March 31, 2022

FBI Disrupts BEC Cybercrime Gangs Targeting Victims Worldwide A coordinated operation conducted by the FBI and its international law enforcement partners has resulted in disrupting business email compromise (BEC) schemes in several countries. The operation, called “Eagle Sweep”, lasted for three months, starting in September 2021, and resulted in the Read more…

Hive Ransomware Uses New ‘IPfuscation’ Trick to Hide Payload Threat analysts have discovered a new obfuscation technique used by the Hive ransomware gang, which involves IPv4 addresses and a series of conversions that eventually lead to downloading a Cobalt Strike beacon. Code obfuscation is what helps threat actors hide the Read more…

Viasat Shares Details on KA-SAT Satellite Service Cyberattack US satellite communications provider Viasat has shared an incident report regarding the cyberattack that affected its KA-SAT consumer-oriented satellite broadband service on February 24, the day Russia invaded Ukraine. Today’s incident report comes after the KA-SAT satellite network — “used intensively by Read more…

Phishing Campaign Targets Russian Govt Dissidents with Cobalt Strike A new spear phishing campaign is taking place in Russia targeting dissenters with opposing views to those promoted by the state and national media about the war against Ukraine. The campaign targets government employees and public servants with emails warning of Read more…

Mars Stealer Malware Pushed via OpenOffice ads on Google A newly launched information-stealing malware variant called Mars Stealer is rising in popularity, and threat analysts are now spotting the first notable large-scale campaigns employing it. Mars Stealer emerged as a redesign of the Oski malware that shut down development in Read more…

$620 million in Crypto Stolen from Axie Infinity’s Ronin Bridge A hacker has stolen almost $620 million in Ethereum and USDC tokens from Axie Infinity’s Ronin network bridge, making it possibly the largest crypto hack in history. Ronin is an Ethereum sidechain created by Sky Mavis to faciliate transactions for Read more…

Shutterfly Discloses Data Breach After Conti Ransomware Attack Online retail and photography manufacturing platform Shutterfly has disclosed a data breach that exposed employee information after threat actors stole data during a Conti ransomware attack. Shutterfly offers photography-related services to consumers, the enterprise, and education through various brands, including Shutterfly.com, BorrowLenses, GrooveBook, Read more…