Researchers Expose Inner Workings of Billion-Dollar Wizard Spider Cybercrime Gang

Researchers Expose Inner Workings of Billion-Dollar Wizard Spider Cybercrime Gang,

The inner workings of a cybercriminal group known as the Wizard Spider have been exposed, shedding light on its organizational structure and motivations.
« Most of Wizard Spider’s efforts go into hacking European and U.S. businesses, with a special cracking tool used by some of their attackers to breach high-value targets, » Swiss cybersecurity company PRODAFT said in a new report shared with The

,

The inner workings of a cybercriminal group known as the Wizard Spider have been exposed, shedding light on its organizational structure and motivations.
« Most of Wizard Spider’s efforts go into hacking European and U.S. businesses, with a special cracking tool used by some of their attackers to breach high-value targets, » Swiss cybersecurity company PRODAFT said in a new report shared with The

, ,
https://thehackernews.com/2022/05/researchers-expose-inner-working-of.html

Hackers Gain Fileless Persistence on Targeted SQL Servers Using a Built-in Utility

Hackers Gain Fileless Persistence on Targeted SQL Servers Using a Built-in Utility,

Microsoft on Tuesday warned that it recently spotted a malicious campaign targeting SQL Servers that leverages a built-in PowerShell binary to achieve persistence on compromised systems.
The intrusions, which leverage brute-force attacks as an initial compromise vector, stand out for their use of the utility « sqlps.exe, » the tech giant said in a series of tweets.
The ultimate goals of the

,

Microsoft on Tuesday warned that it recently spotted a malicious campaign targeting SQL Servers that leverages a built-in PowerShell binary to achieve persistence on compromised systems.
The intrusions, which leverage brute-force attacks as an initial compromise vector, stand out for their use of the utility « sqlps.exe, » the tech giant said in a series of tweets.
The ultimate goals of the

, ,
https://thehackernews.com/2022/05/hackers-gain-fileless-persistence-on.html

[eBook] Your 90-Day MSSP Plan: How to Improve Margins and Scale-Up Service Delivery

[eBook] Your 90-Day MSSP Plan: How to Improve Margins and Scale-Up Service Delivery,

To cash in on a thriving market, a managed security service provider (MSSP) must navigate unprecedented competition and complex challenges. The good news is that demand is through the roof. 69% of organizations plan to boost spending on cybersecurity in 2022. 
The bad news is that everyone wants a piece of the pie. MSSPs must outshine each other while fending off encroachments by traditional IT

,

To cash in on a thriving market, a managed security service provider (MSSP) must navigate unprecedented competition and complex challenges. The good news is that demand is through the roof. 69% of organizations plan to boost spending on cybersecurity in 2022. 
The bad news is that everyone wants a piece of the pie. MSSPs must outshine each other while fending off encroachments by traditional IT

, ,
https://thehackernews.com/2022/05/ebook-your-90-day-mssp-plan-how-to.html

U.S. Warns Against North Korean Hackers Posing as IT Freelancers

U.S. Warns Against North Korean Hackers Posing as IT Freelancers,

Highly skilled software and mobile app developers from the Democratic People’s Republic of Korea (DPRK) are posing as « non-DPRK nationals » in hopes of landing freelance employment in an attempt to enable the regime’s malicious cyber intrusions.
That’s according to a joint advisory from the U.S. Department of State, the Department of the Treasury, and the Federal Bureau of Investigation (FBI)

,

Highly skilled software and mobile app developers from the Democratic People’s Republic of Korea (DPRK) are posing as « non-DPRK nationals » in hopes of landing freelance employment in an attempt to enable the regime’s malicious cyber intrusions.
That’s according to a joint advisory from the U.S. Department of State, the Department of the Treasury, and the Federal Bureau of Investigation (FBI)

, ,
https://thehackernews.com/2022/05/us-warns-against-north-korean-hackers.html

Microsoft Warns of « Cryware » Info-Stealing Malware Targeting Crypto Wallets

Microsoft Warns of « Cryware » Info-Stealing Malware Targeting Crypto Wallets

,

Microsoft is warning of an emerging threat targeting internet-connected cryptocurrency wallets, signaling a departure in the use of digital coins in cyberattacks.
The tech giant dubbed the new threat « cryware, » with the attacks resulting in the irreversible theft of virtual currencies by means of fraudulent transfers to an adversary-controlled wallet.
« Cryware are information stealers that

,

Microsoft is warning of an emerging threat targeting internet-connected cryptocurrency wallets, signaling a departure in the use of digital coins in cyberattacks.
The tech giant dubbed the new threat « cryware, » with the attacks resulting in the irreversible theft of virtual currencies by means of fraudulent transfers to an adversary-controlled wallet.
« Cryware are information stealers that

