Category cyber-attacks

First-Ever Malware Discovered Utilizing Intel AMT Tool to Evade Firewalls and Steal Data

On the cybersecurity landscape, exploiting visible networks often falls to the realm of well-resourced, state-sponsored hacking groups. While infiltrating corporate systems may not be particularly challenging for these actors, ensuring the longevity of their access and maintaining undetectable communication channels poses a significant hurdle. A cyber-espionage group known as **Platinum**…

Read MoreFirst-Ever Malware Discovered Utilizing Intel AMT Tool to Evade Firewalls and Steal Data

New Fileless Ransomware with Code Injection Capabilities Discovered in the Wild

Emerging Threat: Fileless Ransomware “Sorebrect” Targets Enterprises Cybercriminals are evolving, leveraging increasingly sophisticated tactics to execute attacks. A recent report highlights the emergence of a fileless ransomware strain known as “Sorebrect.” Unlike traditional ransomware, which often relies on files to infect systems, Sorebrect injects malicious code directly into legitimate processes,…

Read MoreNew Fileless Ransomware with Code Injection Capabilities Discovered in the Wild

UK Parliament Targeted by Cyberattack, Affecting Up to 90 MPs’ Email Accounts

Cyber Attack Targets UK Parliament Email System In a significant cybersecurity incident, the email system of the UK Houses of Parliament was breached on Friday morning, affecting at least 90 accounts belonging to Members of Parliament (MPs), their staff, and other parliamentary personnel. Initial investigations suggest that many of these…

Read MoreUK Parliament Targeted by Cyberattack, Affecting Up to 90 MPs’ Email Accounts

North Korean Lazarus Group Expands Global Attacks with Medusa Ransomware

Recent developments reveal that North Korean cyber operations are making significant inroads into the commercial ransomware landscape, indicating a heightened focus on obtaining direct financial rewards. The Symantec and Carbon Black Threat Hunter Team have reported activities by the notorious Lazarus Group, a state-sponsored actor, utilizing Medusa ransomware against targets…

Read MoreNorth Korean Lazarus Group Expands Global Attacks with Medusa Ransomware

Petya Ransomware’s Global Surge Mirrors WannaCry Outbreak

June 27, 2017

Warning: A new wave of ransomware is here, reminiscent of WannaCry! The notorious WannaCry ransomware is far from over as another massive attack is wreaking havoc across the globe, disrupting operations in corporations, power supplies, and banks in nations including Russia, Ukraine, Spain, France, the UK, India, and various parts of Europe, demanding $300 in Bitcoin. Reports indicate that a new variant of Petya ransomware, also referred to as Petwrap, is rapidly proliferating, exploiting the same Windows SMBv1 vulnerability that WannaCry used to compromise 300,000 systems in just 72 hours last month. Alarmingly, many victims have reported that even their patched systems have fallen prey to Petya ransomware. “Petya utilizes the NSA EternalBlue exploit and also propagates within internal networks via WMIC and PSExec, which is why even patched systems can be affected,” confirms Mikko Hyppönen, Chief Research Officer at F-Secure. Petya is proving to be a serious threat…

Petya Ransomware Surge Mimics WannaCry’s Global Impact June 27, 2017 In a concerning echo of past incidents, the Petya ransomware has initiated a widespread assault on businesses globally, reminiscent of the infamous WannaCry outbreak. While WannaCry’s effects are still being assessed, Petya has swiftly gained momentum, disrupting operations in various…

Read More

Petya Ransomware’s Global Surge Mirrors WannaCry Outbreak

June 27, 2017

Warning: A new wave of ransomware is here, reminiscent of WannaCry! The notorious WannaCry ransomware is far from over as another massive attack is wreaking havoc across the globe, disrupting operations in corporations, power supplies, and banks in nations including Russia, Ukraine, Spain, France, the UK, India, and various parts of Europe, demanding $300 in Bitcoin. Reports indicate that a new variant of Petya ransomware, also referred to as Petwrap, is rapidly proliferating, exploiting the same Windows SMBv1 vulnerability that WannaCry used to compromise 300,000 systems in just 72 hours last month. Alarmingly, many victims have reported that even their patched systems have fallen prey to Petya ransomware. “Petya utilizes the NSA EternalBlue exploit and also propagates within internal networks via WMIC and PSExec, which is why even patched systems can be affected,” confirms Mikko Hyppönen, Chief Research Officer at F-Secure. Petya is proving to be a serious threat…