U.S. Treasury Department Sanctions Russia-based Hydra Darknet Marketplace

U.S. Treasury Department Sanctions Russia-based Hydra Darknet Marketplace,

The U.S. Treasury Department on Tuesday sanctioned Hydra, the same day German law enforcement authorities disrupted the world’s largest and longest-running dark web marketplace following a coordinated operation in partnership with U.S. officials.
The sanctions are part of an « international effort to disrupt proliferation of malicious cybercrime services, dangerous drugs, and other illegal

,

The U.S. Treasury Department on Tuesday sanctioned Hydra, the same day German law enforcement authorities disrupted the world’s largest and longest-running dark web marketplace following a coordinated operation in partnership with U.S. officials.
The sanctions are part of an « international effort to disrupt proliferation of malicious cybercrime services, dangerous drugs, and other illegal

, ,
https://thehackernews.com/2022/04/us-treasury-department-sanctions-russia.html

FIN7 Hackers Leveraging Password Reuse and Software Supply Chain Attacks

FIN7 Hackers Leveraging Password Reuse and Software Supply Chain Attacks,

The notorious cybercrime group known as FIN7 has diversified its initial access vectors to incorporate software supply chain compromise and the use of stolen credentials, new research has revealed.
« Data theft extortion or ransomware deployment following FIN7-attributed activity at multiple organizations, as well as technical overlaps, suggests that FIN7 actors have been associated with various

,

The notorious cybercrime group known as FIN7 has diversified its initial access vectors to incorporate software supply chain compromise and the use of stolen credentials, new research has revealed.
« Data theft extortion or ransomware deployment following FIN7-attributed activity at multiple organizations, as well as technical overlaps, suggests that FIN7 actors have been associated with various

, ,
https://thehackernews.com/2022/04/fin7-hackers-leveraging-password-reuse.html

Battling Cybersecurity Risk: How to Start Somewhere, Right Now

Battling Cybersecurity Risk: How to Start Somewhere, Right Now,

Between a series of recent high-profile cybersecurity incidents and the heightened geopolitical tensions, there’s rarely been a more dangerous cybersecurity environment. It’s a danger that affects every organization – automated attack campaigns don’t discriminate between targets.
The situation is driven in large part due to a relentless rise in vulnerabilities, with tens of thousands of

,

Between a series of recent high-profile cybersecurity incidents and the heightened geopolitical tensions, there’s rarely been a more dangerous cybersecurity environment. It’s a danger that affects every organization – automated attack campaigns don’t discriminate between targets.
The situation is driven in large part due to a relentless rise in vulnerabilities, with tens of thousands of

, ,
https://thehackernews.com/2022/04/battling-cybersecurity-risk-how-to.html

Germany Shuts Down Russian Hydra DarkNet Market; Seize $25 Million in Bitcoin

Germany Shuts Down Russian Hydra DarkNet Market; Seize $25 Million in Bitcoin,

Germany’s Federal Criminal Police Office, the Bundeskriminalamt (BKA), on Tuesday announced the official takedown of Hydra, the world’s largest illegal dark web marketplace.
« [543] Bitcoins amounting to currently the equivalent of approximately €23 million were seized, which are attributed to the marketplace, » the BKA said in a press release.
<!–adsense–>
The agency attributed the shutdown of

,

Germany’s Federal Criminal Police Office, the Bundeskriminalamt (BKA), on Tuesday announced the official takedown of Hydra, the world’s largest illegal dark web marketplace.
« [543] Bitcoins amounting to currently the equivalent of approximately €23 million were seized, which are attributed to the marketplace, » the BKA said in a press release.
<!–adsense–>
The agency attributed the shutdown of

, ,
https://thehackernews.com/2022/04/germany-shuts-down-russian-hydra.html

Researchers Trace Widespread Espionage Attacks Back to Chinese ‘Cicada’ Hackers

Researchers Trace Widespread Espionage Attacks Back to Chinese ‘Cicada’ Hackers

,

A Chinese state-backed advanced persistent threat (APT) group known for singling out Japanese entities has been attributed to a new long-running espionage campaign targeting new geographies, suggesting a « widening » of the threat actor’s targeting.
The widespread intrusions, which are believed to have commenced at the earliest in mid-2021 and continued as recently as February 2022, have been tied

,

A Chinese state-backed advanced persistent threat (APT) group known for singling out Japanese entities has been attributed to a new long-running espionage campaign targeting new geographies, suggesting a « widening » of the threat actor’s targeting.
The widespread intrusions, which are believed to have commenced at the earliest in mid-2021 and continued as recently as February 2022, have been tied

, ,
https://thehackernews.com/2022/04/researchers-trace-widespread-espionage.html

Is API Security on Your Radar?

