notpetya – PossibleThreat Articles

Successful operations against Russian Sandworm and Strontium groups targeting Ukraine revealed

April 8, 2022 0 Comments asus, botnets, cyclops blink, doj, gru, Microsoft, notpetya, Reports, sandworm, sinkhole, Strontium, ukraine, watchguard

Credit to Author: Pieter Arntz| Date: Fri, 08 Apr 2022 14:23:30 +0000

Two announcements in two days detail operations against GRU-controlled infrastructure

The post Successful operations against Russian Sandworm and Strontium groups targeting Ukraine revealed appeared first on Malwarebytes Labs.

Independent Krebs Security

Actions Target Russian Govt. Botnet, Hydra Dark Market

April 7, 2022 0 Comments ars technica, asus, beserk bear, cyclops blink, dan goodin, dragonfly 2.0, FBI, federal security service, garantex, german federal criminal police office, gru, hydra market, main intelligence directorate, Ne'er-Do-Well News, notpetya, Ransomware, russian fsb, sandworm, trisis, triton, u.s. department of justice, u.s. department of treasury, voodoo bear, vpnfilter, watchguard, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Thu, 07 Apr 2022 22:03:45 +0000

The U.S. Federal Bureau of Investigation (FBI) says it has disrupted a giant botnet built and operated by a Russian government intelligence unit known for launching destructive cyberattacks against energy infrastructure in the United States and Ukraine. Separately, law enforcement agencies in the U.S. and Germany moved to decapitate “Hydra,” a billion-dollar Russian darknet drug bazaar that also helped to launder the profits of multiple Russian ransomware groups.

MalwareBytes Security

Potential cybersecurity impacts of Russia’s invasion of Ukraine

February 25, 2022 0 Comments blackenergy, cisa, conti, conti ransomware, covid-19, covid-19 scams, crashoverride, Georgia, ghost of kyiv, hermeticwiper, industroyer, kyrgyzstan, latvia, lithuania, Malwarebytes news, notpetya, notpetya ransomware, ransom.conti, Ransomware, russia, snake, snake ransomware, ukraine, wiper

Credit to Author: David Ruiz| Date: Fri, 25 Feb 2022 22:13:21 +0000

Responding to the crisis in Ukraine must prioritize physical safety, but there are related cyber-risks to consider too.

The post Potential cybersecurity impacts of Russia’s invasion of Ukraine appeared first on Malwarebytes Labs.

MalwareBytes Security

Cyclops Blink malware: US and UK authorities issue alert

February 24, 2022 0 Comments cisa, cyclops blink, ioc, ncsc, notpetya, sandworm, Threat spotlight, ttp, ukraine, vpnfilter, watchguard

Credit to Author: Pieter Arntz| Date: Thu, 24 Feb 2022 15:38:34 +0000

US and UK authorities have attributed the newly found malware Cyclops Blink to the Russian state-sponsored Sandworm group.

The post Cyclops Blink malware: US and UK authorities issue alert appeared first on Malwarebytes Labs.

Independent Krebs Security

At Request of U.S., Russia Rounds Up 14 REvil Ransomware Affiliates

February 2, 2022 0 Comments andrey sergeevich bessonov, colonial pipeline, darkside, dmitri alperovitch, FSB, gandcrab, immersive labs, kevin breen, Ne'er-Do-Well News, notpetya, president biden, Ransomware, revil, roman gennadyevich muromsky, The Coming Storm, vladimir putin

Credit to Author: BrianKrebs| Date: Fri, 14 Jan 2022 22:41:34 +0000

The Russian government said today it arrested 14 people accused of working for “REvil,” a particularly aggressive ransomware group that has extorted hundreds of millions of dollars from victim organizations. The Russian Federal Security Service (FSB) said the actions were taken in response to a request from U.S. officials, but many experts believe the crackdown is part of an effort to reduce tensions over Russian President Vladimir Putin’s decision to station 100,000 troops along the nation’s border with Ukraine.

Security Sophos

Microsoft patches wormable Windows 10 ‘SMBGhost’ flaw

March 17, 2020 0 Comments Flaw, Microsoft, notpetya, Operating Systems, Patching, security threats, smb, smbghost, vulnerability, WannaCry, Windows, Windows 10

Credit to Author: John E Dunn| Date: Mon, 16 Mar 2020 11:58:56 +0000

What’s the difference between a scheduled security update and one that’s out-of-band? In this case, it’s two days.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/OqgpMudTrew” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

A decade in cybersecurity fails: the top breaches, threats, and ‘whoopsies’ of the 2010s

December 19, 2019 0 Comments ashley madison, ashley madison hack, Awareness, badrabbit, Cambridge Analytica, cryptolocker, cryptolocker ransomware, Data privacy, edward snowden, emotet, exploits, facebook, Hacktivism, mat honan, notpetya, NSA, nsa spying, nsa surveillance, nsa tools, playstation breach, playstation hack, Ransomware, ryuk, Ryuk ransomware, security fails, shadow brokers, social media, sony, sony pictures hack, surveillance, target breach, target hack, trickbot, triple threat, WannaCry

Credit to Author: Malwarebytes Labs| Date: Thu, 19 Dec 2019 18:03:33 +0000

As the 2010s come to a close, we take a snarky walk down memory lane, listing the craziest, most impactful, or simply just awful cybersecurity fails of the decade.

Categories:

Awareness

Tags: ashley madison ashley madison hack BadRabbit cambridge analytica cryptolocker cryptolocker ransomware Data privacy Edward Snowden emotet exploits facebook hacktivism mat honan NotPetya NSA nsa spying nsa surveillance NSA tools playstation breach playstation hack ransomware ryuk Ryuk ransomware security fails shadow brokers social media sony sony pictures hack surveillance target breach target hack trickbot triple threat WannaCry

Security Sophos

Fake Android apps uploaded to Play store by notorious Sandworm hackers

December 2, 2019 0 Comments Android, Google, Google Play, google threat analysis group (tag), Government security, malware, notpetya, russia, russian hacker, sandworm, security threats

Credit to Author: John E Dunn| Date: Mon, 02 Dec 2019 11:23:14 +0000

The Russian ‘Sandworm’ hacking group has been caught repeatedly uploading fake and modified Android apps to Google’s Play Store.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/4Dunl7ID7xQ” height=”1″ width=”1″ alt=””/>

Security Sophos

Investors accuse FedEx of lying, stock dumping after NotPetya attack

September 23, 2019 0 Comments fedex, Law & order, lawsuit, malware, notpetya, petya, Ransomware, security threats, shareholders, stockholder derivative complaint, stockholders, tnt express

Credit to Author: Lisa Vaas| Date: Mon, 23 Sep 2019 11:36:45 +0000

This is the second such suit, with shareholders asking why execs sold $40m+ of their shares while downplaying the ransomware attack.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/DZkjtO37crE” height=”1″ width=”1″ alt=””/>