New Rust-based Ransomware Family Targets Windows, Linux, and ESXi Systems

New Rust-based Ransomware Family Targets Windows, Linux, and ESXi Systems,

Kaspersky security researchers have disclosed details of a brand-new ransomware family written in Rust, making it the third strain after BlackCat and Hive to use the programming language.
Luna, as it’s called, is « fairly simple » and can run on Windows, Linux, and ESXi systems, with the malware banking on a combination of Curve25519 and AES for encryption.

« Both the Linux and ESXi

,

Kaspersky security researchers have disclosed details of a brand-new ransomware family written in Rust, making it the third strain after BlackCat and Hive to use the programming language.
Luna, as it’s called, is « fairly simple » and can run on Windows, Linux, and ESXi systems, with the malware banking on a combination of Curve25519 and AES for encryption.

« Both the Linux and ESXi

, ,
https://thehackernews.com/2022/07/new-rust-based-ransomware-family.html

This Cloud Botnet Has Hijacked 30,000 Systems to Mine Cryptocurrencies

This Cloud Botnet Has Hijacked 30,000 Systems to Mine Cryptocurrencies,

The 8220 cryptomining group has expanded in size to encompass as many as 30,000 infected hosts, up from 2,000 hosts globally in mid-2021.
« 8220 Gang is one of the many low-skill crimeware gangs we continually observe infecting cloud hosts and operating a botnet and cryptocurrency miners through known vulnerabilities and remote access brute forcing infection vectors, » Tom Hegel of SentinelOne 

,

The 8220 cryptomining group has expanded in size to encompass as many as 30,000 infected hosts, up from 2,000 hosts globally in mid-2021.
« 8220 Gang is one of the many low-skill crimeware gangs we continually observe infecting cloud hosts and operating a botnet and cryptocurrency miners through known vulnerabilities and remote access brute forcing infection vectors, » Tom Hegel of SentinelOne 

, ,
https://thehackernews.com/2022/07/this-cloud-botnet-has-hijacked-30000.html

Unpatched GPS Tracker Bugs Could Let Attackers Disrupt Vehicles Remotely

Unpatched GPS Tracker Bugs Could Let Attackers Disrupt Vehicles Remotely,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a handful of unpatched security vulnerabilities in MiCODUS MV720 Global Positioning System (GPS) trackers outfitted in over 1.5 million vehicles that could lead to remote disruption of critical operations.
« Successful exploitation of these vulnerabilities may allow a remote actor to exploit access and gain control of

,

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a handful of unpatched security vulnerabilities in MiCODUS MV720 Global Positioning System (GPS) trackers outfitted in over 1.5 million vehicles that could lead to remote disruption of critical operations.
« Successful exploitation of these vulnerabilities may allow a remote actor to exploit access and gain control of

, ,
https://thehackernews.com/2022/07/unpatched-gps-tracker-bugs-could-let.html

Dealing With Alert Overload? There’s a Guide For That

Dealing With Alert Overload? There’s a Guide For That

,

The Great Resignation – or the Great Reshuffle as some are calling it – and the growing skills gap have been dominating headlines lately. But these issues aren’t new to the cybersecurity industry. While many are just now hearing about employee burnout, security teams have faced reality and serious consequences of burnout for years. 
One of the biggest culprits? Alert overload. 
The average

,

The Great Resignation – or the Great Reshuffle as some are calling it – and the growing skills gap have been dominating headlines lately. But these issues aren’t new to the cybersecurity industry. While many are just now hearing about employee burnout, security teams have faced reality and serious consequences of burnout for years. 
One of the biggest culprits? Alert overload. 
The average

, ,
https://thehackernews.com/2022/07/dealing-with-alert-overload-theres.html

Russian Hackers Tricked Ukrainians with Fake « DoS Android Apps to Target Russia »

Russian Hackers Tricked Ukrainians with Fake « DoS Android Apps to Target Russia »

,

Russian threat actors capitalized on the ongoing conflict against Ukraine to distribute Android malware camouflaged as an app for pro-Ukrainian hacktivists to launch distributed denial-of-service (DDoS) attacks against Russian sites.
Google Threat Analysis Group (TAG) attributed the malware to Turla, an advanced persistent threat also known as Krypton, Venomous Bear, Waterbug, and Uroburos, and

,

Russian threat actors capitalized on the ongoing conflict against Ukraine to distribute Android malware camouflaged as an app for pro-Ukrainian hacktivists to launch distributed denial-of-service (DDoS) attacks against Russian sites.
Google Threat Analysis Group (TAG) attributed the malware to Turla, an advanced persistent threat also known as Krypton, Venomous Bear, Waterbug, and Uroburos, and

, ,
https://thehackernews.com/2022/07/russian-hackers-tricked-ukrainians-with.html

