Sophisticated cyber-attack targets Red Cross Red Crescent data on 500,000 people
A sophisticated cyber security attack against computer servers hosting information held by the International Committee of the Red Cross (ICRC) was detected this week.
REvil ransomware gang arrested in Russia
Authorities in Russia say they have dismantled the ransomware crime group REvil and charged several of its members.The United States had offered a reward of up to $10m (£7.3m) for information leading to the gang members, following ransomware attacks.
https://www-bbc-co-uk.cdn.ampproject.org/c/s/www.bbc.co.uk/news/technology-59998925.amp
After ransomware arrests, some dark web criminals are getting worried
Cyber criminals are becoming anxious about being tracked down by law enforcement agencies following the high-profile arrests of suspected members of one of the most notorious ransomware groups.
https://www.zdnet.com/article/after-ransomware-arrests-some-dark-web-criminals-are-getting-worried/
INCIDENTS:
Crypto.com confirms 483 users hit in attack that saw over $31m in coins withdrawn
After issuing hints at final numbers during the week, Crypto.com has made an official statement on the incident that saw it pause its users’ ability to withdraw funds.The company said on Monday that 483 users were impacted by unauthorised cryptocurrency withdrawals on their accounts.https://www.zdnet.com/article/crypto-com-confirms-483-users-hit-in-attack-that-saw-over-31m-in-coins-withdrawn/?&web_view=true
AccessPress Themes Hit With Targeted Supply Chain Attack
Security researchers at Automattic recently reported that the popular WordPress plugin and theme authors AccessPress were compromised and their software replaced with backdoored versions. The compromise appears to have taken place in September of last year and was only recently made public.
https://blog.sucuri.net/2022/01/accesspress-themes-hit-with-targeted-supply-chain-attack.html?web_view=true
MALWARE:
Indonesia’s central bank confirms ransomware attack, Conti leaks data
Bank Indonesia (BI), the central bank of the Republic of Indonesia, has confirmed today that a ransomware attack hit its networks last month. A Bank Indonesia spokesperson also told BleepingComputer the attack took place last month and that the bank’s operations are not disrupted after the incident.
https://www.bleepingcomputer.com/news/security/indonesias-central-bank-confirms-ransomware-attack-conti-leaks-data/?&web_view=true
Thousands of Industrial Firms Targeted in Attacks Leveraging Short-Lived Malware
Thousands of industrial organizations worldwide have been hit in campaigns that leverage short-lived malware to harvest corporate credentials that are then sold by threat actors for a profit, according to Kaspersky.
https://www.securityweek.com/thousands-industrial-firms-targeted-attacks-leveraging-short-lived-malware?&web_view=true
ICS Vendors Targeted in Espionage Campaign Focusing on Renewable Energy
Major industrial control system (ICS) vendors and other types of organizations have been targeted in a cyberespionage campaign that appears to focus on renewable energy. The campaign, which started in at least 2019 and is ongoing, was analysed by William Thomas, security researcher at Curated Intelligence. While the findings are limited due to the analysis relying solely on OSINT techniques, they are nevertheless interesting.
https://www.securityweek.com/ics-vendors-targeted-espionage-campaign-focusing-renewable-energy?&web_view=true
VULNERABILITIES:
Crime Shop Sells Hacked Logins to Other Crime Shops
Up for the “Most Meta Cybercrime Offering” award this year is Accountz Club, a new cybercrime store that sells access to purloined accounts at services built for cybercriminals, including shops peddling stolen payment cards and identities, spamming tools, email and phone bombing services, and those selling authentication cookies for a slew of popular websites.
https://krebsonsecurity.com/2022/01/crime-shop-sells-hacked-logins-to-other-crime-shops/?web_view=true
CISA adds 17 vulnerabilities to list of bugs exploited in attacks
This week, the Cybersecurity and Infrastructure Security Agency (CISA) added seventeen actively exploited vulnerabilities to the ‘Known Exploited Vulnerabilities Catalog. The ‘Known Exploited Vulnerabilities Catalog’ is a list of vulnerabilities that have been seen abused by threat actors in attacks and that are required to be patched by Federal Civilian Executive Branch (FCEB) agencies.
https://www.bleepingcomputer.com/news/security/cisa-adds-17-vulnerabilities-to-list-of-bugs-exploited-in-attacks/?&web_view=true
Vulnerabilities in Control Web Panel potentially expose Linux Servers to hack
Two critical security vulnerabilities in Control Web Panel potentially expose Linux servers to remote code execution attacks. Researchers from Octagon Networks disclosed details of two critical security flaws in Control Web Panel that potentially expose Linux servers to remote code execution attacks.
https://securityaffairs.co/wordpress/127058/hacking/control-web-panel-flaws.html?web_view=true
Cyber4Dev collates data from Open Source websites, any opinions or attributions expressed in the articles are not those of Cyber4Dev and are not endorsed by the project or the EU.
