS devices and the ability to carry out extreme cyber-physical attacks, » Ben Seri and Barak Hadad,

,

Three high-impact security vulnerabilities have been disclosed in APC Smart-UPS devices that could be abused by remote adversaries as a physical weapon to access and control them in an unauthorized manner.
Collectively dubbed TLStorm, the flaws « allow for complete remote takeover of Smart-UPS devices and the ability to carry out extreme cyber-physical attacks, » Ben Seri and Barak Hadad,

, ,
https://thehackernews.com/2022/03/critical-bugs-could-let-attackers.html

The Incident Response Plan – Preparing for a Rainy Day

The Incident Response Plan – Preparing for a Rainy Day,

The unfortunate truth is that while companies are investing more in cyber defenses and taking cybersecurity more seriously than ever, successful breaches and ransomware attacks are on the rise. While a successful breach is not inevitable, it is becoming more likely despite best efforts to prevent it from happening. 
Just as it wasn’t raining when Noah built the ark, companies must face the fact

,

The unfortunate truth is that while companies are investing more in cyber defenses and taking cybersecurity more seriously than ever, successful breaches and ransomware attacks are on the rise. While a successful breach is not inevitable, it is becoming more likely despite best efforts to prevent it from happening. 
Just as it wasn’t raining when Noah built the ark, companies must face the fact

, ,
https://thehackernews.com/2021/06/the-incident-response-plan-preparing.html

Chinese APT41 Hackers Broke into at Least 6 U.S. State Governments: Mandiant

Chinese APT41 Hackers Broke into at Least 6 U.S. State Governments: Mandiant,

APT41, the state-sponsored threat actor affiliated with China, breached at least six U.S. state government networks between May 2021 and February 2022 by retooling its attack vectors to take advantage of vulnerable internet-facing web applications.
The exploited vulnerabilities included « a zero-day vulnerability in the USAHERDS application (CVE-2021-44207) as well as the now infamous zero-day in

,

APT41, the state-sponsored threat actor affiliated with China, breached at least six U.S. state government networks between May 2021 and February 2022 by retooling its attack vectors to take advantage of vulnerable internet-facing web applications.
The exploited vulnerabilities included « a zero-day vulnerability in the USAHERDS application (CVE-2021-44207) as well as the now infamous zero-day in

, ,
https://thehackernews.com/2022/03/chinese-apt41-hackers-broke-into-at.html

Critical RCE Bugs Found in Pascom Cloud Phone System Used by Businesses

Critical RCE Bugs Found in Pascom Cloud Phone System Used by Businesses,

Researchers have disclosed three security vulnerabilities affecting Pascom Cloud Phone System (CPS) that could be combined to achieve a full pre-authenticated remote code execution of affected systems.
Kerbit security researcher Daniel Eshetu said the shortcomings, when chained together, can lead to « an unauthenticated attacker gaining root on these devices. »
Pascom Cloud Phone System is an

,

Researchers have disclosed three security vulnerabilities affecting Pascom Cloud Phone System (CPS) that could be combined to achieve a full pre-authenticated remote code execution of affected systems.
Kerbit security researcher Daniel Eshetu said the shortcomings, when chained together, can lead to « an unauthenticated attacker gaining root on these devices. »
Pascom Cloud Phone System is an

, ,
https://thehackernews.com/2022/03/critical-rce-bugs-found-in-pascom-cloud.html