FireEye – Computer Security Articles

Red Cross Hack Linked to Iranian Influence Operation?

February 16, 2022 admin data breaches, FBI, FireEye, icrc hack, international committee for the red cross, kela, kelvinmiddelkoop@hotmail.com, Ne'er-Do-Well News, RaidForums, ransomware, red cross and red crescent movement, restoring family links, sheriff, threat_actor, unindicted

Credit to Author: BrianKrebs| Date: Wed, 16 Feb 2022 16:44:19 +0000

A network intrusion at the International Committee for the Red Cross (ICRC) in January led to the theft of personal information on more than 500,000 people receiving assistance from the group. KrebsOnSecurity has learned that the email address used by a cybercriminal actor who offered to sell the stolen ICRC data also was used to register multiple domain names the FBI says are tied to a sprawling media influence operation originating from Iran.

Independent Krebs

A Deep Dive on the Recent Widespread DNS Hijacking Attacks

February 18, 2019 admin A Little Sunshine, APNIC, Bill Woodcock, Cisco Talos, Comodo, CrowdStrike, data breaches, DHS, DNSpionage, dnssec, EPP, extensible provisioning protocol, Farsight Security, FireEye, Frobbit, ICANN, John Crain, Key Systems, Lars Michael Jogbäck, LetsEncrypt, Netnod, Packet Clearing House, Patrik Fältström, PCH, SecurityTrails, The Coming Storm, U.S. Department of Homeland Security

Credit to Author: BrianKrebs| Date: Mon, 18 Feb 2019 13:51:01 +0000

The U.S. government — along with a number of leading security companies — recently warned about a series of highly complex and widespread attacks that allowed suspected Iranian hackers to siphon huge volumes of email passwords and other sensitive data from multiple governments and private companies. But to date, the specifics of exactly how that attack went down and who was hit have remained shrouded in secrecy. This post seeks to document the extent of those attacks, and traces the origins of this overwhelmingly successful cyber espionage campaign back to a cascading series of breaches at key Internet infrastructure providers.

MalwareBytes Security

The Advanced Persistent Threat files: APT10

January 16, 2019 admin Advanced Persistent Threat, Advanced persistent threats, aerospace, APT, APT10, APTs, China, Chinese Ministry of State Security, construction, cybercrime, engineering, FireEye, hacking, MSS, PlugX, Poison Ivy, scanbox, sogu, telecoms, threat actors

Credit to Author: William Tsing| Date: Wed, 16 Jan 2019 17:00:00 +0000

While security companies are getting good at analyzing the tactics of nation-state threat actors, they still struggle with placing these actions in context and making solid risk assessments. So in this series, we’re going to take a look at a few APT groups, and see how they fit into the larger threat landscape—starting with APT10.

Categories:

Tags: advanced persistent threat advanced persistent threats aerospace APT APT10 APTs china Chinese Ministry of State Security construction engineering FireEye MSS PlugX Poison Ivy scanbox sogu telecoms threat actors

(Read more…)

The post The Advanced Persistent Threat files: APT10 appeared first on Malwarebytes Labs.

Independent Krebs

First ‘Jackpotting’ Attacks Hit U.S. ATMs

January 27, 2018 admin All About Skimmers, atm jackpotting, atm logical attacks, Daniel Regalado, Diebold Nixdorf, Diebold Opteva, endoscope, FireEye, Latest Warnings, NCR Corp, Ploutus.D, The Coming Storm, U.S. Secret Service, Windows 7, Windows XP

Credit to Author: BrianKrebs| Date: Sat, 27 Jan 2018 18:45:08 +0000

ATM “jackpotting” — a sophisticated crime in which thieves install malicious software and/or hardware at ATMs that forces the machines to spit out huge volumes of cash on demand — has long been a threat for banks in Europe and Asia, yet these attacks somehow have eluded U.S. ATM operators. But all that changed this week after the U.S. Secret Service quietly began warning financial institutions that jackpotting attacks have now been spotted targeting cash machines here in the United States.

Independent MotherBoard Security

Hackers Mock Cybersecurity Firm FireEye with Second Data Dump

August 14, 2017 admin #LeakTheAnalyst, FireEye, hack, Pastebin, Security

Credit to Author: Joseph Cox| Date: Mon, 14 Aug 2017 12:03:07 +0000

The dump is relatively small, containing around 3MB of files.