Russian Hackers Using DropBox and Google Drive to Drop Malicious Payloads

Russian Hackers Using DropBox and Google Drive to Drop Malicious Payloads,

The Russian state-sponsored hacking collective known as APT29 has been attributed to a new phishing campaign that takes advantage of legitimate cloud services like Google Drive and Dropbox to deliver malicious payloads on compromised systems.
« These campaigns are believed to have targeted several Western diplomatic missions between May and June 2022, » Palo Alto Networks Unit 42 said in a Tuesday

,

The Russian state-sponsored hacking collective known as APT29 has been attributed to a new phishing campaign that takes advantage of legitimate cloud services like Google Drive and Dropbox to deliver malicious payloads on compromised systems.
« These campaigns are believed to have targeted several Western diplomatic missions between May and June 2022, » Palo Alto Networks Unit 42 said in a Tuesday

, ,
https://thehackernews.com/2022/07/russian-hackers-using-dropbox-and.html

Jailbreak : iOS 15, iPadOS 15, et les iPhone 13 sont sur le point de tomber…

Jailbreak : iOS 15, iPadOS 15, et les iPhone 13 sont sur le point de tomber…,

,

Le jailbreak d'iOS 15 permettrait notamment le sideloading...

Alors qu’iOS 16 est en approche, la scène jailbreak vient d’annoncer que les iPhone 13 et les iPad sous iOS et iPadOS 15 seront bientôt « déverrouillables ». Une bonne nouvelle pour les aficionados de cette pratique, mais qui pose toujours des questions de sécurité à court et moyen termes.

L’article Jailbreak : iOS 15, iPadOS 15, et les iPhone 13 sont sur le point de tomber… est à retrouver sur 01net.com.

, ,
https://www.01net.com/actualites/jailbreak-ios-15-ipados-15-et-les-iphone-13-sont-sur-le-point-de-tomber.html

Experts Uncover New CloudMensis Spyware Targeting Apple macOS Users

Experts Uncover New CloudMensis Spyware Targeting Apple macOS Users,

Cybersecurity researchers have taken the wraps off a previously undocumented spyware targeting the Apple macOS operating system.
The malware, codenamed CloudMensis by Slovak cybersecurity firm ESET, is said to exclusively use public cloud storage services such as pCloud, Yandex Disk, and Dropbox for receiving attacker commands and exfiltrating files.
« Its capabilities clearly show that the

,

Cybersecurity researchers have taken the wraps off a previously undocumented spyware targeting the Apple macOS operating system.
The malware, codenamed CloudMensis by Slovak cybersecurity firm ESET, is said to exclusively use public cloud storage services such as pCloud, Yandex Disk, and Dropbox for receiving attacker commands and exfiltrating files.
« Its capabilities clearly show that the

, ,
https://thehackernews.com/2022/07/experts-uncover-new-cloudmensis-spyware.html

Security Experts Warn of Two Primary Client-Side Risks Associated with Data Exfiltration and Loss

Security Experts Warn of Two Primary Client-Side Risks Associated with Data Exfiltration and Loss,

Two client-side risks dominate the problems with data loss and data exfiltration: improperly placed trackers on websites and web applications and malicious client-side code pulled from third-party repositories like NPM. 
Client-side security researchers are finding that improperly placed trackers, while not intentionally malicious, are a growing problem and have clear and significant privacy

,

Two client-side risks dominate the problems with data loss and data exfiltration: improperly placed trackers on websites and web applications and malicious client-side code pulled from third-party repositories like NPM. 
Client-side security researchers are finding that improperly placed trackers, while not intentionally malicious, are a growing problem and have clear and significant privacy

, ,
https://thehackernews.com/2022/07/security-experts-warn-of-two-primary.html

New Air-Gap Attack Uses SATA Cable as an Antenna to Transfer Radio Signals

New Air-Gap Attack Uses SATA Cable as an Antenna to Transfer Radio Signals,

A new method devised to leak information and jump over air-gaps takes advantage of Serial Advanced Technology Attachment (SATA) or Serial ATA cables as a communication medium, adding to a long list of electromagnetic, magnetic, electric, optical, and acoustic methods already demonstrated to plunder data.
« Although air-gap computers have no wireless connectivity, we show that attackers can use

,

A new method devised to leak information and jump over air-gaps takes advantage of Serial Advanced Technology Attachment (SATA) or Serial ATA cables as a communication medium, adding to a long list of electromagnetic, magnetic, electric, optical, and acoustic methods already demonstrated to plunder data.
« Although air-gap computers have no wireless connectivity, we show that attackers can use

, ,
https://thehackernews.com/2022/07/new-air-gap-attack-uses-sata-cable-as.html