Sandworm APT Group Adds New Wiper to Its Hacking Toolkit

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

During the monitored timespan, APT groups aligned with Russia have been observed to be heavily involved in cyber operations aimed at Ukraine.  These operations have included deploying malicious software, such as wipers (which can erase data on a targeted system) …

QNAP NAS Critical Vulnerability Let Attacker Inject Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Updates for QNAP’s network-attached storage (NAS) systems have been released to address a critical security flaw that might allow arbitrary code injection. Customers of QNAP are being advised to update their QTS and QuTS firmware in order to fix a …

Cybercrime Groups Offering Six-Figure Salaries for IT Talents on The Dark Web

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Increasingly, organized crime organizations are operating as businesses rather than criminal organizations, advertising jobs on the dark web with a number of advantages for members. A recent Kaspersky study found that 61% of job ads posted by hacking and APT …

JD Sports Server Hacked – Over 10M Customer’s Information Stolen

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cyber attack that targeted JD Sports Fashion Plc (“JD Sports”) led to unauthorized access to a system that held customer information for some online orders done between November 2018 and October 2020.  The JD, Size?, Millets, Blacks, Scotts, and …

Doctor Paid $60,000 in Bitcoin to Hire Dark Web Hitmen

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A former neonatologist received an 8-year prison sentence and was mandated to pay over $25,000 in compensation, along with a $100,000 fine. Ronald Craig Ilg, age 56, received an 8-year sentence for arranging assaults and kidnappings through hitmen hired on …

New Malware App on Google Play With Over 20 Million Downloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently the cybersecurity experts at Dr. Web antivirus reported that over 20 million devices have recently downloaded a highly successful new category of activity-tracking apps from the Google Play Store. Among the features offered by these applications are pedometers, the …

BIND DNS Software High-Severity Flaws Let Hackers Remotely Trigger DoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Internet Systems Consortium (ISC) released security advisories on January 25, 2023, to address flaws in the DNS software suite BIND.  A denial of service could occur if these vulnerabilities are exploited. The flaws that were resolved have the potential …

PlugX Malware Hides on Removable USB Devices to Infect Windows Machine

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An investigation by cyber security experts at Palo Alto Network’s Unit 42 team recently revealed that a variation of PlugX malware has the ability to conceal harmful files on USB drives and subsequently infect Windows systems upon connection. A new …

New Mimic Ransomware Abuses Windows Search Engine to Look Files for Encryption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new strain of ransomware named Mimic has been uncovered recently by security experts at Trend Micro in June 2022. Mimic takes advantage of the APIs of the ‘Everything’ a file search tool for Windows to search for files to …

Hackers Launching Millions of Attacks to Exploit Critical Realtek SDK Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the latter half of 2022, a significant number of cyber attacks utilizing a remote code execution vulnerability in Realtek Jungle SDK were reported. These attacks, numbering 134 million, aimed to compromise smart devices. The vulnerability in question grants unauthorized …