Latest Cybersecurity News and Articles

---

‘BouldSpy’ Android Malware Used in Iranian Government Surveillance Operations

On the infected devices, BouldSpy harvests account usernames and associated application/service, a list of installed apps, browser data, call logs, clipboard content, contact lists, device information, a list of files and folders, and SMS messages.

---

New Decoy Dog Malware Toolkit Uncovered: Targeting Enterprise Networks

An analysis of over 70 billion DNS records has led to the discovery of a new sophisticated malware toolkit dubbed Decoy Dog targeting enterprise networks. Decoy Dog, as the name implies, is evasive and employs techniques like strategic domain aging and DNS query dribbling, wherein a series of queries are transmitted to the command-and-control (C2) domains so as to not arouse any suspicion. "

---

Companies Increasingly Hit With Data Breach Lawsuits: Law Firm

Lawsuits filed against companies that have suffered a data breach are increasingly common, with action being taken more frequently even in cases where the number of impacted individuals is smaller, according to US law firm BakerHostetler.

---

Russia-linked APT28 Uses Fake Windows Update Instructions to Target Ukrainian Government Bodies

CERT-UA observed the campaign in April 2023, the malicious e-mails with the subject “Windows Update” were crafted to appear as sent by system administrators of departments of multiple government bodies.

---

United HealthCare Reports Data Breach That May Have Revealed Customer's Personal Information

United HealthCare made customers aware of a data breach on Friday, which temporarily allowed access to personal information for those enrolled in the company's healthcare plans.

---

South Korea, US agree to cooperate on cybersecurity and combating North Korean digital heists

North Korea has long relied on its government-backed hacking groups to fund its weapons programs, launching audacious attacks on cryptocurrency exchanges and medical facilities.

---

Wanted Dead or Alive: Real-Time Protection Against Lateral Movement

Just a few short years ago, lateral movement was a tactic confined to top APT cybercrime organizations and nation-state operators. Today, however, it has become a commoditized tool, well within the skillset of any ransomware threat actor. This makes real-time detection and prevention of lateral movement a necessity to organizations of all sizes and across all industries. But the disturbing truth

---

Are Qualcomm chips snooping on you? No, not quite

Recently, security firm Nitrokey published an advisory claiming that "smartphones with Qualcomm chips secretly send personal data to Qualcomm" and do so "without user consent, unencrypted, and even when using a Google-free Android distribution."

---

Some 'Sensitive Information' Potentially Compromised: Diocese of Las Vegas Reports Cybersecurity Breach

In response to the breach, the Diocese states it has "reviewed and enhanced its data security policies...in order to help reduce the likelihood of a similar event in the future."

---

First draft of controversial UN Cybercrime Treaty slated for June

The UN General Assembly voted in December 2019 to begin negotiating a treaty centered around cybercrime after Russia took issue with a previous agreement – the Budapest Convention – and demanded something new to address the issue.

---

Amnesty International Australia slow with disclosure after December hack

In a statement posted to its website on Friday, five days after queries from this masthead, Amnesty said it had detected the attack on December 3, 2022. The charity said it subsequently secured its IT systems and started an investigation.

---

Vietnamese Threat Actor Infects 500,000 Devices Using 'Malverposting' Tactics

A Vietnamese threat actor has been attributed as behind a "malverposting" campaign on social media platforms to infect over 500,000 devices worldwide over the past three months to deliver variants of information stealers such as S1deload Stealer and SYS01stealer. Malverposting refers to the use of promoted social media posts on services like Facebook and Twitter to mass propagate malicious

---

China’s hackers outnumber FBI cyber staff ‘at least 50 to 1,’ Wray tells Congress

For fiscal 2024, the FBI wants to add 192 positions for fighting cyber threats, “including 31 Special Agents, 8 Intelligence Analysts, and 153 Professional Staff,” according to a summary from the bureau.

---

APT28 Targets Ukrainian Government Entities with Fake "Windows Update" Emails

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of cyber attacks perpetrated by Russian nation-state hackers targeting various government bodies in the country. The agency attributed the phishing campaign to APT28, which is also known by the names Fancy Bear, Forest Blizzard, FROZENLAKE, Iron Twilight, Sednit, and Sofacy. The email messages come with the subject line "

---

Active Phishing Campaign Singles Out Romanian Telecom Users

The preliminary analysis of all of the evidence has indicated that the threat actor(s) involved in this operation exhibit the same modus operandi observed by Heimdal in mid-February while investigating the Romanian National Post smishing campaign.

---

ChatGPT is Back in Italy After Addressing Data Privacy Concerns

OpenAI, which published a new FAQ, said it filters and removes information such as hate speech, adult content, sites that primarily aggregate personal information, and spam.

---

Update: Hackers Leaked Minneapolis Students' Psychological Reports, Allegations of Abuse

NBC, which reviewed the leaks, now reports that the trove also contained far more sensitive information, including the mental health records of students and even documents detailing allegations of abuse against members of the district’s staff.

---

CISA seeks public comment on software security attestation form

CISA on Thursday released the common form for producers to self-attest that software provided to the federal government is secure. The comment period is open for 60 days, through June 26.

---

Google Blocks 1.43 Million Malicious Apps, Bans 73,000 Bad Accounts in 2022

Google disclosed that its improved security features and app review processes helped it block 1.43 million bad apps from being published to the Play Store in 2022. In addition, the company said it banned 173,000 bad accounts and fended off over $2 billion in fraudulent and abusive transactions through developer-facing features like Voided Purchases API, Obfuscated Account ID, and Play Integrity

---

Coercion in the Age of Ransomware: New Tactics for Extorting Payments

A ransomware report by GuidePoint Security offers valuable information on the current ransomware threat scenario and highlights the coercion tactic utilized by significant ransomware groups such as double extortion and DDoS attack. In the education sector, there was a 17% rise in publicly disclosed victims during the same period, with Vice Society being responsible for 27% of all attacks in the education industry.