Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks

Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks,

A Brazilian threat actor is targeting more than 30 Portuguese financial institutions with information-stealing malware as part of a long-running campaign that commenced in 2021.
« The attackers can steal credentials and exfiltrate users’ data and personal information, which can be leveraged for malicious activities beyond financial gain, » SentinelOne researchers Aleksandar Milenkoski and Tom

,

A Brazilian threat actor is targeting more than 30 Portuguese financial institutions with information-stealing malware as part of a long-running campaign that commenced in 2021.
« The attackers can steal credentials and exfiltrate users’ data and personal information, which can be leveraged for malicious activities beyond financial gain, » SentinelOne researchers Aleksandar Milenkoski and Tom

, ,
https://thehackernews.com/2023/05/alert-brazilian-hackers-targeting-users.html

Des hackers chinois ont pénétré des infrastructures critiques des États-Unis… depuis 2021

Des hackers chinois ont pénétré des infrastructures critiques des États-Unis… depuis 2021,

hackers chinois usa espionnage

Les États-Unis accusent la Chine d’avoir mené une vaste cyberattaque contre ses infrastructures. Depuis deux ans, des hackers chinois ont infiltré différents secteurs, dont des bases militaires stratégiques…

,

hackers chinois usa espionnage

Les États-Unis accusent la Chine d’avoir mené une vaste cyberattaque contre ses infrastructures. Depuis deux ans, des hackers chinois ont infiltré différents secteurs, dont des bases militaires stratégiques…

, ,
https://www.01net.com/actualites/hackers-chinois-espionnent-etats-unis-depuis-2021.html

China’s Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected

China’s Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected

,

A stealthy China-based group managed to establish a persistent foothold into critical infrastructure organizations in the U.S. and Guam without being detected, Microsoft and the « Five Eyes » nations said on Wednesday.
The tech giant’s threat intelligence team is tracking the activity, which includes post-compromise credential access and network system discovery, under the name Volt Typhoon.
The

,

A stealthy China-based group managed to establish a persistent foothold into critical infrastructure organizations in the U.S. and Guam without being detected, Microsoft and the « Five Eyes » nations said on Wednesday.
The tech giant’s threat intelligence team is tracking the activity, which includes post-compromise credential access and network system discovery, under the name Volt Typhoon.
The

, ,
https://thehackernews.com/2023/05/chinas-stealthy-hackers-infiltrate-us.html

Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware

Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware,

The Iranian threat actor known as Agrius is leveraging a new ransomware strain called Moneybird in its attacks targeting Israeli organizations.
Agrius, also known as Pink Sandstorm (formerly Americium), has a track record of staging destructive data-wiping attacks aimed at Israel under the guise of ransomware infections.
Microsoft has attributed the threat actor to Iran’s Ministry of

,

The Iranian threat actor known as Agrius is leveraging a new ransomware strain called Moneybird in its attacks targeting Israeli organizations.
Agrius, also known as Pink Sandstorm (formerly Americium), has a track record of staging destructive data-wiping attacks aimed at Israel under the guise of ransomware infections.
Microsoft has attributed the threat actor to Iran’s Ministry of

, ,
https://thehackernews.com/2023/05/iranian-agrius-hackers-targeting.html

GUAC 0.1 Beta: Google’s Breakthrough Framework for Secure Software Supply Chains

GUAC 0.1 Beta: Google’s Breakthrough Framework for Secure Software Supply Chains

,

Google on Wednesday announced the 0.1 Beta version of GUAC (short for Graph for Understanding Artifact Composition) for organizations to secure their software supply chains.
To that end, the search giant is making available the open source framework as an API for developers to integrate their own tools and policy engines.
GUAC aims to aggregate software security metadata from different sources

,

Google on Wednesday announced the 0.1 Beta version of GUAC (short for Graph for Understanding Artifact Composition) for organizations to secure their software supply chains.
To that end, the search giant is making available the open source framework as an API for developers to integrate their own tools and policy engines.
GUAC aims to aggregate software security metadata from different sources

, ,
https://thehackernews.com/2023/05/guac-01-beta-googles-breakthrough.html

Quand l’IA sert à piéger des mineurs et créer des images pédopornographiques

Quand l’IA sert à piéger des mineurs et créer des images pédopornographiques,

enfant ecran

Les prédateurs sexuels exploitent les technologies d’IA générative pour partager sur des forums de fausses vidéos de violences sexuelles commises sur des enfants. Ils échangent aussi des astuces pour contourner les mesures de sécurité des IA, ou pour mieux piéger leurs victimes. Pour l’instant, il n’existe que peu de garde-fous pour limiter ce type de pratiques.

