Conti Ransomware Gang’s Internal Chats Leaked Online After Siding With Russia

Blog WriterThe Hacker News - Original news source is thehackernews.com

Days after the Conti ransomware group broadcasted a pro-Russian message pledging its allegiance to Vladimir Putin’s ongoing invasion of Ukraine, an anonymous security researcher using the Twitter handle @ContiLeaks has leaked the syndicate’s internal chats. The file dump, published by …

100 Million Samsung Galaxy Phones Affected with Flawed Hardware Encryption Feature

Blog WriterThe Hacker News - Original news source is thehackernews.com

A group of academics from Tel Aviv University have disclosed details of now-patched “severe” design flaws affecting about 100 million Android-based Samsung smartphones that could have resulted in the extraction of secret cryptographic keys. The shortcomings are the result of …

CISA adds recently disclosed Zimbra bug to its Exploited Vulnerabilities Catalog

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities Catalog to include a recently disclosed zero-day flaw in the Zimbra email platform citing evidence of active exploitation in the wild. Tracked as CVE-2022-24682 (CVSS score: 6.1), the issue concerns a …

Experts Create Apple AirTag Clone That Can Bypass Anti-Tracking Measures

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have managed to build a clone of Apple Airtag that circumvents the anti-stalking protection technology built into its Find My Bluetooth-based tracking protocol. The result is a stealth AirTag that can successfully track an iPhone user for over …

Reborn of Emotet: New Features of the Botnet and How to Detect it

Blog WriterThe Hacker News - Original news source is thehackernews.com

One of the most dangerous and infamous threats is back again. In January 2021, global officials took down the botnet. Law enforcement sent a destructive update to the Emotet’s executables. And it looked like the end of the trojan’s story.  …

CISA Warns of High-Severity Flaws in Schneider and GE Digital’s SCADA Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) last week published an industrial control system (ICS) advisory related to multiple vulnerabilities impacting Schneider Electric’s Easergy medium voltage protection relays. “Successful exploitation of these vulnerabilities may disclose device credentials, cause a denial-of-service condition, …

Iranian Hackers Using New Spying Malware That Abuses Telegram Messenger API

Blog WriterThe Hacker News - Original news source is thehackernews.com

An Iranian geopolitical nexus threat actor has been uncovered deploying two new targeted malware that come with “simple” backdoor functionalities as part of an intrusion against an unnamed Middle East government entity in November 2021. Cybersecurity company Mandiant attributed the …

Social Media Hijacking Malware Spreading Through Gaming Apps on Microsoft Store

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new malware capable of controlling social media accounts is being distributed through Microsoft’s official app store in the form of trojanized gaming apps, infecting more than 5,000 Windows machines in Sweden, Bulgaria, Russia, Bermuda, and Spain. Israeli cybersecurity company …

Putin Warns Russian Critical Infrastructure to Brace for Potential Cyber Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Russian government on Thursday warned of cyber attacks aimed at domestic critical infrastructure operators, as the country’s full-blown invasion of Ukraine enters the second day. In addition to cautioning of the “threat of an increase in the intensity of …

Iran’s MuddyWater Hacker Group Using New Malware in Worldwide Cyber Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity agencies from the U.K. and the U.S. have laid bare a new malware used by the Iranian government-sponsored advanced persistent threat (APT) group in attacks targeting government and commercial networks worldwide. “MuddyWater actors are positioned both to provide stolen …