Tag: Ransomware

Cyber Exploits Erupting Worldwide

~ Eric ~ Leave a comment
Groove ransomware group calls on other ransomware gangs to hit US public sector

DarkSide ransomware operators move 6.8M worth of Bitcoin after REvil shutdown
FIN7 cybercrime gang creates fake cybersecurity firm to recruit pentesters for ransomware attacks
A flaw in WinRAR could lead to remote code execution

True Cyber Warfare Raging Worldwide: Ransomware, Twitch, GhostShell, The Telegraph UK, IBM, Azure

~ Eric ~ 1 Comment
Twitch data breach updates: login credentials or card numbers not exposed
UK newspaper The Telegraph exposed a 10TB database with subscriber data
Exclusive: Researchers dumped Gigabytes of data from Agent Tesla C2Cs
CVE-2021-38647 OMIGOD flaw impacts IBM QRadar Azure
Operation GhostShell: MalKamak APT targets aerospace and telco firms

Former US spies face charges for working as mercenary hackers for the UAE • THE CRADLE

~ Eric ~ 3 Comments

Source: https://thecradle.co/Article/news/1935

The US Justice Department reported on 14 September that three former intelligence agents who worked as hackers for the United Arab Emirates (UAE) agreed to collaborate with federal prosecutors to avoid going to trial on charges of conspiring to violate hacking laws.

The three defendants, Marc Baier, Ryan Adams, and Daniel Gericke, were hired by the UAE after their work contracts with US spy agencies on the clandestine Project Raven came to an end, allowing Abu Dhabi to engage in surveillance of other governments as well as militants and human rights activists critical of the emirates.

Over a dozen former US spies were hired by the UAE to work on the surveillance project.

The US Justice Department announced that the defendants entered into a deferred prosecution agreement, which calls for their complete cooperation to provide “full, complete, and truthful information to the FBI or any other US government organization,” and to provide any documents sought by the government.

They also agreed to pay fines of $1.685 million.

According to a Reuters investigation into Project Raven, the agents used “an arsenal of cyber tools, including a cutting-edge espionage platform known as Karma, in which Raven operatives say they hacked into the iPhones of hundreds of activists, political leaders, and suspected terrorists.”

According to court papers, the Karma hacking tool was acquired from two unnamed US companies.

The documents also describe how the former US spies helped the UAE design, procure, and deploy hacking capabilities over multiple years.

Their victims included US citizens, with the spies alleging their Emirati superiors promised them that Washington had approved their work.

1337 h4xx0r5 continue onslaught: iPhone, NSO Group, OnePercenters, WhatsApp, Android, Malware, USPS

~ Eric ~ Leave a comment

I have been in network security for nearly a decade, never have these been this many events in one single year (or perhaps the reporting of the events seems more ubiquitous):

FBI flash alert warns on OnePercent Group Ransomware attacks
Realtek SDK flaws exploited to deliver Mirai bot variant
New zero-click exploit used to target Bahraini activists’ iPhones with NSO spyware

Cyber Contagion Battles Rage On: Census Hacked, Liquid Cryptocurrency, Ransomware in Hospitals, Anti-Trust Suits,FTC, Malware, Trickbot

~ Eric ~ Leave a comment
Hackers Breached US Census Bureau in 2020 Using Citrix Exploit

New analysis of Diavol ransomware reinforces the link to TrickBot gang
The pandemic revealed the health risks of hospital ransomware attacks
FTC files amended antitrust complaint against Facebook
T-Mobile data breach has impacted 48.6 million customers
Year 2021 witnesses over 304.7 million Ransomware attacks so far

Cyber Variant Heating Up – Lockstep with the Great Reset Prophecy – IoT, Vice Society, AlphaBay, UK Courts, Binance, Chanel brand, Ransomware

~ Eric ~ Leave a comment

Connected devices increasingly at risk as new ransomware attacks are reported almost daily
Vice Society ransomware also exploits PrintNightmare flaws in its attack
Infamous Underground Darknet Market Place “AlphaBay” Back to Live Again
UK Court Orders Binance to Track Down Alleged Crypto Hackers
Data Breach on French Luxury brand Chanel
Google open-sourced Allstar tool to secure GitHub repositories
UK NCSC launches tool to flag scam emails for Microsoft Office 365 Customers
SynAck ransomware gang releases master decryption keys for old victims

Cyber World War – Multiple Fronts – UK, US, AMD, Intel, Crowdfunding, Prometheus TDS, Bot Net, Magecart, Popsicle Finance Android, Microsoft, ProxyShell, Phishing, Ransomware

~ Eric ~ Leave a comment
Microsoft warns of a evasive year-long spear-phishing campaign targeting Office 365 users

Attackers Scan for Microsoft Exchange ProxyShell Remote Code Execution Vulnerabilities

Gigabyte ransomware attack includes Intel, AMD confidential documents
Crypto Crowdfunding Platform DAO Maker Hacked for $7 Million
Prometheus TDS – An Underground Service Distributes Malwares to Attack Via Hacked Websites
DeFi Protocol Popsicle Finance Hacked for $25 Million
New DNS Bug Let Hackers Spy Valuable Dynamic DNS Data From Millions of Endpoints
What is Magecart Attack, and How Hacker Steals Payment card Details Using It?
UK, US Agencies Warn Of Large-Scale Global Brute Force Attack Targeting Enterprise and Cloud Environments
StealthWorker Botnet Attacks Synology NAS Devices To Deliver Ransomware
Oscorp – New Android Credential Stealing Malware Actively Attack in the Wild

Ransomware World War is Heating Up

~ Eric ~ Leave a comment
New eCh0raix ransomware variant targets NAS devices from both QNAP and Synology vendors
Microsoft Azure Sentinel uses Fusion ML to detect ransomware attacks
StealthWorker botnet targets Synology NAS devices to drop ransomware
City of Joplin paid a 320K ransom after a ransomware Attack
Australian Cyber Security Centre warns of a surge of LockBit 2.0 ransomware attacks

LockBit 2.0 – Ransomware Uses Group Policies to Encrypt Windows Domains

~ Eric ~ Leave a comment
LockBit 2.0, the first ransomware that uses group policies to encrypt Windows domains

Great Reset/Cyber-Pandemic: The Infrastructure of the Antichrist: Redux 2021 — Daniel O’Connor’s Blog

~ Eric ~ Leave a comment

First, a few quick announcements: I am honored to have been interviewed recently by Dr. Peter Howard, president of the Fulton Sheen Institute (you can find the interview here), and by Robert Colquhoun, Director of International Campaigns for 40 Days for Life (You can find the interview here). Both interviews are on — you guessed […]

The Infrastructure of the Antichrist: Redux 2021 — Daniel O’Connor’s Blog