Is API Security on Your Radar?,

With the growth in digital transformation, the API management market is set to grow by more than 30%  by the year 2025 as more businesses build web APIs and consumers grow to rely on them for everything from mobile apps to customized digital services.
As part of strategic business planning, an API helps generate revenue by allowing customers access to the functionality of a website or computer

,

With the growth in digital transformation, the API management market is set to grow by more than 30%  by the year 2025 as more businesses build web APIs and consumers grow to rely on them for everything from mobile apps to customized digital services.
As part of strategic business planning, an API helps generate revenue by allowing customers access to the functionality of a website or computer

, ,
https://thehackernews.com/2022/04/is-api-security-on-your-radar.html

Hackers Breach Mailchimp Email Marketing Firm to Launch Crypto Phishing Scams

Hackers Breach Mailchimp Email Marketing Firm to Launch Crypto Phishing Scams,

Email marketing service Mailchimp on Monday revealed a data breach that resulted in the compromise of an internal tool to gain unauthorized access to customer accounts and stage phishing attacks. 
The development was first reported by Bleeping Computer.
The company, which was acquired by financial software firm Intuit in September 2021, told the publication that it became aware of the incident

,

Email marketing service Mailchimp on Monday revealed a data breach that resulted in the compromise of an internal tool to gain unauthorized access to customer accounts and stage phishing attacks. 
The development was first reported by Bleeping Computer.
The company, which was acquired by financial software firm Intuit in September 2021, told the publication that it became aware of the incident

, ,
https://thehackernews.com/2022/04/hackers-breach-mailchimp-email.html

CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability

CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added the recently disclosed remote code execution (RCE) vulnerability affecting the Spring Framework, to its Known Exploited Vulnerabilities Catalog based on « evidence of active exploitation. »
The critical severity flaw, assigned the identifier CVE-2022-22965 (CVSS score: 9.8) and dubbed « Spring4Shell », impacts Spring

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added the recently disclosed remote code execution (RCE) vulnerability affecting the Spring Framework, to its Known Exploited Vulnerabilities Catalog based on « evidence of active exploitation. »
The critical severity flaw, assigned the identifier CVE-2022-22965 (CVSS score: 9.8) and dubbed « Spring4Shell », impacts Spring

, ,
https://thehackernews.com/2022/04/cisa-warns-of-active-exploitation-of.html

Researchers Uncover New Android Spyware With C2 Server Linked to Turla Hackers

Researchers Uncover New Android Spyware With C2 Server Linked to Turla Hackers,

An Android spyware application has been spotted masquerading as a « Process Manager » service to stealthily siphon sensitive information stored in the infected devices.
Interestingly, the app — that has the package name « com.remote.app » — establishes contact with a remote command-and-control server, 82.146.35[.]240, which has been previously identified as infrastructure belonging to the

,

An Android spyware application has been spotted masquerading as a « Process Manager » service to stealthily siphon sensitive information stored in the infected devices.
Interestingly, the app — that has the package name « com.remote.app » — establishes contact with a remote command-and-control server, 82.146.35[.]240, which has been previously identified as infrastructure belonging to the

, ,
https://thehackernews.com/2022/04/researchers-uncover-new-android-spyware.html

Multiple Hacker Groups Capitalizing on Ukraine Conflict for Distributing Malware

Multiple Hacker Groups Capitalizing on Ukraine Conflict for Distributing Malware,

At least three different advanced persistent threat (APT) groups from across the world have launched spear-phishing campaigns in mid-March 2022 using the ongoing Russo-Ukrainian war as a lure to distribute malware and steal sensitive information.
The campaigns, undertaken by El Machete, Lyceum, and SideWinder, have targeted a variety of sectors, including energy, financial, and governmental

,

At least three different advanced persistent threat (APT) groups from across the world have launched spear-phishing campaigns in mid-March 2022 using the ongoing Russo-Ukrainian war as a lure to distribute malware and steal sensitive information.
The campaigns, undertaken by El Machete, Lyceum, and SideWinder, have targeted a variety of sectors, including energy, financial, and governmental

, ,
https://thehackernews.com/2022/04/multiple-hacker-groups-capitalizing-on.html