Latest Cybersecurity News and Articles

---

Prolific cybercrime gang disrupted by joint UK, US and EU operation

LockBit’s website under control of security agencies from both sides of Atlantic, according to postLockBit, a notorious cybercrime gang that holds its victims’ data to ransom, has been disrupted in a rare international law enforcement operation by Britain’s National Crime Agency, the FBI, Europol and a coalition of international police agencies, according to a post on the gang’s extortion website.“This site is now under the control of the National Crime Agency of the UK, working in close cooperation with the FBI and the international law enforcement taskforce ‘Operation Cronos’,” the post said on Monday. Continue reading...

---

New Google Chrome Feature Blocks Attacks Against Home Networks

Google is testing a new feature called "Private Network Access protections" in Chrome 123 to prevent malicious websites from attacking devices and services on a user's private network.

---

Gmail & Yahoo DMARC Rollout: When Cyber Compliance Gives a Competitive Edge

DMARC compliance offers businesses a competitive advantage through improved email deliverability and enhanced security posture, leading to better engagement rates and revenue growth.

---

Anatsa Android Trojan Bypasses Google Play Security, Expands Reach to New Countries

The Android banking trojan Anatsa has expanded its reach to include Slovakia, Slovenia, and Czechia, demonstrating the capability to bypass restricted settings for accessibility service in Android 13.

---

PDF Malware on the Rise, Used to Spread WikiLoader, Ursnif, and DarkGate

Cybercriminals are using ad tools to track and optimize their malware campaigns, making their lures more convincing and increasing the likelihood of users falling victim to the attacks.

---

The Department of State offers $10M for information on ALPHV/Blackcat

Anyone who can provide information regarding key members or conspirators of ALPHV/Blackcat may be offered a monetary reward. 

---

Japan Sees Increased Cyberthreats to Critical Infrastructure, Particularly From China

Recent cyberattacks on Japanese entities, such as the Ministry of Foreign Affairs and aerospace agency JAXA, underscore the persistent threat posed by Chinese hackers to Japan's security and economy.

---

Russia-Aligned Hackers Target European and Iranian Embassies in New Espionage Campaign

A Russia-linked hacking group, Winter Vivern, exploited a vulnerability in the Roundcube webmail server to spy on government and military agencies in Europe and Iranian embassies in Russia, indicating a significant cybersecurity threat.

---

Meta Warns of 8 Spyware Firms Targeting iOS, Android, and Windows Devices

Meta Platforms said it took a series of steps to curtail malicious activity from eight different firms based in Italy, Spain, and the United Arab Emirates (U.A.E.) operating in the surveillance-for-hire industry. The findings are part of its Adversarial Threat Report for the fourth quarter of 2023. The spyware targeted iOS, Android, and Windows devices. "Their various malware included

---

Hackers Claim Data Breach at Staffing Giant Robert Half, Sell Sensitive Data

The stolen data includes confidential records, employee documents, customer information, and configuration settings related to services such as OpenAI and Twilio, posing a significant threat to the company and its clients.

---

Joint Cyber Defense Collaborative announces its priorities for 2024

The 2024 priorities of the Joint Cyber Defense Collaborative aim to secure against immediate and evolving cyber risks. 

---

Ukrainian Extradited to US Over Alleged Raccoon Stealer Ties

Mark Sokolovsky, a Ukrainian national, has been extradited to the United States to face criminal charges related to his involvement in the Raccoon info stealer malware-as-a-service operation.

---

Iranian Hackers Target Middle East Policy Experts with New BASICSTAR Backdoor

Charming Kitten's phishing attacks involve social engineering tactics, compromised email accounts, and the distribution of various backdoors, demonstrating their commitment to surveillance and malware deployment.

---

How to Achieve the Best Risk-Based Alerting (Bye-Bye SIEM)

Did you know that Network Detection and Response (NDR) has become the most effective technology to detect cyber threats? In contrast to SIEM, NDR offers adaptive cybersecurity with reduced false alerts and efficient threat response. Are you aware of Network Detection and Response (NDR) and how it’s become the most effective technology to detect cyber threats?  NDR massively

---

RCE Vulnerabilities Fixed in Solarwinds Enterprise Solutions

SolarWinds has patched critical vulnerabilities in its Access Rights Manager (ARM) and (Orion) Platform that could allow attackers to execute code, emphasizing the importance of promptly updating to the fixed versions.

---

Anatsa Android Trojan Bypasses Google Play Security, Expands Reach to New Countries

The Android banking trojan known as Anatsa has expanded its focus to include Slovakia, Slovenia, and Czechia as part of a new campaign observed in November 2023. "Some of the droppers in the campaign successfully exploited the accessibility service, despite Google Play's enhanced detection and protection mechanisms," ThreatFabric said in a report shared with The Hacker News.

---

Massive Utility Scam Campaign Spreads via Online Ads

Scammers create multiple fraudulent domains and use scare tactics to pressure victims into making hasty decisions, such as disclosing personal details or making immediate payments.

---

New MonikerLink Flaw Exposes Outlook Users to Data Theft and Malware

The #MonikerLink vulnerability in Microsoft Outlook has a critical severity rating of 9.8 out of 10 and allows threat actors to execute arbitrary code with minimal user interaction, posing a significant security risk.

---

Update: ALPHV Ransomware Claims loanDepot, Prudential Financial Breaches

The ALPHV/Blackcat ransomware gang has claimed responsibility for breaching the networks of Prudential Financial and loanDepot, leading to significant data theft and potential cybersecurity risks for millions of individuals.

---

ESET Fixed High-Severity Local Privilege Escalation Bug in Windows Products

ESET addressed a high-severity vulnerability (CVE-2024-0353) in its Windows security products allowing attackers to delete files without proper permission, potentially escalating their privileges.