Tag: nation state
993 articles
FBI Warns of Chinese Hacker Group QTFY's Infrastructure Attacks
Meet QTFY, a notorious Chinese hacker group that's been wreaking havoc on US government and critical infrastructure networks with its custom-built QScan platform, capable of conducting over 2 million scanning and penetration testing tasks in just one day. This sophisticated tool has helped QTFY identify and exploit targets with alarming speed and accuracy.
Spark RAT Campaign Targets Cambodia, Abuses OPSWAT Driver to Disable Security Tools
A new Spark RAT campaign is targeting Cambodia, using clever tactics like phishing emails and signed DLLs to disable security tools and sneak malicious payloads into victims' systems. The attackers are casting a wide net with diverse lure themes, trying to catch as many unsuspecting victims as possible.
GoCaracal Malware Exploits Ethereum for Covert C2 Communications
Researchers have uncovered a sneaky new malware, GoCaracal, that uses Ethereum to secretly communicate with its controllers, and with medium confidence, they've linked it to the notorious Dark Caracal group. This clever malware was used in a recent attack on a Venezuelan communications organization.
ATF Breach Exposes Federal System to Qilin Ransomware Gang
The Bureau of Alcohol, Tobacco, Firearms and Explosives confirmed a major breach of a standalone system, which was swiftly isolated to prevent further damage, and is now teaming up with the Department of Justice to investigate the Qilin Ransomware Gang's involvement. The incident appears to be contained, with no impact on the ATF's main enterprise network or other critical systems.
China Targets Taiwan's Representative Offices to Expand Influence
China's influence game is heating up - instead of winning over new diplomatic allies, it's now targeting Taiwan's representative offices, pressuring them to close, relocate or rebrand to enforce its One China principle. This strategic shift comes as Beijing finds it tougher to sway Taiwan's remaining formal diplomatic partners.
US Officials Disrupt Chinese Espionage Operation Targeting Federal Agencies
US officials have successfully disrupted a sophisticated Chinese espionage operation targeting federal agencies, seizing tools used by hackers to launch online attacks on our nation's critical infrastructure. This significant crackdown, made possible through court-authorized seizures, has denied People's Republic of China-linked hackers access to their arsenal.
Trump Signs Order to Mitigate Foreign Cyber Risks in US Energy Infrastructure
President Trump has signed an executive order declaring a national emergency to shield America's energy infrastructure from foreign cyber threats, specifically targeting malicious activities that could compromise the bulk-power system. This move aims to block risky foreign-produced equipment, software, and systems from being installed in US energy infrastructure.
Boston Scientific Cyberattack Disrupts Global Operations
A delayed shipment of a life-saving cardiac device can have devastating consequences, like a cancelled surgery - and that's exactly what's at risk when a cyberattack hits a medical device manufacturer like Boston Scientific. The recent attack has disrupted the company's global operations, causing order-processing delays that can have a ripple effect on patients' lives.
AI Models Accelerate Vulnerability Discovery
New AI models are revolutionizing vulnerability discovery, condensing a process that once took months into just hours and leaving defenders scrambling to keep up. This acceleration is outpacing traditional patch cycles, with attackers now able to develop working exploit code in as little as a week.
FBI Disrupts Chinese Hacking Tools Targeting US Critical Networks
The FBI has successfully disrupted a Chinese hacking operation, seizing two malicious platforms - QScan and QTRouter - used to target high-value US networks and critical infrastructure. This significant takedown thwarts a major threat to US security, thanks to the Justice Department's court-authorized seizures of key domains.
Boston Scientific Hit by Global Cyberattack Disruption
Boston Scientific is facing significant disruptions to its operations after a global cyberattack hit its IT systems, limiting access to crucial business applications and hindering its ability to process and ship customer orders. The company is working closely with third-party experts to investigate and restore its systems, but a timeline for full recovery remains uncertain.
US Water Systems Targeted in Surge of Cyberattacks
In a shocking revelation, over 100 internet-exposed US water systems were hit with cyberattacks in just one month, highlighting a systemic risk that demands immediate attention. This alarming surge in targeted attacks has raised serious concerns about the security of America's water sector.
