Daily Cyber Insights - Iain Fraser | Accredited Cybersecurity Journalist & Authority Writer

STATE ACTORS: NCSC warns Politicians & Journalists against Russian & Iranian Hackers Syndicated by Iain Fraser - Cybersecurity Journalist via IainFraser.net Google Indexed on 300123 at 16:22 CET UK cyber experts NCSC warn of targeted phishing attacks from actors based in Russia & Iran and highlights techniques used by attackers in spear-phishing campaigns. Advisory highlights ongoing threat from spear-phishing by Russia-based group SEABORGIUM and Iran-based group TA453 The advisory issued by the National Cyber Security Centre (NCSC) – a part of GCHQ – shared details about the techniques and tactics used by the attackers as well as mitigation advice to combat the continuing threat. It goes on to e advisory highlights that throughout 2022 separate malicious campaigns were conducted by Russia-based group SEABORGIUM and Iran-based group TA453 , also known as APT42 , to target a range of organisations and individuals in the UK and elsewhere for information-gathering purpose...

EUROPOL Cybercriminals stung as HIVE infrastructure shut down - BREAKING! Syndicated by: Iain Fraser - Cybersecurity Journalist IainFRASER.net Google Indexed on 260123 at 21:45 CET Europol supported German, Dutch and US authorities to shut down the servers and provide decryption tools to victims Europol supported the German, Dutch and US authorities in taking down the infrastructure of the prolific HIVE ransomware. This international operation involved authorities from 13* countries in total. Law enforcement identified the decryption keys and shared them with many of the victims, helping them regain access to their data without paying the Cybercriminals.  In the last year, HIVE ransomware has been identified as a major threat as it has been used to compromise and encrypt the data and computer systems of large IT and oil multinationals in the EU and the USA. Since June 2021, over 1 500 companies from over 80 countries worldwide have fallen victim to HIVE associates and lost almost E...

HOW CYBER CRIMINALS ABUSE CRYPTOCURRENCY EXCHANGES Syndicated By Iain Fraser - Cybersecurity Journalist via www.iainfraser.net Google Indexed on 250123 at 15:56 CET Bitzlato: senior management arrested Platform infrastructure shut down in France for allegedly laundering criminal assets, with six people targeted in Cyprus, Spain, Portugal and the USA An operation led by French and US authorities, and strongly supported by Europol, has targeted the Crypto exchange platform Bitzlato. The globally operating Hong Kong-registered cryptocurrency exchange is suspected of facilitating the laundering of large amounts of criminal proceeds and converting them into roubles. Law enforcement authorities took down the digital infrastructure of the service, based in France, and interrogated leading members of the platform’s management. The operation also involved law enforcement and judicial authorities from Belgium, Cyprus, Portugal, Spain and the Netherlands.    Almost half of all Bitzlato t...

HUMAN: THE VASTFLUX TAKEDOWN Syndicated By Iain Fraser - Cybersecurity Journalist via www.iainfraser.net Google Indexed on 250123 at 12:22 CET Any good raconteur will tell you the best stories often happen when you’re not specifically looking for them. Such is the case with the Satori Threat Intelligence and Research Team’s latest takedown of a scheme we’ve dubbed VASTFLUX . The team came across unexpected web traffic patterns passing through a popular app, and while digging through that app, the Satori team uncovered a rabbit hole that got deeper and deeper the more they explored. What the team pieced together was an expansive malvertising operation in which the bad actors injected JavaScript into ad creatives they issued, and then stacked a whole bunch of video players on top of one another, getting paid for all of the ads when none of them were visible to the person using the device. The now-defunct VASTFLUX is an apparent adaptation of an earlier ad fraud scheme first reported in ...

EVENTS 2023: Gartner Identity & Access Management Summit -  6/7 March 2023 | London, U.K. Syndicated By Iain Fraser Cybersecurity Journalist - Gibraltar via Blog.IainFraser.net Google Indexed on 201022 at 16:06 CET Identity is foundational to cybersecurity and the running of your business — from remote work to customer access. Conventional approaches to identity and access management are no longer sufficient as organizations operate in an escalating threat environment.   Gartner Identity & Access Management Summit 2023, 6 – 7 March, in London, U.K., helps you make the right decisions about which identity-first security initiatives to prioritise, how to modernise existing staffing models and whether to invest in new tools to take your organisation's security posture into the identity-first era.  Register by 31 October 2022 to save €600 on the 2023 standard rate; the 2023 price increase takes effect on 1 November 2022 .