Infosecurity News
Ransomware Attack Disrupts Operations at US Contractor ENGlobal
ENGlobal has been hit by a ransomware attack, taking its IT systems offline since November 25
Kimsuky Group Adopts New Phishing Tactics to Target Victims
North Korean Kimsuky group has escalated their phishing campaigns, using Russian domains to steal credentials
Police Shut Down Matrix Encrypted Criminal Hub
A law enforcement operation executed by Dutch and French authorities resulted in the main servers used by Matrix being taken down
Security Pros Positive About GenAI in Cyber, Despite Raising Attack Severity
Ivanti research found that security professionals are eight-times more likely to say GenAI is a net positive versus a net negative for cybersecurity
Hydra Market Leader Sentenced to Life by Moscow Court
The “organizer” of notorious dark web drugs marketplace Hydra Market has been handed a life sentence in Russia
Chinese LIDAR Dominance a Cybersecurity Threat, Warns Think Tank
The Foundation for Defense of Democracies has warned that Chinese-made LIDAR sensors could be weaponized for espionage
UK Cyber-Attacks Surge as Threats Hit Harder, Warns NCSC
In 2024, the UK National Cyber Security Centre issued over 500 notifications to UK organizations about cyber incidents – double the number recorded in 2023
France Accuses Azerbaijan of Online Manipulation Campaigns
VIGINUM reveals that Azerbaijan state propaganda is seeking to challenge French sovereignty in French overseas territories
Corrupted Word Files Fuel Sophisticated Phishing Campaign
A new phishing attack uses corrupted Word docs to bypass security, luring victims with fake payroll and HR emails
Crypto.com Launches Massive $2m Bug Bounty Program
Crypto.com has launched a massive $2m bug bounty program on HackerOne, the largest ever offered on the platform, to enhance platform security
SmokeLoader Malware Campaign Targets Companies in Taiwan
SmokeLoader malware identified targeting Taiwanese firms via phishing, exploiting Microsoft Office vulnerabilities
Russia Arrests Prominent Ransomware Operator
Mikhail Matveev, aka WazaWaka, had worked with several ransomware groups, including Babuk, Conti, Darkside, Hive and LockBit
Bologna FC Hit By 200GB Data Theft and Ransom Demand
Bologna FC has revealed a ransomware attack, with data on players, fans and employees thought to have been stolen
Global Police Arrest 5500 in $400m Cyber-Fraud Crackdown
Interpol’s Operation Haechi V has led to the arrest of over 5500 individuals and seizure of $400m obtained via online fraud
INC Ransom Claims Cyber-Attack on UK Children's Hospital
The NHS Trust is investigating the incident with the help of the National Crime Agency
Cyber-Attacks Could Impact Romanian Presidential Race, Officials Claim
Romania’s national security council suggested that Russia is behind these attacks, amid a court order for a recount of votes in the first round of the country’s presidential election
UK Justice System Failing Cybercrime Victims, Cyber Helpline Finds
A report from the charity the Cyber Helpline found that 98% of cyber enabled crimes result in no further action from the police or justice system
Malicious PyPI Package Exposes Crypto Wallets to Infostealer Code
A malicious PyPI package “aiocpa,” that stole crypto wallet data via obfuscated code, has been removed after being reported by Reversing Labs researchers
GodLoader Malware Infects Thousands via Game Development Tools
A new cyber-attack technique uses Godot Engine to deploy undetectable malware via GodLoader, infecting more than 17,000 devices
Malicious Actors Exploit ProjectSend Critical Vulnerability
This vulnerability was patched in May 2024 but was only allocated a CVE in November after evidence of exploitation