Boston Scientific Hit by Cyberattack Disrupting Global Operations
Boston Scientific's global operations have been disrupted by a cyberattack, causing significant hiccups in processing and shipping customer orders due to limited access to key information systems and business applications. The incident was detected on August 25, prompting an immediate response to mitigate the impact.
CISA Red Team Exposes Gaps in Critical Infrastructure Defenses
The CISA red team uncovered alarming gaps in critical infrastructure defenses, revealing that even with detection tools in place, the real vulnerability lies in the people, processes, and procedures supporting them. In a striking example, a recent red-team exercise showed that detection tools can be ineffective if not backed by robust supporting systems.
Tortoiseshell Malware Toolkit Expands with New Backdoor, SSH Tunneling
Meet Tortoiseshell, a stealthy malware toolkit that's been lurking in the shadows since 2018, and just got a nasty upgrade with a new backdoor and SSH tunneling capabilities. This cyber-espionage group's toolkit expansion could spell trouble for defense, aerospace, and military organizations worldwide.
FBI Disrupts Chinese Espionage Proxy Network
Kudos to the FBI and DOJ for taking down a Chinese cyber espionage proxy network that's been targeting US critical infrastructure - a huge win for national security. This disruption, made possible by Lumen Technologies' Black Lotus Labs' year-long tracking, has crippled the infrastructure used by Chinese hackers to spy on and gather intel from American targets.
OpenAI Disrupts Russian Influence Operation Using ChatGPT
OpenAI recently took down a cluster of Russian ChatGPT accounts that were being used to spread influence through social media posts and comments, revealing a new and concerning threat. The accounts promoted the International Burke Institute, a self-described expert community based in Israel.
Russia Seizes Unprotected Infrastructure Amid Ukraine Drone Strikes
Russia's government is cracking down on lax security measures, with President Putin signing a decree that allows for the temporary seizure of critical infrastructure from private owners who fail to protect it from drone attacks or neglect repairs. This move comes after Kremlin spokesman Dmitry Peskov warned that many business owners aren't taking sufficient anti-drone safety precautions.
US Targets Iran-Linked Hackers in Sanctions Crackdown
The US is launching a fierce economic crackdown on Iran, targeting nearly 60 entities, individuals, and vessels linked to the country's nuclear, missile, oil, and cyber networks. Secretary of the Treasury Scott Bessent vows to cut off every financial lifeline sustaining the regime, leaving Tehran isolated.
Treasury Targets Iranian Hackers Tied to US Critical Infrastructure Breaches
The Treasury Department has taken a bold step, calling it an "economic D-Day," by imposing sanctions on five Iranian hackers linked to a string of brazen cyberattacks on US critical infrastructure, government offices, and digital assets. This move is part of a broader effort to isolate Iran and cut off its revenue streams.
Ukraine Unveils MV11 Unmanned Vessel with Advanced Anti-Drone Capabilities
Meet the MV11, a game-changing unmanned vessel that's redefining naval capabilities with its advanced anti-drone tech and multi-domain prowess. This behemoth of the Magura family is set to revolutionize operations across land, sea, and air.
US Government Cyber Experts Warn of AI-Driven Security Challenges
The US Coast Guard faces a daunting task in keeping its vast network secure, with 1,500 global locations - including remote sites in Alaska and Maine that are only accessible by snowmobile - making routine maintenance and patching a logistical nightmare. This dispersed footprint poses significant cyber security challenges, especially when combined with environmental constraints.
Identity Verification Exploited in Onboarding, Recovery Processes
Cyber attackers are now exploiting weaknesses in identity verification processes, targeting the moments when identities are created or re-established, and using tactics like falsifying documents and stolen credentials to gain a foothold. This shift comes as defenders have made logins more secure, with stolen credentials involved in nearly 45% of breaches.
Recruiter Scams Target Corporate Credentials on Mobile Devices
Beware of recruiter scams targeting your corporate credentials on mobile devices! A recent discovery by Zimperium uncovered a sneaky phishing campaign impersonating top employers and recruiters, including Amazon, Apple, and Louis Vuitton, to steal sensitive info.