Latest Cybersecurity News and Articles

---

Pro-Ukraine hackers CH01 defaced tens of Russian websites on the invasion anniversary

A group of hacktivists that goes online with the moniker CH01 defaced at least 32 Russian websites to mark a protest over the one-year anniversary of the Russian invasion. The news was also shared by the collective Anonymous through its accounts.

---

Malicious actors push the limits of attack vectors

The war in Ukraine has seen the emergence of new forms of cyberattacks, and hacktivists became savvier and more emboldened to deface sites, leak information, and execute DDoS attacks, according to Trellix.

---

Even Top-Ranked Android Apps in Google Play Store Provide Misleading Data Safety Labels

An investigation into data safety labels for Android apps available on the Google Play Store has uncovered "serious loopholes" that allow apps to provide misleading or outright false information.

---

DarkCloud Stealer Targets Users and Businesses Worldwide

Hackers were found distributing sophisticated DarkCloud Stealer info-stealer through various spam campaigns. The malware operates through a multi-stage process and is capable of collecting sensitive information from a victim’s computer or mobile device. The malware operators claim to target applications such as Chromium-based web browsers, FileZilla, CoreFTP, FlashFXP, NordVPN, Pidgin, Internet Explorer, and Microsoft Edge vaults.

---

Russian cybercrime alliances upended by Ukraine invasion

According to researchers, the so-called "brotherhood" of Russian-speaking cybercriminals is yet another casualty of the war in Ukraine, albeit one that few outside of Moscow are mourning.

---

Dutch Police Arrest 3 Hackers Involved in Massive Data Theft and Extortion Scheme

The Dutch police announced the arrest of three individuals in connection with a "large-scale" criminal operation involving data theft, extortion, and money laundering. The suspects include two 21-year-old men from Zandvoort and Rotterdam and an 18-year-old man without a permanent residence. The arrests were made on January 23, 2023. It's estimated that the hackers stole personal data belonging

---

MyloBot Proxy Botnet Infects 50,000 Unique Systems Per Day

BitSight uncovered an advanced botnet that has been able to compromise thousands of systems in the U.S., India, Indonesia, and Iran. Dubbed MyloBot, its infrastructure has connections to BHProxies, a residential proxy service. The highly sophisticated malware was first spotted in the wild in 2017 and is known for its anti-analysis techniques.

---

Full-Featured Stealc Info-stealer Gains Popularity

SEKOIA has shared IOCs, along with YARA and Suricata rules, to detect a potential information-stealer named Stealc. Researchers have already identified more than 40 C2 domains and several dozens of malware samples, hinting that Stealc is already gaining popularity within the cybercrime community. To combat attacks from such info-stealers, organizations are recommended to implement strong security controls with multi-layered visibility and security solutions.

---

PureCrypter Loader Found Infecting Government Entities with Various Malware

Security researchers at Menlo Labs laid bare an attack campaign featuring the PureCrypter downloader to target government entities. The evasive threat campaign is disseminated via Discord by an unidentified threat actor. The attack campaign leverages the domain of a compromised non-profit organization as a C2 channel to deliver its secondary payload.

---

When Low-Tech Hacks Cause High-Impact Breaches

Web hosting giant GoDaddy made headlines this month when it disclosed that a multi-year breach allowed intruders to steal company source code, siphon customer and employee login credentials, and foist malware on customer websites. Media coverage understandably focused on GoDaddy's admission that it suffered three different cyberattacks over as many years at the hands of the same hacking group.  But it's worth revisiting how this group typically got in to targeted companies: By calling employees and tricking them into navigating to a phishing website.

---

Hydrochasma: An Emerging Threat to Asia's Medical and Shipping Industries

A previously unseen threat group, dubbed Hydrochasma, was found targeting medical labs and shipping companies in Asia in a cyberespionage campaign that started in October 2022. It did not employ any custom malware but instead heavily relied on publicly available and living-off-the-land tools. So far, hackers have not been observed exfiltrating any data.

---

CISA Sounds Alarm on Cybersecurity Threats Amid Russia's Invasion Anniversary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations and individuals to increase their cyber vigilance, as Russia's military invasion of Ukraine officially enters one year.

---

Cyberattacks hit data centers to steal information from global companies

Cyberattacks targeting multiple data centers in several regions globally have been observed over the past year and a half, resulting in the exfiltration of information pertaining to some of the world's biggest companies.

---

What to know: Protecting employee data in your workplace

As a networking and security professional, J. ( J-Dot) Bendonis has actively been securely connecting people through technology for over 20 years. At Check Point, he’s been assisting and educating his customers about their options surrounding cyber security; ranging from best practices to advanced architecture and future design states. In this informative and exclusive CyberTalk […] The post What to know: Protecting employee data in your workplace appeared first on CyberTalk.

---

Who’s Behind the Botnet-Based Service BHProxies?

A security firm has discovered that a five-year-old crafty botnet known as Mylobot appears to be powering a residential proxy service called BHProxies, which offers paying customers the ability to route their web traffic anonymously through compromised computers. Here’s a closer look at Mylobot, and a deep dive into who may be responsible for operating the BHProxies service.

---

Research predicts major cybersecurity workforce shifts in coming years

Analysts have predicted major cybersecurity workforce shifts. According to research, nearly half of cybersecurity leaders will change jobs by 2025.

---

Economic shocks & swarms of cyber criminals

EXECUTIVE SUMMARY: In times of high inflation, businesses and consumers aren’t the only ones feeling adverse effects. During periods of economic uncertainty, even cyber criminals feel the pinch. For instance, cryptocurrencies –which are critical in facilitating ransomware payments– have dropped in value. As a result, cyber criminals are becoming more brazen in their efforts, driving […] The post Economic shocks & swarms of cyber criminals appeared first on CyberTalk.

---

How healthcare providers ensure safe and seamless continuity of care

The growing number of successful cyberattacks has urged healthcare organizations to take steps in protecting their systems from threat actors.

---

Rishi Sunak faces calls to ban TikTok use by government officials

PM under pressure to follow EU and US in taking step over fears Chinese-owned app poses cybersecurity riskRishi Sunak has been urged to ban government officials from using TikTok in line with moves by the EU and US, amid growing cybersecurity fears over China.Officials in Europe and the US have been told to limit the use of the Chinese-owned social video app over concerns that data can be accessed by Beijing. Continue reading...

---

Threat Actors Weaponize Old Bugs to Launch Ransomware Attacks

Latest report by Cyware, along with Cyber Security Works (CSW), Ivanti, and Securin, stated that out of 344 total threats detected in 2022, 56 new vulnerabilities were associated with ransomware threats. Attackers can leverage kill chains to exploit these bugs across 81 unique products. The Log4Shell flaw affects around 176 products from 21 vendors, including Oracle, Red Hat, Apache, Novell, and Amazon.