, ,
https://thehackernews.com/2022/05/microsoft-warns-of-cryware-info.html

Russian Conti Ransomware Gang Threatens to Overthrow New Costa Rican Government

Russian Conti Ransomware Gang Threatens to Overthrow New Costa Rican Government,

The notorious Conti ransomware gang, which last month staged an attack on Costa Rican administrative systems, has threatened to « overthrow » the new government of the country.
« We are determined to overthrow the government by means of a cyber attack, we have already shown you all the strength and power, » the group said on its official website. « We have our insiders in your government. We are also

,

The notorious Conti ransomware gang, which last month staged an attack on Costa Rican administrative systems, has threatened to « overthrow » the new government of the country.
« We are determined to overthrow the government by means of a cyber attack, we have already shown you all the strength and power, » the group said on its official website. « We have our insiders in your government. We are also

, ,
https://thehackernews.com/2022/05/russian-conti-ransomware-gang-threatens.html

Des chercheurs ont développé un malware pour attaquer votre iPhone même quand il est éteint

Des chercheurs ont développé un malware pour attaquer votre iPhone même quand il est éteint,

Des universitaires allemands ont été, sans doute les premiers, à démontrer que les iPhone les plus récents peuvent être attaqués quand ils sont éteints grâce à la fonction qui maintient leurs modules de communication sans-fil actifs. Une nouvelle surface d’attaque potentiellement dangereuse.

,

Des universitaires allemands ont été, sans doute les premiers, à démontrer que les iPhone les plus récents peuvent être attaqués quand ils sont éteints grâce à la fonction qui maintient leurs modules de communication sans-fil actifs. Une nouvelle surface d’attaque potentiellement dangereuse.

, ,
https://www.01net.com/actualites/des-chercheurs-ont-developpe-un-malware-pour-attaquer-votre-iphone-meme-quand-il-est-eteint-2056273.html

UpdateAgent Returns with New macOS Malware Dropper Written in Swift

UpdateAgent Returns with New macOS Malware Dropper Written in Swift,

A new variant of the macOS malware tracked as UpdateAgent has been spotted in the wild, indicating ongoing attempts on the part of its authors to upgrade its functionalities.
« Perhaps one of the most identifiable features of the malware is that it relies on the AWS infrastructure to host its various payloads and perform its infection status updates to the server, » researchers from Jamf Threat

,

A new variant of the macOS malware tracked as UpdateAgent has been spotted in the wild, indicating ongoing attempts on the part of its authors to upgrade its functionalities.
« Perhaps one of the most identifiable features of the malware is that it relies on the AWS infrastructure to host its various payloads and perform its infection status updates to the server, » researchers from Jamf Threat

, ,
https://thehackernews.com/2022/05/updateagent-returns-with-new-macos.html

Are You Investing in Securing Your Data in the Cloud?

Are You Investing in Securing Your Data in the Cloud?,

Traditional businesses migrating to the cloud need robust information security mechanisms. Gartner predicts that more than 95% of new digital workloads will continue to be deployed on cloud-native platforms by 2025.
Robust cloud data security is imperative for businesses adopting rapid digital transformation to the cloud. While a traditional hosting model could be considered more secure, not all

,

Traditional businesses migrating to the cloud need robust information security mechanisms. Gartner predicts that more than 95% of new digital workloads will continue to be deployed on cloud-native platforms by 2025.
Robust cloud data security is imperative for businesses adopting rapid digital transformation to the cloud. While a traditional hosting model could be considered more secure, not all

, ,
https://thehackernews.com/2022/05/are-you-investing-in-securing-your-data.html

U.S. Charges Venezuelan Doctor for Using and Selling Thanos Ransomware

U.S. Charges Venezuelan Doctor for Using and Selling Thanos Ransomware,

The U.S. Justice Department on Monday accused a 55-year-old cardiologist from Venezuela of being the mastermind behind Thanos ransomware, charging him with the use and sale of the malicious tool and entering into profit sharing arrangements.
Moises Luis Zagala Gonzalez, also known by the monikers Nosophoros, Aesculapius, and Nebuchadnezzar, is alleged to have both developed and marketed the

,

The U.S. Justice Department on Monday accused a 55-year-old cardiologist from Venezuela of being the mastermind behind Thanos ransomware, charging him with the use and sale of the malicious tool and entering into profit sharing arrangements.
Moises Luis Zagala Gonzalez, also known by the monikers Nosophoros, Aesculapius, and Nebuchadnezzar, is alleged to have both developed and marketed the

, ,
https://thehackernews.com/2022/05/us-charges-venezuelan-doctor-for-using.html