alt=Windows 10 update progress at 1%, Windows operating system.

2024-03-10 Post a Comment

Hackers steal Windows NTLM authentication hashes in phishing attacks

By Bill Toulas The hackingÂ group known as TA577Â has recently shifted tactics by using phishing emails to steal NT LAN Manager (NTLM) authentication hashes to perform account hijacks. TA577 is considered an initial access broker (IAB), previously associated with Qbot and linked to Black Basta ransomware infections. Email security firm Proofpoint reports today that although it has seen TA577 showing a preference for deploying Pikabot recently, two recent attack waves demonstrate […]

alt=A laptop displaying a sign that reads "We have your data pay."

Cyber security

2024-03-10 Post a Comment

After collecting $22 million, AlphV ransomware group stages FBI takedown

By- DAN GOODIN The ransomware group responsible for hamstringing the prescription drug market for two weeks has suddenly gone dark, just days after receiving a $22 million payment and standing accused of scamming an affiliate out of its share of the loot. FURTHER READING US prescription market hamstrung for 9 days (so far) by ransomware attack The events involve AlphV, a ransomware group also known as BlackCat. Two weeks […]

Cyber security

2024-03-10 Post a Comment

NSA shares zero-trust guidance to limit adversaries on the network

By Ionut Ilascu The National Security Agency is sharing new guidance to help organizations limit an adversary’s movement on the internal network by adopting zero-trust framework principles. A zero-trust security architecture requires strict controls for accessing resources on the network, be they inside or outside the physical perimeter, to minimize the impact of a breach. Top StoriesREAD MOREThe Week in Ransomware – March 8th 2024 -Waiting for the BlackCat rebrand […]

alt=a woman holding two balls over her eyes

Cyber security

2024-02-10 Post a Comment

Facebook ads push new Ov3r_Stealer password-stealing malware

By Bill Toulas A new password-stealing malware named Ov3r_Stealer is spreading through fake job advertisements on Facebook, aiming to steal account credentials and cryptocurrency. The fake job ads are for management positions and lead users to a Discord URL where a PowerShell script downloads the malware payload from a GitHub repository. Analysts atÂ TrustwaveÂ who discovered the malware campaign note that although none of its tactics are novel, it remains a severe […]

alt=a man in a black robe holding a tablet in a server room

Cyber security

2024-02-10 Post a Comment

Chinese hackers hid in US infrastructure network for 5 years

By Sergiu Gatlan The Chinese Volt Typhoon cyber-espionage group infiltrated a critical infrastructure network in the United States and remained undetected for at least five years before being discovered, according to a joint advisory from CISA, the NSA, the FBI, and partner Five Eyes agencies. Volt Typhoon hackers are known for extensively using living off the land (LOTL) techniques as part of their attacks on critical infrastructure organizations. They’re also […]