Categories
Breach Cyber Security DDoS Malware Ransomware Vulnerability

Multiple healthcare institutions report data breach, Tekya malware ad fraud on Google Play, and more

Major cybersecurity events on 8th June 2020 (Morning Post): Fitness Depot ISP fails to activate antivirus, suffers data breach. Hackers expose 5 billion consumer records in 2019, costing US enterprises $1.2 trillion loss. Staggering increase in the number of attacks targeting Black Lives Matter movement.Continue readingMultiple healthcare institutions report data breach, Tekya malware ad fraud on Google Play, and more

Categories
Breach CVE Cyber Security Malware Phishing Ransomware Spearphishing Vulnerability

NetWalker continues to attack colleges, Riviera Maya skims at least 100 ATMs in Mexico, and more

Major cybersecurity events on 5th June 2020 (Morning Post): 2 barcode reader apps on Google Play Store found using ad fraud techniques. Aeries Software that stores student information breached in around 150 school districts. Zoom patches vulnerabilities found by Cisco. Continue readingNetWalker continues to attack colleges, Riviera Maya skims at least 100 ATMs in Mexico, and more

Categories
Botnet Breach CVE Cyber Security Malware Phishing Ransomware RAT Spyware Trojan Vulnerability

Fake COVID travel passes, Antivirus expiration scams, Lucy Gang expands business for ransomware ops, and more

Major cybersecurity events on 28th April 2020: ANPR system exposes nine million logs of road journeys on the internet. Outlaw Hacking Group returns with Linux malware Shellbot. Ransomware group, Clop, leaks ExecuPharm’s data. PhantomLance injects complex spyware to harvest victim dataContinue readingFake COVID travel passes, Antivirus expiration scams, Lucy Gang expands business for ransomware ops, and more

Categories
APT Breach Cyber Security Malware Phishing Ransomware Trojan Vulnerability

Zeus Sphinx returns, Android apps engage in grab data, Ponzi scheme on YouTube, and more

Major cybersecurity events on 30th March 2020: Zoom faces multiple attacks on video meetings. More than 4000 Android apps gather details of all the other installed apps. COVID-themed fraud sites and phishing emails circulate on the internet. Lexus, Toyota AVN systems exposed to attacks. Zeus Sphinx banking trojan fetches log-in details of unaware users.Continue readingZeus Sphinx returns, Android apps engage in grab data, Ponzi scheme on YouTube, and more

Categories
APT Breach Malware Ransomware RAT RCE TrickBot Vulnerability

Stealthier Astaroth, TrickMo bypasses 2FA, Espionage targets WHO, and more

Major cybersecurity events on 24th March 2020: A new, stealthier Astaroth strikes Windows 10. COVID-19 cyberattacks against WHO spikes. 56 Google Play Store apps infected with malicious software. Kaspersky detects new APT campaign. TrickBot malware operators release TickMo to bypass 2FA. Azure applications can be weaponized against Microsoft365.Continue readingStealthier Astaroth, TrickMo bypasses 2FA, Espionage targets WHO, and more

Categories
Emotet Malware Phishing Rougeware

CloudSEK Daily Threat Bulletin – 5th February 2020

From charity organizations to government entities, just in the last few days, we have seen the impact of attacks on, 12 Indian government entities, the city of Racine, a voter registration website, and the Red Kite Community Housing charity. With Emotet finding a new carrier in W-9 tax forms, it is more obvious than ever…Continue readingCloudSEK Daily Threat Bulletin – 5th February 2020