BankInfoSecurity reports: An apparent Chinese cyberespionage operation lurked inside the network of an Asian telecom for four years, camouflaging its presence through nested encryption and lightweight web shells. Incident response firm Sygnia has uncovered the operation, dubbing the threat actor “Weaver Ant.” It exhibits several characteristics of a Chinese nation-state threat actor, including a wide reliance on […]
The Wall Street Journal reports: The Trump administration wants state and local governments to play a bigger role in protecting water utilities, ports and other critical infrastructure from cyberattacks. In an executive order signed Tuesday, President Trump directed White House senior security advisers to draw up a national resilience plan to protect critical infrastructure that […]
SecurityWeek reports that Dragos has published an interesting case study about an attack by the Chinese threat actors known as Volt Typhoon on the electric grid. The target was Littleton Electric Light and Water Departments (LELWD), a small public power utility in Massachusetts that serves Littleton and Boxborough. The utility had been in the process […]
TechCrunch reports that the engineering giant and government contractor was impacted significantly for six weeks following a ransomware attack in November: U.S. engineering firm ENGlobal has confirmed that hackers accessed “sensitive personal information” from its systems during a November 2024 cyberattack. ENGlobal, which provides engineering and automation services to the federal government and critical infrastructure organizations, […]
The Associated Press reports: Japan on Wednesday linked more than 200 cyberattacks over the past five years targeting the country’s national security and high technology data to a Chinese hacking group, MirrorFace, detailing their tactics and calling on government agencies and businesses to reinforce preventive measures. The National Police Agency said its analysis on the […]
The Record reports: None of the water or wastewater facilities run by the American Water Works company were affected by a cyberattack that began last week, according to a statement released on Monday. The company, which supplies water to millions of Americans, filed documents with the Securities and Exchange Commission (SEC) on Monday notifying the public of […]
KWCH in Kansas reports what sounds like a ransomware attack: The City of Arkansas City maintains that drinking water is safe in the city after a cyberattack on Sunday. Shana Adkisson, communications director with the City of Arkansas City, said around 5:30 a.m. on Sunday, an employee at the water treatment facility noticed that a […]
Unknown threat actors have been putting Americans’ lives in danger this week. First there was a ransomware attack on OneBlood, a non-profit blood donation center that supplies blood to hospitals throughout southeastern US. Then there was a disruptive attack on the 911 dispatch system for central Texas. Those responsible for the two attacks have not […]
The Record reports: Sen. Charles Grassley (R-IA) on Wednesday sent Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly a stern letter seeking documentation and answers relating to a January hack of the agency’s Chemical Security Assessment Tool (CSAT) along with the breach of a second sensitive system. Grassley noted that the cyberattack led to “malicious activity” […]
Chinese hackers are increasingly deploying ransomware – researchers
Researchers at Sentinel Labs and Recorded Future report that Chinese-linked cyberespionage campaigns are increasingly deploying ransomware. CyberScoop reports that their research suggests that ransomware is reportedly used in the final stage of cyberespionage operations to either make money, distract adversaries, or make it more difficult to attribute their work: The report that Chinese hackers are […]