Latest Cybersecurity News and Articles

---

GuLoader Malware Using Malicious NSIS Executables to Target E-Commerce Industry

Over the course of 2022, the NSIS scripts used to deliver GuLoader are said to have grown in sophistication, packing in additional obfuscation and encryption layers to conceal the shellcode.

---

Eurocops shut down Exclu encrypted messaging app

An encrypted messaging service that has been on law enforcement's radar since a 2019 raid on an old NATO bunker has been shut down after a sweeping series of raids across Europe last week.

---

TechScape: Why Twitter ending free access to its APIs should be a ‘wake-up call’

In this week’s newsletter: The social media network is putting its APIs – the under-praised tool that keeps the internet as we know it going – behind a paywall. And the ramifications are hugeDon’t get TechScape delivered to your inbox? Sign up hereAPIs may not seem like the sexiest thing to write about in a tech newsletter, but bear with me. Because APIs – or application programming interfaces – are important. They’re the synapses of our digital world: without them, our current ways of living wouldn’t work.For example, when you visit a website that requires you to log in, and you choose to connect with a Google or Facebook account, you’re utilising an API. That click of a button that links your existing account on one platform with a new account on another is enabled by an API. They spring into action whenever one type of work interacts with another, working to bridge that gap. APIs are the overlooked and under-praised army that keeps the internet as we know it going. Continue reading...

---

Linux Variant of Clop Ransomware Spotted But Uses Faulty Encryption Algorithm

The first-ever Linux variant of the Clop ransomware has been detected in the wild, but with a faulty encryption algorithm that has made it possible to reverse engineer the process.

---

AveMaria Info-stealer Changes its Strategy to Infect More Users

Zscaler’s ThreatLabz disclosed details about a new infostealer AveMaria RAT that targets sensitive data with added capabilities of remote camera control and privilege escalation. Over the past six months, the operators behind the info-stealer have been making significant additions to the execution stages to infect more users. Organizations are advised to have a better email security solution in place to thwart such threats in the initial stages.

---

Massachusetts-Based MKS Instruments Falls Victim to Ransomware Attack

The company said it has notified law enforcement authorities while it investigates and assesses the impact of the incident by engaging “appropriate incident response professionals.”

---

Hackers Exploit Vulnerabilities in Sunlogin to Deploy Sliver C2 Framework

Threat actors are leveraging known flaws in Sunlogin software to deploy the Sliver command-and-control (C2) framework for carrying out post-exploitation activities. The findings come from AhnLab Security Emergency response Center (ASEC), which found that security vulnerabilities in Sunlogin, a remote desktop program developed in China, are being abused to deploy a wide range of payloads. "Not

---

Tackling the New Cyber Insurance Requirements: Can Your Organization Comply?

With cyberattacks around the world escalating rapidly, insurance companies are ramping up the requirements to qualify for a cyber insurance policy. Ransomware attacks were up 80% last year, prompting underwriters to put in place a number of new provisions designed to prevent ransomware and stem the record number of claims. Among these are a mandate to enforce multi-factor authentication (MFA)

---

Sharp HealthCare Notifies Nearly 63,000 Patients of Data Breach

Sharp HealthCare, San Diego’s largest health provider, announced Monday that it has begun notifying 62,777 of its patients that some of their personal information was compromised during an attack on the computers that run its website, sharp.com.

---

Update: LockBit ransomware gang claims Royal Mail cyberattack

The LockBit ransomware operation has claimed the cyberattack on UK's leading mail delivery service Royal Mail that forced the company to halt its international shipping services due to "severe service disruption."

---

Cyberattack Gives 19,000 Students A Day Off School at Berkeley County Schools

The Berkeley County Schools suffered a network outage which affected IT operations across the school system, WV Metro News reported. Personal data on the students may have been harvested in the cyberattack.

---

Actively exploited GoAnywhere MFT zero-day gets emergency patch

The zero-day vulnerability allows attackers to perform remote code execution attacks on vulnerable GoAnywhere MFT instances whose administrative console is exposed online.

---

Unauthorized network access most common cause of third-party attacks

Black Kite’s annual Third-Party Breach Report was released and examines the impact of third-party cyber breaches, which doubled in 2022.

---

Governor Abbott announces statewide plan for banning use of TikTok

Texas Governor announces plan outlining the use of TikTok on government devices. Other states have banned the app due to data privacy concerns. 

---

British Steel Industry Supplier Vesuvius Suffers Cyber Incident

The British manufacturer confirmed that the incident “involved unauthorized access to our systems,” although it did not provide further details on what the access was or what kind of cyber actor may have been responsible.

---

Encrypted Messaging App Exclu Used by Criminal Groups Cracked by Joint Law Enforcement

A joint law enforcement operation conducted by Germany, the Netherlands, and Poland has cracked yet another encrypted messaging application named Exclu used by organized crime groups. Eurojust, in a press statement, said the February 3 exercise resulted in the arrests of 45 individuals across Belgium and the Netherlands, some of whom include users as well as the administrators and owners of the

---

FTC bars GoodRx from sharing consumer information for advertising

FTC takes enforcement action against GoodRx and claims GoodRx failed to notify consumers of unauthorized disclosures of personal health information. 

---

Italy says ransomware hackers targeting server vulnerability

EXECUTIVE SUMMARY: On Sunday, Italy’s National Cybersecurity Agency (ACN) revealed that computer servers in the country had been targets in a global ransomware attack. According to the General Director of Italy’s National Cybersecurity Agency, Roberto Baldoni, the attack occurred on a massive scale, affecting thousands of computer servers. However, the number of infected machines represents […] The post Italy says ransomware hackers targeting server vulnerability appeared first on CyberTalk.

---

KrebsOnSecurity in Upcoming Hulu Series on Ashley Madison Breach

KrebsOnSecurity will likely have a decent amount of screen time in an upcoming Hulu documentary series about the 2015 megabreach at marital infidelity site Ashley Madison. While I can't predict what the producers will do with the video interviews we shot, it's fair to say the series will explore tantalizing new clues as to who may have been responsible for the attack.

---

What is cyber extortion?

By Mazhar Hamayun, cyber security engineer and member of the Office of the CTO at Check Point. What is cyber extortion? When we talk about cyber threats, one term is in the news more often than others: Cyber extortion. Cyber extortion is a broad term that refers to situations where a malicious actor or malicious […] The post What is cyber extortion? appeared first on CyberTalk.