The Times of India reports: Google’s Threat Intelligence Group (GTIG) has issued a warning about a Russia-based hacking group, known as COLDRIVER. The Alphabet-owned company claims that this hacking group is using a newly identified malware called LOSTKEYS to steal data. The tech giant claims that this malware, which was tracked in multiple attacks this […]
The conflict between Pakistan and India escalated sharply over the past week. Pakistan has now launched strikes against Indian military bases, claiming retaliation for strikes by India. Strikes in cyberspace also continue. Radio Pakistan reports: According to details, the official website of the BJP has been hacked. Amongst the hacked websites are the Crime Research Investigation Agency, Mahanagar […]
Ars Technica reports on another concerning security issue involving DOGE: Login credentials belonging to an employee at both the Cybersecurity and Infrastructure Security Agency and the Department of Government Efficiency have appeared in multiple public leaks from info-stealer malware, a strong indication that devices belonging to him have been hacked in recent years. Kyle Schutt […]
As some districts learn that the stolen data is still in the hands of criminals, it is not yet clear whether it is the same threat actor or not, although most people are betting it is the same criminal who had promised to delete all the data. When hackers managed to acquire tens of millions […]
The Law Society Gazette in the UK reports: The Ministry of Justice has revealed it is working with the National Crime Agency and National Cyber Security Centre to investigate a data breach at the Legal Aid Agency. According to Sky News, the LAA told law firms in a letter last week that it identified a ‘security incident’. […]
404 Media reports: Hackers have targeted GlobalX Air, one of the main airlines the Trump administration is using as part of its deportation efforts, and stolen what they say are flight records and passenger manifests of all of its flights, including those for deportation, 404 Media has learned. The data, which the hackers contacted 404 […]
The Independent reports: Hackers who targeted Marks & Spencer and the Co-op tricked IT workers to gain access into their companies systems, according to a report. The “social engineering” attack on the Co-op allowed cybercriminals to reset an employee’s password before breaching the network, with a similar tactic used against M&S, sources revealed to BleepingComputer website. Hundreds of agency workers […]
Bleeping Computer reports: The data-theft extortion group known as Luna Moth, aka Silent Ransom Group, has ramped up callback phishing campaigns in attacks on legal and financial institutions in the United States. According to EclecticIQ researcher Arda Büyükkaya, the ultimate goal of these attacks is data theft and extortion. Luna Moth, known internally as Silent […]
404 Media reports: A hacker has breached and stolen customer data from TeleMessage, an obscure Israeli company that sells modified versions of Signal and other messaging apps to the U.S. government to archive messages, 404 Media has learned. The data stolen by the hacker contains the contents of some direct messages and group chats sent using its […]
Defending Against UNC3944/Scattered Spider: Cybercrime Hardening Guidance from the Frontlines – Mandiant
Background UNC3944, which overlaps with public reporting on Scattered Spider, is a financially-motivated threat actor characterized by its persistent use of social engineering and brazen communications with victims. In early operations, UNC3944 largely targeted telecommunications-related organizations to support SIM swap operations. However, after shifting to ransomware and data theft extortion in early 2023, they impacted […]