Voici la sélection des cyberattaques majeures découvertes la semaine passée.
Vous retrouvez ci-dessous les liens directs vers les articles les plus intéressants. Pour information, cette veille est préparée avec un vrai cerveau non artificiel, alors bonne lecture et merci de soutenir le Décodeur !
Offrez un café pour soutenir cette veille indépendante
☕ Je soutiens DCOD
Les actus sélectionnées cette semaine
Russian Ministry Software Backdoored with North Korean KONNI Malware
Discover the latest cybersecurity revelation: KONNI malware, linked to North Korea, targets the Russian Ministry of Foreign Affairs.
Binance Restricts 85 LockBit Crypto Wallets
Cryptocurrency trading platform Binance restricted access to 85 accounts as part of an action against the LockBit ransomware affiliates, and authorities estimated
US health tech giant Change Healthcare hit by cyberattack | TechCrunch
A cyberattack is ongoing at Change Healthcare, a health tech giant that claims its technology touches one-in-three U.S. patient records.
UnitedHealth says Change Healthcare hacked by nation-state, as US pharmacy outages drag on | TechCrunch
The health tech giant processes billions of healthcare transactions annually and handles patient data for one-third of Americans.
L’Europe est la nouvelle cible préférée des cybercriminels
L’Europe attire désormais davantage les hackers que l’Amérique du Nord ou l’Asie-Pacifique. De plus en plus de cybercriminels, dont les spécialistes du ransomware, se concentrent maintenant sur les sociétés européennes.
Ransomware associated with LockBit still spreading 2 days after server takedown
LockBit’s extensive reach is making complete erasure hard.
Des traces d’un logiciel espion ont été retrouvées dans les téléphones de fonctionnaires européens
Les téléphones de deux membres de la sous-commission « Sécurité et défense » ont été infectés par un logiciel espion, d'après un email…-Club des DPO
Des hackers russes ont ciblé plusieurs serveurs de messagerie gouvernementaux et militaires en Europe
Les cyberespions du groupe Winter Vivern ont profité des failles de vulnérabilité du client de messagerie Roundcube pour viser plus de 80…-Cybersécurité
Hackers abuse Google Cloud Run in massive banking trojan campaign
Security researchers are warning of hackers abusing the Google Cloud Run service to distribute massive volumes of banking trojans like Astaroth, Mekotio, and Ousaban.
LockBit ransomware secretly building next-gen encryptor before takedown
LockBit ransomware developers were secretly building a new version of their file encrypting malware, dubbed LockBit-NG-Dev – likely a future LockBit 4.0, when law enforcement took down the cybercriminal’s infrastructure earlier this week.
U-Haul says hacker accessed customer records using stolen creds
U-Haul has started informing customers that a hacker used stolen account credentials to access an internal system for dealers and team members to track customer reservations.
Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates
U.S. and U.K. authorities have seized the darknet websites run by LockBit, a prolific and destructive ransomware group that has claimed more than 2,000 victims worldwide and extorted over $120 million in payments. Instead of listing data stolen from ransomware victims who didn’t pay, LockBit’s victim shaming website now offers free recovery tools, as well as news about arrests and criminal charges involving LockBit affiliates.
Israeli Aircraft Survive « Cyber-Hijacking » Attempts
Hackers have attempted to divert two commercial Israeli aircraft in recent days, reports claim
Russian Cyberattackers Launch Multiphase PsyOps Campaign
Operation Texonto spanned several months, using various Russian propaganda lures and spear-phishing to misinform and trick users into giving up Microsoft 365 credentials.
ConnectWise ScreenConnect Mass Exploitation Delivers Ransomware
Hundreds of initial access brokers and cybercrime gangs are jumping on the max-critical CVE-2024-1709 authentication bypass, threatening orgs and downstream customers.
CySecurity News – Latest Information Security and Hacking Incidents: Hackers Target Police Officers and Prosecutors in Miami-Dade
The city affirmed that neither the network nor the data had been affected by the breach.
80 organisations européennes et d’Asie Centrale visées par des pirates russes
Des organisations gouvernementales et militaires ont été visées par des cyber espions russes suite à une faille du serveur webmail RoundCube.
Russian Government Software Hijacked to Install Konni RAT
Konni RAT is a sophisticated malware tool cyber threat actors use to gain unauthorized access to systems, execute commands remotely.
Hackers launched 250,000+ Attacks to Exploit Ivanti VPN 0-Day
Ivanti Connect Secure vulnerabilities were disclosed in January 2024 as a potential gateway for threat actors to penetrate into corporate networks.
💡 Ne manquez plus l'essentiel
Recevez les analyses et tendances cybersécurité directement dans votre boîte mail.
Vous appréciez nos analyses ?
Soutenez DCOD en offrant un café ☕
