Voici le rapport de veille de la semaine faisant le tour des actualités les plus intéressantes. Certaines d’entre elles seront développées dans les prochains articles. Bonne lecture et merci pour le café 😉
Vol / perte de données
1.9 Million Healthcare Records Breached in Ransomware Attack
A US debt collector has reported a breach of 1.9 million healthcare records across 650 providers
Cyberattaques / fraudes
Emerging H0lyGh0st Ransomware Tied to North Korea
Microsoft has linked a threat that emerged in June 2021 and targets small-to-mid-sized businesses to state-sponsored actors tracked as DEV-0530.
Journalists Emerge as Favored Attack Target for APTs
Since 2021, various state-aligned threat groups have turned up their targeting of journalists to siphon data and credentials and also track them.
Hackers Used Fake Job Offer to Hack and Steal $540 Million from Axie Infinity
One of Axie Infinity’s former employees was reportedly tricked into accepting a fraudulent job offer on LinkedIn, leading to the $540 million hack.
Disneyland Social Media Hacked
Last Thursday, Disneyland had their Facebook and Instagram accounts taken over by a self-proclaimed « super hacker » who posted racist and homophobic posts.
French Telecoms Firm Hit by Ransomware Attack
French telecoms operator La Poste Mobile has alerted customers that their data may have been compromised in a ransomware attack that targeted the company’s man
Lithuanian Energy Firm Disrupted by DDOS Attack
Lithuanian state-owned energy group hit by pro-Russian hacking group
Failles / vulnérabilités
Hackers Say They Can Unlock and Start Honda Cars Remotely
They key fobs of several Honda models have a flaw that could allow hackers to unlock and start the cars.
10 000 entreprises victimes de phishing contournant le MFA d’Office 365 – Le Monde Informatique
Intrusion, Hacking et Pare-feu : Les pages web de phishing utilisées dans une dernière campagne d’attaques malveillantes sont utilisées en tant que proxy pour extraire du contenu de…
A New Attack Can Unmask Anonymous Users on Any Major Browser
Researchers have found a way to use the web’s basic functions to identify who visits a site-without the user detecting the hack.
New Android malware on Google Play installed 3 million times
A new Android malware family on the Google Play Store that secretly subscribes users to premium services was downloaded over 3,000,000 times.
Justice / police / réglementation
Ex-CIA Programmer Found Guilty of Stealing Vault 7 Data, Giving It to Wikileaks
Joshua Schulte has been convicted for his role in the Vault 7 Wikileaks data dump that exposed invasive US cyber intelligence tactics.
Suisse
Alerte de fraude cyber au nom du Centre national pour la cybersécurité
Des cybercriminels envoient actuellement des e-mails au nom du NCSC, le Centre national pour la cybersécurité. Il s’agirait d’une tentative de fraude au paiement anticipé.
Divers
Comment l’Ukraine a rapidement migré 10 pétaoctets de données dans AWS
En quelques semaines, les équipes d’Amazon Web Services (AWS) ont aidé le gouvernement ukrainien et les entreprises du pays à migrer leurs données sur le cloud, afin d’assurer la continuité des activités en cas de destruction de datacenters nationaux dans le cadre de la guerre contre la Russie.
IBM joins other tech giants and removes Russian state controlled network from its cloud service
An IBM spokesperson said it was « unaware » of its cloud platform’s involvement, and took « steps » to make sure RT content was not available via its services
