Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Malware

Thousands of MS-SQL and PHPMyAdmin servers infected in Nansh0u campaign

Experts from Guardicore Labs, a cybersecurity research company, published an extensive report on 29 May detailing a cryptojacking campaign, called Nansh0u, that attacked MS-SQL (Windows) and...

References:

guardicore.com

bleepingcomputer.com

zdnet.com

unaaldia.hispasec.com

Tags:

Cryptocurrency

Cybercrime

Malware

Europol and U.S. Department of Justice dismantle international cybercrime network

An international operation coordinated by the U.S. Department of Justice and Europol has succeeded in dismantling a complex network of cybercriminals.The criminals would have obtained an estimated ...

References:

europol.europa.eu

justice.gov

databreachtoday.com

bleepingcomputer.com

cuatro.com

elpais.com

Tags:

Public administration

Thousands of websites infected for the purpose of collecting users information

Willem de Groot, researcher at Sanguine Security, has discovered that a group of cyberattackers have managed to take control of two web add-ons: the Picreel web analytics service and the Alpaca...

References:

twitter.com

zdnet.com

omicrono.elespanol.com

genbeta.com

Tags:

Europol closes two black market portals on Dark Web

Europol has done one of the largest international raids by collaborating between different countries and organizations to close black market portals of the Dark Web, Wall Street Market and...

References:

europol.com

hipertextual.com

theverge.com

unaaldia.com

Tags:

Information leakage in OpenCart websites

Researcher Yonathan Klijnsma, of the cybersecurity firm RiskIQ, has discovered a large-scale operation perpetrated by Magecart Group 12 against OpenCart's online store management system.The way of...

References:

riskiq.com

securityaffairs.co

bleepingcomputer.com

medium.com

Tags:

Triton malware compromises critical infrastructure again

Cybersecurity experts from FireEye have published a report explaining that Triton malware has been used again, after the 2017 attack, to compromise an undisclosed critical infrastructure...

References:

fireeye.com

techcrunch.com

wired.com

csoonline.com

zonavirus.com

dailymail.co.uk

incibe-cert.es

Tags:

Chemical industry

Cybercrime

Energy

Industrial Control System

Malware

Pharmaceutical company Bayer suffers a cyber attack

Bayer, Germany's largest pharmaceutical company, has been cyber-attacked by the Wicked Panda group of cyber-criminals operating from China.Andreas Rohr, employee of the DCSO cybersecurity group,...

References:

reuters.com

cyberscoop.com

infosecurity-magazine.com

zdnet.com

eleconomista.es

eldiario.es

Tags:

ASUS tool infected by Operation ShadowHammer

Kaspersky Lab has discovered a new Advanced Persistent Threat (APT) campaign that has affected more than one million users through an ASUS software supply chain attack. The investigation revealed...

References:

securelist.com

kaspersky.com

motherboard.vice.com

symantec.com

asus.com

xataka.com

unaaldia.hispasec.com

kaspersky.es

Tags:

Norsk Hydro metallurgical company suffers a ransomware cyber attack

The Norwegian metallurgical company Norsk Hydro has suffered, on March 19, 2019, an attack by a variety of ransomware called LockerGoga that encrypts files on Windows devices. As a result, both the...

References:

hydro.com

kaspersky.es

ics-cert.kaspersky.com

databreachtoday.com

hotforsecurity.bitdefender.com

itproportal.com

Tags:

Cybercrime

Incident

Malware

Other critical infrastructures

Detected a spam campaign that distributes malware via email

Taking advantage of the dissemination of news about the Boeing 737 Max 8 accidents, a new spam campaign is being carried out that distributes malware via email.Those affected receive an email with...

References:

bleepingcomputer.com

securityaffairs.co

2-spyware.com

malware-board.com

Tags:

Malware

Tool

Transport

Corporate access

Cybersecurity Highlights

Thousands of MS-SQL and PHPMyAdmin servers infected in Nansh0u campaign

Europol and U.S. Department of Justice dismantle international cybercrime network

Thousands of websites infected for the purpose of collecting users information

Europol closes two black market portals on Dark Web

Information leakage in OpenCart websites

Triton malware compromises critical infrastructure again

Pharmaceutical company Bayer suffers a cyber attack

ASUS tool infected by Operation ShadowHammer

Norsk Hydro metallurgical company suffers a ransomware cyber attack

Detected a spam campaign that distributes malware via email

Pages