,

enfant ecran

Les prédateurs sexuels exploitent les technologies d’IA générative pour partager sur des forums de fausses vidéos de violences sexuelles commises sur des enfants. Ils échangent aussi des astuces pour contourner les mesures de sécurité des IA, ou pour mieux piéger leurs victimes. Pour l’instant, il n’existe que peu de garde-fous pour limiter ce type de pratiques.

, ,
https://www.01net.com/actualites/quand-lia-sert-a-pieger-des-mineurs-et-creer-des-images-pedopornographiques.html

Iranian Tortoiseshell Hackers Targeting Israeli Logistics Industry

Iranian Tortoiseshell Hackers Targeting Israeli Logistics Industry,

At least eight websites associated with shipping, logistics, and financial services companies in Israel were targeted as part of a watering hole attack.
Tel Aviv-based cybersecurity company ClearSky attributed the attacks with low confidence to an Iranian threat actor tracked as Tortoiseshell, which is also called Crimson Sandstorm (previously Curium), Imperial Kitten, and TA456.
« The infected

,

At least eight websites associated with shipping, logistics, and financial services companies in Israel were targeted as part of a watering hole attack.
Tel Aviv-based cybersecurity company ClearSky attributed the attacks with low confidence to an Iranian threat actor tracked as Tortoiseshell, which is also called Crimson Sandstorm (previously Curium), Imperial Kitten, and TA456.
« The infected

, ,
https://thehackernews.com/2023/05/iranian-tortoiseshell-hackers-targeting.html

What to Look for When Selecting a Static Application Security Testing (SAST) Solution

What to Look for When Selecting a Static Application Security Testing (SAST) Solution,

If you’re involved in securing the applications your organization develops, there is no question that Static Application Security Testing (SAST) solutions are an important part of a comprehensive application security strategy. SAST secures software, supports business more securely, cuts down on costs, reduces risk, and speeds time to development, delivery, and deployment of mission-critical

,

If you’re involved in securing the applications your organization develops, there is no question that Static Application Security Testing (SAST) solutions are an important part of a comprehensive application security strategy. SAST secures software, supports business more securely, cuts down on costs, reduces risk, and speeds time to development, delivery, and deployment of mission-critical

, ,
https://thehackernews.com/2023/05/what-to-look-for-when-selecting-static.html

Data Stealing Malware Discovered in Popular Android Screen Recorder App

Data Stealing Malware Discovered in Popular Android Screen Recorder App,

Google has removed a screen recording app named « iRecorder – Screen Recorder » from the Play Store after it was found to sneak in information stealing capabilities nearly a year after the app was published as an innocuous app.
The app (APK package name « com.tsoft.app.iscreenrecorder »), which accrued over 50,000 installations, was first uploaded on September 19, 2021. The malicious functionality

,

Google has removed a screen recording app named « iRecorder – Screen Recorder » from the Play Store after it was found to sneak in information stealing capabilities nearly a year after the app was published as an innocuous app.
The app (APK package name « com.tsoft.app.iscreenrecorder »), which accrued over 50,000 installations, was first uploaded on September 19, 2021. The malicious functionality

, ,
https://thehackernews.com/2023/05/data-stealing-malware-discovered-in.html

Legion Malware Upgraded to Target SSH Servers and AWS Credentials

Legion Malware Upgraded to Target SSH Servers and AWS Credentials,

An updated version of the commodity malware called Legion comes with expanded features to compromise SSH servers and Amazon Web Services (AWS) credentials associated with DynamoDB and CloudWatch.
« This recent update demonstrates a widening of scope, with new capabilities such the ability to compromise SSH servers and retrieve additional AWS-specific credentials from Laravel web applications, »

,

An updated version of the commodity malware called Legion comes with expanded features to compromise SSH servers and Amazon Web Services (AWS) credentials associated with DynamoDB and CloudWatch.
« This recent update demonstrates a widening of scope, with new capabilities such the ability to compromise SSH servers and retrieve additional AWS-specific credentials from Laravel web applications, »

, ,
https://thehackernews.com/2023/05/legion-malware-upgraded-to-target-ssh.html