APT – Page 3 – Computer Security Articles

MalwareBytes Security

Immigration organisations targeted by APT group Evilnum

June 30, 2022 admin Advanced Persistent Threat, APT, cybercrime, evilnum, Immigration, Migration, Ukraine, ukranian

Credit to Author: Christopher Boyd| Date: Thu, 30 Jun 2022 14:13:47 +0000

Immigration organisations are being targeted by the APT group Evilnum, using spear phishing to send malicious Word documents.

The post Immigration organisations targeted by APT group Evilnum appeared first on Malwarebytes Labs.

Security Sophos

Sophos uncovers how APT groups carried out highly targeted attack

June 15, 2022 admin APT, ELF, products & services, SophosLabs Uncut, Targeted Attacks, threat research

Credit to Author: Andrew Brandt| Date: Wed, 15 Jun 2022 21:16:52 +0000

Two groups with common task targeted network security devices in two-stage attacks, dropping remote access tools.

MalwareBytes Security

“Multiple adversaries” exploiting Confluence vulnerability, warns Microsoft

June 14, 2022 admin APT, atlassian, confluence, Exploits and vulnerabilities, nation state, ransomware

Credit to Author: Christopher Boyd| Date: Tue, 14 Jun 2022 12:43:08 +0000

Microsoft has warned of APT groups and ransomware authors exploiting the now patched Confluence vulnerability. We take a look at the dangers.

The post “Multiple adversaries” exploiting Confluence vulnerability, warns Microsoft appeared first on Malwarebytes Labs.

Kaspersky Security

WinDealer via man-on-the-side | Kaspersky official blog

June 6, 2022 admin APT, Business, enterprise, man-on-the-side, spyware

Credit to Author: Hugh Aver| Date: Mon, 06 Jun 2022 20:58:17 +0000

The LuoYu APT group distributes and controls the WinDealer malware through a man-on-the-side attack.

MalwareBytes Security

A week in security (May 23 – 29)

May 30, 2022 admin a week in security, Android, APT, awis, chrome, chromeloader, DNS, goodwill, nvidia, ransomware, round up, vulnerabilities, Week in security

Credit to Author: Malwarebytes Labs| Date: Mon, 30 May 2022 12:41:00 +0000

Posts from the last week on Malwarebytes Labs describing all the latest news, exploits, scams, and more.

The post A week in security (May 23 – 29) appeared first on Malwarebytes Labs.

Kaspersky Security

DeFi wallet with Lazarus backdoor | Kaspersky official blog

April 20, 2022 admin APT, backdoors, cryptocurrencies, defi, Lazarus, Threats, trojans

Credit to Author: Julia Glazova| Date: Wed, 20 Apr 2022 11:11:40 +0000

Lazarus is on the hunt for cryptocurrency with the aid of a new backdoor distributed inside a DeFi wallet installer.

MalwareBytes Security

North Korean Lazarus APT group targets blockchain tech companies

April 19, 2022 admin AppleJeus, APT, apt38, BlockChain, crypto, Lazarus, NORTH KOREA, patch management, Social engineering, spearphishing

Credit to Author: Pieter Arntz| Date: Tue, 19 Apr 2022 13:56:55 +0000

The Lazarus Group is targeting companies involved in blockchain technology.

The post North Korean Lazarus APT group targets blockchain tech companies appeared first on Malwarebytes Labs.

Independent Krebs

The Original APT: Advanced Persistent Teenagers

April 6, 2022 admin A Little Sunshine, advanced persistent teenagers, amit yoran, APT, cisa, FBI, lapsus$, microsoft, Ne'er-Do-Well News, nvidia, Okta, Samsung, Tenable, The Coming Storm, twitter hack, vishing, voice phishing, wired

Credit to Author: BrianKrebs| Date: Wed, 06 Apr 2022 17:55:38 +0000

Many organizations are already struggling to combat cybersecurity threats from ransomware purveyors and state-sponsored hacking groups, both of which tend to take days or weeks to pivot from an opportunistic malware infection to a full blown data breach. But few organizations have a playbook for responding to the kinds of virtual “smash and grab” attacks we’ve seen recently from LAPSUS$, a juvenile data extortion group whose short-lived, low-tech and remarkably effective tactics are putting some of the world’s biggest corporations on edge.