Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Malware

McAfee provides new data on Operation Sharpshooter

McAfee revealed in the RSA Conference USA 2019 evidence about the campaign called Operation Sharpshooter, exposed in 2018, revealing that it is broader in complexity, scope and duration than what...

References:

mcafee.com

cyberscoop.com

thehackernews.com

revistabyte.es

Tags:

Botnet

Incident

Malware

Other critical infrastructures

Public administration

Vulnerability

Malware infects foreign embassies in Iran

Kaspersky Lab has warned of several attempts to infect foreign embassies in Iran with a home-made program, which appears to use a Remexi malware backdoor update along with several legitimate tools...

References:

infochannel.info

securitic.com.mx

cso.computerworld.es

pcbuyersguide.com.ph

Tags:

Malware

Public administration

Information leakage

Cyberespionage

Malware uses Google Drive services as its C&C server

A new variant of the RogueBin Trojan uses Google Drive as its Command & Control (C&C) server. The Trojan infects the victim's computers when the user opens a Microsoft Excel file containing...

References:

thehackernews.com

2-spyware.com

welivesecurity.com

globalnotary.es

Tags:

Ransomware cyberattack interrupts press distribution in the U.S.

Tribune Publishing, which produces America's leading newspapers, was the victim of a ransomware cyberattack by the Ryuk family that paralyzed the printing and delivery of several major U.S....

References:

twitter.com

latimes.com

apnews.com

bleepingcomputer.com

unaaldia.hispasec.com

Tags:

Dismantled advertising fraud operation 3ve

Operation 3ve, considered one of the largest online advertising fraud networks, was dismantled following the arrest of 8 suspects on 27 November 2018. Among the 13 charges against them are...

References:

security.googleblog.com

us-cert.gov

welivesecurity.com

gizmodo.com

blogs.protegerse.com

Tags:

Pakistan's army suffers from a malware campaign called Operation Shaheen

The security firm Cylance, in collaboration with Pakistan's CERT, published an investigation in which it explains how the group nicknamed White Company, and supposedly sponsored by a state, has...

References:

threatvector.cylance.com

theregister.co.uk

cyberscoop.com

mercadomilitar.com

Tags:

Malware

Public administration

Incident

Vulnerability

Cybercrime

FASTCash, the malware used by Lazarus to steal millions of ATMs

The multinational company Symantec has published the results of its investigation into the wave of financial attacks perpetrated by Lazarus, which it carried out following an alert issued by US...

References:

us-cert.gov

symantec.com

hipertextual.com

incibe-cert.es

Tags:

Australian shipbuilder Austal affected by ransomware

On November 1, 2018, the enterprise Austal, an Australian shipbuilding company of defense and commercial ships, reported that it had refused to pay the required ransom of 1 bitcoin after being the...

References:

asx.com.au

bankinfosecurity.com

portswigger.net

spamfighter.com

lavanguardia.com

Tags:

GreyEnergy malware threatens critical infrastructure since 2015

ESET researchers Anton Cherepanov and Robert Lipovsky have published a study revealing details of a new malicious actor nicknamed GreyEnergy, who appears to be the successor to BlackEnergy.The...

References:

welivesecurity.com

cyberscoop.com

hackread.com

innovadores.larazon.es

Tags:

Malware

IoT

Incident

Industrial Control System

North Carolina's water and sewer service suffers cyber attack

On October 15, 2018, the CEO of Onslow Water and Sewer Authority (ONWASA), Jeffrey Hudson, reported that one of his employees in the IT department had discovered in the early hours of October 4,...

References:

onwasa.com

cyberscoop.com

cbs17.com

darkreading.com

unaaldia.hispasec.com

Tags:

Corporate access

Cybersecurity Highlights

McAfee provides new data on Operation Sharpshooter

Malware infects foreign embassies in Iran

Malware uses Google Drive services as its C&C server

Ransomware cyberattack interrupts press distribution in the U.S.

Dismantled advertising fraud operation 3ve

Pakistan's army suffers from a malware campaign called Operation Shaheen

FASTCash, the malware used by Lazarus to steal millions of ATMs

Australian shipbuilder Austal affected by ransomware

GreyEnergy malware threatens critical infrastructure since 2015

North Carolina's water and sewer service suffers cyber attack

Pages