Latest Cybersecurity News and Articles

---

‘M.O.R.E’ Ransomware Emerges on the Dark Web; Threatens Windows, Mac, Linux Users

Multi-OS Ransomware Executable (M.O.R.E) represents a new breed of ransomware that can target multiple operating systems simultaneously, posing a significant threat to cybersecurity.

---

Iran and Hezbollah Hackers Launch Attacks to Influence Israel-Hamas Narrative

Hackers backed by Iran and Hezbollah staged cyber attacks designed to undercut public support for the Israel-Hamas war after October 2023. This includes destructive attacks against key Israeli organizations, hack-and-leak operations targeting entities in Israel and the U.S., phishing campaigns designed to steal intelligence, and information operations to turn public opinion against Israel. Iran

---

LockBit Ransomware's Darknet Domains Seized in Global Law Enforcement Raid

An international law enforcement operation has led to the seizure of multiple darknet domains operated by LockBit, one of the most prolific ransomware groups, marking the latest in a long list of digital takedowns. While the full extent of the effort, codenamed Operation Cronos, is presently unknown, visiting the group's .onion website displays a seizure banner containing the message "

---

Prolific cybercrime gang disrupted by joint UK, US and EU operation

LockBit’s website under control of security agencies from both sides of Atlantic, according to postLockBit, a notorious cybercrime gang that holds its victims’ data to ransom, has been disrupted in a rare international law enforcement operation by Britain’s National Crime Agency, the FBI, Europol and a coalition of international police agencies, according to a post on the gang’s extortion website.“This site is now under the control of the National Crime Agency of the UK, working in close cooperation with the FBI and the international law enforcement taskforce ‘Operation Cronos’,” the post said on Monday. Continue reading...

---

New Google Chrome Feature Blocks Attacks Against Home Networks

Google is testing a new feature called "Private Network Access protections" in Chrome 123 to prevent malicious websites from attacking devices and services on a user's private network.

---

Gmail & Yahoo DMARC Rollout: When Cyber Compliance Gives a Competitive Edge

DMARC compliance offers businesses a competitive advantage through improved email deliverability and enhanced security posture, leading to better engagement rates and revenue growth.

---

Anatsa Android Trojan Bypasses Google Play Security, Expands Reach to New Countries

The Android banking trojan Anatsa has expanded its reach to include Slovakia, Slovenia, and Czechia, demonstrating the capability to bypass restricted settings for accessibility service in Android 13.

---

PDF Malware on the Rise, Used to Spread WikiLoader, Ursnif, and DarkGate

Cybercriminals are using ad tools to track and optimize their malware campaigns, making their lures more convincing and increasing the likelihood of users falling victim to the attacks.

---

The Department of State offers $10M for information on ALPHV/Blackcat

Anyone who can provide information regarding key members or conspirators of ALPHV/Blackcat may be offered a monetary reward. 

---

Japan Sees Increased Cyberthreats to Critical Infrastructure, Particularly From China

Recent cyberattacks on Japanese entities, such as the Ministry of Foreign Affairs and aerospace agency JAXA, underscore the persistent threat posed by Chinese hackers to Japan's security and economy.

---

Russia-Aligned Hackers Target European and Iranian Embassies in New Espionage Campaign

A Russia-linked hacking group, Winter Vivern, exploited a vulnerability in the Roundcube webmail server to spy on government and military agencies in Europe and Iranian embassies in Russia, indicating a significant cybersecurity threat.

---

Meta Warns of 8 Spyware Firms Targeting iOS, Android, and Windows Devices

Meta Platforms said it took a series of steps to curtail malicious activity from eight different firms based in Italy, Spain, and the United Arab Emirates (U.A.E.) operating in the surveillance-for-hire industry. The findings are part of its Adversarial Threat Report for the fourth quarter of 2023. The spyware targeted iOS, Android, and Windows devices. "Their various malware included

---

Hackers Claim Data Breach at Staffing Giant Robert Half, Sell Sensitive Data

The stolen data includes confidential records, employee documents, customer information, and configuration settings related to services such as OpenAI and Twilio, posing a significant threat to the company and its clients.

---

Joint Cyber Defense Collaborative announces its priorities for 2024

The 2024 priorities of the Joint Cyber Defense Collaborative aim to secure against immediate and evolving cyber risks. 

---

Ukrainian Extradited to US Over Alleged Raccoon Stealer Ties

Mark Sokolovsky, a Ukrainian national, has been extradited to the United States to face criminal charges related to his involvement in the Raccoon info stealer malware-as-a-service operation.

---

Iranian Hackers Target Middle East Policy Experts with New BASICSTAR Backdoor

Charming Kitten's phishing attacks involve social engineering tactics, compromised email accounts, and the distribution of various backdoors, demonstrating their commitment to surveillance and malware deployment.

---

How to Achieve the Best Risk-Based Alerting (Bye-Bye SIEM)

Did you know that Network Detection and Response (NDR) has become the most effective technology to detect cyber threats? In contrast to SIEM, NDR offers adaptive cybersecurity with reduced false alerts and efficient threat response. Are you aware of Network Detection and Response (NDR) and how it’s become the most effective technology to detect cyber threats?  NDR massively

---

RCE Vulnerabilities Fixed in Solarwinds Enterprise Solutions

SolarWinds has patched critical vulnerabilities in its Access Rights Manager (ARM) and (Orion) Platform that could allow attackers to execute code, emphasizing the importance of promptly updating to the fixed versions.

---

Anatsa Android Trojan Bypasses Google Play Security, Expands Reach to New Countries

The Android banking trojan known as Anatsa has expanded its focus to include Slovakia, Slovenia, and Czechia as part of a new campaign observed in November 2023. "Some of the droppers in the campaign successfully exploited the accessibility service, despite Google Play's enhanced detection and protection mechanisms," ThreatFabric said in a report shared with The Hacker News.

---

Massive Utility Scam Campaign Spreads via Online Ads

Scammers create multiple fraudulent domains and use scare tactics to pressure victims into making hasty decisions, such as disclosing personal details or making immediate payments.