Latest Cybersecurity News and Articles

---

The Growing Threat to Critical Infrastructure

In an age where cybersecurity threats are omnipresent, it’s vital to maintain good security practices around remote computing access — especially concerning the nation’s most critical sectors.

---

Chinese security researchers claim to have identified ‘Against The West’ hackers

Researchers from the Chinese cybersecurity company Qi An Pangu Lab believe they have identified six members of the “Against The West” hacking group, according to a report published Sunday by state-controlled media.

---

Researchers Warn of ReverseRAT Backdoor Targeting Indian Government Agencies

A spear-phishing campaign targeting Indian government entities aims to deploy an updated version of a backdoor called ReverseRAT. Cybersecurity firm ThreatMon attributed the activity to a threat actor tracked as SideCopy. SideCopy is a threat group of Pakistani origin that shares overlaps with another actor called Transparent Tribe. It is so named for mimicking the infection chains associated

---

Patrick Neise joins Groove as Chief Information Security Officer

Patrick Neise joins Groove as Chief Information Security Officer (CISO). Neise is a former Director of Operations for the NSA Red Team with a D.Eng.

---

Experts Warn of RambleOn Android Malware Targeting South Korean Journalists

Suspected North Korean nation-state actors targeted a journalist in South Korea with a malware-laced Android app as part of a social engineering campaign. The findings come from the South Korea-based non-profit Interlab.

---

Indian Ticketing Platform RailYatri Hacked – 31 Million Impacted

The compromised data includes email addresses, full names, genders, phone numbers, and locations, which could put millions of users at risk of identity theft, phishing attacks, and other cybercrimes.

---

Coinbase cyberattack targeted employees with fake SMS alert

As a result of the intrusion, the attacker obtained some contact information belonging to multiple Coinbase employees, the company said, adding that customer funds and data remained unaffected.

---

Lockbit Ransomware Gang Hit the Portuguese Municipal Water Utility Aguas do Porto

Lockbit added the municipal water utility company to the list of victims on its Tor leak site, the deadline is March 07, 2023. CNN Portugal confirmed that the National Cybersecurity Center and the Judiciary Police are investigating the breach.

---

Spain Orders Extradition of British Alleged Hacker to US

Spain’s National Court has agreed to the extradition to the US of a British citizen who allegedly took part in computer attacks, including the July 2020 hacking of Twitter accounts of public figures such as Joseph Biden, Barack Obama, and Bill Gates.

---

Data Breach Reported At Mount Pleasant Central School District

The breach was announced by Mount Pleasant Central School District Superintendent Peter Giarrizzo on Friday, February 17, who said that several student email passwords may have been compromised by the incident.

---

QR Code Generator MyQRcode Leaks Users’ Login Data and Addresses

At the time of writing, the total number of impacted customers was 65,000; however, at the time of publishing this article, the number had increased to 67,000, meaning the leak is ongoing.

---

Phishing scam cost small Ohio city $219,000, finance director his job

The author of the phishing email pretended to be an existing vendor and persuaded the finance worker in the Columbus suburb of Hilliard, Ohio, to change bank-routing information for the vendor.

---

ENISA and CERT-EU Warn of Chinese APTs Targeting EU Organizations

The joint report focus on cyber activities conducted by multiple Chinese Advanced Persistent Threat (APT) groups, including APT27, APT30, APT31, Ke3chang, GALLIUM, and Mustang Panda.

---

Hackers Target Chinese Speaking Individuals via Poisoned Google Search

Security analysts at ESET unearthed a malware campaign targeting Chinese-speaking people in Southeast and East Asia. The unknown hacker group has created copycat websites of popular apps, such as Firefox, WhatsApp, and Telegram. Along with legitimate software, cyber foes also deliver FatalRAT to take over the system of a victim.

---

FBI Probing a Cybersecurity Incident on its Network

The FBI is reportedly investigating malicious cyber activity on the agency’s network. The federal law enforcement agency says it already contained the "isolated incident" and is working to uncover its scope and overall impact.

---

Cybersecurity takes a leap forward with AI tools and techniques

As per newly published research, when faced with sophisticated cyberattacks in a rigorous simulation setting, deep reinforcement learning was effective at stopping adversaries from reaching their goals up to 95 percent of the time.

---

Semiconductor Industry Giant Says Ransomware Attack on Supplier Will Cost it $250 Million

Multibillion-dollar corporation Applied Materials, which provides technology for the semiconductor industry, said during an earnings call this week that a ransomware attack on one of its suppliers would cost it $250 million in the next quarter.

---

Samsung Introduces New Feature to Protect Users from Zero-Click Malware Attacks

A majority of the zero-click exploits are engineered to take advantage of vulnerabilities in applications such as messaging, SMS, or email apps that receive and process untrusted data.

---

OxtaRAT Surveillance Tool Used to Target Corporate Entities in Armenia

Check Point observed a new malicious campaign targeting corporate entities in Armenia with a new OxtaRAT backdoor variant, with an aim to conduct surveillance. The attack involved a geo-political bait wherein hackers would share an image file (.SCR) masquerading as a PDF file. It is a polyglot file that combines the image and compiled AutoIT script (the OxtaRAT).

---

DeFi Protocol Platypus Suffers $8.5M Flash Loan Attack, Suspect Identified

Platypus confirmed a loss of “8.5 million” from its main pool and said that deposits were covered at 85%. Other pools were unaffected. The company has contacted the hacker to negotiate a bounty for the return of the funds.