Iranian cyberattacks fail to materialize but threat remains acute
Five days into US and Israel’s war with Iran, the worst predictions for cyber-retaliation have yet to materialize. But Iran has built one of the world’s most active cyber operations, which means this is likely a temporary reprieve, experts warn. At the weekend, both the UK National Cyber Security Centre (NCSC) and the Canadian Centre […] more…Update on Pawn Storm: New Targets and Politically Motivated Campaigns
In the second half of 2017 Pawn Storm, an extremely active espionage actor group, didn’t shy away from continuing their brazen attacks. Usually, the group’s attacks are not isolated incidents, and we can often relate them to earlier attacks by carefully looking at both technical indicators and motives. Pawn Storm has been attacking political organizations […] more…Ransomware in a global context
Today we are proud to announce our very first VirusTotal Ransomware Activity Report. This initiative is designed to help researchers, security practitioners and the general public better understand the nature of ransomware attacks by sharing VirusTotal’s visibility. We are also organizing a series of webinars describing the main findings of our research, so please join […] more…More than a Dozen Obfuscated APT33 Botnets Used for Extreme Narrow Targeting
By Feike Hacquebord, Cedric Pernet, and Kenney Lu The threat group regularly referred to as APT33 is known to target the oil and aviation industries aggressively. This threat group has been reported on consistently for years, but our recent findings show that the group has been using about a dozen live Command and Control (C&C) […] more…APT trends report Q2 2019
For two years, the Global Research and Analysis Team (GReAT) at Kaspersky has been publishing quarterly summaries of advanced persistent threat (APT) activity. The summaries are based on our threat intelligence research and provide a representative snapshot of what we have published and discussed in greater detail in our private APT reports. They aim to […] more…The Chronicles of the Hellsing APT: the Empire Strikes Back
Introduction One of the most active APT groups in Asia, and especially around the South China Sea area is “Naikon”. Naikon plays a key part in our story, but the focus of this report is on another threat actor entirely; one who came to our attention when they hit back at a Naikon attack. Naikon […] more…Denial of service in Depth Explained
Denial-of-service attack is a very famous and common attack we daily experience such attacks but we are not able to figure it out.Let me define Denial-of-service (DOS) for you a denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a machine or network resource unavailable to its intended users.What […] more…The Roof Is on Fire: Tackling Flame’s C&C Servers
On Sunday, May 27 2012, the Iranian MAHER CERT posted a note announcing the discovery of a new targeted attack dubbed “Flamer”. On Monday 28 May 2012 aat 9am EST, after an investigation prompted and supported by the International Telecommunication Union, Kaspersky Lab and CrySyS Lab from Hungary announced the discovery of Flame (aka Skywiper), […] more…More information
- Dirt-cheap PS4 Amazon listings in Walmart price-match scam
- Two Indicted in $10 Million Tech Support Fraud Scheme
- Bill to tighten H-1B US work visas could backfire
- Novant Health Says Malformed Tracking Pixel Exposed Health Data to Meta
- Just how secure is quantum cryptography?
- Chrome 141 and Firefox 143 Patches Fix High-Severity Vulnerabilities
- Firefox will efficiently play AV1 video—if you have a brand-new GPU
- China’s Volt Typhoon Hackers Dwelled in US Electric Grid for 300 Days
- SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild – No Patch Available
- Mt. Gox under largest DDoS attack as bitcoin price surges